last executing test programs: 3.924177995s ago: executing program 0 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000240000022abd7000fddbdf2581000000060004000000000006000300000000000600030000000000060004000900000006000300000000000600040000000000ece6400685233b664cb8bf9a6037e66287b208a555e15cfad991a04e88893babf9455e31f4a481ef1d4e02074b094aeb99f3f88c9ac3d221c3294d1276498827556e6b876171f14d11c72fff19d2d26e8a1b3ea465b08baab3a9a142ad7f36cce7ed873086dd8c1ddc0825a6a0743f96973a69fee19a67a759bb88f28d091bd77f61df8d6aa4eb1edf6b56cdc6463df55e395a20f7ba66945b540a6f9f9ee75eae98ac88ad097398ec415789ee79c55a613b9d96"], 0x44}, 0x1, 0x0, 0x0, 0x200000c1}, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r1, 0x180000000) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r1, 0x180000000) gettid() memfd_secret(0x80000) (async) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) (async) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) (async) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000040)=""/30, 0x1e}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000040)=""/30, 0x1e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x1, 0x80000000) (async) socket$inet6(0xa, 0x1, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4002c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4002c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='fsi_master_gpio_poll_response_busy\x00', r8}, 0x18) 3.788343399s ago: executing program 0 (id=344): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ppoll(&(0x7f00000001c0)=[{r0, 0x8404}, {r0, 0x3400}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) setuid(0xee00) ioctl$BLKRASET(r5, 0x1262, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaac2aaaaaaaaaaaaaaaabb08004500001c000000000002907800000000e00003001100907800000000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r7, &(0x7f0000000500)={0x46, 0x7d, 0x2, {0x0, 0x3f, 0x4, 0x3927, {0x80, 0x2, 0x1}, 0x80000, 0x8, 0x1, 0x40, 0x0, '', 0x0, '', 0x6, 'tunl0\x00', 0x6, 'tunl0\x00'}}, 0x46) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x2, r0, &(0x7f0000000300)=0x1, 0x2, 0x0) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x70bd2b, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid}]}}) 3.723381265s ago: executing program 0 (id=347): r0 = socket$netlink(0x10, 0x3, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_getres(0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x1f, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x80101, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0xed8a}]}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r9, @ANYRES64=r3, @ANYRESHEX=r4, @ANYRES8=r0], 0x28}}, 0xc0) 3.242710874s ago: executing program 1 (id=353): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3314) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x70) r5 = socket$inet6(0xa, 0x80003, 0xff) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.069903831s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x41044) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 2.9800726s ago: executing program 1 (id=356): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) r3 = getpid() getpgid(r3) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x60de}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x8822, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x2000, 0x0, 0x0, 0x0, 0x2}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1820b9960f8be2bfb812f32c172ac14b23ce0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r9}, 0x18) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) ustat(0x81, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x100000000000000}, 0x18) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 2.821012386s ago: executing program 4 (id=359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000000008100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000560000008d160c0001", @ANYRES32, @ANYBLOB="00000000fff3c1ab3a14f6b3a74841010000bf91000000000000b7020000020000008500000085000000b70000000000000095000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)}, 0x1, 0x0, 0x0, 0x20048014}, 0x20010080) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000740)=0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r5, 0x1) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) 2.761824052s ago: executing program 3 (id=362): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005"], 0x48) syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xad, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="333fff16f6a785200e2eb64f7d5c9746656366c462557d3c046e5ee641ebbabf72d9d7cb3d04593dc74b44a47e71c280a8183bb11b04bda9d33c16364dddde4ec107"], &(0x7f0000000440)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20040814}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040008800600dd00800a00000c0001"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0xc000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.675962771s ago: executing program 1 (id=363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) io_setup(0x2007, &(0x7f0000000980)) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x3}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xdfff, 0x2}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000580)={0x140, r0, 0x62c21a4ade68aba1, 0x70bd27, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x57}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb5}, @NL80211_ATTR_VENDOR_DATA={0xd2, 0xc5, "0750fc5cd7242035fea4860d7fd662afcbc377e8a766d63c461a38655099d6ebce7b91886481b252d623b68dd58869b2ed2869f4671bdac21544d3e66f3d6d351ecd2d159a8bc18bd0a8601afa898f9725685e099cb08d46ff100888f65aab7d21fc9e578def2afebbc765998344240957b545965d987e001fbd9efab5fd7e5aef4e910331750414d4e48e25c922d734a6264586ec53093aa4f4c727c4763657c1e00e77b170a735be790bf32b08d2b900b8008c393a2fa395fa57a032477c935d7c75b7d7225f30f757db159439"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x100}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r4) 2.612057087s ago: executing program 3 (id=364): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x1, 0x2}) prctl$PR_SET_NAME(0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x229, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10014}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='io_uring_link\x00', r1, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000e2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.953107413s ago: executing program 4 (id=370): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000000206030000000000000000000d0200000c000300686173683a6970000500040000000000095eae0073797a31000000000500050002000000050001000600000028ff31fe9add17945cb06f0cddbb13db5ace393d78e8a2830800000000000000c09fdeb0fa7a27fda561e11255f119ae0bfcf10c5595b84b5cf7320aa61f9962f5ebe2e6a72d2c2e2fa5c9483e01329182cd788a50588eea1732a730598eada01392218bb7249dd3680f9a0f066afdf9849d14748bde"], 0x44}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 1.636663856s ago: executing program 3 (id=373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3314) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x70) r5 = socket$inet6(0xa, 0x80003, 0xff) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.509273408s ago: executing program 3 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/220, 0xdc}], 0x1}, 0x7}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.358473733s ago: executing program 2 (id=375): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200010000000007e2fffff7ffffffb703000008000000b70400000000000085000000030000009500000000000000963f950574cb0988de9e29cc0a3c70e91891c3ce7c5542112946a8fdcc339f83b161217045c28e200b8ea5223618fa0c36f95a297def1d66b87b5c8e512f5661bf945709b53df77eb7b9a2b57020"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0597bc54e12a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702fccb44aa0000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509", 0x55}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x40) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001d80)={'dummy0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x38}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000006c0)='jbd2_shrink_scan_exit\x00', r6, 0x0, 0x9}, 0x18) process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.278908722s ago: executing program 3 (id=376): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ppoll(&(0x7f00000001c0)=[{r0, 0x8404}, {r0, 0x3400}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) setuid(0xee00) ioctl$BLKRASET(r5, 0x1262, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaac2aaaaaaaaaaaaaaaabb08004500001c000000000002907800000000e00003001100907800000000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r6, &(0x7f0000000500)={0x46, 0x7d, 0x2, {0x0, 0x3f, 0x4, 0x3927, {0x80, 0x2, 0x1}, 0x80000, 0x8, 0x1, 0x40, 0x0, '', 0x0, '', 0x6, 'tunl0\x00', 0x6, 'tunl0\x00'}}, 0x46) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x2, r0, &(0x7f0000000300)=0x1, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xfffd, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x70bd2b, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}]}}) 1.230161087s ago: executing program 2 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x41044) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1.214001248s ago: executing program 3 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rt_sigaction(0x1b, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2060, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_open_dev$usbfs(&(0x7f0000000180), 0x10001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1.19495467s ago: executing program 2 (id=379): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ppoll(&(0x7f00000001c0)=[{r0, 0x8404}, {r0, 0x3400}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) setuid(0xee00) ioctl$BLKRASET(r5, 0x1262, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaac2aaaaaaaaaaaaaaaabb08004500001c000000000002907800000000e00003001100907800000000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r6, &(0x7f0000000500)={0x46, 0x7d, 0x2, {0x0, 0x3f, 0x4, 0x3927, {0x80, 0x2, 0x1}, 0x80000, 0x8, 0x1, 0x40, 0x0, '', 0x0, '', 0x6, 'tunl0\x00', 0x6, 'tunl0\x00'}}, 0x46) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x2, r0, &(0x7f0000000300)=0x1, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xfffd, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x70bd2b, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}]}}) 1.101322999s ago: executing program 4 (id=380): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.098890749s ago: executing program 2 (id=381): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10) 967.984273ms ago: executing program 4 (id=382): r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0}}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f00000005c0)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b042a3105e6ff295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9afe55639834dc4c941dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb47ee61e5be16f4c7701cc671d25000000000000", 0xea}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0x80}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec", 0x43}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b71325b62cda1807b03675c6347b431f2d71baa6e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704500"/152, 0x98}, {&(0x7f0000000280)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae19833da1ace561825cbfe", 0x2a}, {&(0x7f0000000b00)="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", 0x183}, {&(0x7f00000006c0)="232593140ebae1cb79ecc8200a3513c3e1cabec92cfaf98253a0a37c342cb8b9fd249d36ed21cbf772234dffd934f1979c0a02f9580f882f33a14d35c690e89b78ef15dba0bec7fbafd0055dc6055a95fba7812822627fdf088f4425477ce98e2d8743538ee95199944ae5b6d877c0384ff29cafddebbff37d1ba72ca983cb9616ea06b2ce154260acbc244077a4d6a36fb2adf214f6a1047479579279170d142971bc8c6c82051902bb8d3459b7452ce051", 0xb2}], 0x8, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x2000000002ffff, 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() syz_usbip_server_init(0x5) 688.537281ms ago: executing program 0 (id=383): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x1, 0x2}) prctl$PR_SET_NAME(0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x229, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10014}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='io_uring_link\x00', r1, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000e2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 564.293804ms ago: executing program 2 (id=384): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x5, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x4}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x0, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x14, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0x8, 0x0, 0x9, 0x7, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x1007, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="48ad2d68824e070075f200b6107634741b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000cdd0860687d50b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x97}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) 426.853087ms ago: executing program 1 (id=385): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'pim6reg1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x8, 0xfff, 0xffffffff, 0x51b}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 369.599243ms ago: executing program 4 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/91, 0xde, 0x5b, 0x0, 0xfffffffe}, 0x28) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x1000, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r8, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008100000000007a00030000003785f4ff000000001811070000003aa999bc70f072a700f817f40500000008091a306f11c5a66c2064aa6f1795dda6bc5a438b", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000185b000002000000000000000000000085100000ffffffff1864000000000000000000000e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r7, r8], &(0x7f0000000580)=[{0x2, 0x5, 0xa, 0x8}, {0x0, 0x2, 0xf, 0x4}, {0x0, 0x2, 0x9, 0xa}, {0x3, 0x1, 0x1, 0x7}], 0x10, 0x200}, 0x94) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff4a}}], 0x30}}], 0x1, 0x1) write$selinux_load(r11, &(0x7f0000000000)=ANY=[], 0xfd44) 139.174856ms ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x190, 0x2c0, 0x228, 0x98, 0x2c0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xff, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x2, 0x26}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000180)=0x80) tee(r5, 0xffffffffffffffff, 0xc0f6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./bus\x00', 0x200002, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32], 0xff, 0x2f2, &(0x7f0000000980)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2vhAWZZcGWtSU2kJh1EkbMk0kEywpRe2p19I/ogfxVm9C20OvXnrrqZfePLTQlkp/TclkolETf9BOtOb9As3jPM/X50lmHD4z4GxcuHOtkHOMnFmR3t6w9IosyaZIstYSqda+9YhITOp6JCLNluTPgVdPf5mYungmncmMjquOpSf/Tqnq0K8Prt9c+e1RZeD86tBaVNaTlzdepp6vf7/+48anyat5R/OOFksVNXW69KwSmbYtnc07BUP1nOuajqX54uMpETXD06VSxaz15+zS3FxVzeLsYHyubDmOmsWqFqyqSkikXFXzipkvqmEYOhgXHCS6PD5upr1m7MjFMwEsCF/svz0HfrmcNvtEpH/P2Oxyp1YFAABOjh35P6a787+nx3+tbfnoum5zvZf/39wXOVT+X4u0yf9+vm/kf9uq53/HKu/ob5//KyWt1PJ/iPx/BNnt/I9Tq5b/4/7fr+fWpZVhr0H+BwAAAAAAAAAAAAAAAAAAAADgW7DpugnXdRON18ZX1P+X8MbPx71OBIP9390m1G+oxkTs2/PZ+ayIHa5v3NrvlgxLQj54x4Ov3h77PzM6rJ6kPLQX/frF+WyfV5jOSV5ssWREEpJsXT9Sr9ed9WGJN9enJCHfta5PtayPyB+/N9UbkpAnM1ISW2a943q7fmFE9d+zmV31/d44AAAAAABOA0O3tLx+N4x2/fX6dE7Eu74++P7AruvrkPwUOt73DgAAAABAt3CqNwqmbVvlTjVe+7cHAp+r9u6CmqJx46Jg9u8/eOGvDn+8J6qRaNrSeIh0x5cRap40urXjApnrh7v33n69X/jP6s/vW3W968hHd4iTRziYcxIAAACAYGyH/vZj3BedXBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN0nuKeI9fkz7PdkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKC7fA4AAP//GhIltQ==") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r7) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) 95.047051ms ago: executing program 2 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) chroot(&(0x7f0000005040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) (async) setresuid(0xee00, 0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 74.538323ms ago: executing program 0 (id=389): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="08000000280000009b74", 0xa}], 0x1, 0x0, 0x810}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="d70e7e2978735d21", 0x8}], 0x1}}], 0x2, 0x4000) 62.086144ms ago: executing program 1 (id=390): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffff0b}, 0x18) r7 = socket(0x10, 0x3, 0x0) dup3(r7, r6, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x20, 0x200000a, 0x7, 0x8}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x6, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x18) 0s ago: executing program 0 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000000206030000000000000000000d0200000c000300686173683a6970000500040000000000095eae0073797a31000000000500050002000000050001000600000028ff31fe9add17945cb06f0cddbb13db5ace393d78e8a2830800000000000000c09fdeb0fa7a27fda561e11255f119ae0bfcf10c5595b84b5cf7320aa61f9962f5ebe2e6a72d2c2e2fa5c9483e01329182cd788a50588eea1732a730598eada01392218bb7249dd3680f9a0f066afdf9849d14748bde"], 0x44}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. [ 34.706514][ T29] audit: type=1400 audit(1763240244.621:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.729663][ T29] audit: type=1400 audit(1763240244.641:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.730632][ T3303] cgroup: Unknown subsys name 'net' [ 34.757417][ T29] audit: type=1400 audit(1763240244.671:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.872440][ T3303] cgroup: Unknown subsys name 'cpuset' [ 34.878816][ T3303] cgroup: Unknown subsys name 'rlimit' [ 35.010087][ T29] audit: type=1400 audit(1763240244.921:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.033426][ T29] audit: type=1400 audit(1763240244.921:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.053895][ T29] audit: type=1400 audit(1763240244.921:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.074284][ T29] audit: type=1400 audit(1763240244.931:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.094604][ T29] audit: type=1400 audit(1763240244.941:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.103579][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.119414][ T29] audit: type=1400 audit(1763240244.941:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.151189][ T29] audit: type=1400 audit(1763240245.051:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.192881][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.433363][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.451730][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.536701][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.543799][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.550923][ T3313] bridge_slave_0: entered allmulticast mode [ 36.557540][ T3313] bridge_slave_0: entered promiscuous mode [ 36.566289][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.573388][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.580584][ T3313] bridge_slave_1: entered allmulticast mode [ 36.586942][ T3313] bridge_slave_1: entered promiscuous mode [ 36.620504][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.633103][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.642281][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.649343][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.656601][ T3315] bridge_slave_0: entered allmulticast mode [ 36.662929][ T3315] bridge_slave_0: entered promiscuous mode [ 36.685869][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.693098][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.700216][ T3315] bridge_slave_1: entered allmulticast mode [ 36.706693][ T3315] bridge_slave_1: entered promiscuous mode [ 36.736364][ T3313] team0: Port device team_slave_0 added [ 36.742998][ T3313] team0: Port device team_slave_1 added [ 36.749944][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.762340][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.781173][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.811312][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.818430][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.844732][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.860807][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.867806][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.893863][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.905123][ T3315] team0: Port device team_slave_0 added [ 36.913624][ T3315] team0: Port device team_slave_1 added [ 36.962577][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.969543][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.995669][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.008545][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.015593][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.041507][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.063181][ T3313] hsr_slave_0: entered promiscuous mode [ 37.069259][ T3313] hsr_slave_1: entered promiscuous mode [ 37.075328][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.102322][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.109495][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.116697][ T3319] bridge_slave_0: entered allmulticast mode [ 37.123269][ T3319] bridge_slave_0: entered promiscuous mode [ 37.133527][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.140587][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.147767][ T3319] bridge_slave_1: entered allmulticast mode [ 37.154201][ T3319] bridge_slave_1: entered promiscuous mode [ 37.190239][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.215126][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 37.225220][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.236293][ T3315] hsr_slave_0: entered promiscuous mode [ 37.242431][ T3315] hsr_slave_1: entered promiscuous mode [ 37.248319][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 37.254103][ T3315] Cannot create hsr debugfs directory [ 37.294890][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.302341][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.309563][ T3314] bridge_slave_0: entered allmulticast mode [ 37.316068][ T3314] bridge_slave_0: entered promiscuous mode [ 37.342182][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.349283][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.356726][ T3314] bridge_slave_1: entered allmulticast mode [ 37.363054][ T3314] bridge_slave_1: entered promiscuous mode [ 37.371803][ T3319] team0: Port device team_slave_0 added [ 37.396655][ T3319] team0: Port device team_slave_1 added [ 37.410853][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.441034][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.457481][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.464595][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.471842][ T3326] bridge_slave_0: entered allmulticast mode [ 37.478306][ T3326] bridge_slave_0: entered promiscuous mode [ 37.511977][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.519057][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.526369][ T3326] bridge_slave_1: entered allmulticast mode [ 37.532820][ T3326] bridge_slave_1: entered promiscuous mode [ 37.539326][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.546392][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.572392][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.583856][ T3314] team0: Port device team_slave_0 added [ 37.606757][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.613749][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.639774][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.651090][ T3314] team0: Port device team_slave_1 added [ 37.665675][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.678161][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.701896][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.708864][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.734948][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.746288][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.753414][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.779379][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.808712][ T3326] team0: Port device team_slave_0 added [ 37.825074][ T3326] team0: Port device team_slave_1 added [ 37.852980][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.864074][ T3319] hsr_slave_0: entered promiscuous mode [ 37.870180][ T3319] hsr_slave_1: entered promiscuous mode [ 37.876125][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.881919][ T3319] Cannot create hsr debugfs directory [ 37.894002][ T3314] hsr_slave_0: entered promiscuous mode [ 37.900070][ T3314] hsr_slave_1: entered promiscuous mode [ 37.906077][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.911841][ T3314] Cannot create hsr debugfs directory [ 37.917415][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.927233][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.934245][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.960161][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.973545][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.982297][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.990914][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.997917][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.023839][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.078995][ T3326] hsr_slave_0: entered promiscuous mode [ 38.085194][ T3326] hsr_slave_1: entered promiscuous mode [ 38.091071][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 38.096889][ T3326] Cannot create hsr debugfs directory [ 38.147121][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.156134][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.167244][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.178445][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.279100][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.288583][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.297195][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.306111][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.349183][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.364055][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.382983][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.390043][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.411032][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.419688][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.428571][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.437686][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.446678][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.456787][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.468686][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.481350][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.488475][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.498007][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.505137][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.518854][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.535099][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.542247][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.586821][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.600786][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.608030][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.627929][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.653652][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.660815][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.675279][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.682347][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.705478][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.719554][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.731267][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.752698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.759787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.776936][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.784136][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.816400][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.827317][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.837759][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.856180][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.900895][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.933932][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.941134][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.972614][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.979709][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.997948][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.012653][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.023162][ T3313] veth0_vlan: entered promiscuous mode [ 39.030871][ T3313] veth1_vlan: entered promiscuous mode [ 39.054606][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.095793][ T3315] veth0_vlan: entered promiscuous mode [ 39.134123][ T3315] veth1_vlan: entered promiscuous mode [ 39.150777][ T3313] veth0_macvtap: entered promiscuous mode [ 39.159398][ T3313] veth1_macvtap: entered promiscuous mode [ 39.178337][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.189969][ T3314] veth0_vlan: entered promiscuous mode [ 39.209038][ T3315] veth0_macvtap: entered promiscuous mode [ 39.218073][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.227355][ T3314] veth1_vlan: entered promiscuous mode [ 39.246751][ T3315] veth1_macvtap: entered promiscuous mode [ 39.254723][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.279131][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.290483][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.301970][ T3314] veth0_macvtap: entered promiscuous mode [ 39.310484][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.330694][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339559][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.351080][ T3314] veth1_macvtap: entered promiscuous mode [ 39.366229][ T3326] veth0_vlan: entered promiscuous mode [ 39.374041][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390472][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.408709][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.416648][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.434370][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.435735][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.458824][ T3319] veth0_vlan: entered promiscuous mode [ 39.465665][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.476929][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.486846][ T3319] veth1_vlan: entered promiscuous mode [ 39.494153][ T3326] veth1_vlan: entered promiscuous mode [ 39.508140][ T2742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.543986][ T3319] veth0_macvtap: entered promiscuous mode [ 39.550117][ T3487] random: crng reseeded on system resumption [ 39.551009][ T2742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.580548][ T3319] veth1_macvtap: entered promiscuous mode [ 39.583312][ C0] hrtimer: interrupt took 27369 ns [ 39.595779][ T2742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.611917][ T384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.634945][ T3326] veth0_macvtap: entered promiscuous mode [ 39.645590][ T3326] veth1_macvtap: entered promiscuous mode [ 39.666268][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.684672][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.702051][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.714708][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 39.714726][ T29] audit: type=1400 audit(1763240249.631:108): avc: denied { create } for pid=3493 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.734344][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.749919][ T3495] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.779614][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.788175][ T29] audit: type=1400 audit(1763240249.641:109): avc: denied { bind } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.807801][ T29] audit: type=1400 audit(1763240249.651:110): avc: denied { connect } for pid=3493 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.827141][ T29] audit: type=1400 audit(1763240249.671:111): avc: denied { write } for pid=3493 comm="syz.3.4" path="socket:[3751]" dev="sockfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.850088][ T29] audit: type=1400 audit(1763240249.671:112): avc: denied { create } for pid=3493 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.869326][ T29] audit: type=1400 audit(1763240249.671:113): avc: denied { write } for pid=3493 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.888402][ T29] audit: type=1400 audit(1763240249.691:114): avc: denied { create } for pid=3499 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 39.908705][ T29] audit: type=1400 audit(1763240249.791:115): avc: denied { allowed } for pid=3504 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.927811][ T29] audit: type=1400 audit(1763240249.791:116): avc: denied { create } for pid=3504 comm="syz.3.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.948826][ T29] audit: type=1400 audit(1763240249.791:117): avc: denied { map } for pid=3504 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.975160][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.988451][ T3503] can0: slcan on ptm0. [ 39.988495][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 39.996524][ T3511] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 40.005030][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.016799][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.026547][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.035664][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.044798][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.053961][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.063003][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.072313][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 40.111059][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145240][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182084][ T3507] can0 (unregistered): slcan off ptm0. [ 40.187928][ T3507] Falling back ldisc for ptm0. [ 40.222282][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.231037][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.284388][ T3530] random: crng reseeded on system resumption [ 40.316407][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.342363][ T3535] loop3: detected capacity change from 0 to 512 [ 40.383720][ T3535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.396892][ T3535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.411365][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.442173][ T3531] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.566996][ T3535] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.694341][ T3535] EXT4-fs (loop3): 1 truncate cleaned up [ 40.704822][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.814581][ T3546] syzkaller0: entered promiscuous mode [ 40.820181][ T3546] syzkaller0: entered allmulticast mode [ 40.955803][ T3535] syz_tun: entered allmulticast mode [ 40.961990][ T3535] syz_tun: left allmulticast mode [ 40.983372][ T3555] loop4: detected capacity change from 0 to 512 [ 41.046024][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.247365][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.302109][ T3568] FAULT_INJECTION: forcing a failure. [ 41.302109][ T3568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.315293][ T3568] CPU: 1 UID: 0 PID: 3568 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.315321][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.315334][ T3568] Call Trace: [ 41.315396][ T3568] [ 41.315403][ T3568] __dump_stack+0x1d/0x30 [ 41.315426][ T3568] dump_stack_lvl+0xe8/0x140 [ 41.315447][ T3568] dump_stack+0x15/0x1b [ 41.315464][ T3568] should_fail_ex+0x265/0x280 [ 41.315605][ T3568] should_fail+0xb/0x20 [ 41.315703][ T3568] should_fail_usercopy+0x1a/0x20 [ 41.315723][ T3568] _copy_to_iter+0x251/0xe70 [ 41.315828][ T3568] ? should_fail_ex+0xdb/0x280 [ 41.315864][ T3568] copy_page_to_iter+0x18f/0x2d0 [ 41.315888][ T3568] process_vm_rw+0x59e/0x960 [ 41.316054][ T3568] __x64_sys_process_vm_readv+0x78/0x90 [ 41.316084][ T3568] x64_sys_call+0x1874/0x3000 [ 41.316106][ T3568] do_syscall_64+0xd2/0x200 [ 41.316127][ T3568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.316184][ T3568] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.316229][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.316291][ T3568] RIP: 0033:0x7f240d8df6c9 [ 41.316305][ T3568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.316323][ T3568] RSP: 002b:00007f240c33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 41.316347][ T3568] RAX: ffffffffffffffda RBX: 00007f240db35fa0 RCX: 00007f240d8df6c9 [ 41.316359][ T3568] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000000f [ 41.316425][ T3568] RBP: 00007f240c33f090 R08: 0000000000000286 R09: 0000000000000000 [ 41.316438][ T3568] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 41.316449][ T3568] R13: 00007f240db36038 R14: 00007f240db35fa0 R15: 00007ffdd88a0438 [ 41.316469][ T3568] [ 41.499442][ T3566] loop1: detected capacity change from 0 to 512 [ 41.516476][ T3564] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.531972][ T3555] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.545632][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.556082][ T3555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.563158][ T3566] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.583979][ T3566] netlink: 'syz.1.18': attribute type 12 has an invalid length. [ 41.591822][ T3566] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 41.701196][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.763488][ T3593] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 41.850336][ T3599] loop4: detected capacity change from 0 to 512 [ 41.857824][ T3599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.869370][ T3599] EXT4-fs (loop4): 1 truncate cleaned up [ 41.875754][ T3599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.892586][ T3593] team0: Port device dummy0 added [ 41.917484][ T3599] syz_tun: entered allmulticast mode [ 41.940382][ T3599] syz_tun: left allmulticast mode [ 41.955648][ T3604] bridge0: port 3(syz_tun) entered blocking state [ 41.962400][ T3604] bridge0: port 3(syz_tun) entered disabled state [ 42.001314][ T3604] syz_tun: entered allmulticast mode [ 42.018382][ T3604] syz_tun: entered promiscuous mode [ 42.027541][ T3604] bridge0: port 3(syz_tun) entered blocking state [ 42.034038][ T3604] bridge0: port 3(syz_tun) entered forwarding state [ 42.092766][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.107909][ T3611] 9pnet_fd: Insufficient options for proto=fd [ 42.112623][ T3611] netlink: 'syz.2.29': attribute type 13 has an invalid length. [ 42.143348][ T3613] loop3: detected capacity change from 0 to 164 [ 42.171835][ T3613] Unsupported NM flag settings (240) [ 42.529671][ T3620] FAULT_INJECTION: forcing a failure. [ 42.529671][ T3620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.542997][ T3620] CPU: 0 UID: 0 PID: 3620 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.543036][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.543052][ T3620] Call Trace: [ 42.543060][ T3620] [ 42.543086][ T3620] __dump_stack+0x1d/0x30 [ 42.543108][ T3620] dump_stack_lvl+0xe8/0x140 [ 42.543130][ T3620] dump_stack+0x15/0x1b [ 42.543152][ T3620] should_fail_ex+0x265/0x280 [ 42.543253][ T3620] should_fail+0xb/0x20 [ 42.543283][ T3620] should_fail_usercopy+0x1a/0x20 [ 42.543309][ T3620] _copy_from_user+0x1c/0xb0 [ 42.543398][ T3620] __sys_bpf+0x183/0x7c0 [ 42.543432][ T3620] __x64_sys_bpf+0x41/0x50 [ 42.543511][ T3620] x64_sys_call+0x2aee/0x3000 [ 42.543540][ T3620] do_syscall_64+0xd2/0x200 [ 42.543566][ T3620] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.543603][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.543633][ T3620] RIP: 0033:0x7f5a6c95f6c9 [ 42.543651][ T3620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.543674][ T3620] RSP: 002b:00007f5a6b3bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.543693][ T3620] RAX: ffffffffffffffda RBX: 00007f5a6cbb5fa0 RCX: 00007f5a6c95f6c9 [ 42.543705][ T3620] RDX: 0000000000000033 RSI: 00002000000000c0 RDI: 0000000000000005 [ 42.543772][ T3620] RBP: 00007f5a6b3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.543858][ T3620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.543879][ T3620] R13: 00007f5a6cbb6038 R14: 00007f5a6cbb5fa0 R15: 00007fff41a7f148 [ 42.543936][ T3620] [ 43.048397][ T3635] random: crng reseeded on system resumption [ 43.107066][ T3641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.138429][ T3641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.177501][ T3644] loop2: detected capacity change from 0 to 512 [ 43.186272][ T3644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.282009][ T3646] netlink: 'syz.0.43': attribute type 30 has an invalid length. [ 43.299582][ T3644] EXT4-fs (loop2): 1 truncate cleaned up [ 43.312162][ T3644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.425841][ T3644] syz_tun: entered allmulticast mode [ 43.433326][ T3644] syz_tun: left allmulticast mode [ 43.482296][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.676415][ T3661] FAULT_INJECTION: forcing a failure. [ 43.676415][ T3661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.689697][ T3661] CPU: 1 UID: 0 PID: 3661 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.689724][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.689737][ T3661] Call Trace: [ 43.689743][ T3661] [ 43.689751][ T3661] __dump_stack+0x1d/0x30 [ 43.689849][ T3661] dump_stack_lvl+0xe8/0x140 [ 43.689870][ T3661] dump_stack+0x15/0x1b [ 43.689888][ T3661] should_fail_ex+0x265/0x280 [ 43.689949][ T3661] should_fail+0xb/0x20 [ 43.689979][ T3661] should_fail_usercopy+0x1a/0x20 [ 43.690002][ T3661] strncpy_from_user+0x25/0x230 [ 43.690033][ T3661] ? kstrtouint_from_user+0x9f/0xf0 [ 43.690055][ T3661] keyctl_keyring_search+0x5b/0x2e0 [ 43.690166][ T3661] __se_sys_keyctl+0x2d4/0xb80 [ 43.690233][ T3661] ? __rcu_read_unlock+0x4f/0x70 [ 43.690304][ T3661] ? __fget_files+0x184/0x1c0 [ 43.690338][ T3661] ? fput+0x8f/0xc0 [ 43.690360][ T3661] __x64_sys_keyctl+0x67/0x80 [ 43.690461][ T3661] x64_sys_call+0x2f7c/0x3000 [ 43.690488][ T3661] do_syscall_64+0xd2/0x200 [ 43.690512][ T3661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.690539][ T3661] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.690646][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.690672][ T3661] RIP: 0033:0x7f240d8df6c9 [ 43.690693][ T3661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.690711][ T3661] RSP: 002b:00007f240c33f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 43.690733][ T3661] RAX: ffffffffffffffda RBX: 00007f240db35fa0 RCX: 00007f240d8df6c9 [ 43.690748][ T3661] RDX: 0000200000000300 RSI: 0000000029781f16 RDI: 000000000000000a [ 43.690762][ T3661] RBP: 00007f240c33f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.690776][ T3661] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 43.690796][ T3661] R13: 00007f240db36038 R14: 00007f240db35fa0 R15: 00007ffdd88a0438 [ 43.690881][ T3661] [ 44.660767][ T3684] SELinux: ebitmap: truncated map [ 44.666378][ T3684] SELinux: failed to load policy [ 44.751788][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 44.751805][ T29] audit: type=1326 audit(1763240254.661:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.841744][ T29] audit: type=1326 audit(1763240254.701:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.864805][ T29] audit: type=1326 audit(1763240254.701:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.888460][ T29] audit: type=1326 audit(1763240254.701:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.911888][ T29] audit: type=1326 audit(1763240254.701:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.935111][ T29] audit: type=1326 audit(1763240254.701:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.958533][ T29] audit: type=1326 audit(1763240254.701:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 44.982063][ T29] audit: type=1326 audit(1763240254.701:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 45.005287][ T29] audit: type=1326 audit(1763240254.701:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 45.028532][ T29] audit: type=1326 audit(1763240254.701:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 45.080206][ T3699] xt_hashlimit: max too large, truncated to 1048576 [ 45.466369][ T3708] loop2: detected capacity change from 0 to 4096 [ 45.482920][ T3708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.492750][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.498260][ T3718] __nla_validate_parse: 66 callbacks suppressed [ 45.498282][ T3718] netlink: 96 bytes leftover after parsing attributes in process `syz.0.64'. [ 45.917934][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.042893][ T3741] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 46.516168][ T3757] loop3: detected capacity change from 0 to 512 [ 46.531076][ T3757] ======================================================= [ 46.531076][ T3757] WARNING: The mand mount option has been deprecated and [ 46.531076][ T3757] and is ignored by this kernel. Remove the mand [ 46.531076][ T3757] option from the mount to silence this warning. [ 46.531076][ T3757] ======================================================= [ 46.573553][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.582271][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.584414][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.613418][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.621941][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.629792][ T3757] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.660861][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.733647][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.759687][ T3773] random: crng reseeded on system resumption [ 46.850162][ T3781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=3781 comm=syz.1.86 [ 46.862723][ T3781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3781 comm=syz.1.86 [ 46.875276][ T3781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=3781 comm=syz.1.86 [ 46.956078][ T3789] random: crng reseeded on system resumption [ 47.771581][ T3799] random: crng reseeded on system resumption [ 47.812345][ T3803] FAULT_INJECTION: forcing a failure. [ 47.812345][ T3803] name failslab, interval 1, probability 0, space 0, times 0 [ 47.825037][ T3803] CPU: 0 UID: 0 PID: 3803 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.825078][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.825143][ T3803] Call Trace: [ 47.825151][ T3803] [ 47.825160][ T3803] __dump_stack+0x1d/0x30 [ 47.825188][ T3803] dump_stack_lvl+0xe8/0x140 [ 47.825215][ T3803] dump_stack+0x15/0x1b [ 47.825233][ T3803] should_fail_ex+0x265/0x280 [ 47.825278][ T3803] should_failslab+0x8c/0xb0 [ 47.825362][ T3803] kmem_cache_alloc_noprof+0x50/0x480 [ 47.825399][ T3803] ? alloc_empty_file+0x76/0x200 [ 47.825445][ T3803] alloc_empty_file+0x76/0x200 [ 47.825560][ T3803] alloc_file_pseudo+0xc6/0x160 [ 47.825588][ T3803] __shmem_file_setup+0x1de/0x210 [ 47.825656][ T3803] shmem_file_setup+0x3b/0x50 [ 47.825679][ T3803] __se_sys_memfd_create+0x2c3/0x590 [ 47.825763][ T3803] __x64_sys_memfd_create+0x31/0x40 [ 47.825801][ T3803] x64_sys_call+0x2ac2/0x3000 [ 47.825874][ T3803] do_syscall_64+0xd2/0x200 [ 47.825902][ T3803] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.825938][ T3803] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.826049][ T3803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.826072][ T3803] RIP: 0033:0x7ff419d9f6c9 [ 47.826092][ T3803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.826117][ T3803] RSP: 002b:00007ff4187fed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 47.826141][ T3803] RAX: ffffffffffffffda RBX: 00000000000005cd RCX: 00007ff419d9f6c9 [ 47.826157][ T3803] RDX: 00007ff4187fedec RSI: 0000000000000000 RDI: 00007ff419e22960 [ 47.826189][ T3803] RBP: 0000200000000a00 R08: 00007ff4187feb07 R09: 0000000000000000 [ 47.826205][ T3803] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 47.826220][ T3803] R13: 00007ff4187fedec R14: 00007ff4187fedf0 R15: 00007ffe96905548 [ 47.826243][ T3803] [ 48.035133][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 48.070275][ T3806] loop2: detected capacity change from 0 to 512 [ 48.092141][ T3811] loop3: detected capacity change from 0 to 2048 [ 48.101373][ T3808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3808 comm=syz.4.95 [ 48.127481][ T3811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.140799][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.159743][ T3811] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.170412][ T3806] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.196453][ T3806] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.94: corrupted inode contents [ 48.236910][ T3806] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.94: mark_inode_dirty error [ 48.254940][ T3826] loop4: detected capacity change from 0 to 512 [ 48.262205][ T3823] FAULT_INJECTION: forcing a failure. [ 48.262205][ T3823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.268133][ T3826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.275358][ T3823] CPU: 0 UID: 0 PID: 3823 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.275454][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.275472][ T3823] Call Trace: [ 48.275480][ T3823] [ 48.275490][ T3823] __dump_stack+0x1d/0x30 [ 48.275521][ T3823] dump_stack_lvl+0xe8/0x140 [ 48.275572][ T3823] dump_stack+0x15/0x1b [ 48.275595][ T3823] should_fail_ex+0x265/0x280 [ 48.275643][ T3823] should_fail+0xb/0x20 [ 48.275684][ T3823] should_fail_usercopy+0x1a/0x20 [ 48.275764][ T3823] _copy_from_user+0x1c/0xb0 [ 48.275816][ T3823] ___sys_sendmsg+0xc1/0x1d0 [ 48.275863][ T3823] __x64_sys_sendmsg+0xd4/0x160 [ 48.275894][ T3823] x64_sys_call+0x191e/0x3000 [ 48.275958][ T3823] do_syscall_64+0xd2/0x200 [ 48.276034][ T3823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.276072][ T3823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.276132][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.276161][ T3823] RIP: 0033:0x7f5a6c95f6c9 [ 48.276194][ T3823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.276219][ T3823] RSP: 002b:00007f5a6b3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.276268][ T3823] RAX: ffffffffffffffda RBX: 00007f5a6cbb5fa0 RCX: 00007f5a6c95f6c9 [ 48.276285][ T3823] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000007 [ 48.276309][ T3823] RBP: 00007f5a6b3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 48.276394][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.276416][ T3823] R13: 00007f5a6cbb6038 R14: 00007f5a6cbb5fa0 R15: 00007fff41a7f148 [ 48.276443][ T3823] [ 48.312158][ T3806] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.94: corrupted inode contents [ 48.336925][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.475769][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.540745][ T3826] EXT4-fs (loop4): 1 truncate cleaned up [ 48.547441][ T3832] FAULT_INJECTION: forcing a failure. [ 48.547441][ T3832] name failslab, interval 1, probability 0, space 0, times 0 [ 48.560172][ T3832] CPU: 0 UID: 0 PID: 3832 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.560282][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.560297][ T3832] Call Trace: [ 48.560305][ T3832] [ 48.560315][ T3832] __dump_stack+0x1d/0x30 [ 48.560380][ T3832] dump_stack_lvl+0xe8/0x140 [ 48.560411][ T3832] dump_stack+0x15/0x1b [ 48.560433][ T3832] should_fail_ex+0x265/0x280 [ 48.560545][ T3832] should_failslab+0x8c/0xb0 [ 48.560636][ T3832] __kmalloc_node_noprof+0xaa/0x580 [ 48.560675][ T3832] ? qdisc_alloc+0x65/0x440 [ 48.560819][ T3832] qdisc_alloc+0x65/0x440 [ 48.560857][ T3832] ? nla_strcmp+0xc3/0xe0 [ 48.560885][ T3832] qdisc_create+0xf5/0x9e0 [ 48.560920][ T3832] tc_modify_qdisc+0xf9c/0x1480 [ 48.560960][ T3832] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 48.560984][ T3832] rtnetlink_rcv_msg+0x65a/0x6d0 [ 48.561013][ T3832] netlink_rcv_skb+0x123/0x220 [ 48.561043][ T3832] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 48.561154][ T3832] rtnetlink_rcv+0x1c/0x30 [ 48.561177][ T3832] netlink_unicast+0x5c0/0x690 [ 48.561306][ T3832] netlink_sendmsg+0x58b/0x6b0 [ 48.561334][ T3832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.561385][ T3832] __sock_sendmsg+0x145/0x180 [ 48.561483][ T3832] ____sys_sendmsg+0x31e/0x4e0 [ 48.561544][ T3832] ___sys_sendmsg+0x17b/0x1d0 [ 48.561584][ T3832] __x64_sys_sendmsg+0xd4/0x160 [ 48.561606][ T3832] x64_sys_call+0x191e/0x3000 [ 48.561627][ T3832] do_syscall_64+0xd2/0x200 [ 48.561702][ T3832] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.561729][ T3832] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.561799][ T3832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.561826][ T3832] RIP: 0033:0x7f5a6c95f6c9 [ 48.561844][ T3832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.561865][ T3832] RSP: 002b:00007f5a6b3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.561969][ T3832] RAX: ffffffffffffffda RBX: 00007f5a6cbb5fa0 RCX: 00007f5a6c95f6c9 [ 48.561984][ T3832] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 48.561999][ T3832] RBP: 00007f5a6b3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 48.562014][ T3832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.562026][ T3832] R13: 00007f5a6cbb6038 R14: 00007f5a6cbb5fa0 R15: 00007fff41a7f148 [ 48.562044][ T3832] [ 48.799732][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.814088][ T3833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.96: bg 0: block 345: padding at end of block bitmap is not set [ 48.829691][ T3833] EXT4-fs (loop3): Remounting filesystem read-only [ 48.877305][ T3826] syz_tun: entered allmulticast mode [ 48.900674][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.910143][ T3826] syz_tun: left allmulticast mode [ 48.935326][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.032228][ T3845] loop4: detected capacity change from 0 to 512 [ 49.038888][ T3845] EXT4-fs: Ignoring removed i_version option [ 49.045075][ T3845] EXT4-fs: inline encryption not supported [ 49.056625][ T3845] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.107: bg 0: block 131: padding at end of block bitmap is not set [ 49.072450][ T3845] EXT4-fs (loop4): Remounting filesystem read-only [ 49.083252][ T3845] EXT4-fs (loop4): 1 truncate cleaned up [ 49.163316][ T3845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.206506][ T3845] random: crng reseeded on system resumption [ 49.253974][ T3851] loop2: detected capacity change from 0 to 1024 [ 49.285980][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.407481][ T3851] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.109: inode #3979804100: comm syz.2.109: iget: illegal inode # [ 49.578429][ T3851] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.109: error while reading EA inode 3979804100 err=-117 [ 49.721263][ T3857] random: crng reseeded on system resumption [ 49.760792][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.770478][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 49.770496][ T29] audit: type=1326 audit(1763240259.681:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.840821][ T29] audit: type=1326 audit(1763240259.741:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.864156][ T29] audit: type=1326 audit(1763240259.741:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.887497][ T29] audit: type=1326 audit(1763240259.741:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.910763][ T29] audit: type=1326 audit(1763240259.741:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.934172][ T29] audit: type=1326 audit(1763240259.741:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.957927][ T29] audit: type=1326 audit(1763240259.741:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.981229][ T29] audit: type=1326 audit(1763240259.741:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 49.990536][ T3863] sd 0:0:1:0: device reset [ 50.004503][ T29] audit: type=1326 audit(1763240259.741:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 50.016026][ T3863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'. [ 50.032146][ T29] audit: type=1326 audit(1763240259.751:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f240d911f85 code=0x7ffc0000 [ 50.066002][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.096651][ T3863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3863 comm=syz.0.113 [ 50.117197][ T3863] Zero length message leads to an empty skb [ 50.143164][ T3867] loop4: detected capacity change from 0 to 1024 [ 50.157588][ T3863] syz.0.113 (3863) used greatest stack depth: 10488 bytes left [ 50.162376][ T3867] EXT4-fs: Ignoring removed bh option [ 50.171294][ T3867] EXT4-fs (loop4): stripe (36) is not aligned with cluster size (16), stripe is disabled [ 50.195496][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.217385][ T3867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 50.277878][ T3867] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1025 with error 28 [ 50.290447][ T3867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.290447][ T3867] [ 50.300221][ T3867] EXT4-fs (loop4): Total free blocks count 0 [ 50.306391][ T3867] EXT4-fs (loop4): Free/Dirty block details [ 50.312337][ T3867] EXT4-fs (loop4): free_blocks=20480 [ 50.317657][ T3867] EXT4-fs (loop4): dirty_blocks=1040 [ 50.323013][ T3867] EXT4-fs (loop4): Block reservation details [ 50.329022][ T3867] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 50.443124][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.450592][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.461939][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.521454][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.536911][ T3892] random: crng reseeded on system resumption [ 50.542369][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.590979][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.607763][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.619263][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 50.628754][ T3900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 50.632125][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.655356][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.673170][ T3902] random: crng reseeded on system resumption [ 50.704021][ T3900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.124'. [ 50.745243][ T3904] FAULT_INJECTION: forcing a failure. [ 50.745243][ T3904] name failslab, interval 1, probability 0, space 0, times 0 [ 50.758049][ T3904] CPU: 1 UID: 0 PID: 3904 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.758082][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.758098][ T3904] Call Trace: [ 50.758107][ T3904] [ 50.758116][ T3904] __dump_stack+0x1d/0x30 [ 50.758203][ T3904] dump_stack_lvl+0xe8/0x140 [ 50.758226][ T3904] dump_stack+0x15/0x1b [ 50.758243][ T3904] should_fail_ex+0x265/0x280 [ 50.758277][ T3904] should_failslab+0x8c/0xb0 [ 50.758312][ T3904] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 50.758374][ T3904] ? __alloc_skb+0x101/0x320 [ 50.758413][ T3904] __alloc_skb+0x101/0x320 [ 50.758502][ T3904] ? audit_log_start+0x342/0x720 [ 50.758599][ T3904] audit_log_start+0x3a0/0x720 [ 50.758626][ T3904] audit_seccomp+0x48/0x100 [ 50.758657][ T3904] ? __seccomp_filter+0x82d/0x1250 [ 50.758686][ T3904] __seccomp_filter+0x83e/0x1250 [ 50.758743][ T3904] ? kmem_cache_free+0xe4/0x3d0 [ 50.758828][ T3904] __secure_computing+0x82/0x150 [ 50.758854][ T3904] syscall_trace_enter+0xcf/0x1e0 [ 50.758889][ T3904] do_syscall_64+0xac/0x200 [ 50.758913][ T3904] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.759004][ T3904] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.759091][ T3904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.759119][ T3904] RIP: 0033:0x7f5a6c95e0dc [ 50.759138][ T3904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.759159][ T3904] RSP: 002b:00007f5a6b3bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.759240][ T3904] RAX: ffffffffffffffda RBX: 00007f5a6cbb5fa0 RCX: 00007f5a6c95e0dc [ 50.759255][ T3904] RDX: 000000000000000f RSI: 00007f5a6b3bf0a0 RDI: 0000000000000007 [ 50.759271][ T3904] RBP: 00007f5a6b3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.759285][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.759300][ T3904] R13: 00007f5a6cbb6038 R14: 00007f5a6cbb5fa0 R15: 00007fff41a7f148 [ 50.759324][ T3904] [ 50.962888][ T3906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 50.969568][ T3906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 50.977412][ T3906] vhci_hcd vhci_hcd.0: Device attached [ 51.004589][ T3907] vhci_hcd: connection closed [ 51.004869][ T31] vhci_hcd: stop threads [ 51.013962][ T31] vhci_hcd: release socket [ 51.018387][ T31] vhci_hcd: disconnect device [ 51.075247][ T3833] syz.3.96 (3833) used greatest stack depth: 10360 bytes left [ 51.131273][ T3918] tipc: Started in network mode [ 51.136336][ T3918] tipc: Node identity 2ad40912828e, cluster identity 4711 [ 51.143611][ T3918] tipc: Enabled bearer , priority 0 [ 51.157611][ T3918] tipc: Disabling bearer [ 51.165957][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.198653][ T3921] loop4: detected capacity change from 0 to 512 [ 51.206882][ T3921] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 51.236138][ T3921] loop4: detected capacity change from 0 to 1024 [ 51.250891][ T3921] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.261125][ T3921] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 51.398066][ T3933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3933 comm=syz.2.135 [ 51.410738][ T3933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3933 comm=syz.2.135 [ 51.635944][ T3941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.766579][ T3941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.816831][ T3948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 51.835389][ T3941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.896283][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.926197][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.927280][ T3941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.947075][ T3957] random: crng reseeded on system resumption [ 52.001037][ T3953] capability: warning: `syz.4.141' uses deprecated v2 capabilities in a way that may be insecure [ 52.020106][ T2742] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.039621][ T2742] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.048078][ T2742] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.056622][ T3959] FAULT_INJECTION: forcing a failure. [ 52.056622][ T3959] name failslab, interval 1, probability 0, space 0, times 0 [ 52.069326][ T3959] CPU: 0 UID: 0 PID: 3959 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.069356][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.069369][ T3959] Call Trace: [ 52.069376][ T3959] [ 52.069385][ T3959] __dump_stack+0x1d/0x30 [ 52.069433][ T3959] dump_stack_lvl+0xe8/0x140 [ 52.069455][ T3959] dump_stack+0x15/0x1b [ 52.069480][ T3959] should_fail_ex+0x265/0x280 [ 52.069515][ T3959] ? bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 52.069553][ T3959] should_failslab+0x8c/0xb0 [ 52.069648][ T3959] __kmalloc_cache_noprof+0x4c/0x4a0 [ 52.069682][ T3959] bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 52.069717][ T3959] bpf_prog_alloc+0x3c/0x150 [ 52.069782][ T3959] bpf_prog_load+0x506/0x1100 [ 52.069812][ T3959] ? security_bpf+0x2b/0x90 [ 52.069840][ T3959] __sys_bpf+0x469/0x7c0 [ 52.069865][ T3959] __x64_sys_bpf+0x41/0x50 [ 52.069975][ T3959] x64_sys_call+0x2aee/0x3000 [ 52.069998][ T3959] do_syscall_64+0xd2/0x200 [ 52.070019][ T3959] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.070167][ T3959] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.070261][ T3959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.070283][ T3959] RIP: 0033:0x7f240d8df6c9 [ 52.070298][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.070456][ T3959] RSP: 002b:00007f240c33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.070477][ T3959] RAX: ffffffffffffffda RBX: 00007f240db35fa0 RCX: 00007f240d8df6c9 [ 52.070490][ T3959] RDX: 00000000000000a0 RSI: 0000200000000680 RDI: 0000000000000005 [ 52.070503][ T3959] RBP: 00007f240c33f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.070516][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.070547][ T3959] R13: 00007f240db36038 R14: 00007f240db35fa0 R15: 00007ffdd88a0438 [ 52.070568][ T3959] [ 52.078334][ T2742] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.176895][ T3962] netlink: 'syz.1.145': attribute type 7 has an invalid length. [ 52.288385][ T3967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.382422][ T3973] FAULT_INJECTION: forcing a failure. [ 52.382422][ T3973] name failslab, interval 1, probability 0, space 0, times 0 [ 52.395128][ T3973] CPU: 0 UID: 0 PID: 3973 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.395195][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.395207][ T3973] Call Trace: [ 52.395213][ T3973] [ 52.395219][ T3973] __dump_stack+0x1d/0x30 [ 52.395243][ T3973] dump_stack_lvl+0xe8/0x140 [ 52.395268][ T3973] dump_stack+0x15/0x1b [ 52.395290][ T3973] should_fail_ex+0x265/0x280 [ 52.395379][ T3973] ? audit_log_d_path+0x8d/0x150 [ 52.395404][ T3973] should_failslab+0x8c/0xb0 [ 52.395511][ T3973] __kmalloc_cache_noprof+0x4c/0x4a0 [ 52.395552][ T3973] audit_log_d_path+0x8d/0x150 [ 52.395639][ T3973] audit_log_d_path_exe+0x42/0x70 [ 52.395665][ T3973] audit_log_task+0x1e9/0x250 [ 52.395711][ T3973] audit_seccomp+0x61/0x100 [ 52.395740][ T3973] ? __seccomp_filter+0x82d/0x1250 [ 52.395848][ T3973] __seccomp_filter+0x83e/0x1250 [ 52.395884][ T3973] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 52.395921][ T3973] ? vfs_write+0x7e8/0x960 [ 52.396018][ T3973] ? __rcu_read_unlock+0x4f/0x70 [ 52.396050][ T3973] ? __fget_files+0x184/0x1c0 [ 52.396107][ T3973] __secure_computing+0x82/0x150 [ 52.396178][ T3973] syscall_trace_enter+0xcf/0x1e0 [ 52.396208][ T3973] do_syscall_64+0xac/0x200 [ 52.396237][ T3973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.396283][ T3973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.396314][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.396341][ T3973] RIP: 0033:0x7f5a6c95e0dc [ 52.396374][ T3973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.396396][ T3973] RSP: 002b:00007f5a6b3bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.396431][ T3973] RAX: ffffffffffffffda RBX: 00007f5a6cbb5fa0 RCX: 00007f5a6c95e0dc [ 52.396446][ T3973] RDX: 000000000000000f RSI: 00007f5a6b3bf0a0 RDI: 0000000000000006 [ 52.396458][ T3973] RBP: 00007f5a6b3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 52.396469][ T3973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.396480][ T3973] R13: 00007f5a6cbb6038 R14: 00007f5a6cbb5fa0 R15: 00007fff41a7f148 [ 52.396498][ T3973] [ 52.712065][ T3987] random: crng reseeded on system resumption [ 52.838280][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.888429][ T4001] tmpfs: Bad value for 'mpol' [ 52.893693][ T4001] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 52.927167][ T4001] bond1: entered promiscuous mode [ 52.942779][ T4001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.960116][ T3989] FAULT_INJECTION: forcing a failure. [ 52.960116][ T3989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.962262][ T4004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.973255][ T3989] CPU: 0 UID: 0 PID: 3989 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.973288][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.973311][ T3989] Call Trace: [ 52.973321][ T3989] [ 52.973399][ T3989] __dump_stack+0x1d/0x30 [ 52.973430][ T3989] dump_stack_lvl+0xe8/0x140 [ 52.973482][ T3989] dump_stack+0x15/0x1b [ 52.973537][ T3989] should_fail_ex+0x265/0x280 [ 52.973603][ T3989] should_fail+0xb/0x20 [ 52.973645][ T3989] should_fail_usercopy+0x1a/0x20 [ 52.973673][ T3989] copy_folio_from_iter_atomic+0x278/0x11b0 [ 52.973727][ T3989] ? shmem_write_begin+0xa8/0x190 [ 52.973784][ T3989] ? shmem_write_begin+0xe1/0x190 [ 52.973813][ T3989] generic_perform_write+0x2c2/0x490 [ 52.973851][ T3989] shmem_file_write_iter+0xc5/0xf0 [ 52.973923][ T3989] do_iter_readv_writev+0x4a1/0x540 [ 52.973968][ T3989] vfs_writev+0x2df/0x8b0 [ 52.974083][ T3989] ? mutex_lock+0xd/0x30 [ 52.974124][ T3989] do_writev+0xe7/0x210 [ 52.974169][ T3989] __x64_sys_writev+0x45/0x50 [ 52.974207][ T3989] x64_sys_call+0x1e9a/0x3000 [ 52.974287][ T3989] do_syscall_64+0xd2/0x200 [ 52.974321][ T3989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.974418][ T3989] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.974464][ T3989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.974493][ T3989] RIP: 0033:0x7ff419d9f6c9 [ 52.974577][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.974602][ T3989] RSP: 002b:00007ff4187ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 52.974626][ T3989] RAX: ffffffffffffffda RBX: 00007ff419ff5fa0 RCX: 00007ff419d9f6c9 [ 52.974644][ T3989] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000009 [ 52.974661][ T3989] RBP: 00007ff4187ff090 R08: 0000000000000000 R09: 0000000000000000 [ 52.974677][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.974694][ T3989] R13: 00007ff419ff6038 R14: 00007ff419ff5fa0 R15: 00007ffe96905548 [ 52.974722][ T3989] [ 53.188304][ T4004] bond1: (slave bond2): making interface the new active one [ 53.195696][ T4004] bond2: entered promiscuous mode [ 53.202062][ T4004] bond1: (slave bond2): Enslaving as an active interface with an up link [ 53.233084][ T4010] netlink: '': attribute type 7 has an invalid length. [ 53.240090][ T4010] netlink: 8 bytes leftover after parsing attributes in process `'. [ 53.258673][ T4010] SELinux: failed to load policy [ 53.259014][ T4013] loop2: detected capacity change from 0 to 512 [ 53.275240][ T4013] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.163: Failed to acquire dquot type 1 [ 53.287259][ T4013] EXT4-fs (loop2): 1 truncate cleaned up [ 53.312241][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.328650][ T4013] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.339244][ T4008] loop4: detected capacity change from 0 to 512 [ 53.357980][ T4008] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.158: bad orphan inode 11862016 [ 53.369404][ T4020] loop3: detected capacity change from 0 to 1024 [ 53.369728][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 53.376791][ T4020] EXT4-fs: Ignoring removed bh option [ 53.388664][ T4008] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.396487][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.405436][ T4020] EXT4-fs: inline encryption not supported [ 53.420174][ T4020] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.431337][ T4020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 53.436059][ T4025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=4025 comm=syz.2.166 [ 53.443951][ T4020] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.165: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.466288][ T4020] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.165: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.481319][ T4020] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.165: Failed to acquire dquot type 0 [ 53.492855][ T4020] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 53.503683][ T4020] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.165: mark_inode_dirty error [ 53.515724][ T4020] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 53.526037][ T4020] EXT4-fs (loop3): 1 orphan inode deleted [ 53.532699][ T4020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.545339][ T2742] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.566084][ T2742] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 53.577588][ T4020] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.165: Invalid inode table block 1 in block_group 0 [ 53.590470][ T4020] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 53.600900][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 53.605603][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 53.609760][ T4020] netlink: 'syz.3.165': attribute type 30 has an invalid length. [ 53.632447][ T2742] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.641892][ T2742] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.666978][ T2742] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.676001][ T2742] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.676317][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.704426][ T4028] syz.2.167 (4028) used greatest stack depth: 10160 bytes left [ 53.733182][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.747324][ T59] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.763620][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 53.776193][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.789556][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 53.802799][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 53.848473][ T4039] random: crng reseeded on system resumption [ 53.966315][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 53.997076][ T4045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.019358][ T4045] loop4: detected capacity change from 0 to 1024 [ 54.043964][ T4045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.059216][ T4045] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.172: corrupted in-inode xattr: e_name out of bounds [ 54.178766][ T4045] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm +}[@: corrupted in-inode xattr: e_name out of bounds [ 54.208017][ T4045] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm +}[@: corrupted in-inode xattr: e_name out of bounds [ 54.237416][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.389461][ T4064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 54.419227][ T4071] netlink: 'syz.4.181': attribute type 30 has an invalid length. [ 54.470276][ T4074] loop2: detected capacity change from 0 to 2048 [ 54.478316][ T4074] EXT4-fs: dax option not supported [ 54.502942][ T4071] loop4: detected capacity change from 0 to 2048 [ 54.546996][ T4071] Alternate GPT is invalid, using primary GPT. [ 54.553399][ T4071] loop4: p2 p3 p7 [ 54.580942][ T4077] random: crng reseeded on system resumption [ 54.893825][ T3997] Bluetooth: hci0: command 0x1003 tx timeout [ 54.899921][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.153799][ T4085] process 'syz.2.187' launched './file1' with NULL argv: empty string added [ 55.178009][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 55.178039][ T29] audit: type=1400 audit(1763240265.091:2034): avc: denied { execute_no_trans } for pid=4086 comm="syz.3.186" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.228417][ T4087] bridge0: entered promiscuous mode [ 55.242689][ T4087] bridge0: port 4(macsec1) entered blocking state [ 55.249249][ T4087] bridge0: port 4(macsec1) entered disabled state [ 55.286569][ T4087] macsec1: entered allmulticast mode [ 55.291909][ T4087] bridge0: entered allmulticast mode [ 55.328196][ T4087] macsec1: left allmulticast mode [ 55.333356][ T4087] bridge0: left allmulticast mode [ 55.362373][ T4087] bridge0: left promiscuous mode [ 55.651984][ T29] audit: type=1326 audit(1763240265.551:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 55.675450][ T29] audit: type=1326 audit(1763240265.551:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 55.698807][ T29] audit: type=1326 audit(1763240265.551:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 55.722066][ T29] audit: type=1326 audit(1763240265.561:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 55.745453][ T29] audit: type=1326 audit(1763240265.561:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 55.769144][ T29] audit: type=1326 audit(1763240265.561:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6724941f85 code=0x7ffc0000 [ 55.939687][ T4114] random: crng reseeded on system resumption [ 55.974194][ T4116] __nla_validate_parse: 1 callbacks suppressed [ 55.974225][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 56.031128][ T29] audit: type=1326 audit(1763240265.711:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 56.054557][ T29] audit: type=1326 audit(1763240265.711:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 56.077962][ T29] audit: type=1326 audit(1763240265.711:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f672490f6c9 code=0x7ffc0000 [ 56.154925][ T4122] blktrace: Concurrent blktraces are not allowed on loop5 [ 56.993070][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 57.332848][ T4169] netlink: 'syz.0.216': attribute type 28 has an invalid length. [ 57.340639][ T4169] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 57.348446][ T4169] netlink: 136 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.867235][ T4214] netlink: 'syz.1.231': attribute type 4 has an invalid length. [ 57.947619][ T4227] random: crng reseeded on system resumption [ 58.031103][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 58.062614][ T4232] loop3: detected capacity change from 0 to 512 [ 58.096221][ T4234] netlink: 'syz.3.239': attribute type 5 has an invalid length. [ 58.188008][ T4237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 58.198381][ T4237] FAULT_INJECTION: forcing a failure. [ 58.198381][ T4237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.211615][ T4237] CPU: 0 UID: 0 PID: 4237 Comm: syz.4.240 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.211658][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.211670][ T4237] Call Trace: [ 58.211676][ T4237] [ 58.211685][ T4237] __dump_stack+0x1d/0x30 [ 58.211713][ T4237] dump_stack_lvl+0xe8/0x140 [ 58.211777][ T4237] dump_stack+0x15/0x1b [ 58.211796][ T4237] should_fail_ex+0x265/0x280 [ 58.211838][ T4237] should_fail+0xb/0x20 [ 58.211953][ T4237] should_fail_usercopy+0x1a/0x20 [ 58.211973][ T4237] _copy_to_user+0x20/0xa0 [ 58.212004][ T4237] simple_read_from_buffer+0xb5/0x130 [ 58.212037][ T4237] proc_fail_nth_read+0x10e/0x150 [ 58.212143][ T4237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.212182][ T4237] vfs_read+0x1a8/0x770 [ 58.212212][ T4237] ? __rcu_read_unlock+0x4f/0x70 [ 58.212246][ T4237] ? __fget_files+0x184/0x1c0 [ 58.212362][ T4237] ksys_read+0xda/0x1a0 [ 58.212415][ T4237] __x64_sys_read+0x40/0x50 [ 58.212447][ T4237] x64_sys_call+0x27c0/0x3000 [ 58.212494][ T4237] do_syscall_64+0xd2/0x200 [ 58.212519][ T4237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.212687][ T4237] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.212731][ T4237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.212780][ T4237] RIP: 0033:0x7f672490e0dc [ 58.212794][ T4237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.212811][ T4237] RSP: 002b:00007f6723377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.212907][ T4237] RAX: ffffffffffffffda RBX: 00007f6724b65fa0 RCX: 00007f672490e0dc [ 58.212920][ T4237] RDX: 000000000000000f RSI: 00007f67233770a0 RDI: 000000000000000b [ 58.212932][ T4237] RBP: 00007f6723377090 R08: 0000000000000000 R09: 0000000000000000 [ 58.212948][ T4237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.213033][ T4237] R13: 00007f6724b66038 R14: 00007f6724b65fa0 R15: 00007ffd59f6b5a8 [ 58.213057][ T4237] [ 58.450095][ T4244] random: crng reseeded on system resumption [ 58.477935][ T4246] blktrace: Concurrent blktraces are not allowed on loop5 [ 58.511023][ T4251] loop2: detected capacity change from 0 to 512 [ 58.518111][ T4251] EXT4-fs: Invalid want_extra_isize 7 [ 58.694728][ T4270] loop4: detected capacity change from 0 to 512 [ 58.712186][ T4270] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.756776][ T4274] loop3: detected capacity change from 0 to 512 [ 58.781538][ T4270] EXT4-fs (loop4): 1 truncate cleaned up [ 58.795698][ T4270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.811955][ T4274] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.248: error while reading EA inode 32 err=-116 [ 58.826833][ T4270] syz_tun: entered allmulticast mode [ 58.833833][ T4274] EXT4-fs (loop3): Remounting filesystem read-only [ 58.840494][ T4274] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.843415][ T4270] syz_tun: left allmulticast mode [ 58.856027][ T4274] EXT4-fs (loop3): 1 orphan inode deleted [ 58.865254][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.880129][ T4274] netlink: 'syz.3.248': attribute type 39 has an invalid length. [ 58.901405][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.931220][ T4288] hub 9-0:1.0: USB hub found [ 58.938303][ T4288] hub 9-0:1.0: 8 ports detected [ 58.987760][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.010683][ T4294] random: crng reseeded on system resumption [ 59.051240][ T4297] usb usb1: check_ctrlrecip: process 4297 (syz.2.252) requesting ep 01 but needs 81 [ 59.080409][ T4297] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 59.095048][ T4299] syz_tun: entered allmulticast mode [ 59.100827][ T4299] syz_tun: left allmulticast mode [ 59.122947][ T4302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.133395][ T4302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.144980][ T4304] netlink: 'syz.1.258': attribute type 5 has an invalid length. [ 59.174782][ T4302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.185149][ T4302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.247434][ T4302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.257851][ T4302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.353226][ T4302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.363568][ T4302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.420481][ T31] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.428826][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.441126][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.449444][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.461346][ T2742] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.469606][ T2742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.481507][ T2742] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.489757][ T2742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.295927][ T4336] random: crng reseeded on system resumption [ 60.358108][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 60.358122][ T29] audit: type=1400 audit(1763240270.271:2529): avc: denied { read } for pid=4327 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.424455][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 60.516277][ T29] audit: type=1400 audit(1763240270.431:2530): avc: denied { ioctl } for pid=4340 comm="syz.1.269" path="socket:[8309]" dev="sockfs" ino=8309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.607516][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 60.666779][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 60.754079][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.761503][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.776086][ T29] audit: type=1326 audit(1763240270.691:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 60.799493][ T29] audit: type=1326 audit(1763240270.691:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 60.871593][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.904501][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.969701][ T2742] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.978676][ T2742] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.987855][ T2742] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.011737][ T2742] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.056875][ T29] audit: type=1400 audit(1763240270.971:2533): avc: denied { lock } for pid=4362 comm="syz.3.275" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.058224][ T4363] loop3: detected capacity change from 0 to 128 [ 61.185134][ T4372] syzkaller0: entered promiscuous mode [ 61.190702][ T4372] syzkaller0: entered allmulticast mode [ 61.242225][ T4365] loop4: detected capacity change from 0 to 32768 [ 61.292217][ T4365] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 61.297560][ T4365] loop4: p1 start 460800 is beyond EOD, truncated [ 61.304024][ T4365] loop4: p2 size 83886080 extends beyond EOD, truncated [ 61.312436][ T4365] loop4: p5 start 460800 is beyond EOD, truncated [ 61.318900][ T4365] loop4: p6 size 83886080 extends beyond EOD, truncated [ 61.328737][ T4365] FAULT_INJECTION: forcing a failure. [ 61.328737][ T4365] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.342002][ T4365] CPU: 1 UID: 0 PID: 4365 Comm: syz.4.276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.342115][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.342126][ T4365] Call Trace: [ 61.342197][ T4365] [ 61.342249][ T4365] __dump_stack+0x1d/0x30 [ 61.342270][ T4365] dump_stack_lvl+0xe8/0x140 [ 61.342287][ T4365] dump_stack+0x15/0x1b [ 61.342302][ T4365] should_fail_ex+0x265/0x280 [ 61.342376][ T4365] should_fail_alloc_page+0xf2/0x100 [ 61.342445][ T4365] __alloc_frozen_pages_noprof+0xff/0x360 [ 61.342479][ T4365] alloc_pages_mpol+0xb3/0x260 [ 61.342544][ T4365] vma_alloc_folio_noprof+0x1aa/0x300 [ 61.342573][ T4365] handle_mm_fault+0xec2/0x2be0 [ 61.342668][ T4365] ? vma_start_read+0x141/0x1f0 [ 61.342701][ T4365] do_user_addr_fault+0x630/0x1080 [ 61.342725][ T4365] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 61.342768][ T4365] exc_page_fault+0x62/0xa0 [ 61.342849][ T4365] asm_exc_page_fault+0x26/0x30 [ 61.342867][ T4365] RIP: 0033:0x7f67248bcbbb [ 61.342880][ T4365] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 61.342895][ T4365] RSP: 002b:00007f6723374e10 EFLAGS: 00010246 [ 61.342926][ T4365] RAX: 00007f6723376f30 RBX: 00007f6724b37640 RCX: 0000000000000000 [ 61.342937][ T4365] RDX: 00007f6723376f78 RSI: 00007f672496edf8 RDI: 00007f6723374e30 [ 61.342947][ T4365] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 61.342957][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.342967][ T4365] R13: 00007f6724b66038 R14: 00007f6724b65fa0 R15: 00007ffd59f6b5a8 [ 61.343084][ T4365] [ 61.343104][ T4365] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 61.633510][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 62.541976][ T29] audit: type=1400 audit(1763240272.461:2534): avc: denied { create } for pid=4395 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.564137][ T4399] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 62.570704][ T4399] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.578403][ T4399] vhci_hcd vhci_hcd.0: Device attached [ 62.588978][ T29] audit: type=1326 audit(1763240272.501:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 62.612358][ T29] audit: type=1326 audit(1763240272.501:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 62.639123][ T29] audit: type=1326 audit(1763240272.551:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 62.662548][ T29] audit: type=1326 audit(1763240272.551:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff419d9f6c9 code=0x7ffc0000 [ 62.866488][ T4405] loop2: detected capacity change from 0 to 512 [ 62.898674][ T4405] EXT4-fs: Ignoring removed orlov option [ 62.924750][ T4405] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.975152][ T4405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 63.002937][ T4405] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.290: corrupted in-inode xattr: e_value size too large [ 63.022655][ T4405] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.290: couldn't read orphan inode 15 (err -117) [ 63.041356][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.105455][ T4405] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 63.179695][ T4405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.247256][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.326137][ T4401] vhci_hcd: connection closed [ 63.327680][ T31] vhci_hcd: stop threads [ 63.336654][ T31] vhci_hcd: release socket [ 63.341078][ T31] vhci_hcd: disconnect device [ 63.462870][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 63.473089][ T4415] FAULT_INJECTION: forcing a failure. [ 63.473089][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 63.485825][ T4415] CPU: 1 UID: 0 PID: 4415 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.485862][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.485878][ T4415] Call Trace: [ 63.485888][ T4415] [ 63.485898][ T4415] __dump_stack+0x1d/0x30 [ 63.485977][ T4415] dump_stack_lvl+0xe8/0x140 [ 63.486006][ T4415] dump_stack+0x15/0x1b [ 63.486028][ T4415] should_fail_ex+0x265/0x280 [ 63.486062][ T4415] should_failslab+0x8c/0xb0 [ 63.486194][ T4415] __kvmalloc_node_noprof+0x12e/0x670 [ 63.486258][ T4415] ? nf_hook_entries_grow+0x1c1/0x460 [ 63.486307][ T4415] nf_hook_entries_grow+0x1c1/0x460 [ 63.486389][ T4415] __nf_register_net_hook+0x18e/0x480 [ 63.486419][ T4415] nf_register_net_hook+0x88/0x130 [ 63.486563][ T4415] nf_register_net_hooks+0x44/0x150 [ 63.486591][ T4415] nf_ct_netns_do_get+0x2b1/0x380 [ 63.486635][ T4415] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 63.486669][ T4415] nf_ct_netns_get+0x87/0xc0 [ 63.486777][ T4415] nft_synproxy_do_init+0x14b/0x2d0 [ 63.486856][ T4415] nft_synproxy_obj_init+0x2c/0x40 [ 63.486889][ T4415] nft_obj_init+0x185/0x220 [ 63.486930][ T4415] nf_tables_newobj+0x751/0x1070 [ 63.486967][ T4415] nfnetlink_rcv+0xbc9/0x16c0 [ 63.487008][ T4415] ? kmem_cache_free+0xe4/0x3d0 [ 63.487106][ T4415] netlink_unicast+0x5c0/0x690 [ 63.487150][ T4415] netlink_sendmsg+0x58b/0x6b0 [ 63.487198][ T4415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.487225][ T4415] __sock_sendmsg+0x145/0x180 [ 63.487260][ T4415] ____sys_sendmsg+0x31e/0x4e0 [ 63.487288][ T4415] ___sys_sendmsg+0x17b/0x1d0 [ 63.487328][ T4415] __x64_sys_sendmsg+0xd4/0x160 [ 63.487401][ T4415] x64_sys_call+0x191e/0x3000 [ 63.487431][ T4415] do_syscall_64+0xd2/0x200 [ 63.487452][ T4415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.487479][ T4415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.487583][ T4415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.487611][ T4415] RIP: 0033:0x7f9d6225f6c9 [ 63.487631][ T4415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.487655][ T4415] RSP: 002b:00007f9d60cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.487718][ T4415] RAX: ffffffffffffffda RBX: 00007f9d624b5fa0 RCX: 00007f9d6225f6c9 [ 63.487734][ T4415] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 63.487760][ T4415] RBP: 00007f9d60cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.487775][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.487791][ T4415] R13: 00007f9d624b6038 R14: 00007f9d624b5fa0 R15: 00007ffd62f48bc8 [ 63.487816][ T4415] [ 63.780412][ T4420] netlink: 'syz.4.295': attribute type 5 has an invalid length. [ 64.463694][ T4436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.539191][ T4436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.636862][ T4436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.953226][ T4440] loop3: detected capacity change from 0 to 512 [ 64.988100][ T4442] ref_ctr increment failed for inode: 0x189 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff8881046a5c00 [ 65.008479][ T4436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.030868][ T4444] loop4: detected capacity change from 0 to 512 [ 65.037339][ T4440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.053038][ T4444] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.302: error while reading EA inode 32 err=-116 [ 65.065802][ T4441] uprobe: syz.1.301:4441 failed to unregister, leaking uprobe [ 65.074706][ T4440] EXT4-fs (loop3): 1 truncate cleaned up [ 65.080825][ T4440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.093369][ T4444] EXT4-fs (loop4): Remounting filesystem read-only [ 65.099923][ T4444] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 65.133128][ T4444] EXT4-fs (loop4): 1 orphan inode deleted [ 65.140344][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.161606][ T4444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.191484][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.205279][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.234175][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.251789][ T4444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 65.277433][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.287072][ T4452] random: crng reseeded on system resumption [ 65.339003][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.408169][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 65.408186][ T29] audit: type=1400 audit(1763240275.321:2640): avc: denied { read } for pid=4455 comm="syz.0.306" path="socket:[9313]" dev="sockfs" ino=9313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 65.477344][ T4462] random: crng reseeded on system resumption [ 65.586055][ T4468] loop4: detected capacity change from 0 to 512 [ 65.593504][ T4470] 9pnet_fd: Insufficient options for proto=fd [ 65.600822][ T4468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.614979][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 65.624126][ T29] audit: type=1326 audit(1763240275.491:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.647503][ T29] audit: type=1326 audit(1763240275.491:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.670913][ T29] audit: type=1326 audit(1763240275.491:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.694350][ T29] audit: type=1326 audit(1763240275.491:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.717750][ T29] audit: type=1326 audit(1763240275.501:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.741294][ T29] audit: type=1326 audit(1763240275.501:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.764757][ T29] audit: type=1326 audit(1763240275.501:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.788137][ T29] audit: type=1326 audit(1763240275.501:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.811546][ T29] audit: type=1326 audit(1763240275.501:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c95f6c9 code=0x7ffc0000 [ 65.846188][ T4468] EXT4-fs (loop4): 1 truncate cleaned up [ 65.856082][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.887622][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.905500][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.958824][ T4473] syzkaller0: entered promiscuous mode [ 65.964532][ T4473] syzkaller0: entered allmulticast mode [ 65.972056][ T4475] netlink: 'syz.1.312': attribute type 5 has an invalid length. [ 66.004002][ T4477] random: crng reseeded on system resumption [ 66.016400][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 66.689241][ T4495] random: crng reseeded on system resumption [ 66.853538][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.903877][ T4499] random: crng reseeded on system resumption [ 67.028536][ T4504] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 67.272673][ T4509] loop2: detected capacity change from 0 to 512 [ 67.355202][ T4513] syzkaller0: entered allmulticast mode [ 67.364203][ T4509] 9pnet_fd: Insufficient options for proto=fd [ 67.371143][ T4513] syzkaller0: entered promiscuous mode [ 67.385623][ T4511] syzkaller0: left promiscuous mode [ 67.390952][ T4511] syzkaller0: left allmulticast mode [ 67.554489][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 67.623593][ T4519] loop4: detected capacity change from 0 to 512 [ 67.648656][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.662182][ T4519] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.712385][ T4519] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.325: Failed to acquire dquot type 0 [ 67.794199][ T4519] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.813434][ T4519] lo speed is unknown, defaulting to 1000 [ 67.831373][ T4519] lo speed is unknown, defaulting to 1000 [ 67.874375][ T4519] lo speed is unknown, defaulting to 1000 [ 67.894794][ T4519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.915485][ T4519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.936924][ T4533] netlink: 'syz.2.330': attribute type 5 has an invalid length. [ 67.956885][ T4519] lo speed is unknown, defaulting to 1000 [ 67.984161][ T4519] lo speed is unknown, defaulting to 1000 [ 67.990326][ T4519] lo speed is unknown, defaulting to 1000 [ 68.042630][ T4519] lo speed is unknown, defaulting to 1000 [ 68.058974][ T4519] lo speed is unknown, defaulting to 1000 [ 68.102595][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.197500][ T4539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'. [ 68.312851][ T4543] FAULT_INJECTION: forcing a failure. [ 68.312851][ T4543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.326035][ T4543] CPU: 1 UID: 0 PID: 4543 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.326071][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.326087][ T4543] Call Trace: [ 68.326096][ T4543] [ 68.326105][ T4543] __dump_stack+0x1d/0x30 [ 68.326188][ T4543] dump_stack_lvl+0xe8/0x140 [ 68.326210][ T4543] dump_stack+0x15/0x1b [ 68.326233][ T4543] should_fail_ex+0x265/0x280 [ 68.326290][ T4543] should_fail+0xb/0x20 [ 68.326329][ T4543] should_fail_usercopy+0x1a/0x20 [ 68.326353][ T4543] _copy_from_iter+0xd2/0xe80 [ 68.326432][ T4543] ? __build_skb_around+0x1ab/0x200 [ 68.326472][ T4543] ? __alloc_skb+0x223/0x320 [ 68.326513][ T4543] netlink_sendmsg+0x471/0x6b0 [ 68.326537][ T4543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.326570][ T4543] __sock_sendmsg+0x145/0x180 [ 68.326604][ T4543] ____sys_sendmsg+0x31e/0x4e0 [ 68.326634][ T4543] ___sys_sendmsg+0x17b/0x1d0 [ 68.326681][ T4543] __x64_sys_sendmsg+0xd4/0x160 [ 68.326713][ T4543] x64_sys_call+0x191e/0x3000 [ 68.326819][ T4543] do_syscall_64+0xd2/0x200 [ 68.326846][ T4543] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.326954][ T4543] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.326997][ T4543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.327024][ T4543] RIP: 0033:0x7f672490f6c9 [ 68.327084][ T4543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.327185][ T4543] RSP: 002b:00007f6723356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.327208][ T4543] RAX: ffffffffffffffda RBX: 00007f6724b66090 RCX: 00007f672490f6c9 [ 68.327277][ T4543] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000a [ 68.327293][ T4543] RBP: 00007f6723356090 R08: 0000000000000000 R09: 0000000000000000 [ 68.327309][ T4543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.327324][ T4543] R13: 00007f6724b66128 R14: 00007f6724b66090 R15: 00007ffd59f6b5a8 [ 68.327349][ T4543] [ 68.922233][ T4565] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 69.080128][ T4576] block device autoloading is deprecated and will be removed. [ 69.091541][ T4576] syz_tun: entered allmulticast mode [ 69.097616][ T4576] syz_tun: left allmulticast mode [ 69.132544][ T4578] random: crng reseeded on system resumption [ 69.143922][ T4578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.346'. [ 69.181974][ T4583] lo speed is unknown, defaulting to 1000 [ 69.213774][ T4588] usb usb1: check_ctrlrecip: process 4588 (syz.2.345) requesting ep 01 but needs 81 [ 69.230934][ T4588] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 69.351512][ T4580] vhci_hcd: invalid port number 96 [ 69.356723][ T4580] vhci_hcd: default hub control req: 1f00 vfffa i0060 l0 [ 69.505177][ T4592] bridge0: port 3(syz_tun) entered disabled state [ 69.514135][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.521309][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.559021][ T4596] siw: device registration error -23 [ 69.591137][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.615683][ T4599] random: crng reseeded on system resumption [ 69.620355][ T4592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.700799][ T2742] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.709322][ T2742] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.741810][ T2742] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.750493][ T2742] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.780942][ T2742] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.789470][ T2742] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.803679][ T4602] loop3: detected capacity change from 0 to 1024 [ 69.810893][ T4602] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.820370][ T2742] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.821915][ T4602] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.830284][ T2742] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.852207][ T4602] JBD2: no valid journal superblock found [ 69.858138][ T4602] EXT4-fs (loop3): Could not load journal inode [ 69.879256][ T4602] vlan2: entered allmulticast mode [ 69.935226][ T4610] Cannot find add_set index 0 as target [ 70.090322][ T4618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 70.091877][ T4621] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 70.107150][ T4621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 70.263953][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.328824][ T4629] random: crng reseeded on system resumption [ 70.674263][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 70.674280][ T29] audit: type=1326 audit(1763240280.591:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 70.756379][ T29] audit: type=1326 audit(1763240280.591:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 70.779852][ T29] audit: type=1326 audit(1763240280.591:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 70.803329][ T29] audit: type=1326 audit(1763240280.591:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4632 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 70.900848][ T4647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 70.984877][ T4651] netlink: 'gtp': attribute type 13 has an invalid length. [ 71.073933][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.081277][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.132615][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.143721][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.246181][ T4670] random: crng reseeded on system resumption [ 71.246628][ T2742] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.246673][ T2742] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.246736][ T2742] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.246775][ T2742] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.355532][ T4673] loop3: detected capacity change from 0 to 1024 [ 71.369283][ T4673] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.380282][ T4673] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.394173][ T4673] JBD2: no valid journal superblock found [ 71.399983][ T4673] EXT4-fs (loop3): Could not load journal inode [ 71.415994][ T29] audit: type=1326 audit(1763240281.331:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.439480][ T29] audit: type=1326 audit(1763240281.331:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.463267][ T29] audit: type=1326 audit(1763240281.331:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.486971][ T29] audit: type=1326 audit(1763240281.331:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.510534][ T29] audit: type=1326 audit(1763240281.331:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.531910][ T4675] program syz.2.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.533986][ T29] audit: type=1326 audit(1763240281.331:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6225f6c9 code=0x7ffc0000 [ 71.576796][ T4678] loop3: detected capacity change from 0 to 512 [ 71.583828][ T4678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.596096][ T4678] EXT4-fs (loop3): 1 truncate cleaned up [ 71.602293][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.632486][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.660806][ T4686] loop2: detected capacity change from 0 to 512 [ 71.667921][ T4686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.680152][ T4684] syzkaller0: entered promiscuous mode [ 71.680203][ T4686] EXT4-fs (loop2): 1 truncate cleaned up [ 71.685748][ T4684] syzkaller0: entered allmulticast mode [ 71.697931][ T4686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.722267][ T4686] syz_tun: entered allmulticast mode [ 71.728097][ T4686] syz_tun: left allmulticast mode [ 71.747028][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.764549][ T4689] loop4: detected capacity change from 0 to 764 [ 71.773852][ T4689] Symlink component flag not implemented [ 71.779497][ T4689] Symlink component flag not implemented [ 71.785654][ T4689] Symlink component flag not implemented (129) [ 71.791950][ T4689] Symlink component flag not implemented (6) [ 71.798959][ T4689] rock: directory entry would overflow storage [ 71.805417][ T4689] rock: sig=0x4f50, size=4, remaining=3 [ 71.811001][ T4689] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 71.820668][ T4689] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.902892][ T4694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 71.909586][ T4694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 71.917488][ T4694] vhci_hcd vhci_hcd.0: Device attached [ 71.925013][ T4695] vhci_hcd: connection closed [ 71.925197][ T2742] vhci_hcd: stop threads [ 71.934211][ T2742] vhci_hcd: release socket [ 71.938686][ T2742] vhci_hcd: disconnect device [ 72.231744][ T3997] Bluetooth: hci0: command 0x1003 tx timeout [ 72.231808][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.356162][ T4701] loop2: detected capacity change from 0 to 1024 [ 72.405273][ T4701] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.416800][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.424092][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.440083][ T4701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.498547][ T4707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'. [ 72.498948][ T4698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.517779][ T4698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.565849][ T4701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.607039][ T4706] SELinux: failed to load policy [ 72.632173][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 72.644891][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 72.678687][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.697604][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.717570][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.732160][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.750689][ T4709] loop4: detected capacity change from 0 to 128 [ 72.757915][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.810542][ T4717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 72.825477][ T4720] ================================================================== [ 72.833577][ T4720] BUG: KCSAN: data-race in init_file / prepare_creds [ 72.840268][ T4720] [ 72.842613][ T4720] write to 0xffff8881047fcb28 of 4 bytes by task 4719 on cpu 1: [ 72.850256][ T4720] init_file+0x2e/0x1d0 [ 72.854441][ T4720] alloc_empty_file+0x8b/0x200 [ 72.859225][ T4720] alloc_file_pseudo+0xc6/0x160 [ 72.864081][ T4720] anon_inode_getfile+0xa0/0x120 [ 72.869029][ T4720] bpf_link_prime+0xfc/0x1d0 [ 72.873636][ T4720] bpf_raw_tp_link_attach+0x2ff/0x400 [ 72.879016][ T4720] bpf_raw_tracepoint_open+0x164/0x2c0 [ 72.884481][ T4720] __sys_bpf+0x6ae/0x7c0 [ 72.888740][ T4720] __x64_sys_bpf+0x41/0x50 [ 72.893173][ T4720] x64_sys_call+0x2aee/0x3000 [ 72.897859][ T4720] do_syscall_64+0xd2/0x200 [ 72.902365][ T4720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.908262][ T4720] [ 72.910584][ T4720] read to 0xffff8881047fca80 of 184 bytes by task 4720 on cpu 0: [ 72.918302][ T4720] prepare_creds+0x6c/0x4c0 [ 72.922819][ T4720] __sys_setresuid+0x464/0x6d0 [ 72.927589][ T4720] __x64_sys_setresuid+0x3f/0x50 [ 72.932531][ T4720] x64_sys_call+0x2490/0x3000 [ 72.937217][ T4720] do_syscall_64+0xd2/0x200 [ 72.941724][ T4720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.947706][ T4720] [ 72.950024][ T4720] Reported by Kernel Concurrency Sanitizer on: [ 72.956174][ T4720] CPU: 0 UID: 0 PID: 4720 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.965812][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.975870][ T4720] ==================================================================