last executing test programs: 3.535362528s ago: executing program 3 (id=3261): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0xf42, 0xd) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{}, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') 3.510167999s ago: executing program 3 (id=3262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') 3.331005602s ago: executing program 2 (id=3267): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011c, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x400, 0x70bd29, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) 2.545582333s ago: executing program 0 (id=3274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.329587896s ago: executing program 0 (id=3276): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") 2.282206497s ago: executing program 0 (id=3278): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002c000000000000000600000018110000", @ANYRES32, @ANYBLOB="00000000005f4f3727d227e157000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001d950c0010000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x7) 2.250037147s ago: executing program 2 (id=3279): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10}, {0xe, 0x3}, {0x5, 0x3}]}, @const={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x8}}, @ptr={0x10}]}, {0x0, [0x61, 0x61, 0x6f, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000680)=""/197, 0x8d, 0xc5, 0x1, 0x7f, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) readv(r4, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/41, 0x29}, {&(0x7f0000000e40)=""/87, 0x57}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x28, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x18) keyctl$link(0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r6 = io_uring_setup(0x7886, &(0x7f0000000a40)={0x0, 0x0, 0x6052, 0xfffffffe, 0x3bc}) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x4) close_range(r6, r7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r6, 0x0) 1.461124989s ago: executing program 2 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.38468462s ago: executing program 0 (id=3287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x7, @loopback, 0xec7}], 0x38) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 1.38410389s ago: executing program 2 (id=3288): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") 1.328820531s ago: executing program 2 (id=3289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.068575945s ago: executing program 3 (id=3263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 986.504016ms ago: executing program 3 (id=3291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}}) 934.541197ms ago: executing program 3 (id=3292): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r2, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x12b, 0xffffffff}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}, @func_proto, @const={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x8}}, @ptr={0x10}]}, {0x0, [0x61, 0x61, 0x6f, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000000680)=""/197, 0x75, 0xc5, 0x1, 0x7f, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) readv(r5, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/41, 0x29}, {&(0x7f0000000e40)=""/87, 0x57}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x28, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) keyctl$link(0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r7 = io_uring_setup(0x7886, &(0x7f0000000a40)={0x0, 0x0, 0x6052, 0xfffffffe, 0x3bc}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r7, 0x0) 438.938564ms ago: executing program 2 (id=3296): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000002c000000000000000600000018110000", @ANYRES32, @ANYBLOB="00000000005f4f3727d227e157000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001d950c0010000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x7) 410.472254ms ago: executing program 1 (id=3298): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") 360.021135ms ago: executing program 4 (id=3299): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xfd, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) 359.339395ms ago: executing program 0 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) 319.351685ms ago: executing program 0 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 319.104825ms ago: executing program 3 (id=3302): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x80) 318.795205ms ago: executing program 1 (id=3303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}}) 316.460376ms ago: executing program 4 (id=3304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540)="8d", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r2}) 282.695446ms ago: executing program 4 (id=3305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=@delchain={0xf68, 0x2e, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff3, 0xffff}, {0x0, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xf34, 0x2, [@TCA_FW_ACT={0x6bc, 0x4, [@m_simple={0xdc, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x64b0, 0x7fffffff, 0x0, 0x7, 0x8}}, @TCA_DEF_DATA={0x7, 0x3, '/:\x00'}]}, {0x8f, 0x6, "dd45a6cbcb1ca6c8b34ccb1860315a4f3302c2ad5a9eb5bf3728169d3923d2ad67fdc89cdc9b1dd4d9d655173a8322dd611ca4bf73b7bc78f098153af71336c4f4fe1ca5c3ab9c8bd5b73d88e8a4ec1ac8b3083335c9be36c756b5ab746e2f04899e80c05ba0b0b7511498065a2ab74ad6a19a81fe5505e6f9abfb69364e24db824b62e8b82c90ea6c715e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x164, 0x18, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x853, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5c1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x6, 0x9, 0xf2c}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd74, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1405, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5b, 0x5, 0x8, 0x0, 0x7}}]}, {0xd6, 0x6, "e09475110576afb7ea185f8b61e123e92ce1a319e16179d5a32274e1008ddb509aa11f772691f3f5d73a27cd28c3046eebfa82b3e02383fdf5e44310d4bf6060dc3b3d32b94705eac8b9a09ec542010a3635d09824591cd1aac3aabc236d1a7c499158e8cb718c11ccd8e81b4542509e4794ce0ac17db4960b5b0eeea0ecb0e18dc9516f54573fea71edbffe6102158d3f7b47e33965aae691eb8ccb2c432b7a6e6f163b40f1be37a3b5a92008eec8a74b7f05e7dea1027011723c198a3a073ec4621eeba6e7f59403b6c039bb07f49b9e0c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x134, 0x17, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x10001, 0x8, 0x8bc, 0x2}, 0x1}}]}, {0xcc, 0x6, "4271aca1bc006cd59a58f0710127b864aaae73562b747c7f89f3da22ea61d8614f067481e0837922c6f0b7c15d716af24c6c6d88a06d5adb57f9714c18e1621735956161f4e74ce81917dbed2df2a0b927a29e7da96bd36034d5d51451928bf633fd215994da26ab1ae00cd7d596fb446e4d1a6f2b207b07bcde4ac5a730d7e3347022d9a3f8cca01f3343beae62f35a826a21c787678af52215008c769dfc9fbcee573d5877cba086a245372c42dd83fdafcf16442c37e50bfe16388d7ea153c4a0538b0a048061"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x7c, 0x1c, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x1, 0xffffffffffffffff, 0xe496, 0x8638}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x0, 0x1, 0x8, 0x100}, 0x1}}]}, {0x11, 0x6, "1ad97135b347acc554550ea774"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xa8, 0x15, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x72, 0x6, "ef8f7e107990a9ad2ee985b31205a1decc6f2920298a7c18349d5ce3c5dc47e331a87a22699ca3460ef5b881771d011427b258f01e33f5df308a03fe172e80126536dc6c16440bbe2543164a39319c87481d92ebf04d8184640fe3b41a8ebd79e304a551fc391c5f3610611a26db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xcc, 0xa, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x1000, 0x20000000, 0x13e3, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4, 0x6, 0xffffffa9, 0x2}}]}, {0x72, 0x6, "b1bf6bf6d1728c91cf100cfe6415778761f625bb93ab6d97660d386e7a7ecfd6a20e49c813c09dc636e93c1a0350f173f7c578c2c509d6b2a5b2bfc9816aedd38cfceab0ed0ab1ad7651d37ae052010ffc9048bd271bcd8d1872616f61412184119a3ab1be7a50ab2eee12b58287"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x6, 0xa4, 0x5}, {0x1, 0xff, 0x59, 0x80000000}, {0x8664, 0x2, 0x5, 0xff}, {0x9, 0x0, 0x8, 0x400}, {0x9, 0x0, 0x37, 0xfffffffb}, {0x5, 0x9, 0x0, 0x1}, {0x2, 0x8, 0x8d, 0x1ff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x3, 0x4, 0x7}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0xa8, 0x6, "cf937741f649613699fa5f22e35cab9a6c0fe899b9febeab5d1886f7f93614dbc9ea10f6a5ecbaf613689ba00872169e8b32cf5dca4a972039fe4c41541064dcefc77c89c281c436805288d7cbbbf427c2d4eab878c6777d7f6c62912c93d46a9fbbe2c969cf223c401329f5a0a3499b850e2498f30c7071cd3c36612ca1ed832a8d54ee3ba1a9ff635dc07de77d3355351ed62308f2a8794dae9b58bb8fd9a40898155d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macvtap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80e, 0x800, 0x0, 0xedfc, 0x10000, 0x4, 0xe, 0x3, 0x1ff, 0x9, 0x80, 0x9, 0x38, 0x4, 0x0, 0x7, 0xa, 0x7, 0x1, 0x0, 0x7, 0x0, 0x2, 0x8, 0x101, 0x10001, 0xe, 0x2, 0x9, 0x0, 0x7b68, 0x0, 0x100, 0xffffffff, 0x7ff, 0x1, 0xf, 0x7, 0x8, 0xc2, 0xc, 0x8, 0x80000000, 0x3, 0x2, 0x9, 0x1, 0x8, 0x7, 0xfff, 0x7, 0x220, 0x7, 0x4, 0x2, 0x9, 0x7, 0x6, 0x7, 0x7, 0x2, 0xb9d, 0x9, 0x80, 0xaa, 0x4, 0x3ff, 0x4e, 0x5, 0x5, 0xc, 0xfffffffa, 0x5, 0x8000, 0x8d0, 0x0, 0x4, 0x4, 0x0, 0x8000, 0x6, 0x6, 0x7, 0x9, 0x80000001, 0x8, 0x7, 0xd, 0x5, 0x5, 0xffffff00, 0x3a, 0x2, 0xa0d7, 0x4, 0x33, 0x5, 0xb76, 0x5, 0x1, 0x1, 0x0, 0x1, 0xb3a, 0x2, 0x5, 0x4, 0x78e4, 0x9, 0x55, 0xfffffffe, 0x1, 0x7, 0xb6af, 0x4, 0x4, 0x7, 0x7, 0x7, 0x3, 0x6, 0x6, 0x5, 0xfffffff2, 0x6, 0x4a7, 0xfffffff8, 0x2d, 0xfffffff8, 0x80000000, 0xc0, 0x2, 0x9, 0x3002, 0x0, 0x200, 0x6, 0x3, 0x1, 0xcc, 0x6, 0x1, 0x31, 0x4, 0x8001, 0x4, 0x2, 0x6, 0x7fff, 0x6, 0xfd000000, 0x2, 0x3, 0x7, 0x7fff, 0xfffffffc, 0xfe19, 0xa, 0x1, 0x0, 0x0, 0x7, 0x10001, 0x336, 0xa90, 0x9, 0x3, 0x88, 0x7, 0xfffffe01, 0x6, 0x8, 0xa, 0x2, 0xf74, 0xcef7, 0x7, 0x6, 0x4e, 0x2, 0x7ff, 0x1, 0x8, 0xf275, 0x4, 0x40, 0x1, 0x6, 0x7, 0x1, 0x0, 0xfffffffe, 0x3, 0x1, 0x2, 0x9, 0x7, 0x7f, 0xe91c, 0x5, 0x1, 0x5, 0xe2, 0x5, 0x9, 0x4, 0x6, 0x86, 0xefe, 0x4, 0x101, 0x1, 0x9, 0xffff, 0x7f, 0x3, 0xfe15, 0x0, 0xffffff81, 0x7, 0x7, 0x30, 0xfff, 0xffffffff, 0x800, 0xfffffffd, 0x10001, 0x73c, 0xfff, 0xf6647800, 0x9, 0xa1b3, 0x3, 0x5, 0xfaa6, 0x2, 0x20, 0x3, 0x4, 0x8, 0x5, 0x0, 0xa96, 0x8, 0x9, 0x178, 0x6, 0x3, 0x9, 0x100, 0x1, 0x5, 0x26, 0x1, 0x3, 0x5]}]}, @TCA_FW_INDEV={0x14, 0x3, 'netpci0\x00'}, @TCA_FW_ACT={0x40c, 0x4, [@m_simple={0xe8, 0x1c, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x85, 0x1000, 0x7, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffc, 0x9, 0x8, 0x4, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x3, 0x3, 0x7ff, 0x6}}, @TCA_DEF_DATA={0x12, 0x3, 'max_batch_time'}]}, {0x60, 0x6, "addb8c41ddf3c1c9673d880df662b10fc79c958df6d62367a8ee9c37640dfd518b7d26f21be70ed58f2f3095852a04084a4f495be55af1df40665e5b9ab6571a0681920c2c767ddfc6f7904626864a37b13350d1546801ccf2c5442b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_xt={0x200, 0x3, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb6, 0x6, {0x7, 'filter\x00', 0x1, 0x10, "d3632dd0fd6efb00ca358346abde15db4f0c36e67816305323115196873daf89b57956381b19291666eff6223e9b41d8b64742bf102b956ffba3ad5b2d3d2ab37f450dd331e1e3c1736d69b094e4821e452bae2ddc60d42710fce80a9bdcb6459cb16148f13fac825d72b98f160ffd31c7c524d8b64622bdb0b71f77fbf4d39e466b41890538f6db97e62705"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x39, 0x6, {0x40, 'filter\x00', 0x0, 0x8, "6df2cd636aa89e7940ddf322dcafd8"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}]}, {0x8b, 0x6, "3b093d3acaf45d598f151fedc173fe4afcc7ed62a939ffdea2e98dccda4efbbcc9b7df55d81b2108019439b55c7dc9dd320fefc7b957b86988a7d3a207737262ab958fe16c43d2c24c7fc5c7c83e477f96afd6fc221c103abc1ab8618b6e317fd8df552178e0e5b1901588708786e24c34266a221aac4a8f894c79dc3ba491e5f42c0e50b9b810"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x120, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff6489, 0x3, 0x6, 0x0, 0x831b}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0xfffffff9, 0x28247e75}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x20000000, 0x380, 0x4}, 0x8}}]}, {0x9a, 0x6, "a64d6961488f4bcbebe9ad4e1e4533dce18dfe824fe5e4119febaca19a888fa2bff5bd4e457a0ad3d15afb825aa6c661667c9a0b3f3a449b8b056e2306e9abed7872c53a0dd11ee8751d986b435c5d1f293c805ba01b5dafa7ad38128ce6be62929664962617d2f9bd9873b7d863c63f3c6709d719469682167006855a1fdf7b852696fd2b7d99c862e2fa7f9d6d9918633f5cc192e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xd}}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0xf68}}, 0x0) 250.223097ms ago: executing program 1 (id=3306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 249.576526ms ago: executing program 4 (id=3307): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0xfffffffffffffecc) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000500)=""/79) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sync() 133.777998ms ago: executing program 1 (id=3308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 115.081049ms ago: executing program 1 (id=3309): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) 55.22814ms ago: executing program 1 (id=3310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 19.72514ms ago: executing program 4 (id=3311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): : unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10710 comm=syz.0.2567 [ 216.839345][T10710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'. [ 217.062127][T10718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 217.068836][T10718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.077130][T10718] vhci_hcd vhci_hcd.0: Device attached [ 217.104152][T10718] vhci_hcd vhci_hcd.0: port 0 already used [ 217.146626][T10719] vhci_hcd: connection closed [ 217.154034][ T52] vhci_hcd: stop threads [ 217.163040][ T52] vhci_hcd: release socket [ 217.167546][ T52] vhci_hcd: disconnect device [ 217.401859][T10725] loop1: detected capacity change from 0 to 764 [ 217.541182][T10733] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 217.547755][T10733] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 217.555510][T10733] vhci_hcd vhci_hcd.0: Device attached [ 217.596463][T10734] vhci_hcd: connection closed [ 217.596742][ T7714] vhci_hcd: stop threads [ 217.603893][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2573'. [ 217.605758][ T7714] vhci_hcd: release socket [ 217.619147][ T7714] vhci_hcd: disconnect device [ 217.692050][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2578'. [ 217.744462][T10751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10751 comm=syz.4.2581 [ 217.806127][T10757] validate_nla: 1 callbacks suppressed [ 217.806149][T10757] netlink: 'syz.2.2585': attribute type 2 has an invalid length. [ 217.819625][T10757] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 217.827487][T10757] netlink: 'syz.2.2585': attribute type 2 has an invalid length. [ 217.835338][T10757] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 217.843121][T10757] netlink: 'syz.2.2585': attribute type 2 has an invalid length. [ 217.916423][T10763] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 218.763917][T10776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 218.770515][T10776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.778793][T10776] vhci_hcd vhci_hcd.0: Device attached [ 218.865461][T10781] vhci_hcd vhci_hcd.0: port 0 already used [ 218.872450][T10777] vhci_hcd: connection closed [ 218.872683][ T52] vhci_hcd: stop threads [ 218.881719][ T52] vhci_hcd: release socket [ 218.886269][ T52] vhci_hcd: disconnect device [ 219.093567][T10763] syz.0.2588 (10763) used greatest stack depth: 7208 bytes left [ 219.116434][T10787] loop2: detected capacity change from 0 to 2048 [ 219.140690][T10789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10789 comm=syz.0.2596 [ 219.154119][T10787] loop2: p1 < > p4 [ 219.159013][T10787] loop2: p4 size 8388608 extends beyond EOD, truncated [ 219.189183][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.211015][T10791] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 219.218839][T10791] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 219.226704][T10791] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 219.234478][T10791] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 219.242252][T10791] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 219.396026][T10799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 219.402663][T10799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.410926][T10799] vhci_hcd vhci_hcd.0: Device attached [ 219.418113][T10797] FAULT_INJECTION: forcing a failure. [ 219.418113][T10797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.431392][T10797] CPU: 1 UID: 0 PID: 10797 Comm: syz.3.2600 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 219.431473][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.431486][T10797] Call Trace: [ 219.431493][T10797] [ 219.431501][T10797] __dump_stack+0x1d/0x30 [ 219.431524][T10797] dump_stack_lvl+0xe8/0x140 [ 219.431611][T10797] dump_stack+0x15/0x1b [ 219.431628][T10797] should_fail_ex+0x265/0x280 [ 219.431722][T10797] should_fail+0xb/0x20 [ 219.431758][T10797] should_fail_usercopy+0x1a/0x20 [ 219.431785][T10797] strncpy_from_user+0x25/0x230 [ 219.431812][T10797] ? kmem_cache_alloc_noprof+0x186/0x310 [ 219.431880][T10797] ? getname_flags+0x80/0x3b0 [ 219.431968][T10797] getname_flags+0xae/0x3b0 [ 219.432005][T10797] getname_uflags+0x21/0x30 [ 219.432082][T10797] __x64_sys_execveat+0x5d/0x90 [ 219.432115][T10797] x64_sys_call+0x2dae/0x2fb0 [ 219.432193][T10797] do_syscall_64+0xd0/0x1a0 [ 219.432227][T10797] ? clear_bhb_loop+0x40/0x90 [ 219.432249][T10797] ? clear_bhb_loop+0x40/0x90 [ 219.432276][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.432368][T10797] RIP: 0033:0x7fb9ffc4e969 [ 219.432385][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.432487][T10797] RSP: 002b:00007fb9fe2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 219.432588][T10797] RAX: ffffffffffffffda RBX: 00007fb9ffe75fa0 RCX: 00007fb9ffc4e969 [ 219.432605][T10797] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 219.432622][T10797] RBP: 00007fb9fe2b7090 R08: 0000000000001000 R09: 0000000000000000 [ 219.432639][T10797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.432656][T10797] R13: 0000000000000000 R14: 00007fb9ffe75fa0 R15: 00007ffc71ef1758 [ 219.432681][T10797] [ 219.627009][T10799] vhci_hcd vhci_hcd.0: port 0 already used [ 219.634428][T10802] vhci_hcd: connection closed [ 219.638349][ T37] vhci_hcd: stop threads [ 219.647541][ T37] vhci_hcd: release socket [ 219.652013][ T37] vhci_hcd: disconnect device [ 219.716097][T10815] loop4: detected capacity change from 0 to 128 [ 219.814068][T10828] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.956728][T10828] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.006149][T10828] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.065501][T10828] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.093363][T10840] loop4: detected capacity change from 0 to 2048 [ 220.117512][T10840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.141625][T10828] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.153450][T10828] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.166687][T10828] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.204649][T10828] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.215510][T10845] pim6reg9: entered allmulticast mode [ 220.591136][T10863] loop1: detected capacity change from 0 to 128 [ 220.844128][T10872] loop3: detected capacity change from 0 to 2048 [ 220.899620][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.944563][T10876] loop2: detected capacity change from 0 to 2048 [ 220.956549][T10876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.151058][T10872] loop3: p1 < > p4 [ 221.167026][T10872] loop3: p4 size 8388608 extends beyond EOD, truncated [ 222.159202][T10895] __nla_validate_parse: 2 callbacks suppressed [ 222.159264][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2635'. [ 222.361368][T10901] loop4: detected capacity change from 0 to 764 [ 222.564808][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.601260][T10907] loop3: detected capacity change from 0 to 2048 [ 222.612856][T10909] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 222.640837][T10907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.729436][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 222.729452][ T29] audit: type=1400 audit(1748075029.884:6168): avc: denied { getopt } for pid=10919 comm="syz.4.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.783878][T10922] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2645'. [ 222.908996][ T7714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.929203][ T29] audit: type=1400 audit(1748075030.094:6169): avc: denied { mounton } for pid=10924 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 223.015599][ T7714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.066445][ T7714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.125311][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2645'. [ 223.136457][ T7714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.225276][ T7714] bridge_slave_1: left allmulticast mode [ 223.231016][ T7714] bridge_slave_1: left promiscuous mode [ 223.236773][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.245512][ T7714] bridge_slave_0: left allmulticast mode [ 223.251220][ T7714] bridge_slave_0: left promiscuous mode [ 223.257031][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.352172][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.396030][ T7714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.414538][ T7714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.424772][ T7714] bond0 (unregistering): Released all slaves [ 223.433466][ T7714] bond1 (unregistering): Released all slaves [ 223.472394][T10941] loop3: detected capacity change from 0 to 764 [ 223.485348][ T7714] hsr_slave_0: left promiscuous mode [ 223.494234][ T7714] hsr_slave_1: left promiscuous mode [ 223.514007][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.521545][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.568853][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.576491][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.607801][ T7714] veth1_macvtap: left promiscuous mode [ 223.613444][ T7714] veth0_macvtap: left promiscuous mode [ 223.619209][ T7714] veth1_vlan: left promiscuous mode [ 223.624634][ T7714] veth0_vlan: left promiscuous mode [ 223.777835][ T7714] team0 (unregistering): Port device team_slave_1 removed [ 223.805232][ T7714] team0 (unregistering): Port device team_slave_0 removed [ 223.913825][T10952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 223.920496][T10952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.928686][T10952] vhci_hcd vhci_hcd.0: Device attached [ 223.946917][T10924] chnl_net:caif_netlink_parms(): no params data found [ 223.962868][T10952] vhci_hcd vhci_hcd.0: port 0 already used [ 223.970744][T10953] vhci_hcd: connection closed [ 223.971302][ T31] vhci_hcd: stop threads [ 223.980358][ T31] vhci_hcd: release socket [ 223.984826][ T31] vhci_hcd: disconnect device [ 224.033681][T10963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10963 comm=syz.2.2655 [ 224.061945][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.069210][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.096865][T10924] bridge_slave_0: entered allmulticast mode [ 224.113574][T10924] bridge_slave_0: entered promiscuous mode [ 224.152751][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.159937][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.168425][T10924] bridge_slave_1: entered allmulticast mode [ 224.174937][T10924] bridge_slave_1: entered promiscuous mode [ 224.188510][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2655'. [ 224.208431][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.226845][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.251257][T10924] team0: Port device team_slave_0 added [ 224.258370][T10924] team0: Port device team_slave_1 added [ 224.287435][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.294459][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.320600][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.409084][T10971] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 224.439740][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.446801][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.472780][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.545013][T10924] hsr_slave_0: entered promiscuous mode [ 224.551389][T10924] hsr_slave_1: entered promiscuous mode [ 224.558698][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.583411][T10924] Cannot create hsr debugfs directory [ 224.590373][T10974] loop1: detected capacity change from 0 to 2048 [ 224.614529][T10974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.725124][ T29] audit: type=1326 audit(1748075031.884:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.748768][ T29] audit: type=1326 audit(1748075031.884:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.772222][ T29] audit: type=1326 audit(1748075031.884:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.795907][ T29] audit: type=1326 audit(1748075031.884:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.819507][ T29] audit: type=1326 audit(1748075031.884:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.843050][ T29] audit: type=1326 audit(1748075031.884:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.866713][ T29] audit: type=1326 audit(1748075031.884:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.890244][ T29] audit: type=1326 audit(1748075031.884:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.3.2661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 224.914439][T10988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 224.920992][T10988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.929247][T10988] vhci_hcd vhci_hcd.0: Device attached [ 224.961254][T10987] vhci_hcd vhci_hcd.0: port 0 already used [ 224.969094][T10989] vhci_hcd: connection closed [ 224.969273][ T31] vhci_hcd: stop threads [ 224.978363][ T31] vhci_hcd: release socket [ 224.982796][ T31] vhci_hcd: disconnect device [ 225.222614][T10924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.242792][T10924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.263316][T10924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.286691][T10924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.370605][T10924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.412722][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.425501][T10924] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.443089][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.450297][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.466834][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.473966][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.508645][T10924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.519173][T10924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.706370][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.737431][T11016] loop1: detected capacity change from 0 to 1024 [ 225.767888][T11016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.805172][T11016] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.836916][T11016] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 225.866262][T11016] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.2669: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.986397][T11016] EXT4-fs (loop1): Remounting filesystem read-only [ 226.003203][T11016] EXT4-fs (loop1): 1 orphan inode deleted [ 226.013713][T11016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.037283][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2670'. [ 226.087308][T11016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.335597][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2673'. [ 226.412910][T10924] veth0_vlan: entered promiscuous mode [ 226.454841][T10924] veth1_vlan: entered promiscuous mode [ 226.490009][T10924] veth0_macvtap: entered promiscuous mode [ 226.504344][T11016] loop1: detected capacity change from 0 to 512 [ 226.515388][T10924] veth1_macvtap: entered promiscuous mode [ 226.536903][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.552978][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.563302][T10924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.572184][T10924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.581023][T10924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.589769][T10924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.627357][T11016] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2669: Failed to acquire dquot type 1 [ 226.662532][T11016] EXT4-fs (loop1): 1 truncate cleaned up [ 226.670838][T11016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.690702][T11053] loop3: detected capacity change from 0 to 764 [ 226.703924][T11016] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.739178][T11016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.767310][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 226.836993][T11057] loop4: detected capacity change from 0 to 128 [ 226.849140][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2680'. [ 226.913624][T11067] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 226.920254][T11067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 226.928519][T11067] vhci_hcd vhci_hcd.0: Device attached [ 226.939293][T11067] vhci_hcd vhci_hcd.0: port 0 already used [ 226.940867][T11041] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.962740][T11041] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 227.002712][T11068] vhci_hcd: connection closed [ 227.014088][ T52] vhci_hcd: stop threads [ 227.023141][ T52] vhci_hcd: release socket [ 227.027718][ T52] vhci_hcd: disconnect device [ 227.033610][T11073] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 227.040286][T11073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 227.048641][T11073] vhci_hcd vhci_hcd.0: Device attached [ 227.084301][T11083] vhci_hcd vhci_hcd.0: port 0 already used [ 227.091328][T11076] vhci_hcd: connection closed [ 227.092575][ T37] vhci_hcd: stop threads [ 227.101761][ T37] vhci_hcd: release socket [ 227.106352][ T37] vhci_hcd: disconnect device [ 227.480175][T11092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11092 comm=syz.0.2688 [ 227.606911][T11097] FAULT_INJECTION: forcing a failure. [ 227.606911][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.620135][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.4.2690 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 227.620251][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.620268][T11097] Call Trace: [ 227.620276][T11097] [ 227.620354][T11097] __dump_stack+0x1d/0x30 [ 227.620382][T11097] dump_stack_lvl+0xe8/0x140 [ 227.620409][T11097] dump_stack+0x15/0x1b [ 227.620429][T11097] should_fail_ex+0x265/0x280 [ 227.620512][T11097] should_fail+0xb/0x20 [ 227.620545][T11097] should_fail_usercopy+0x1a/0x20 [ 227.620571][T11097] _copy_from_user+0x1c/0xb0 [ 227.620678][T11097] bpf_obj_get_info_by_fd+0x89d/0x1ee0 [ 227.620715][T11097] ? _parse_integer+0x27/0x40 [ 227.620822][T11097] ? kstrtoull+0x111/0x140 [ 227.620857][T11097] ? __rcu_read_unlock+0x4f/0x70 [ 227.620885][T11097] ? get_pid_task+0x96/0xd0 [ 227.620983][T11097] ? selinux_bpf+0xaa/0xc0 [ 227.621015][T11097] __sys_bpf+0x6bb/0x790 [ 227.621063][T11097] __x64_sys_bpf+0x41/0x50 [ 227.621155][T11097] x64_sys_call+0x2478/0x2fb0 [ 227.621180][T11097] do_syscall_64+0xd0/0x1a0 [ 227.621210][T11097] ? clear_bhb_loop+0x40/0x90 [ 227.621252][T11097] ? clear_bhb_loop+0x40/0x90 [ 227.621278][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.621322][T11097] RIP: 0033:0x7f2e9329e969 [ 227.621344][T11097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.621368][T11097] RSP: 002b:00007f2e91907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.621466][T11097] RAX: ffffffffffffffda RBX: 00007f2e934c5fa0 RCX: 00007f2e9329e969 [ 227.621482][T11097] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000f [ 227.621494][T11097] RBP: 00007f2e91907090 R08: 0000000000000000 R09: 0000000000000000 [ 227.621506][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.621518][T11097] R13: 0000000000000000 R14: 00007f2e934c5fa0 R15: 00007ffe787230e8 [ 227.621604][T11097] [ 227.831645][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2688'. [ 227.844692][T11102] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 227.947001][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2691'. [ 228.020985][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2698'. [ 228.031169][T11120] loop2: detected capacity change from 0 to 512 [ 228.068749][T11120] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.082167][T11123] FAULT_INJECTION: forcing a failure. [ 228.082167][T11123] name failslab, interval 1, probability 0, space 0, times 0 [ 228.094897][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.0.2694 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 228.094932][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.094948][T11123] Call Trace: [ 228.094957][T11123] [ 228.094968][T11123] __dump_stack+0x1d/0x30 [ 228.095053][T11123] dump_stack_lvl+0xe8/0x140 [ 228.095077][T11123] dump_stack+0x15/0x1b [ 228.095110][T11123] should_fail_ex+0x265/0x280 [ 228.095205][T11123] should_failslab+0x8c/0xb0 [ 228.095246][T11123] kmem_cache_alloc_noprof+0x50/0x310 [ 228.095277][T11123] ? dup_fd+0x3a/0x540 [ 228.095312][T11123] dup_fd+0x3a/0x540 [ 228.095345][T11123] ? _raw_spin_unlock+0x26/0x50 [ 228.095379][T11123] ksys_unshare+0x346/0x6d0 [ 228.095429][T11123] ? ksys_write+0x16e/0x1a0 [ 228.095473][T11123] __x64_sys_unshare+0x1f/0x30 [ 228.095513][T11123] x64_sys_call+0x2d4b/0x2fb0 [ 228.095538][T11123] do_syscall_64+0xd0/0x1a0 [ 228.095598][T11123] ? clear_bhb_loop+0x40/0x90 [ 228.095627][T11123] ? clear_bhb_loop+0x40/0x90 [ 228.095657][T11123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.095713][T11123] RIP: 0033:0x7f4ab98ce969 [ 228.095730][T11123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.095748][T11123] RSP: 002b:00007f4ab7ef5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.095766][T11123] RAX: ffffffffffffffda RBX: 00007f4ab9af6160 RCX: 00007f4ab98ce969 [ 228.095783][T11123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 228.095799][T11123] RBP: 00007f4ab7ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.095815][T11123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.095915][T11123] R13: 0000000000000000 R14: 00007f4ab9af6160 R15: 00007ffd0c5fb148 [ 228.095948][T11123] [ 228.294254][T11120] EXT4-fs (loop2): 1 truncate cleaned up [ 228.308745][T11120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.355205][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 228.369381][T11118] loop4: detected capacity change from 0 to 2048 [ 228.377507][T11127] loop3: detected capacity change from 0 to 128 [ 228.424470][T11118] loop4: p1 < > p4 [ 228.428920][T11118] loop4: p4 size 8388608 extends beyond EOD, truncated [ 228.496106][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.514448][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 228.514464][ T29] audit: type=1326 audit(1748075035.684:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.547546][ T29] audit: type=1326 audit(1748075035.714:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.571397][ T29] audit: type=1326 audit(1748075035.714:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.595066][ T29] audit: type=1326 audit(1748075035.714:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.618587][ T29] audit: type=1326 audit(1748075035.714:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.645348][ T29] audit: type=1326 audit(1748075035.714:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.669102][ T29] audit: type=1326 audit(1748075035.714:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.692644][ T29] audit: type=1326 audit(1748075035.714:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.716325][ T29] audit: type=1326 audit(1748075035.714:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.739859][ T29] audit: type=1326 audit(1748075035.714:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11133 comm="syz.2.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 228.819060][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2708'. [ 228.860021][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 228.903897][T11152] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 228.957710][T11158] loop1: detected capacity change from 0 to 2048 [ 229.014372][T11158] loop1: p1 < > p4 [ 229.019093][T11158] loop1: p4 size 8388608 extends beyond EOD, truncated [ 229.068953][T11170] loop1: detected capacity change from 0 to 2048 [ 229.077053][T11171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 229.083649][T11171] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.091393][T11171] vhci_hcd vhci_hcd.0: Device attached [ 229.100092][T11170] EXT4-fs: Ignoring removed i_version option [ 229.108687][T11172] vhci_hcd: connection closed [ 229.108939][ T6795] vhci_hcd: stop threads [ 229.118055][ T6795] vhci_hcd: release socket [ 229.122570][ T6795] vhci_hcd: disconnect device [ 229.124658][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 229.188627][T11170] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e018, mo2=0002] [ 229.204946][T11170] System zones: 0-7 [ 229.219627][T11170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.341905][T11184] xt_hashlimit: max too large, truncated to 1048576 [ 229.348350][T11186] validate_nla: 16 callbacks suppressed [ 229.348373][T11186] netlink: 'syz.1.2717': attribute type 4 has an invalid length. [ 229.369044][T11186] netlink: 'syz.1.2717': attribute type 4 has an invalid length. [ 229.737884][T11196] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 229.737908][T11196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.737941][T11196] vhci_hcd vhci_hcd.0: Device attached [ 229.738004][T11198] loop4: detected capacity change from 0 to 2048 [ 229.738670][T11199] vhci_hcd: connection closed [ 229.746661][ T6795] vhci_hcd: stop threads [ 229.746674][ T6795] vhci_hcd: release socket [ 229.746682][ T6795] vhci_hcd: disconnect device [ 229.774433][T11198] loop4: p1 < > p4 [ 229.791757][T11198] loop4: p4 size 8388608 extends beyond EOD, truncated [ 229.800693][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 229.907306][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.950337][T11214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 229.950367][T11214] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.950409][T11214] vhci_hcd vhci_hcd.0: Device attached [ 230.047679][T11219] vhci_hcd: connection closed [ 230.048434][ T6795] vhci_hcd: stop threads [ 230.048446][ T6795] vhci_hcd: release socket [ 230.048455][ T6795] vhci_hcd: disconnect device [ 230.139838][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 230.495344][T11241] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 230.921151][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2751'. [ 230.976779][T11260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11260 comm=syz.1.2752 [ 231.108372][T11264] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 231.115033][T11264] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 231.122759][T11264] vhci_hcd vhci_hcd.0: Device attached [ 231.181514][T11265] vhci_hcd: connection closed [ 231.181764][ T7714] vhci_hcd: stop threads [ 231.190999][ T7714] vhci_hcd: release socket [ 231.195499][ T7714] vhci_hcd: disconnect device [ 231.221904][T11275] netlink: zone id is out of range [ 231.227229][T11275] netlink: zone id is out of range [ 231.232473][T11275] netlink: zone id is out of range [ 231.237754][T11275] netlink: zone id is out of range [ 231.243030][T11275] netlink: zone id is out of range [ 231.248228][T11275] netlink: zone id is out of range [ 231.253365][T11275] netlink: zone id is out of range [ 231.258702][T11275] netlink: zone id is out of range [ 231.263964][T11275] netlink: zone id is out of range [ 231.269325][T11275] netlink: zone id is out of range [ 231.374583][T11302] loop1: detected capacity change from 0 to 2048 [ 231.445126][T11302] loop1: p1 < > p4 [ 231.450294][T11302] loop1: p4 size 8388608 extends beyond EOD, truncated [ 231.517299][T11332] loop2: detected capacity change from 0 to 764 [ 231.571532][T11345] loop1: detected capacity change from 0 to 128 [ 231.739368][T11362] loop1: detected capacity change from 0 to 2048 [ 231.760705][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.768680][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.776519][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.784520][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.792548][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.800399][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.808209][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.816145][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.824131][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.831940][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.839974][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.847937][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.855779][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.863549][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.871370][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.879171][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.887008][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.894800][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.902565][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.910456][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.918257][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.926074][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.933866][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.941643][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.949531][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.957389][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.965643][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.973433][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.981340][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.989207][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 231.997036][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.004828][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.013059][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.020899][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.028776][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.036611][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.044414][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.052193][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.060001][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.067797][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.075589][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.083350][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.091144][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 232.104385][ T3390] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.01 Device [syz1] on syz0 [ 232.162904][T11362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.702475][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.061756][T11404] __nla_validate_parse: 4 callbacks suppressed [ 233.061771][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2782'. [ 233.063531][T11403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2781'. [ 233.105153][T11391] FAULT_INJECTION: forcing a failure. [ 233.105153][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 233.117906][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.1.2776 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 233.117938][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.117995][T11391] Call Trace: [ 233.118002][T11391] [ 233.118010][T11391] __dump_stack+0x1d/0x30 [ 233.118051][T11391] dump_stack_lvl+0xe8/0x140 [ 233.118072][T11391] dump_stack+0x15/0x1b [ 233.118089][T11391] should_fail_ex+0x265/0x280 [ 233.118125][T11391] should_failslab+0x8c/0xb0 [ 233.118214][T11391] __kmalloc_cache_node_noprof+0x54/0x320 [ 233.118237][T11391] ? __get_vm_area_node+0x106/0x1d0 [ 233.118325][T11391] __get_vm_area_node+0x106/0x1d0 [ 233.118351][T11391] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 233.118378][T11391] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 233.118445][T11391] ? avc_has_perm_noaudit+0x1b1/0x200 [ 233.118468][T11391] ? selinux_capable+0x1f9/0x270 [ 233.118492][T11391] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 233.118586][T11391] __vmalloc_noprof+0x5f/0x70 [ 233.118611][T11391] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 233.118664][T11391] bpf_prog_alloc_no_stats+0x47/0x390 [ 233.118715][T11391] ? bpf_prog_alloc+0x2a/0x150 [ 233.118746][T11391] bpf_prog_alloc+0x3c/0x150 [ 233.118804][T11391] bpf_prog_load+0x514/0x1070 [ 233.118848][T11391] ? security_bpf+0x2b/0x90 [ 233.118878][T11391] __sys_bpf+0x51d/0x790 [ 233.118950][T11391] __x64_sys_bpf+0x41/0x50 [ 233.118978][T11391] x64_sys_call+0x2478/0x2fb0 [ 233.119000][T11391] do_syscall_64+0xd0/0x1a0 [ 233.119025][T11391] ? clear_bhb_loop+0x40/0x90 [ 233.119056][T11391] ? clear_bhb_loop+0x40/0x90 [ 233.119079][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.119101][T11391] RIP: 0033:0x7f77b435e969 [ 233.119117][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.119198][T11391] RSP: 002b:00007f77b29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.119218][T11391] RAX: ffffffffffffffda RBX: 00007f77b4585fa0 RCX: 00007f77b435e969 [ 233.119232][T11391] RDX: 0000000000000090 RSI: 0000200000000380 RDI: 0000000000000005 [ 233.119245][T11391] RBP: 00007f77b29c7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.119257][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.119270][T11391] R13: 0000000000000000 R14: 00007f77b4585fa0 R15: 00007ffd1ca639b8 [ 233.119290][T11391] [ 233.119299][T11391] syz.1.2776: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 233.373814][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.1.2776 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 233.373895][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.373913][T11391] Call Trace: [ 233.373922][T11391] [ 233.373932][T11391] __dump_stack+0x1d/0x30 [ 233.373958][T11391] dump_stack_lvl+0xe8/0x140 [ 233.373978][T11391] dump_stack+0x15/0x1b [ 233.373995][T11391] warn_alloc+0x12b/0x1a0 [ 233.374078][T11391] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 233.374113][T11391] ? avc_has_perm_noaudit+0x1b1/0x200 [ 233.374143][T11391] ? selinux_capable+0x1f9/0x270 [ 233.374175][T11391] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 233.374288][T11391] __vmalloc_noprof+0x5f/0x70 [ 233.374354][T11391] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 233.374401][T11391] bpf_prog_alloc_no_stats+0x47/0x390 [ 233.374430][T11391] ? bpf_prog_alloc+0x2a/0x150 [ 233.374469][T11391] bpf_prog_alloc+0x3c/0x150 [ 233.374508][T11391] bpf_prog_load+0x514/0x1070 [ 233.374560][T11391] ? security_bpf+0x2b/0x90 [ 233.374597][T11391] __sys_bpf+0x51d/0x790 [ 233.374638][T11391] __x64_sys_bpf+0x41/0x50 [ 233.374733][T11391] x64_sys_call+0x2478/0x2fb0 [ 233.374806][T11391] do_syscall_64+0xd0/0x1a0 [ 233.374828][T11391] ? clear_bhb_loop+0x40/0x90 [ 233.374848][T11391] ? clear_bhb_loop+0x40/0x90 [ 233.374867][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.374887][T11391] RIP: 0033:0x7f77b435e969 [ 233.374910][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.374927][T11391] RSP: 002b:00007f77b29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.374944][T11391] RAX: ffffffffffffffda RBX: 00007f77b4585fa0 RCX: 00007f77b435e969 [ 233.374955][T11391] RDX: 0000000000000090 RSI: 0000200000000380 RDI: 0000000000000005 [ 233.374966][T11391] RBP: 00007f77b29c7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.374977][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.374988][T11391] R13: 0000000000000000 R14: 00007f77b4585fa0 R15: 00007ffd1ca639b8 [ 233.375085][T11391] [ 233.375198][T11391] Mem-Info: [ 233.589427][T11391] active_anon:11002 inactive_anon:3 isolated_anon:0 [ 233.589427][T11391] active_file:6423 inactive_file:13037 isolated_file:0 [ 233.589427][T11391] unevictable:0 dirty:187 writeback:0 [ 233.589427][T11391] slab_reclaimable:3058 slab_unreclaimable:26580 [ 233.589427][T11391] mapped:36027 shmem:7964 pagetables:774 [ 233.589427][T11391] sec_pagetables:0 bounce:0 [ 233.589427][T11391] kernel_misc_reclaimable:0 [ 233.589427][T11391] free:1852119 free_pcp:6876 free_cma:0 [ 233.634351][T11391] Node 0 active_anon:44008kB inactive_anon:12kB active_file:25692kB inactive_file:52148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144108kB dirty:748kB writeback:0kB shmem:31856kB writeback_tmp:0kB kernel_stack:3728kB pagetables:3096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.663418][T11391] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.690255][T11391] lowmem_reserve[]: 0 2884 7863 7863 [ 233.695583][T11391] Node 0 DMA32 free:2950028kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 233.723907][T11391] lowmem_reserve[]: 0 0 4978 4978 [ 233.728992][T11391] Node 0 Normal free:4443088kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:44008kB inactive_anon:12kB active_file:25692kB inactive_file:52148kB unevictable:0kB writepending:748kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:23972kB local_pcp:13208kB free_cma:0kB [ 233.759276][T11391] lowmem_reserve[]: 0 0 0 0 [ 233.763910][T11391] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.776648][T11391] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950028kB [ 233.792826][T11391] Node 0 Normal: 152*4kB (UE) 79*8kB (UM) 41*16kB (U) 85*32kB (U) 163*64kB (UM) 190*128kB (UME) 110*256kB (UME) 74*512kB (UME) 62*1024kB (UM) 45*2048kB (UM) 1021*4096kB (UM) = 4443080kB [ 233.811513][T11391] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 233.820881][T11391] 27425 total pagecache pages [ 233.825762][T11391] 4 pages in swap cache [ 233.829941][T11391] Free swap = 124980kB [ 233.834172][T11391] Total swap = 124996kB [ 233.838387][T11391] 2097051 pages RAM [ 233.842198][T11391] 0 pages HighMem/MovableOnly [ 233.846919][T11391] 80260 pages reserved [ 233.916944][T11417] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2786'. [ 233.958459][T11419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11419 comm=syz.3.2787 [ 233.986132][T11417] random: crng reseeded on system resumption [ 233.990577][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 233.990599][ T29] audit: type=1400 audit(1748075041.154:6534): avc: denied { append } for pid=11416 comm="syz.4.2786" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.992857][T11421] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 233.998356][ T29] audit: type=1400 audit(1748075041.154:6535): avc: denied { open } for pid=11416 comm="syz.4.2786" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 234.130179][T11423] loop4: detected capacity change from 0 to 128 [ 234.139598][T11423] vfat: Unknown parameter '‡Y"ï\ŒLjÄוËùºM«iªXŠH^Ý×d&4¼÷á-»8–pÎ…ã-ÖúglÞ¦Á·¾%n3lHt¼ï‹cü^°„Åů( &³kù‡z2 +îÕ" W¿B[«•¾M'\"–úŒ§Z¯çs-ìŠ(ÒÓ¼7¯jp´š' [ 234.161593][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2789'. [ 234.218629][ T29] audit: type=1326 audit(1748075041.374:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.222352][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'. [ 234.242219][ T29] audit: type=1326 audit(1748075041.374:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.274919][ T29] audit: type=1326 audit(1748075041.374:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.298480][ T29] audit: type=1326 audit(1748075041.374:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.322121][ T29] audit: type=1326 audit(1748075041.374:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.345723][ T29] audit: type=1326 audit(1748075041.374:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.369275][ T29] audit: type=1326 audit(1748075041.374:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.392796][ T29] audit: type=1326 audit(1748075041.374:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11433 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ab98ce969 code=0x7ffc0000 [ 234.402740][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2794'. [ 234.474208][T11447] FAULT_INJECTION: forcing a failure. [ 234.474208][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 234.487295][T11447] CPU: 1 UID: 0 PID: 11447 Comm: syz.1.2797 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 234.487333][T11447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.487351][T11447] Call Trace: [ 234.487358][T11447] [ 234.487368][T11447] __dump_stack+0x1d/0x30 [ 234.487396][T11447] dump_stack_lvl+0xe8/0x140 [ 234.487498][T11447] dump_stack+0x15/0x1b [ 234.487521][T11447] should_fail_ex+0x265/0x280 [ 234.487564][T11447] should_failslab+0x8c/0xb0 [ 234.487603][T11447] kmem_cache_alloc_noprof+0x50/0x310 [ 234.487623][T11447] ? getname_flags+0x80/0x3b0 [ 234.487734][T11447] getname_flags+0x80/0x3b0 [ 234.487774][T11447] getname_uflags+0x21/0x30 [ 234.487888][T11447] __x64_sys_execveat+0x5d/0x90 [ 234.487996][T11447] x64_sys_call+0x2dae/0x2fb0 [ 234.488027][T11447] do_syscall_64+0xd0/0x1a0 [ 234.488111][T11447] ? clear_bhb_loop+0x40/0x90 [ 234.488142][T11447] ? clear_bhb_loop+0x40/0x90 [ 234.488171][T11447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.488195][T11447] RIP: 0033:0x7f77b435e969 [ 234.488210][T11447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.488287][T11447] RSP: 002b:00007f77b29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 234.488314][T11447] RAX: ffffffffffffffda RBX: 00007f77b4585fa0 RCX: 00007f77b435e969 [ 234.488332][T11447] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.488349][T11447] RBP: 00007f77b29c7090 R08: 0000000000001000 R09: 0000000000000000 [ 234.488365][T11447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.488381][T11447] R13: 0000000000000000 R14: 00007f77b4585fa0 R15: 00007ffd1ca639b8 [ 234.488508][T11447] [ 234.490874][T11449] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 234.571848][T11456] FAULT_INJECTION: forcing a failure. [ 234.571848][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 234.688042][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.3.2801 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 234.688084][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.688154][T11456] Call Trace: [ 234.688162][T11456] [ 234.688171][T11456] __dump_stack+0x1d/0x30 [ 234.688197][T11456] dump_stack_lvl+0xe8/0x140 [ 234.688223][T11456] dump_stack+0x15/0x1b [ 234.688245][T11456] should_fail_ex+0x265/0x280 [ 234.688340][T11456] should_failslab+0x8c/0xb0 [ 234.688373][T11456] __kmalloc_noprof+0xa5/0x3e0 [ 234.688443][T11456] ? bpf_test_init+0xa9/0x160 [ 234.688477][T11456] bpf_test_init+0xa9/0x160 [ 234.688515][T11456] bpf_prog_test_run_skb+0x144/0xbd0 [ 234.688664][T11456] ? __rcu_read_unlock+0x4f/0x70 [ 234.688687][T11456] ? __fget_files+0x184/0x1c0 [ 234.688717][T11456] ? __rcu_read_unlock+0x4f/0x70 [ 234.688769][T11456] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 234.688804][T11456] bpf_prog_test_run+0x207/0x390 [ 234.688851][T11456] __sys_bpf+0x3dc/0x790 [ 234.688953][T11456] __x64_sys_bpf+0x41/0x50 [ 234.688981][T11456] x64_sys_call+0x2478/0x2fb0 [ 234.689058][T11456] do_syscall_64+0xd0/0x1a0 [ 234.689082][T11456] ? clear_bhb_loop+0x40/0x90 [ 234.689110][T11456] ? clear_bhb_loop+0x40/0x90 [ 234.689140][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.689166][T11456] RIP: 0033:0x7fb9ffc4e969 [ 234.689185][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.689269][T11456] RSP: 002b:00007fb9fe2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.689288][T11456] RAX: ffffffffffffffda RBX: 00007fb9ffe75fa0 RCX: 00007fb9ffc4e969 [ 234.689300][T11456] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 234.689313][T11456] RBP: 00007fb9fe2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.689324][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.689340][T11456] R13: 0000000000000000 R14: 00007fb9ffe75fa0 R15: 00007ffc71ef1758 [ 234.689364][T11456] [ 234.945093][T11469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11469 comm=syz.1.2805 [ 235.053353][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2808'. [ 235.063234][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2805'. [ 235.126950][T11485] loop1: detected capacity change from 0 to 764 [ 235.423843][T11505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 235.430419][T11505] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 235.438199][T11505] vhci_hcd vhci_hcd.0: Device attached [ 235.464920][T11506] vhci_hcd: connection closed [ 235.465199][T11352] vhci_hcd: stop threads [ 235.474269][T11352] vhci_hcd: release socket [ 235.478781][T11352] vhci_hcd: disconnect device [ 235.619829][T11512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2821'. [ 235.658125][T11514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 235.664864][T11514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.673101][T11514] vhci_hcd vhci_hcd.0: Device attached [ 235.682632][T11514] vhci_hcd vhci_hcd.0: port 0 already used [ 235.689575][T11515] vhci_hcd: connection closed [ 235.689832][T11351] vhci_hcd: stop threads [ 235.698886][T11351] vhci_hcd: release socket [ 235.703412][T11351] vhci_hcd: disconnect device [ 235.784802][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 236.065069][T11548] loop1: detected capacity change from 0 to 2048 [ 236.076175][T11548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.352916][T11561] loop2: detected capacity change from 0 to 128 [ 236.659534][T11569] loop4: detected capacity change from 0 to 764 [ 236.813429][T11580] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 236.820194][T11580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 236.828371][T11580] vhci_hcd vhci_hcd.0: Device attached [ 236.849174][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.859575][T11580] vhci_hcd vhci_hcd.0: port 0 already used [ 236.904463][T11581] vhci_hcd: connection closed [ 236.904896][T11352] vhci_hcd: stop threads [ 236.913984][T11352] vhci_hcd: release socket [ 236.918473][T11352] vhci_hcd: disconnect device [ 236.945981][T11590] loop1: detected capacity change from 0 to 2048 [ 237.004329][T11590] loop1: p1 < > p4 [ 237.017875][T11590] loop1: p4 size 8388608 extends beyond EOD, truncated [ 237.106518][T11602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11602 comm=syz.0.2854 [ 237.221985][T11600] loop1: detected capacity change from 0 to 128 [ 237.410557][T11612] loop2: detected capacity change from 0 to 512 [ 237.501993][T11612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.567173][T11615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 237.573821][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.581978][T11615] vhci_hcd vhci_hcd.0: Device attached [ 237.621110][T11612] EXT4-fs (loop2): 1 truncate cleaned up [ 237.654830][T11612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.675870][T11625] loop4: detected capacity change from 0 to 128 [ 237.682943][T11625] vfat: Unknown parameter '‡Y"ï\ŒLjÄוËùºM«iªXŠH^Ý×d&4¼÷á-»8–pÎ…ã-ÖúglÞ¦Á·¾%n3lHt¼ï‹cü^°„Åů( &³kù‡z2 +îÕ" W¿B[«•¾M'\"–úŒ§Z¯çs-ìŠ(ÒÓ¼7¯jp´š' [ 237.713244][T11615] vhci_hcd vhci_hcd.0: port 0 already used [ 237.722410][T11616] vhci_hcd: connection closed [ 237.722553][T11351] vhci_hcd: stop threads [ 237.731703][T11351] vhci_hcd: release socket [ 237.736185][T11351] vhci_hcd: disconnect device [ 237.767233][T11632] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 237.786542][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.797138][T11351] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.845808][T11351] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.869576][T11643] loop4: detected capacity change from 0 to 2048 [ 237.969520][T11643] loop4: p1 < > p4 [ 237.977698][T11643] loop4: p4 size 8388608 extends beyond EOD, truncated [ 237.987753][T11351] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.095449][T11620] chnl_net:caif_netlink_parms(): no params data found [ 238.107143][T11351] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.236013][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.243126][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.252135][T11620] bridge_slave_0: entered allmulticast mode [ 238.259191][T11620] bridge_slave_0: entered promiscuous mode [ 238.283439][T11351] bridge_slave_1: left allmulticast mode [ 238.289253][T11351] bridge_slave_1: left promiscuous mode [ 238.295023][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.305641][T11351] bridge_slave_0: left allmulticast mode [ 238.311335][T11351] bridge_slave_0: left promiscuous mode [ 238.317166][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.469005][T11351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.487266][T11351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.507188][T11351] bond0 (unregistering): Released all slaves [ 238.516527][T11351] bond1 (unregistering): Released all slaves [ 238.537134][T11620] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.544328][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.589808][T11620] bridge_slave_1: entered allmulticast mode [ 238.596705][T11620] bridge_slave_1: entered promiscuous mode [ 238.646307][T11620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.683895][T11351] hsr_slave_0: left promiscuous mode [ 238.691612][T11351] hsr_slave_1: left promiscuous mode [ 238.705676][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.713227][T11351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.729351][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.736871][T11351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.749581][T11670] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 238.756291][T11670] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.764544][T11670] vhci_hcd vhci_hcd.0: Device attached [ 238.772804][T11351] veth1_macvtap: left promiscuous mode [ 238.779690][T11351] veth0_macvtap: left promiscuous mode [ 238.787711][T11670] vhci_hcd vhci_hcd.0: port 0 already used [ 238.795746][T11351] veth1_vlan: left promiscuous mode [ 238.801173][T11351] veth0_vlan: left promiscuous mode [ 238.904790][T11351] team0 (unregistering): Port device team_slave_1 removed [ 238.925417][T11351] team0 (unregistering): Port device team_slave_0 removed [ 238.953664][T11683] __nla_validate_parse: 6 callbacks suppressed [ 238.953686][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 238.973095][T11685] loop3: detected capacity change from 0 to 128 [ 239.017719][T11620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.024897][T11687] loop3: detected capacity change from 0 to 2048 [ 239.048736][T11671] vhci_hcd: connection closed [ 239.049007][ T3551] usb 2-1: SetAddress Request (12) to port 0 [ 239.059994][T11354] vhci_hcd: stop threads [ 239.062169][ T3551] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 239.064339][T11354] vhci_hcd: release socket [ 239.076316][T11354] vhci_hcd: disconnect device [ 239.099503][T11620] team0: Port device team_slave_0 added [ 239.105316][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.111292][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.117362][T11687] loop3: p1 < > p4 [ 239.117734][T11620] team0: Port device team_slave_1 added [ 239.125819][T11687] loop3: p4 size 8388608 extends beyond EOD, truncated [ 239.133761][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.157106][T11689] loop2: detected capacity change from 0 to 128 [ 239.163944][T11689] vfat: Unknown parameter '‡Y"ï\ŒLjÄוËùºM«iªXŠH^Ý×d&4¼÷á-»8–pÎ…ã-ÖúglÞ¦Á·¾%n3lHt¼ï‹cü^°„Åů( &³kù‡z2 +îÕ" W¿B[«•¾M'\"–úŒ§Z¯çs-ìŠ(ÒÓ¼7¯jp´š' [ 239.201234][T11620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.208289][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.234358][T11620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.247223][T11620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.254303][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.266685][ T3551] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 239.280287][T11620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.302324][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 239.302343][ T29] audit: type=1326 audit(1748075046.454:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.332265][ T29] audit: type=1326 audit(1748075046.454:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.355843][ T29] audit: type=1326 audit(1748075046.454:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.379512][ T29] audit: type=1326 audit(1748075046.454:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.403296][ T29] audit: type=1326 audit(1748075046.454:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.426996][ T29] audit: type=1326 audit(1748075046.454:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.450524][ T29] audit: type=1326 audit(1748075046.454:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.474277][ T29] audit: type=1326 audit(1748075046.454:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.497819][ T29] audit: type=1326 audit(1748075046.454:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.521549][ T29] audit: type=1326 audit(1748075046.454:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11692 comm="syz.2.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfe4fe969 code=0x7ffc0000 [ 239.545459][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.551021][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.556577][ T3551] usb 2-1: enqueue for inactive port 0 [ 239.559009][T11702] loop3: detected capacity change from 0 to 764 [ 239.580107][T11620] hsr_slave_0: entered promiscuous mode [ 239.600579][T11620] hsr_slave_1: entered promiscuous mode [ 239.741148][T11715] loop4: detected capacity change from 0 to 512 [ 239.788834][T11715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.820762][T11715] EXT4-fs (loop4): 1 truncate cleaned up [ 239.827222][T11715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.897615][T11727] loop2: detected capacity change from 0 to 2048 [ 239.918066][T10924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.944439][T11727] loop2: p1 < > p4 [ 239.964084][T11727] loop2: p4 size 8388608 extends beyond EOD, truncated [ 240.031209][T11732] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 240.037791][T11732] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.045589][T11732] vhci_hcd vhci_hcd.0: Device attached [ 240.054258][T11733] vhci_hcd: connection closed [ 240.054569][T11340] vhci_hcd: stop threads [ 240.063530][T11340] vhci_hcd: release socket [ 240.068103][T11340] vhci_hcd: disconnect device [ 240.071212][T11620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.096525][T11620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.106971][T11620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.116643][T11620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.155758][T11742] loop3: detected capacity change from 0 to 764 [ 240.180704][T11620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.195034][T11620] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.212772][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.219943][T11352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.238192][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.245409][T11352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.371505][T11620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.614858][T11620] veth0_vlan: entered promiscuous mode [ 240.628523][T11766] loop2: detected capacity change from 0 to 128 [ 240.654040][ T3551] usb usb2-port1: attempt power cycle [ 240.661819][T11620] veth1_vlan: entered promiscuous mode [ 240.717117][T11620] veth0_macvtap: entered promiscuous mode [ 240.759515][T11620] veth1_macvtap: entered promiscuous mode [ 240.808104][T11620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.844541][T11620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.873283][T11620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.882118][T11620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.891021][T11620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.899833][T11620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.961064][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 241.232441][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 241.298858][T11795] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2910'. [ 241.414115][T11802] No such timeout policy "syz1" [ 241.660724][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'. [ 241.697330][T11819] loop3: detected capacity change from 0 to 764 [ 241.815440][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2924'. [ 241.890347][T11834] loop3: detected capacity change from 0 to 128 [ 242.079025][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 242.302199][T11852] loop2: detected capacity change from 0 to 764 [ 242.362578][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2937'. [ 242.494129][T11869] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2941'. [ 242.514060][ T3551] usb usb2-port1: unable to enumerate USB device [ 242.523357][T11869] random: crng reseeded on system resumption [ 242.599415][T11876] loop2: detected capacity change from 0 to 2048 [ 242.630636][T11876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.951491][T11891] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 242.958197][T11891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 242.966604][T11891] vhci_hcd vhci_hcd.0: Device attached [ 242.997959][T11891] vhci_hcd vhci_hcd.0: port 0 already used [ 243.004897][T11892] vhci_hcd: connection closed [ 243.005245][T11307] vhci_hcd: stop threads [ 243.014405][T11307] vhci_hcd: release socket [ 243.018890][T11307] vhci_hcd: disconnect device [ 243.082265][T11905] loop4: detected capacity change from 0 to 2048 [ 243.115389][T11905] loop4: p1 < > p4 [ 243.119917][T11905] loop4: p4 size 8388608 extends beyond EOD, truncated [ 243.153521][T11908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11908 comm=syz.4.2954 [ 243.322827][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2954'. [ 243.368211][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.401844][T11915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 243.408764][T11915] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.417002][T11915] vhci_hcd vhci_hcd.0: Device attached [ 243.435163][T11915] vhci_hcd vhci_hcd.0: port 0 already used [ 243.442254][T11917] vhci_hcd: connection closed [ 243.444798][T11339] vhci_hcd: stop threads [ 243.453851][T11339] vhci_hcd: release socket [ 243.458290][T11339] vhci_hcd: disconnect device [ 243.694772][T11935] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 243.701339][T11935] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.709605][T11935] vhci_hcd vhci_hcd.0: Device attached [ 243.717807][T11935] vhci_hcd vhci_hcd.0: port 0 already used [ 243.725526][T11936] vhci_hcd: connection closed [ 243.725903][T11339] vhci_hcd: stop threads [ 243.734943][T11339] vhci_hcd: release socket [ 243.739397][T11339] vhci_hcd: disconnect device [ 244.009818][T11949] loop2: detected capacity change from 0 to 2048 [ 244.054476][T11949] loop2: p1 < > p4 [ 244.058837][T11949] loop2: p4 size 8388608 extends beyond EOD, truncated [ 244.094470][T11956] __nla_validate_parse: 1 callbacks suppressed [ 244.094557][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2966'. [ 244.149234][T11960] loop1: detected capacity change from 0 to 2048 [ 244.204309][T11960] loop1: p1 < > p4 [ 244.208720][T11960] loop1: p4 size 8388608 extends beyond EOD, truncated [ 244.221269][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2970'. [ 244.302463][T11970] loop2: detected capacity change from 0 to 128 [ 244.375148][T11973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2975'. [ 244.393128][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 244.409872][T11973] random: crng reseeded on system resumption [ 244.503489][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2977'. [ 244.519969][T11980] loop2: detected capacity change from 0 to 128 [ 244.527303][T11980] vfat: Unknown parameter '‡Y"ï\ŒLjÄוËùºM«iªXŠH^Ý×d&4¼÷á-»8–pÎ…ã-ÖúglÞ¦Á·¾%n3lHt¼ï‹cü^°„Åů( &³kù‡z2 +îÕ" W¿B[«•¾M'\"–úŒ§Z¯çs-ìŠ(ÒÓ¼7¯jp´š' [ 244.554967][T11981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 244.561626][T11981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.569804][T11981] vhci_hcd vhci_hcd.0: Device attached [ 244.597307][T11981] vhci_hcd vhci_hcd.0: port 0 already used [ 244.620961][T11982] vhci_hcd: connection closed [ 244.621201][T11307] vhci_hcd: stop threads [ 244.630362][T11307] vhci_hcd: release socket [ 244.634946][T11307] vhci_hcd: disconnect device [ 245.151241][T11997] loop1: detected capacity change from 0 to 2048 [ 245.168618][T11999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 245.175236][T11999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.183463][T11999] vhci_hcd vhci_hcd.0: Device attached [ 245.194262][T11999] vhci_hcd vhci_hcd.0: port 0 already used [ 245.206509][T12000] vhci_hcd: connection closed [ 245.210793][T11307] vhci_hcd: stop threads [ 245.214327][T11997] loop1: p1 < > p4 [ 245.215616][T11307] vhci_hcd: release socket [ 245.228185][T11307] vhci_hcd: disconnect device [ 245.233404][T11997] loop1: p4 size 8388608 extends beyond EOD, truncated [ 245.267933][T12006] loop4: detected capacity change from 0 to 128 [ 245.330465][T12014] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 245.337138][T12014] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.344985][T12014] vhci_hcd vhci_hcd.0: Device attached [ 245.352689][T12015] vhci_hcd: connection closed [ 245.352989][T11351] vhci_hcd: stop threads [ 245.362005][T11351] vhci_hcd: release socket [ 245.366560][T11351] vhci_hcd: disconnect device [ 245.391016][T12020] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 245.441211][T12028] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 245.447854][T12028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.456124][T12028] vhci_hcd vhci_hcd.0: Device attached [ 245.462839][T12028] vhci_hcd vhci_hcd.0: port 0 already used [ 245.484488][T12029] vhci_hcd: connection closed [ 245.484637][T11307] vhci_hcd: stop threads [ 245.493753][T11307] vhci_hcd: release socket [ 245.498406][T11307] vhci_hcd: disconnect device [ 245.532962][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 245.881020][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3000'. [ 245.949657][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3002'. [ 246.068264][T12058] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 246.157623][T12063] loop1: detected capacity change from 0 to 128 [ 246.276710][T12067] loop1: detected capacity change from 0 to 128 [ 246.283027][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 246.283041][ T29] audit: type=1326 audit(1748075053.444:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.283072][ T29] audit: type=1326 audit(1748075053.444:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.336561][ T29] audit: type=1326 audit(1748075053.444:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.361851][ T29] audit: type=1326 audit(1748075053.454:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.385674][ T29] audit: type=1326 audit(1748075053.454:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.409396][ T29] audit: type=1326 audit(1748075053.504:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.432942][ T29] audit: type=1326 audit(1748075053.504:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.456470][ T29] audit: type=1326 audit(1748075053.504:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.480285][ T29] audit: type=1326 audit(1748075053.504:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.503854][ T29] audit: type=1326 audit(1748075053.504:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.3.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9ffc4e969 code=0x7ffc0000 [ 246.696060][T12081] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3012'. [ 246.728032][T12082] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 246.734786][T12082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.743087][T12082] vhci_hcd vhci_hcd.0: Device attached [ 246.877910][T12082] vhci_hcd vhci_hcd.0: port 0 already used [ 246.888560][T12083] vhci_hcd: connection closed [ 246.889086][T11339] vhci_hcd: stop threads [ 246.898203][T11339] vhci_hcd: release socket [ 246.902678][T11339] vhci_hcd: disconnect device [ 247.003276][T12088] loop1: detected capacity change from 0 to 764 [ 247.091397][T12095] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 247.095577][T12093] loop1: detected capacity change from 0 to 2048 [ 247.144886][T12093] loop1: p1 < > p4 [ 247.150647][T12093] loop1: p4 size 8388608 extends beyond EOD, truncated [ 247.190524][T12101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 247.197355][T12101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.205588][T12101] vhci_hcd vhci_hcd.0: Device attached [ 247.212719][T12101] vhci_hcd vhci_hcd.0: port 0 already used [ 247.222275][T12102] vhci_hcd: connection closed [ 247.223020][T11339] vhci_hcd: stop threads [ 247.232150][T11339] vhci_hcd: release socket [ 247.236637][T11339] vhci_hcd: disconnect device [ 247.285873][T12109] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 247.292447][T12109] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.300652][T12109] vhci_hcd vhci_hcd.0: Device attached [ 247.308787][T12109] vhci_hcd vhci_hcd.0: port 0 already used [ 247.316025][T12110] vhci_hcd: connection closed [ 247.316130][T11307] vhci_hcd: stop threads [ 247.325247][T11307] vhci_hcd: release socket [ 247.329687][T11307] vhci_hcd: disconnect device [ 247.505943][T12123] loop3: detected capacity change from 0 to 764 [ 247.526008][T12125] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3027'. [ 247.676716][T12131] loop3: detected capacity change from 0 to 2048 [ 247.692329][T12133] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 247.712974][T12131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.893699][T12156] loop4: detected capacity change from 0 to 2048 [ 248.064012][T12161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 248.070664][T12161] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.078397][T12161] vhci_hcd vhci_hcd.0: Device attached [ 248.086626][T12162] vhci_hcd: connection closed [ 248.086967][T11354] vhci_hcd: stop threads [ 248.096010][T11354] vhci_hcd: release socket [ 248.100447][T11354] vhci_hcd: disconnect device [ 248.107217][T12156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.194251][T12169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 248.200819][T12169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.208990][T12169] vhci_hcd vhci_hcd.0: Device attached [ 248.341688][T12174] vhci_hcd vhci_hcd.0: port 0 already used [ 248.351579][T12171] vhci_hcd: connection closed [ 248.353842][T11354] vhci_hcd: stop threads [ 248.362841][T11354] vhci_hcd: release socket [ 248.367378][T11354] vhci_hcd: disconnect device [ 248.454857][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.924485][T12201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 248.931203][T12201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.939537][T12201] vhci_hcd vhci_hcd.0: Device attached [ 248.964746][T12205] loop1: detected capacity change from 0 to 2048 [ 248.988963][T12206] vhci_hcd vhci_hcd.0: port 0 already used [ 249.004354][T12203] vhci_hcd: connection closed [ 249.004461][T11352] vhci_hcd: stop threads [ 249.013512][T11352] vhci_hcd: release socket [ 249.017995][T11352] vhci_hcd: disconnect device [ 249.024286][T12212] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 249.025013][T12205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.030821][T12212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 249.050594][T12212] vhci_hcd vhci_hcd.0: Device attached [ 249.107536][T12214] vhci_hcd: connection closed [ 249.107775][T11339] vhci_hcd: stop threads [ 249.116814][T11339] vhci_hcd: release socket [ 249.121254][T11339] vhci_hcd: disconnect device [ 249.443913][T12230] __nla_validate_parse: 1 callbacks suppressed [ 249.443935][T12230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3063'. [ 249.723599][T11620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.787550][T12255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 249.794249][T12255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.802741][T12255] vhci_hcd vhci_hcd.0: Device attached [ 249.813117][T12255] vhci_hcd vhci_hcd.0: port 0 already used [ 249.835817][T12256] vhci_hcd: connection closed [ 249.836150][T11347] vhci_hcd: stop threads [ 249.845348][T11347] vhci_hcd: release socket [ 249.849776][T11347] vhci_hcd: disconnect device [ 249.855829][T12263] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 249.862451][T12263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.870610][T12263] vhci_hcd vhci_hcd.0: Device attached [ 249.878808][T12263] vhci_hcd vhci_hcd.0: port 0 already used [ 249.886212][T12264] vhci_hcd: connection closed [ 249.886402][T11347] vhci_hcd: stop threads [ 249.895448][T11347] vhci_hcd: release socket [ 249.899918][T11347] vhci_hcd: disconnect device [ 249.927239][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3075'. [ 250.002457][T12276] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 250.009049][T12276] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 250.016848][T12276] vhci_hcd vhci_hcd.0: Device attached [ 250.022833][T12277] vhci_hcd: connection closed [ 250.022947][T11347] vhci_hcd: stop threads [ 250.032176][T11347] vhci_hcd: release socket [ 250.036663][T11347] vhci_hcd: disconnect device [ 250.069820][T10924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.434374][T12290] loop3: detected capacity change from 0 to 2048 [ 250.498854][T12294] loop1: detected capacity change from 0 to 764 [ 250.606297][T12290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.756082][T12309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3087'. [ 250.912873][T12311] loop1: detected capacity change from 0 to 128 [ 250.976328][T12313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 250.982952][T12313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 250.991338][T12313] vhci_hcd vhci_hcd.0: Device attached [ 251.049874][T12313] vhci_hcd vhci_hcd.0: port 0 already used [ 251.062626][T12317] loop4: detected capacity change from 0 to 128 [ 251.076356][T12314] vhci_hcd: connection closed [ 251.076597][T11351] vhci_hcd: stop threads [ 251.085671][T11351] vhci_hcd: release socket [ 251.090111][T11351] vhci_hcd: disconnect device [ 251.112294][T12322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12322 comm=syz.4.3092 [ 251.221744][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.365028][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3092'. [ 251.423372][T12330] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3094'. [ 251.441618][T12332] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 251.448203][T12332] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.456576][T12332] vhci_hcd vhci_hcd.0: Device attached [ 251.467292][T12332] vhci_hcd vhci_hcd.0: port 0 already used [ 251.481519][T12333] vhci_hcd: connection closed [ 251.481730][T11351] vhci_hcd: stop threads [ 251.490907][T11351] vhci_hcd: release socket [ 251.495386][T11351] vhci_hcd: disconnect device [ 251.763705][T12356] loop1: detected capacity change from 0 to 2048 [ 251.794204][T12356] loop1: p1 < > p4 [ 251.803122][T12356] loop1: p4 size 8388608 extends beyond EOD, truncated [ 251.813681][T11351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.882602][T12341] chnl_net:caif_netlink_parms(): no params data found [ 251.918545][T11351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.995954][T11351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.012042][T12341] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.019265][T12341] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.035038][T12341] bridge_slave_0: entered allmulticast mode [ 252.050227][T12341] bridge_slave_0: entered promiscuous mode [ 252.057268][T12341] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.064419][T12341] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.071830][T12341] bridge_slave_1: entered allmulticast mode [ 252.078638][T12341] bridge_slave_1: entered promiscuous mode [ 252.090404][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 252.090421][ T29] audit: type=1326 audit(1748075059.254:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.122131][ T29] audit: type=1326 audit(1748075059.254:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.145697][ T29] audit: type=1326 audit(1748075059.254:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.169322][ T29] audit: type=1326 audit(1748075059.254:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.192882][ T29] audit: type=1326 audit(1748075059.254:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.216371][ T29] audit: type=1326 audit(1748075059.254:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.240183][ T29] audit: type=1326 audit(1748075059.254:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.263931][ T29] audit: type=1326 audit(1748075059.254:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.287401][ T29] audit: type=1326 audit(1748075059.254:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.310973][ T29] audit: type=1326 audit(1748075059.254:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.4.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 252.587231][T11351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.751279][T12341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.804625][T12341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.870538][T12341] team0: Port device team_slave_0 added [ 252.884989][T12341] team0: Port device team_slave_1 added [ 252.972049][T12341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.979109][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.005172][T12341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.172826][T11351] bridge_slave_1: left allmulticast mode [ 253.178549][T11351] bridge_slave_1: left promiscuous mode [ 253.184283][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.212571][T11351] bridge_slave_0: left allmulticast mode [ 253.218330][T11351] bridge_slave_0: left promiscuous mode [ 253.224120][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.351771][T12389] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3111'. [ 253.423867][T11351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.448326][T11351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.465290][T11351] bond0 (unregistering): Released all slaves [ 253.476173][T11351] bond1 (unregistering): Released all slaves [ 253.483911][T12396] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 253.490461][T12396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.498620][T12396] vhci_hcd vhci_hcd.0: Device attached [ 253.506097][T12341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.513068][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.539252][T12341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.570812][T12396] vhci_hcd vhci_hcd.0: port 0 already used [ 253.599205][T12397] vhci_hcd: connection closed [ 253.599371][T11352] vhci_hcd: stop threads [ 253.601084][T12341] hsr_slave_0: entered promiscuous mode [ 253.604182][T11352] vhci_hcd: release socket [ 253.618516][T11352] vhci_hcd: disconnect device [ 253.619258][T12341] hsr_slave_1: entered promiscuous mode [ 253.652381][T12341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.660415][T12341] Cannot create hsr debugfs directory [ 253.670131][T11351] hsr_slave_0: left promiscuous mode [ 253.677551][T11351] hsr_slave_1: left promiscuous mode [ 253.685223][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.692682][T11351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.717553][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.725057][T11351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.746231][T11351] veth1_macvtap: left promiscuous mode [ 253.751955][T11351] veth0_macvtap: left promiscuous mode [ 253.766900][T11351] veth1_vlan: left promiscuous mode [ 253.772781][T11351] veth0_vlan: left promiscuous mode [ 253.914075][T12413] loop2: detected capacity change from 0 to 2048 [ 253.976653][T12413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.339139][T11351] team0 (unregistering): Port device team_slave_1 removed [ 254.441440][T11351] team0 (unregistering): Port device team_slave_0 removed [ 254.766529][T12427] loop4: detected capacity change from 0 to 764 [ 255.004418][T12430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 255.011024][T12430] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 255.018886][T12430] vhci_hcd vhci_hcd.0: Device attached [ 255.085435][T12431] vhci_hcd: connection closed [ 255.085871][T11352] vhci_hcd: stop threads [ 255.094929][T11352] vhci_hcd: release socket [ 255.099348][T11352] vhci_hcd: disconnect device [ 255.238370][T12341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.266254][T12341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.375519][T12341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.385725][T12341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.424177][T12341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.445212][T12341] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.495112][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.502325][T11352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.514622][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.524317][T12439] loop3: detected capacity change from 0 to 128 [ 255.533495][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.540634][T11351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.563864][T12442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3126'. [ 255.587684][T12341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.628502][T12444] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 255.635155][T12444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.643316][T12444] vhci_hcd vhci_hcd.0: Device attached [ 255.671045][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 255.723722][T12444] vhci_hcd vhci_hcd.0: port 0 already used [ 255.731412][T12446] vhci_hcd: connection closed [ 255.731605][T11352] vhci_hcd: stop threads [ 255.740620][T11352] vhci_hcd: release socket [ 255.745117][T11352] vhci_hcd: disconnect device [ 255.753216][T12341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.817502][T12460] loop2: detected capacity change from 0 to 764 [ 255.863556][T12464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 255.870248][T12464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.878491][T12464] vhci_hcd vhci_hcd.0: Device attached [ 255.894584][T12464] vhci_hcd vhci_hcd.0: port 0 already used [ 255.917474][T12465] vhci_hcd: connection closed [ 255.917978][T11351] vhci_hcd: stop threads [ 255.927181][T11351] vhci_hcd: release socket [ 255.931613][T11351] vhci_hcd: disconnect device [ 255.957576][T12341] veth0_vlan: entered promiscuous mode [ 255.966440][T12341] veth1_vlan: entered promiscuous mode [ 255.984841][T12341] veth0_macvtap: entered promiscuous mode [ 255.993004][T12341] veth1_macvtap: entered promiscuous mode [ 256.011347][T12341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.024164][T12341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.034137][T12341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.042994][T12341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.051947][T12341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.060769][T12341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.203528][T12486] loop2: detected capacity change from 0 to 2048 [ 256.286883][T12486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.398514][T12494] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3138'. [ 256.539179][T12496] FAULT_INJECTION: forcing a failure. [ 256.539179][T12496] name failslab, interval 1, probability 0, space 0, times 0 [ 256.551891][T12496] CPU: 1 UID: 0 PID: 12496 Comm: syz.4.3139 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 256.551919][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.551931][T12496] Call Trace: [ 256.551938][T12496] [ 256.551946][T12496] __dump_stack+0x1d/0x30 [ 256.552019][T12496] dump_stack_lvl+0xe8/0x140 [ 256.552038][T12496] dump_stack+0x15/0x1b [ 256.552055][T12496] should_fail_ex+0x265/0x280 [ 256.552091][T12496] should_failslab+0x8c/0xb0 [ 256.552132][T12496] __kmalloc_noprof+0xa5/0x3e0 [ 256.552246][T12496] ? bpf_test_init+0xa9/0x160 [ 256.552288][T12496] bpf_test_init+0xa9/0x160 [ 256.552320][T12496] bpf_prog_test_run_flow_dissector+0x12c/0x340 [ 256.552373][T12496] ? sysvec_reschedule_ipi+0x4f/0x70 [ 256.552436][T12496] ? trace_reschedule_exit+0xd/0xc0 [ 256.552478][T12496] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 256.552514][T12496] bpf_prog_test_run+0x207/0x390 [ 256.552610][T12496] __sys_bpf+0x3dc/0x790 [ 256.552646][T12496] __x64_sys_bpf+0x41/0x50 [ 256.552675][T12496] x64_sys_call+0x2478/0x2fb0 [ 256.552735][T12496] do_syscall_64+0xd0/0x1a0 [ 256.552821][T12496] ? clear_bhb_loop+0x40/0x90 [ 256.552850][T12496] ? clear_bhb_loop+0x40/0x90 [ 256.552880][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.552902][T12496] RIP: 0033:0x7f2e9329e969 [ 256.552922][T12496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.552999][T12496] RSP: 002b:00007f2e91907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.553021][T12496] RAX: ffffffffffffffda RBX: 00007f2e934c5fa0 RCX: 00007f2e9329e969 [ 256.553034][T12496] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 256.553050][T12496] RBP: 00007f2e91907090 R08: 0000000000000000 R09: 0000000000000000 [ 256.553066][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.553082][T12496] R13: 0000000000000000 R14: 00007f2e934c5fa0 R15: 00007ffe787230e8 [ 256.553106][T12496] [ 257.092398][T12510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3142'. [ 257.287025][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3144'. [ 258.339539][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.410784][T12526] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 258.417452][T12526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.425899][T12526] vhci_hcd vhci_hcd.0: Device attached [ 258.541160][T12535] vhci_hcd vhci_hcd.0: port 0 already used [ 258.564042][T12532] vhci_hcd: connection closed [ 258.583909][T11354] vhci_hcd: stop threads [ 258.592984][T11354] vhci_hcd: release socket [ 258.597498][T11354] vhci_hcd: disconnect device [ 258.772603][T12530] chnl_net:caif_netlink_parms(): no params data found [ 258.881046][T12530] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.888183][T12530] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.910579][T12530] bridge_slave_0: entered allmulticast mode [ 258.924596][T12530] bridge_slave_0: entered promiscuous mode [ 258.945666][T11347] bridge_slave_1: left allmulticast mode [ 258.951391][T11347] bridge_slave_1: left promiscuous mode [ 258.957213][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.977154][T11347] bridge_slave_0: left allmulticast mode [ 258.982853][T11347] bridge_slave_0: left promiscuous mode [ 258.988608][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.021823][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 259.021842][ T29] audit: type=1326 audit(1748075066.184:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.053266][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3158'. [ 259.063585][ T29] audit: type=1326 audit(1748075066.224:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.087080][ T29] audit: type=1326 audit(1748075066.224:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.110626][ T29] audit: type=1326 audit(1748075066.224:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.134609][ T29] audit: type=1326 audit(1748075066.224:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.158143][ T29] audit: type=1326 audit(1748075066.224:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.181875][ T29] audit: type=1326 audit(1748075066.224:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.205494][ T29] audit: type=1326 audit(1748075066.224:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.229041][ T29] audit: type=1326 audit(1748075066.224:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.252627][ T29] audit: type=1326 audit(1748075066.234:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12566 comm="syz.4.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 259.397438][T11347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.400889][T12580] loop3: detected capacity change from 0 to 128 [ 259.413298][T11347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.426189][T11347] bond0 (unregistering): Released all slaves [ 259.437877][T12530] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.445123][T12530] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.462746][T12581] hub 8-0:1.0: USB hub found [ 259.467738][T12581] hub 8-0:1.0: 8 ports detected [ 259.483255][T12530] bridge_slave_1: entered allmulticast mode [ 259.512457][T12530] bridge_slave_1: entered promiscuous mode [ 259.553669][T12530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.632528][T12588] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 259.966436][T12530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.001400][T12530] team0: Port device team_slave_0 added [ 260.014017][T11347] hsr_slave_0: left promiscuous mode [ 260.019854][T11347] hsr_slave_1: left promiscuous mode [ 260.026214][T11347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.035940][T11347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.044302][T12597] loop4: detected capacity change from 0 to 128 [ 260.052728][T11347] pim6reg9 (unregistering): left allmulticast mode [ 260.102211][T11347] team0 (unregistering): Port device team_slave_1 removed [ 260.117612][T11347] team0 (unregistering): Port device team_slave_0 removed [ 260.158491][T12530] team0: Port device team_slave_1 added [ 260.180561][T12530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.187671][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.189624][T12602] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 260.213727][T12530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.220078][T12602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 260.238903][T12602] vhci_hcd vhci_hcd.0: Device attached [ 260.249966][T12530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.257052][T12530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.283182][T12530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.346579][T12608] vhci_hcd vhci_hcd.0: port 0 already used [ 260.365749][T12530] hsr_slave_0: entered promiscuous mode [ 260.365803][T12612] loop3: detected capacity change from 0 to 764 [ 260.371920][T12530] hsr_slave_1: entered promiscuous mode [ 260.386041][T12530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.393935][T12530] Cannot create hsr debugfs directory [ 260.413692][T12604] vhci_hcd: connection closed [ 260.414191][T11340] vhci_hcd: stop threads [ 260.423196][T11340] vhci_hcd: release socket [ 260.427733][T11340] vhci_hcd: disconnect device [ 260.581721][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'. [ 260.866359][T12646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3187'. [ 260.911884][T12530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.005278][T12530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.041608][T12650] loop4: detected capacity change from 0 to 764 [ 261.050044][T12530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.066743][T12530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.195512][T12530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.208328][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.233941][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.241129][T11340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.276246][T12530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.286794][T12530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.302324][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.309538][T11340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.383587][T12530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.442181][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 261.488521][T12530] veth0_vlan: entered promiscuous mode [ 261.498291][T12530] veth1_vlan: entered promiscuous mode [ 261.511731][T12530] veth0_macvtap: entered promiscuous mode [ 261.535335][T12530] veth1_macvtap: entered promiscuous mode [ 261.574883][T12530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.593592][T12530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.614887][T12530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.623644][T12530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.632589][T12530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.641375][T12530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.760720][T12698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3205'. [ 261.819949][T12703] loop2: detected capacity change from 0 to 2048 [ 261.882151][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3206'. [ 261.901986][T12703] loop2: p1 < > p4 [ 262.055074][T12703] loop2: p4 size 8388608 extends beyond EOD, truncated [ 262.135285][T12718] loop1: detected capacity change from 0 to 128 [ 262.179143][T12721] loop3: detected capacity change from 0 to 2048 [ 262.188683][T12724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 262.195282][T12724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.203563][T12724] vhci_hcd vhci_hcd.0: Device attached [ 262.225211][T12721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.244330][T12724] vhci_hcd vhci_hcd.0: port 0 already used [ 262.257025][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 262.268176][T12725] vhci_hcd: connection closed [ 262.280151][T11307] vhci_hcd: stop threads [ 262.289173][T11307] vhci_hcd: release socket [ 262.293608][T11307] vhci_hcd: disconnect device [ 262.333620][T12738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 262.340213][T12738] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.348405][T12738] vhci_hcd vhci_hcd.0: Device attached [ 262.371337][T12745] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3219'. [ 262.381878][T12738] vhci_hcd vhci_hcd.0: port 0 already used [ 262.401421][T12739] vhci_hcd: connection closed [ 262.401736][T11347] vhci_hcd: stop threads [ 262.410760][T11347] vhci_hcd: release socket [ 262.415264][T11347] vhci_hcd: disconnect device [ 262.605028][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3220'. [ 262.696593][T12760] loop4: detected capacity change from 0 to 2048 [ 262.697616][T12758] hub 8-0:1.0: USB hub found [ 262.707925][T12758] hub 8-0:1.0: 8 ports detected [ 262.724400][T12760] loop4: p1 < > p4 [ 262.728803][T12760] loop4: p4 size 8388608 extends beyond EOD, truncated [ 262.833175][T12777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3233'. [ 262.913392][T12784] hub 8-0:1.0: USB hub found [ 262.923270][T12784] hub 8-0:1.0: 8 ports detected [ 262.963257][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.008552][T12793] loop3: detected capacity change from 0 to 2048 [ 263.046292][T12793] loop3: p1 < > p4 [ 263.067065][T12793] loop3: p4 size 8388608 extends beyond EOD, truncated [ 263.170680][T12814] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 263.177303][T12814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.185619][T12814] vhci_hcd vhci_hcd.0: Device attached [ 263.197948][T12814] vhci_hcd vhci_hcd.0: port 0 already used [ 263.219873][T12815] vhci_hcd: connection closed [ 263.226804][T11339] vhci_hcd: stop threads [ 263.235963][T11339] vhci_hcd: release socket [ 263.240497][T11339] vhci_hcd: disconnect device [ 263.250275][T12821] loop4: detected capacity change from 0 to 2048 [ 263.275253][T12820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 263.281817][T12820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.290095][T12820] vhci_hcd vhci_hcd.0: Device attached [ 263.350138][T12821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.371327][T12820] vhci_hcd vhci_hcd.0: port 0 already used [ 263.381192][T12825] vhci_hcd: connection closed [ 263.381415][T11347] vhci_hcd: stop threads [ 263.390423][T11347] vhci_hcd: release socket [ 263.394916][T11347] vhci_hcd: disconnect device [ 263.638495][T12843] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 263.904671][T12866] loop2: detected capacity change from 0 to 128 [ 263.967281][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'. [ 264.002697][T11347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.031276][T10924] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.066735][T11347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.086899][T12859] chnl_net:caif_netlink_parms(): no params data found [ 264.127727][T11347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.141274][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.148440][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.155810][T12859] bridge_slave_0: entered allmulticast mode [ 264.162548][T12859] bridge_slave_0: entered promiscuous mode [ 264.169652][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.176788][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.184333][T12859] bridge_slave_1: entered allmulticast mode [ 264.190999][T12859] bridge_slave_1: entered promiscuous mode [ 264.200789][T11347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.251278][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.279865][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.290708][T11347] vlan2: left promiscuous mode [ 264.295525][T11347] vlan1: left promiscuous mode [ 264.300840][T11347] bridge0: port 3(vlan2) entered disabled state [ 264.309912][T11347] bridge_slave_1: left allmulticast mode [ 264.315696][T11347] bridge_slave_1: left promiscuous mode [ 264.321508][T11347] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.340050][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 264.340068][ T29] audit: type=1326 audit(1748075071.504:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.388999][T11347] bridge_slave_0: left allmulticast mode [ 264.394760][T11347] bridge_slave_0: left promiscuous mode [ 264.400431][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.419528][ T29] audit: type=1326 audit(1748075071.534:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.443093][ T29] audit: type=1326 audit(1748075071.534:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.466923][ T29] audit: type=1326 audit(1748075071.534:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.490428][ T29] audit: type=1326 audit(1748075071.534:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.514024][ T29] audit: type=1326 audit(1748075071.534:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.537509][ T29] audit: type=1326 audit(1748075071.544:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.561058][ T29] audit: type=1326 audit(1748075071.544:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.584646][ T29] audit: type=1326 audit(1748075071.544:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.608210][ T29] audit: type=1326 audit(1748075071.544:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e9329e969 code=0x7ffc0000 [ 264.737041][T11347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.748358][T11347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.758091][T11347] bond0 (unregistering): Released all slaves [ 264.771491][T11347] bond1 (unregistering): Released all slaves [ 264.809796][T12859] team0: Port device team_slave_0 added [ 264.817040][T12859] team0: Port device team_slave_1 added [ 264.839689][T11347] hsr_slave_0: left promiscuous mode [ 264.846548][T11347] hsr_slave_1: left promiscuous mode [ 264.852246][T11347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.859749][T11347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.877157][T11347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.884673][T11347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.913971][T11347] veth1_macvtap: left promiscuous mode [ 264.929759][T11347] veth0_macvtap: left promiscuous mode [ 264.936596][T11347] veth1_vlan: left promiscuous mode [ 264.952111][T11347] veth0_vlan: left promiscuous mode [ 265.015899][T12909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 265.022539][T12909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.030869][T12909] vhci_hcd vhci_hcd.0: Device attached [ 265.039814][T12909] vhci_hcd vhci_hcd.0: port 0 already used [ 265.098769][T11347] team0 (unregistering): Port device team_slave_1 removed [ 265.119184][T11347] team0 (unregistering): Port device team_slave_0 removed [ 265.209774][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.216900][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.242922][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.263557][T12910] vhci_hcd: connection closed [ 265.263614][T11307] vhci_hcd: stop threads [ 265.272755][T11307] vhci_hcd: release socket [ 265.277276][T11307] vhci_hcd: disconnect device [ 265.285087][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.292190][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.318370][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.329063][ T3393] usb 6-1: enqueue for inactive port 0 [ 265.352096][T12859] hsr_slave_0: entered promiscuous mode [ 265.359654][T12859] hsr_slave_1: entered promiscuous mode [ 265.365847][T12859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.373488][T12859] Cannot create hsr debugfs directory [ 265.400120][T12928] loop4: detected capacity change from 0 to 128 [ 265.449343][T12932] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 265.456044][T12932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.464253][T12932] vhci_hcd vhci_hcd.0: Device attached [ 265.471070][T12932] vhci_hcd vhci_hcd.0: port 0 already used [ 265.478717][T12933] vhci_hcd: connection closed [ 265.479017][T11307] vhci_hcd: stop threads [ 265.488039][T11307] vhci_hcd: release socket [ 265.492487][T11307] vhci_hcd: disconnect device [ 265.553853][ T3393] usb 6-1: enqueue for inactive port 0 [ 265.679909][T12859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.688693][T12859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.697349][T12859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.706568][T12859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.739324][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.752373][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.761866][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.768996][T11340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.781948][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.789092][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.864891][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.889515][T12945] loop2: detected capacity change from 0 to 128 [ 265.958392][T12859] veth0_vlan: entered promiscuous mode [ 265.976731][T12859] veth1_vlan: entered promiscuous mode [ 266.006557][T12859] veth0_macvtap: entered promiscuous mode [ 266.017127][T12859] veth1_macvtap: entered promiscuous mode [ 266.039454][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.061821][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.081047][T12859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.089947][T12859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.098756][T12859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.107581][T12859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.119168][T12957] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 266.125900][T12957] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.134256][T12957] vhci_hcd vhci_hcd.0: Device attached [ 266.150052][T12961] vhci_hcd vhci_hcd.0: port 0 already used [ 266.168015][T12958] vhci_hcd: connection closed [ 266.168352][T11307] vhci_hcd: stop threads [ 266.177411][T11307] vhci_hcd: release socket [ 266.181906][T11307] vhci_hcd: disconnect device [ 266.329459][T12972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 266.336030][T12972] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 266.344340][T12972] vhci_hcd vhci_hcd.0: Device attached [ 266.376914][T12972] vhci_hcd vhci_hcd.0: port 0 already used [ 266.396897][T12973] vhci_hcd: connection closed [ 266.400599][T11340] vhci_hcd: stop threads [ 266.409587][T11340] vhci_hcd: release socket [ 266.414165][T11340] vhci_hcd: disconnect device [ 266.694097][ T3393] usb usb6-port1: attempt power cycle [ 266.708711][T12978] __nla_validate_parse: 1 callbacks suppressed [ 266.708786][T12978] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3293'. [ 266.754105][T12980] loop1: detected capacity change from 0 to 128 [ 266.888589][T12989] loop2: detected capacity change from 0 to 2048 [ 266.897643][T12990] loop1: detected capacity change from 0 to 128 [ 266.943290][T12989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.060947][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 267.273768][T13027] ================================================================== [ 267.281971][T13027] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 267.289766][T13027] [ 267.292115][T13027] write to 0xffff888237c25a68 of 1 bytes by task 13026 on cpu 0: [ 267.299859][T13027] folios_put_refs+0x285/0x2d0 [ 267.304682][T13027] folio_batch_move_lru+0x1fd/0x230 [ 267.309933][T13027] folio_add_lru+0x14a/0x1f0 [ 267.314563][T13027] shmem_get_folio_gfp+0x7ab/0xd40 [ 267.319701][T13027] shmem_fault+0xf6/0x250 [ 267.324088][T13027] __do_fault+0xbc/0x200 [ 267.328374][T13027] handle_mm_fault+0x110c/0x2ae0 [ 267.333353][T13027] __get_user_pages+0xde2/0x1d20 [ 267.338327][T13027] __mm_populate+0x243/0x3a0 [ 267.342966][T13027] vm_mmap_pgoff+0x232/0x2e0 [ 267.347593][T13027] ksys_mmap_pgoff+0xc2/0x310 [ 267.352311][T13027] x64_sys_call+0x1602/0x2fb0 [ 267.357023][T13027] do_syscall_64+0xd0/0x1a0 [ 267.361566][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.367499][T13027] [ 267.369848][T13027] read to 0xffff888237c25a68 of 1 bytes by task 13027 on cpu 1: [ 267.377493][T13027] __lru_add_drain_all+0x12b/0x3f0 [ 267.382641][T13027] lru_cache_disable+0x1f/0x30 [ 267.387458][T13027] __se_sys_mbind+0x496/0xac0 [ 267.392170][T13027] __x64_sys_mbind+0x78/0x90 [ 267.396795][T13027] x64_sys_call+0x14af/0x2fb0 [ 267.401508][T13027] do_syscall_64+0xd0/0x1a0 [ 267.406050][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.411974][T13027] [ 267.414297][T13027] value changed: 0x0e -> 0x00 [ 267.418974][T13027] [ 267.421312][T13027] Reported by Kernel Concurrency Sanitizer on: [ 267.427488][T13027] CPU: 1 UID: 0 PID: 13027 Comm: syz.1.3310 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(voluntary) [ 267.440013][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.450078][T13027] ================================================================== [ 267.681100][T12530] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.603993][ T3393] usb usb6-port1: unable to enumerate USB device