last executing test programs: 2m32.90329009s ago: executing program 4 (id=948): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000300)='./file1\x00', 0x20c000, &(0x7f0000000d80)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="e75e3beec9bb3b87d24ddf25f5cf56a835eac560b4501c00efe3c14e5e2101d0f96d32812d5c0079ad3f5d3c09baf23a1a6c4c2a01ae8bd3f4e045214255e7c9e37d13138503534f5656f941753225afa2ea5668045f9f691358f20b3b7aa82828a6c148e9b2486aad47b799bee97fe6d9aa940d358b355885a7943b0324a69d196c1834bfa373c705738d2895b3e829100c66c660ea3ca8c8aa1f2568ac73e146468074d493edcad19995bde969ee8b42d9abd01333ac6e9ca3cebd3be2d22a755efffe8a7b0c6a7602520e204ac37bb66dd89af8128590a5b758eecbd4647dbe3b2349600d6a0900000000000000c55bb1ea", @ANYRESDEC=0x0, @ANYBLOB="c0416d01abbe42eb0be0fe25f7806c5aa0e566b582300cab7045c5a250ddf6af53b69f2c1193a3944aceae737833524bc54d25b7e0666a2865ac538932cf1a11dc047df4231cd0396c61e6644cc199fa3e6dd810814187b4e85f8754982ac671475dbf68b1839f381bc881d43d7d1bb1d4045236452fc1b47d4a843795ee5bc5375b8806cac6c100"/147], 0x0, 0x580, &(0x7f0000001d00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) 2m32.31674862s ago: executing program 4 (id=959): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16], 0xfd, 0x296, &(0x7f0000001080)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x200}, 0x0, 0x0, 0x800000, 0x5, 0x21, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x9) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa4d, 0x0, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x6c, &(0x7f0000000540)=""/108, 0x41100, 0x42, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x7, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r3, r4], &(0x7f0000000740)=[{0x4, 0x5, 0xb, 0xa}, {0x5, 0x2, 0x1, 0x2}], 0x10, 0x9066, @void, @value}, 0x94) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={0x0, 0x44, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB='\x00%A\x00\x00\x00'], 0xbe}, 0x1, 0x0, 0x0, 0x8000}, 0x400d4) 2m32.215814011s ago: executing program 4 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x8) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$selinux_access(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)={0x105c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1004, 0xa9, @random="bc944031a3c4464dd787c0ad6320eccfe21acedfa94c15fe9db7ce5d96fc29f75fe0d4cd6ed1b9eba340cc28699f3e3bc4a6046b483d41fe8f34c1930632dcda447cab4cb64debc940d40b7d49baedf3f0a849b0679e6110ab8fdbe4172831d46f5a6c1a491abfbeb01f5af7a713c70227d3b056ebbdd78917bd5452338b00165abb3b21f6a412032bb2f11d475b3e7683619ad6610a374bbe91a092197cd154a56609793a3efd8e7e977c597bf573611ea6618e580480e974d9af82edac30e685ba7acf25f0be7169adc9a81469bcd72af719fafcd6ff25591b59d9a2fbd0e49832ada678435d493ce9280196231723b42cac89c545fbf1d9841b090be4310a4eb391b2d79f98e655545936d905c56be2447b2f17ba4fcccb289f9374ec971068c766d0a75efc9401ef3b193db0c41c350958d3d00f591f3590a5fddb2daf1e2fe01c06ba06f6f9b10c04b2e79f9ee6e3dca7bda512008c16e807320b80cfb6ec512afe0fdb085aba78d19f7f3a8d1b812e8bf43a8d4ad472d0e4272dbfcab47e7992251c19ffd71729c12305ce6a650bd4326c8579f19f86e017eaebd294fe2fece146bdf14f2bc6f86f836cabfc325edeca51a94589c242bbb5d3adfdadddd2dca31bd282290c5035fefe730a3fb565aa59005c67ff61ebeb96a6a17d0b8b639e233dc392a0d8e4ef68ee865218f21ffb1d17398110e30d9500147b8f4626be8763f3a4a0ee5f79c2e7ef089d5ca4e8227efc3e3201fc5ea64522aede314e998993b97f0f8234c8ba0ad2747f066fe3c51b11acb9a231b30c4a059bcceb5509e6679977ea80d966438ef87ef72b547b235d5c6449112c7ee5e52cdf09485b7a230d4a81ec60d813d6956b52f84fb2d1bb30d44a24d9a51289d6679ca931edfb56fcfac6f479ee153ef84dc66cfb8f5a83e4da635e178f0cd9bdc856e1a8afe2b721e8b971433273925e60a5d8c584a6799c48e41e01fabaa2dd87ac9d7f6c8ccaf9136b680439e19db25de775ffd5b183338fd8a90b40c9a488328a73219971a0cc4fa46f6a2a14dd09de01dff38fecfe758547fbdd5f6a8482826a58a6be5828755855370f8f7a89ef7b0aeff064cd2015bbf7248962392944d59c3984e15e63f2a4edfda36ba9274e5a8b6ab65b45b3838f8f7e35dc502193acce45639ea1916b93550a02de1adc0ee129b2f09f81b5702cdf72dc595d814d99dcb00279070cd534fcfd2f6680d81cbf32a5752ba0f6532405d0b92b01b3690a57e909b879388cd73347b9da954da2131860c567f6542acc0a2013af7eba3bd37b768b2a6f76899fe05a57c99b118ba467f5c78c8b8974c7fbbafd591a7bc46ae0748fb2d6d177ac24ed79bc738b415cc139b9019a18bf34a1b63d7609c6c4e01cb1297d4e43a950a9d880236a8ac88d00f5d92c6ea40c52c9960ff10a2bc8f5b095dd237bcd4432779626a357da08ef2d678b049c227a1e9edef9514a2f5d9d78b7ccc341713be83d2131da983828b8e0dbeee98cb8634f0bec5f8f5640cdefd897f61afa69f04721305719ccb8101affe738839abfa8a51465ed10741af189706fd9ae26e4a914cccdd2551b457055373954ea9b86081467fdf98d0dc5faca9e63f30fb433afd234870581e50b85de895d58ec7d94493990d5786de7df533ee003b6cf4d5eeea1b78af97af20db2bacba7ca064dcdd2ede8f286d6ae813d6baeb05042af98d4f6b35b921130b0e616623026616e06a5c2d0fe938c4549f3dd06f326b558961386281aa453b501148b4c18418301331e0cafc0688cfc28521f6fa9a4bbe4908dc6c30cc98283698b6dcd761a849c181629517991e0463461b48cadd318cf9536e587a217dbeffd8c4412778c7e46750113914962fa7f216ab22c0174608a580708be7616736d601fcecfcb27e2196fef3842ff8fc19e4f3b7b73a6a590ac0f18fedd24f5679a6496fb7861d4a7cf3ca0a13956300c7f601a0c8ebb1bb34e8d2bf5120b68a3b45b20863554bf39c237c33f516a6455a379b85424edfcfa7ee9289e4393b3934af6c07df1d0a33784bd8acd1493e356fc3fa68f6bcd20d2132301cfeb175906afca40701124dbf03903bdd9c76c8793c499ba3e006be8a099faddd8098ad928d9e85c0c3dcb5b1d0982631da63cc9230df0d58f01d842b0fa8ad2fe660789039d88cdb91437352f4458578880c166e3fe48d36be15d28f05513c43a17cb35046c879123ee46af6d308fcad79bc51921a1b3dda9f63bf5dbc2f0c5aaec126ccd8548af6ba7052ee30497aad19fcd68219e3555cf64aceea3b05da166ce68a3e79ca63e68e2feab42b3262db6dcd6764097f7010eb3452415180a24ddc26a31c844a719fbe87da5a76bb2dc37e1719bbfe4824af81e2b6fb9a3b27ee46fa983300eb493b73c5c7096ba268e3c0430a328ae3b7f31edcb7fc91c2ed2579be7e9ff9b6d94dec8c0b8bc591b3869cce4a566ccaa95ded305338f24e8d5f261cdee6d9f4a78449c59586534e2336ead82f7c0082d263d0ff39aa97bf8241aa89fb6bb30c0aba136ccde907dcd78bbf1eddd3885dbf47b6a6579e5c8194f0ae413d29693e55f359c08be96f7fbd59539aa577a4d5f65971714fb07044415f2f14018cf22b53e2ac137bff60ee0fc746a549f69f5d7671e154cc01273925d6ede6850eb8a29a222467f318bbbc687f3df6049e91cfd5bcb16b5167ad8e90cb559f4b1653d243c148640c46b8a191eb6272565b0eaaf5945fc5ddd2f0073bb9badf8e4081f035019c4450e882892eac1e3ff6b227f492f065de1ed1ca5d2246c61f9983d8c4437f892c1724e06bdcf0cadccf36860b67a2399e473074a84114a7435885ac1ec31cb33923ef5c7e727275cc62291e6579f9c319854d64e5d817702611641b7c9aa180eb22b1f6605c638ae8cf6b2fbd74f166f579ff1b47f9c63d34af38d03c64b05a04555b2e886f217766ba697304d2360a184a95791d5d3df1f12d33062aa6ba363723205896761bc2fbb6326c0f845400204e8b981e1df637bf4583cf1c3917b554a7c046bcb1ade2f444b4e345d9584806f70869e80019ebe1464b571ad214911c523470aa2c1a77a731652191bcd32507b1b865b50c30ac893f2eaf9991a014a2a40e2c6ab455a681519833d74d3b5c6b2e9bee6caf8b92987e607c9beb212050824a142d3890142d73a2f358e52ea3eb7d68b592b9a9176df95380f79b162a13e8cdfb927bbf3bc0ff46cdc0ce54ff6a24ce2a846cb97d0e0f631467a0fdbf9a12f0ffddd9a85a7a68ac47c36fa98e38e7c484d395c6220988b92208fb518d62814f80dece8684878b1bf3898a41f0ad3d47a9bbe7854e464d845e2a891bfb9fae9de3ac543816117d3db5e89e77b97fe1baefdae820a5ce67794e66b997b0ce1946686fa9cd050592ddd18e53ffbe0cf30441ebbd5fff102dbdf349393318d3e06678174163a49158fb114d645385e0ccd278b2094b3e89342380858458f6a0f722a6658c52e5e67fce8c260b72f4d0a3db474241a23c3b901a3ace0971934f73da4856dbed819737002042489c9c71c83fc8b4e89e2f6f43d775371a2d92a022261a477e1c2b7dc907fe769beadbf7e6e8d5274c269eba117136f2c26a995052a74749307af963b02767b76816dbde6bdd5e22249fb7f40e31608b32f8d5956dd82051d450a2e1400ec489ab34ffc4a2f5f7d1e375d9ed0d272ac6964d8b249c99b61c2e5d41a06f6bf9d8145c2580dd1383bbb3c46e277588aa509a1f52ec21d82b4c4e731965399726b358209d3acd348e6235e6f1a44e730a364ebdf41368218cb10d24c6a979a0b2d58f335b63695973c5554354c1d46f15b8079a8aa9011578fedddc46e4bb902314d98489352c9f40c45bc4123b7a4eeab53dc0d7ac90fa87f8f024a680f08360142651788a47edc25870c7ced7d28e1b0266e9a8fea638e9e4cf604550c47569221a3f25446897eb26882a956a9c68918016a09d80061353898cf2b7f0424558842e1ed5b7ec3103f6d4c31367d42cc342e888776e18800a96b248cd3ba6f18a45b9e6e4430e136aea0afbce9c34c1065f9fc548d8929e9863912f36d923cae7f92b95b7bfe2b72e12d5ab5b511383d3aad5d3f64881dcf16d541e3ec6c3cd5c19fa18583ab0b6bbb112607c922e5b902214e5931e8a4e135cf8ba7e8cb041fc94883f6b215b01ed74365b6b143dd7cb4bf18ad30a014d05c80d6b64c1ff9a47b43fc10a6c63f0f0512f739aae5df9f6ecbc9a52927b950efa9160d9a5194bdd4ea4fbcddaa0e2d63558ef34c44ee3cca9574f2558e0b00513bc256927c2f3db8f55ecca75c12efaf33ffde9798454faed8b00d02c771f0d77797e111529288e9d031b81316b4d65953bb92e481a8d0351f5c16e59923497efd4566a4a77f47f1bef74fa3fade134f334e1a801031c38a4634c970669185ad8f6266987a42337924a7bcd3fc167c5e49a2fd9484a6acdba63b4f60a673a005e9dcf0f0b888b4b3bb1b1a26215efff15fd1c123d0834589f02cfadb602e1088011c541bca0e2d53b5704aa3604721006c2c2a77bb3eb0882d21353f7cb111e0bc187fbda7037bfef98271bb01d84f8b99c6b92ea5aa9eae1c382bd3c448f3d3ec448e8c43574bd5f0d49c51fd709f734e19315182813821bfc990f360c3da3e36a1f98be74f1c94beca2a29eb264856a5710f73d86e8bbd319e095db8b3a1dd8cf76e2a519a769c47204460cbbc7d3593b8bb98b6413edcc5deab8223bf34665b9d24a1ecb7a9139b37e4ba647649d08b7a32e4cc89306d5f58873a07897c604537a327c866c4e42d39890ff9e543ee2f39b8105f035a35e32d80bc35314e142d752201b9da2feebd9397ce24b7b20d521a136d3284bde23b4291fcae22076a15eca47b93e927a0275e702bbc97dcb037be061768da7327500afdd3cd4acd5a126099bcb469be4242889c346bee933f3b71cd91f5e53d295b39e6f9d8d0ee25cd7db3266a7a6b3d4fa2bcd6de300404f9f40eb072fc5a6c23490585f6dea56efff501fd55a14b81a4b57ca6a47e9a1da3ec523d696304dbac6bfacb3dbb83c82c5cbe2f6c7de9ceba4245cf9cc8b9b4d4c6a1540af1084265ec4a6b191bac264ca0530c2d7315282b82bc5691502389f54fea689029813e888d8d73c665c78493e10cae14094126cb2cffe34cf638af6024cf3c6c17149d953b3b5181e9bcbb85114a0ba2e7ec2b679b4197710b8aa2d0c059a3a989104e4ad37831f16d35b053b9bebaed79767bda8ae68cdac1713ab8306db4ad57736ed5f0cfd7bc42446b139e5780599c5498cf0cddf9ea4aa817fd0ff51e636045647e91e842a70cf47c1b2b628519a998f944765f0857d7c24ef68fa183a9af035c6a4a7d1d04eeb905204d0fd8be9f500fdc6eed66cc18de119b296dbc3c062a79a3daf5f958b65f563623a9fa40e462fe5d1d26fca38d471c8fe68a63d90b2c0607e5150a178f9ba5f86253e5ac56c7f916023e47dcb98efa3f7df2d58e6694d4f2bc751c1a6b8f592beedbd1b8acbe3f09b3b679990ebb6df6a255e41c9fc773c5d589b897eed3c5a7ce4f20d6e3b45bbdd99c070efe1f507341a9004ce1c3b209131e6456a672e63ff461465a539dab862f8edca73a3ec02a859d8b441de7d5d461c5ed155721b7725c57351a723ba1a85f00c9bd003174a5ccaeb683b4d237c64fc9122b385fd68c1f11aef9924f03f7155f0df95a1a47972f99950ad68cd33bd6730d2a5f41d83b9a0b346cd1502bbbdb753ab4e19f"}]}, 0x105c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f00000000c0)={0x2, 0x0, 0x301, 0x2, 0x0, 0x101, 0x0}) 2m32.168822622s ago: executing program 4 (id=965): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x722, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000040)={[{@grpquota}, {@errors_continue}, {@quota}]}, 0x1, 0x51d, &(0x7f0000001000)="$eJzs3c9vI2cZAODXTpw42bRJSw+AoF3awoJW6yTeNqp6gHJCCFVC9AjSNiTeKIodR7FTmrCH9MwViUqc4MgfwLkn7lwQ3LiUQyV+RKANEgejGY93ncTeRCS2Q/w80mjmm8/x+37Jznzxm7W/AMbW7Yg4jIipiHg/Iuaz87lsi3faW/K4x0eP1o6PHq3lotV67++5tD85F11fk7iVPWcxIn7wnYgf587GbewfbK1Wq5XdrL3YrO0sNvYP7m3WVjcqG5XtcnlleWXprftvlq9srK/UprKjL3/6+8Nv/DRJay470z2Oq9QeeuFJnMRkRHxvahDRhm8iG88NGc7YyUfEixHxanr9z8dE+tMEAG6yVms+WvPdbQDgpsunNbBcvpTVAuYiny+V2jW8l2I2X603mncf1ve219u1soUo5B9uVitLWa1wIQq5pL2cHj9tl0+170fECxHx8+mZtF1aq1fXR/mLDwCMsVun5v9/Tbfn/wuYGHhyAMDgFEedAAAwdOZ/ABg/J+b/6dHlAQAMj9f/ADB+2vP/zKjTAACGyOt/ABg/5n8AGCvff/fdZGsdZ59/vf7B/t5W/YN765XGVqm2t1Zaq+/ulDbq9Y30M3tq5z1ftV7fWX4j9j5c+OZOo7nY2D94UKvvbTcfpJ/r/aBSSB91OISRAQD9vPDKJ3/KJTPy2zPpFl1rORRGmhkwaPlRJwCMjA/xg/FltS8YX5d4ja88AP//0qJfjyV6Tyj2eoNQq9VqDSwtYNDufEH9H8ZVV/3/gv8L+LODgSUDDJX6P4wv9X8YX61W7qJr/kecWjc4Ii76tQDANaLGD/T5+/+L2f432R8HfrR++hEfDzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuN7S9X87iwFFxFzk86VSxHMRsRCF3MPNamUpIp6PiD9OF6aT9vKokwYALin/WS5b/+vO/OtzJ7pevpU+oNP8yS/f+8WHq83m7h8ipnL/mE7OTUVE8+PsfHn42QMA5+vM0+m+64X846NHa51tmPn89dsRUWzHPz6aiuMn8SdjMt0XoxARs//MZe22XKd2cUmHH0XE53uNPxdzaQ2kvfLp6fhJ7OeGGj9/In4+7Wvvk+/F564gFxg3nyT3n3d6XX/5uJ3ue1//xfQOdXnZ/S95qrXj9B74NH7n/jfR5/53+6Ix3vjdd9tHM2f7Por44mREJ/Zx1/2nEz/XJ/7rF4z/5y+9/Gq/vtavIu5E7/jdsRabtZ3Fxv7Bvc3a6kZlo7JdLq8sryy9df/N8mJao17sPxv87e27z/frS8Y/2yd+8ZzxfzU7PvtdPenX/3n/h195Rvyvv9Yrfj5eekb8ZE782jlxO1Znf1vs15fEX+8z/vN+/ncvGP/TvxycWTYcABidxv7B1mq1Wtl14OB6HiS/anbOJP9kR51Pv4NvDSvWVPTu+tlr7Wv6VFer9T/F6nfHuIqqG3AdPLnoI+Lfo04GAAAAAAAAAAAAAADoaRjvWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi5/hsAAP//+QXOpw==") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000d80)=""/163, 0xa3}, {&(0x7f0000000380)=""/23, 0x17}], 0x7, 0x1, 0xf, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05007404569e3758a0ab5e91000005000000003af0b163e5b637bc5b", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x194, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x7}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x2, 0x3}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x6}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x8}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {}, {0x3, 0x1}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x2}, {0x1, 0x1}, {0x2, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x3}, {0x4, 0x8}, {0x2, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x2, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x5, 0xb, 0x12, 0xb, 0x0, 0x30, 0x12, 0x24, 0x4, 0x30, 0x18]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x3, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x6}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x6, 0x4, 0x3, 0x3, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x1, 0x9, 0x2, 0x4, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xeca, 0x7, 0x4, 0x3, 0x6, 0x4, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="5c559527b9422d81a95f5d5ca03087e6d86a8edf3dc6762129ebb9903a0400ae"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x1d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) sendfile(r1, r6, 0x0, 0x400009) 2m31.394320745s ago: executing program 4 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008"], 0x25c}}, 0x0) 2m31.208057028s ago: executing program 4 (id=982): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m31.190481558s ago: executing program 32 (id=982): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.489633916s ago: executing program 3 (id=4271): r0 = syz_open_dev$mouse(0x0, 0x40, 0x105200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) sendmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000100)=@generic={0x2a, "ac8eaf031d302a61c76362c988b3a802faee576e1732357191b57e96d0d13669450080000000000000c4e599f3a272526ed736a9ab315e53f2d513107b66ab0e5e9561de083c0d6a7a9a57897b814fb6472ba036eb0fd08442713daf3ddbf4feae14cff8d8cc16de589fa4de22d8bf4ab9e4c0a95bfebdd385ca7356c892"}, 0x80, &(0x7f0000001280)=[{&(0x7f0000002600)="416d72c00697a9976528c352fe7adc03ba64726ccd4afe2f6a0787ee3882cfa5c69c9ac0acaa3a1c55947c3e38e6f940c6b182fa2ccb5c9a77d1c0a00c2b90ee7afb6d746043c6ddc32fbb140fdc854b2db44739e3d619b8f53bca6777a6a181f3f07a9d27a5", 0x66}, {&(0x7f0000000200)="e220987d2ed7ae10f9ebe7095767398240614ff0a8c448fc5a8f64ba2711af52e4421ef00c7e338c69a450acd0155018e46c2dfb30682bd243ac28f73e1e10ce1c1d04c732d9998d09b27254d09f0ace424d233735a325970f429893fb5025c563461e93dd6cb4fb44fece59ef9f12", 0x6f}, {&(0x7f0000000280)="b81602831bd3da630a4d5ea1af2044ee1fbbd1d3b534614161199b6756f93d4687aa17b56c774473e72606a361a15d78e78cc8bf5ca62a25ff31572b61b7627bc5c142a16b8e8484613a85af35f0631c1c3c7a432322d91e0b7ae985d57973b77e4cef53854dba5c14b9c47fd5c6bb7971e92f2d24dc9c05146ddf792a7ffabb376b5fe00df9a94d629b7beee4bbbbc2994adcddd3c7cf276017c37dfa2fb0c33de8d3230b12cfb1120ce0600445f792e9885cc85262638336a8c7e4b24b89898176ee9cd8adb7147d2f397b2e64bf01e2e873b6afc9df24beafbbc3452e33ed72e0a78b72a0f1f97cde83ca09e9a2fc3cd693f9e25b1fa4da188e7d35a872f1f522b00e9616c3a86198e1a348155de0a2262e34b98d6490e1a11d30d81965082a7d354dff6ba72627fa0c3dd9a968147c305648d4c06a1987f8a26c4e7000f3dac59404ccc721c47d89acd87b18ff8d1cfcad5271efd0f6c2117760a434ae77ec14154659017b78c3e99dc1441f32587828a7ed1158d284cf6a825698a4df3be3b356a2ee2b74469d7a96a3cb29fad6bef1cfd24dda43a77ccca303dc1d3d8a6760e6779d80710a44b5ac40bc3315a9030399561d38de2b4c8adda101107188806384ca3cb3a52a61f9d882f8c2270fd4af2b36d6bb83d1cc726a03e3a60a6082d5d9ed5358d11a4c63fab032274ecb6ba0b7559c6c8bd903d445bc4d4a4af1ece59adcf63ceb845e02293dd01aeb90e202a0e49bffba135431ae32bb2c818bdbd28e5907fc3a8c8720c02efef43669cf5d56cfda091d197af89a160c1cf68b4bb1d37be0e30202ad8349c732b2b61f86b732490010c5f01d6d29bf3b6d62b7a31e80c9254b53db4321b32681e823ce33bde7ca7abb43dc915f51f4bb8266b9038fdd146455ccbaabd50de4f8f51cc6c8ab72b34818507377f5a5f85b2ea5bf9701933b61d15fa5e1027cd8f33f3959c7e2a30a9a779e7c852d3a81b930eb93f5f3571ea3d794f2e51109b367bc89e371b090a8a7d9b9b99741730302f27e5e7a349039307f09e56d48614fbe9e68a4aa5fb2acb4238032310fe1f5dfe2eb8bb33fc4c2686b1e9ee5e3354a0244dd337949aded3e59c0212d26e6dc895aa36d07d09f7991531337428daddc977b2e64734e883e23e621f83c42e3055c32e2a94a77e9c96fcc029af7fec3a300ae183361dfabb6d6ff87dd1a3c017f70a4a4ac4137c6c85fc3b82688ff1072d4984e04ddd153395789dc357c61518b40e6f14e4b690be63621e26ad79e9d2b9d2397e2ea59d8b1d4cf6f54b34d425c54f9e8f68b5db03e7a69ddcefd24ce21105abbc2bc4553042a31c822b75863200da2b7256ddc28fd0b15f0626623ef7fa1eb8863bb9de16877765c635c6768a25846f86d96c8527fd31b1f57332ee53e2cfcc83c504a06dd13732786b2104b3d6dfc28d00491d7502c252ec4e8dd509e28f58cef8f4d95e1fb47966a28c384365a73cc5d97fd14eaa1e383221b05a8df9eb069771c330776351425e0aaad919082a1dbb13a4c3bdc97f4016d5c36f2152cabfd4d4a01cc8535fba5056f3dbb10ed4ba00518fcbba1f3c184e6e0447ad1995c3586afe21c61c819d60c583632cc9e562429d76c2b5a36911563553d8f50807650c1aba238e6f0543b5d6371b4aa4894afe393bed4b895d7d11cd8fd15740f0b186faebda6b04e4059fb3c26e3098e72125fe13c0e78507d0c0b436a7fe4093070eae355a7a3b94ef282c1b817aa0107a58cf399b146be443007396a4c6197750cc118087b9a97248f974cd926416dd2bc603ee38567af731908882ee93e7da655efb2a89b71c8cba2b3f2235f09ce138981e2e66b38b98f397b7c3277ebf3e4563e0e27a6bbc45a9d1b648e08abd21c0fe4acad6c37f53ffa92290bfd502eeb468611ecf8f0001727327d3e2cd2f81836b18c0ec435f053998be9a487bd55ca7e194fc6eafafbb3e3b10cc620032c3cc93d574f5badb5dc51199a0613c947cdba977860ab4e41578a51a63942ec8262209a38946ba7b2f2ee325b2615b45861c711c23f74abb71cb4eb58d97c8519b3b75aa7748605740767e2fa4d98b8a2dd77ef31347665012cb2896d95f5bfcafa7ebb54ee3cddc49bb9ca205fe4b5ce98ea90e5cb4b85152d99e4547cc7a05a806b981ec846f60475f38cbb1bfa369c299478a691e7b0997795d061ec4ff6e135ccc3ccdba6a787b92e09d6e1a200f55777451ec34fe3af15f396e3e4d4cf32eb51ec0660a77ad6e3b1d14a4acd35a79b595f2eb38a80ab1dc5aca274496a4c57bb4a18e83d25152edc0f10cddc54c88407c6fe21efbf7c87bec24f6ddae1312128161763b18bde7fd6ffb6b5a6bfb395b4e6705ec591c2dabdfbc72c96956b237ef4e3b43c424342c4e788994f6f9780af6a9c051aa1a258f85e70173602fff966df0d7ee0676c3c03942fd2aa16e24e39663cc3d64f1f4b14bf192d19370ec6064e5c5d8fadf7178f08c7fce675361bbc2a5e8cd52c31fff91c3cd5092c497d7b7d4eba83e05ce64a71e169f1d6ab73f01a56c47995365d702fb39f2589a9ae8875b5b509372da683d93ae0d059265120b018737e5ff6793bf0c1ee8ca4089be36adfcf090d28df1c2c012f456c443fac69f582fb3f9f667bfeaa718c3a0764fb9743b31b39f3c4254edb8bb3c611a1476ef3b45a06f1b7e1ce336fd7aa685106eaac6a5aa84fb6033af4c659cdc6885f363ebd1e75e57b9b3b8dbf6078dcc3796193dd95bbd0bd6ce607c57cc580b1aa8fe1dca43c596b754225b56b4787ce313b78603a0af53ce4e102f7d48bcd7e12b6a6f879db1b50ed105b4fd6d653ab8b90b598708b2b7065aec62cf66104c95e7fae07abd1048269354109e869d756b5f4bfca33871f203254435189628d108e3ebcc2653bfd11d1a34a5eef0a8963cd978fddc9ed9c9e3f6b7d4c57c766209ebaaa2b1a0b64e030f06f30a09a53a50d749e545043fbaf445c4fa6a35b3df22bc9352a551f3ac1c470a8c8d0a0edb0d8ca323b78ffb492f23619a4a828639cdca2282a63b4b18995863a2b8294fbdd6513499a5be1bf1fc1b8b0d570cc02df9724adfb4e09bd424de61fc8958cb917756697e537f559974de5855bf408133522a8141e5e41d896690f5a502fc81d3cfcc3781f02ba6b357a850f020933cc8f94305d6820b691b4fe334fddd906adf69429195883575bf14fa4c5010f8a6c0892fcef7b293365e96c2cda5cc2628583be4133eb49ef14c969f2ce907980e987c051f9d96bd6e0187ea26b7954895bf4f09cbd9d29d27700a50176f574d158c3c90a5b652ce939b05d59989683668e6d6ffa173ad91222f3e9f7ed55a5d6b50fd06b0074818243f4cc803158d2ecd9b9707983b80ab1058432a5da9a9e7b13ddca2e8fabd1ae5d24c2a6d63f2e51d7ec1292573262915b3462d0670a84a9e61b8d7d87c7f9515bfb0f83a63c7a7968e54a76f4b70876e9da6e4e166534dacb66816ae89324d65bd496f7571196fc6c0fcd655b2f585106fde5459b0e16406a64aaef78d325f3724d03aef4e6ad7285d279409ab8116f6d94eff2f9a8ab9f8e0d2dd2e638cd69d3f62ddd63267aeb4de66926da8536f9f0d2cf73f15722421330139f1ed828a35a8a0c8ea73ad8004e1bc239b234e46112c4fa819a400522076daa979436794523641001514ccbc87de4547fa2ccf1585a9e5f24858ff8882fecec1e01c30bde948c292a00d6be7d2c6b048f3533fba0a275490fd1bbba60fd68f72d3ce9f307c3d7287d04caa428dee175590b58996d4d9d903ff22d06947275a7bcbe723ec6728b25d10007a5d84ef48f2cd2d80bf501a0575e294a98b76b93ae7fa049d64337ae4b1716e605218aa331b4a66093d8694e0bb09cff3afa9949b1f690bfe409db9b841f701da2121ecf78f48ad3b5e5123305b48365b3af521df6273ce8c2cfb1ba7b0ebb8f3565b70373c5b81e2d260020dcb238582e8d216f8e7d4438c60e905ae12ac42120407f0ff38cbf209293d8d50f1b90b16ea490e24b20a1d2eb751511f7495f7447b2189c97c4ef188ed4377209d60360d638d010e143faccff5641c6ca3a8147f17e0ced2e200a4bb220a8fd7ef8ba7956a804edbdfe69a109dcb92018b58926441654ee04b5ca66bc6a0869d89e72799cfdeba8ebd1bf3842d21eaaf629d675939501e270bef6978461ba5b821227a6dd5be81e608fa0545a4eeace2088b7fb377170dc0d3238abfbdcc86a5426b1b56219ff55d2c060770ff0fd2cf4e1efca5112e6abdb0829f3513f3d3e6ceb2af5c6892eac4d00bc842510e021b6acf1fede1b949c93ebde455eaca920089174f06900cb396e5c58dcf589fb971833c4ce559b9deed5eaac9c8acc0c759f7c38db628aa42aff6b5fe51304e0dc8304023d23f4760923e6d8b241580a0404f1f20a13d5c0456f7efcbd8161cb644f6dfc7d4b231e3936bbc830c6f029103abc91a38a05ae208d4df932ee0daab48c2633937aa4c4c7276f324d021ca0b3a2b2f58e484c84ff8599ec44abdfcf196a29ea3e4119e13f288e9db0909c707dcf7cb8cffec382ed017281027519ede48683e8e5240ac7ecae95c39cf5fcc333def244725c34d96809491b2bb2beb3f0e858f056dd41fa75afde19f9e55c8e8e6ce60ef65fc4888d68997a67bac4ca630f6df3d0cd157dbdd91fd8c77927b03880e0f689b649af431c3435b588965af4381f787912f4a4fced14bcebb55ed70647b533ffc8efe44ee565a991a5656890941099dbed805a1d1f893f14ca2538e6900769b6ed76116d3060ce9b81f3128513bf80276fcbd9330a279d2ae38282a71788c52b0b6c93acb67af38f3f564a0a3affdeb2e40a15a2ac4c6d8bc6c7e3bacf1dd7a1370b8610e7c8421dc3182e98fd01263c4161e91bc374b17a18e352d8ef6d89c0761129c382225a9d07d1633bb850c3aa4d0ab1b10e0bbe34231d166cdd40fd3e8e28f884eb1737cd78ae1ddce967188888b022de1ed4b0d796bb278b8e5ad18c53c8eae6466e165bcc030785b7435ca28b60a7f84c5e31ffc8741f4d753614d12bb534dd4d7973321564f5d1c137dc2dfa2626bc7554df30915101ae1aead4da93124976bd4e8cccdcb38acce736808411af9ac0570e59fbd0e3a3d57cbf0560641b2da71ddb0e6525ab47ef92810647d18112a5580fa52d472a131a1787b0ea283b05488f630492b4df199bdbdc561bc7a85b689663177e5c4bcbea8673da403d8834140e0b328190a7a367bed25afb96ad14aaf6c07a8475cd1d3289ef0c3a1201a6589ac03132dce447a145ecead5e4944b607e4b53208d30e19df849f44daffc2b3efe073eac42ced1a39210d478e252f01ff41e643aea1861bf8edef661d40cb0a7770a185cb766d492b5789813a635071275e31ea6f83d81d60170125a660e4ea86bce61a718b659a5d05d1c38dbf3a2e27311", 0xf20}, {&(0x7f0000000000)="093fc4ff3f390f24d0f88a34d08026775b793926c41a606517c05db3290385c52f2236e6cd9caa61d4778efaabde8e174cb5803bdc8d32e884b2ae04", 0x3c}], 0x4, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"], 0x10f8}}, {{&(0x7f00000023c0)=@generic={0x22, "edcb36e341d756ce6cbb0d5434f6615d1d652f188fadd4b915c308b4e098cb5cd8e51b109431e07fd7ce5ac58536b02246b7c13b7beecd8dda93bd1e0650f24d6de2e3e9861866f1b2977dcf54f6787893418734dc8842f027fa8d70a71425382d0bee9777f662a899f4d7c2389fbfbbe06a1f048169a23b798374f72768"}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)="1e1ecdd0edd2dc917b67fa16dba0559d2ea6bbf9fb6a6d78ff7f5ebf0595e1fa1abcd3aa1641df1f54c7fb9a0ac100d376f47833f3c97d5553c91fbe75ff6c437524c398c6efd89d511af65398e298844d062b1d1152aa7381665fb8a14b3a8bff127299eed8faa2ddcedf7e0ca05a90d7d299315ad0ce57d00b0949a882ba12f794fdfa7fe729dd8c11e83eb640962e7f94b20e7cb17d520be41a882defd26209a50d8a226c15b1f205a2f70735268eb74e1392b59f7a0d", 0xb8}, {&(0x7f0000002500)="7d4aa3333fa3023b0663a60332faf840aa4b846f5beb4e1af0645bacbc2be0e8538adedf623d3414a4ff6d976556ab8f186fd2c61fe96581544bb5a364cff0e13f8190854cc766222dee52aab9c827a2a03f9820cd9a5951b0feae32bad4a5a45167c50ae2ceb22bd53c2076eb0747ff864e9da9e995eacbf0979dea28946b818429ba7a54e87968", 0x88}], 0x2, &(0x7f00000001c0)}}, {{&(0x7f0000002800)=@in6={0xa, 0x4e20, 0x84, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff6c9a}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002880)="7c7d67576ea4249d0f5157e3f81fa8fbc40b8973d3fbf38a949c03922334dc0a7b7975a6e1e0982a2df0449d4272accceae1a1e5f8800af697d570cba1190dd816cbf2e73e3629ce70f1b4111276f286a8bbb0d6cd21ada9760b1ac86fd8c86c58ff855905f7c995ea136808714fe35ccc757e", 0x73}], 0x1, &(0x7f00000045c0)=ANY=[@ANYBLOB="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"], 0x408}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002c80)="aa5ac8fe2d25fef0de461f9872fe05c4994c022e4aedd9a348ec0430e775da31e72b654087e12ee526653c0b20ee4a3eb47837f39cacd1631c6915434641a813631dd9", 0x43}, {&(0x7f0000002680)="ddf4ff56a8b736093bed5238046968ac6fda7582cbf3927d8b68b135f07643578ee63c5a0d7dee64f7e92d98766caedc470c309699dadc677ff9acda60f0e503b8289aa905603ded03536a8226de3828456f1858168f73fa8001c857d85c6227eb08789afd393c224605ccb4e7f8763234a17003ef0781e74f51d232c7f19baf58cc124149388a578bc51c1144062a8896b6f252ab95dd1eca7e58ab2993eeeb9889f39c8d00000000000000", 0xac}, {&(0x7f0000002dc0)="358c9e2c33e392d527c9a0aea1f012ab025d5635a1b97ecb3f9fe0c62c277f03ce594ad2bc3b14a8b0ca337d6c659ceeb621adbcaf41fbeb6ce25910997e347a7fdfa4a3f38b53ffd7f579bc35aaf9196ae410d385f65b2184e37759d7af57f3b0afd25e1b91814a8c394e8a60c61584db462a6949ba7feefa491c84b0a7931098ae4b15510c69838022c84bcd6c914688a6196938202da153833da733f6cdd102733b778c4c84f9775db6ac60e6b308f10b03dd875b786792f873f7db246204bccede9ed36aff8e66697ed706472513e388a690a8a91671831108b7585cff8be68b5f416bd4a21e3871b67049f3555643", 0xf1}, {&(0x7f0000002ec0)="0b5c7a438962b0f49259ff6901e40f32630d7bb56f26fe6f270dca702aec69c1ffe0ce5bd4dbf8060b2ff3b2718d401f67dbf049be4d9e37012fbfbfa73f704b87943677eccb9e8eeaa3c97f3c72ec3f6d7a06877e01d54fe8e328fdaef3a78b17d7d765248f4946386cd96a4e4689e0aa74b0d0971745c552a9419a9e0a77d08b408f7128d358e7fd5fccd91d274859b336932336e64e4d6c2581c4f7c4148c9d323b4fa9e55ed36cbbb6cffb01de0d06e4f291bebc", 0xb6}], 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x100}}, {{&(0x7f00000030c0)=@isdn={0x22, 0xb8, 0xfd, 0x3, 0x2}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003140)="0bd56304610677753616713044674f90077e686c3c7cb6b247586634f9eefde685935a27c521c49cf899740e1d694879010710614bae7a08930c446856b1c7b55ae537336c2643a6dec1ded96292de6b7239789cab6803296f8ed7fe613de8b4c4a2a263679b34e1cfd95564c99096cf10f78fd695195eedabe12a7fd15d3859e36f7c0b4ea29981d490235c877e66d0e4e5c0065dbf9eb98bf5b2a2d15d9c3dab9ede9d1631c92fded2b0a32431c3780dc78122", 0xb4}], 0x1, &(0x7f0000003d80)=ANY=[], 0x178}}, {{&(0x7f00000033c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, 0x0}}], 0x6, 0x14) r6 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x71e, &(0x7f0000000800)="$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") lseek(r8, 0x5, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_user(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x27) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) openat(r6, 0x0, 0xb2ec64599ccccc26, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.422704467s ago: executing program 1 (id=4273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[], 0x44}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\v\r/:q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x9f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\r\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cV\x88d\xbeBl\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x000x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.294877229s ago: executing program 1 (id=4275): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) creat(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180400000000000000000000000000001801000069f00000000000000b85a24b28fc6c6c250000fdffff1f20207b1abfa100000000000807010000f8ffffffb70200408770301b4e9bb0000000000085000000b100000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x4d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x2, 0x1) r4 = dup(r3) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r4, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x4, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.061668292s ago: executing program 0 (id=4279): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e6574646576afdcbe910000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8dffa88801010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="08000a00528a59"], 0x44}}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x8, 0x8000, 0x3, 0x4, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x65, 0x0, 0x10, 0x4, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x10, 0xa3, 0x0, 0xc, [0xfffffff8, 0x5, 0x0]}, @generic={0x89, 0x4, "c502"}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="010029bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fdffffff3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004007f0000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000001000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="280102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=r7, @ANYBLOB="b400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400faffffff"], 0x3c4}}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x138d7c27a4537b84, &(0x7f00000003c0)={@private, @local, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="7001028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff070000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400dd03000008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f7382cffac5a933bd174bf0c986a67461747300000000000000000000000000000000000000050003000b000000080004000700000008000700000000003800010224000100616374697665db31cdd57fc5e3c3000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x40011}, 0x8080) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.042603993s ago: executing program 0 (id=4280): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 1.041791673s ago: executing program 1 (id=4281): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect(0xffffffffffffffff, &(0x7f0000000300)=@hci={0x1f, 0x3, 0x7}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) splice(r4, 0x0, r6, 0x0, 0x714f, 0x0) 1.020247673s ago: executing program 0 (id=4282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) kcmp(0x0, 0x0, 0x2bb76cff9ba20471, 0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000013000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x393}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12000000, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x400000000}, 0x18) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 963.129795ms ago: executing program 0 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000383a00fe80f5000000001800000072f9a9c173c335610000843bd2798c0000000000b36e9ebfb10000010102009078000005dc0020608cb02b00042f000000000000000000000000000000001ffe8000000000000000000000000000aa2b000400001000002bbb8c022a7f8e1e3ecbfa390047b7357568eb2425824ff977a146c77a77c7ba762a562077ef43"], 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x8200e, &(0x7f00000005c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x1e}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x01\x00)\xa4\xa1_%\xa0\xab\xcf\x8c02\x1aW\xcc\xd9\x1c\xcff\xd2[\x11y\xb6k\x92\x96+\x03m\x88YOy\x83\xe9B\xe7\xff\xc0\x11\xeb%$\x9f`~o\xcf\x890\x99\xfc\x90\x80\x9c\xbe\xbbwoX\xa4I7\n\x14\x18q\x90 \xb0\x87\xa0P\xc2\xe3\x04\x86\xb6\"\xac@\x90\xf2\xac\xcc\xee\xb1u)we\xb5 \x9at\xbauq\xd5\xee\xcb\xad'}}]}, 0x3, 0x458, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x80) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xc, 0xa, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 950.701384ms ago: executing program 3 (id=4284): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}]}, @NFT_MSG_NEWCHAIN={0x278, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6042a8d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b766b39}]}, @NFTA_CHAIN_USERDATA={0xc3, 0xc, "37185a2bf439d1eb3544cbb65061bfb07a27fa52ad7900489fde6b189990de84996d41a67305ee6099f9b1c7fe3493649f6007a9b8d1bbab68fbfd87660b4f1e7b5a14b604c47d3cc5063b1791551084de068f88b06a388821269ecf1a9477252783c476f3520c6afa508ef19a48237a62a3ecfb59d813b6dad0ac1f747995896f56ef58d18a6ebde6ef501744fea9caf09efd4a001c2fff900645543538a4d2910b272d8d9d43056305e625c47112b9aceb38f8c2cf36b843c0fe5d4ed005"}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff9fa}]}, @NFTA_CHAIN_USERDATA={0xb2, 0xc, "cdaaee2f6eebfb7decd46102a2c41df72c5eabf033c8678da6d4d76e8110372a3a7c20dc32b2762ae826dabd032f122a8f0201b1398103c5e448603642244e39532311a2a17e71acce779891c61ee1cf240d040ec9801608d05aae4bef0015524f5aab9f420e5834bf5973e1e186c27d7ec51da7c790fc61361983019f2f37ca40c28462752c5f5a773448b96d5f8a7c4fcef6dd7c76819bdad0c2ae5efc78e1f09bab3b76739c224cf5d26c64b7"}]}, @NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x364}, 0x1, 0x0, 0x0, 0x200000b1}, 0x40010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x40, 0x8, '9P2000.L'}, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) 670.606489ms ago: executing program 2 (id=4289): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+\x83[@\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000340)=0xd, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r3 = syz_io_uring_setup(0x2432, &(0x7f0000000380)={0x0, 0x17a3, 0x13090, 0x0, 0x3e4}, &(0x7f0000000100), &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x1f, &(0x7f0000000440)={@multicast, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'N', "76ee7e", 0x6, "86607428a20b748ab6"}}}}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200"/521], 0x290) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2d, 0x25dfdbff, 0x1, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 421.481313ms ago: executing program 2 (id=4292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 344.322424ms ago: executing program 3 (id=4293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) kcmp(0x0, 0x0, 0x2bb76cff9ba20471, 0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000013000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x393}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12000000, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x400000000}, 0x18) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 332.999605ms ago: executing program 2 (id=4294): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 296.909535ms ago: executing program 5 (id=4295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 283.985815ms ago: executing program 3 (id=4296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 275.831196ms ago: executing program 5 (id=4297): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) 248.728826ms ago: executing program 5 (id=4298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000003c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r4 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000100)) 217.030527ms ago: executing program 5 (id=4299): syz_clone3(&(0x7f0000000f40)={0x200000080, &(0x7f0000000300), &(0x7f0000000d40), &(0x7f0000000d80)=0x0, {0x15}, &(0x7f0000000dc0)=""/101, 0x65, &(0x7f0000000e40)=""/174, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0x1, 0x20, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000100004}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x2, 0xfffb, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 191.720677ms ago: executing program 1 (id=4300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x1993, 0x40, 0xfffffffe, 0x20}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000006c0)=[@ioring_restriction_sqe_op={0x1, 0x56}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x2e, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf454, 0x800000, 0x8, 0x8001, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, ')$)+\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="040000b2050f0000000000", @ANYRESHEX=0x0, @ANYRES8=r1, @ANYBLOB="4113002ecbf8eb01444f44b097883062f25d9655302f8e8febb347042e00bece7bf4cce6c3a81360f26889c0be97525fe208a14fef78ea785ff9a3d6743fb6c1235f6f1626c5e87ff5ea6c6fe420020086e3da7e7b4a85d53acccc8d10358884b9d0fc8faa07e4cb9a877a4dd939129dd123be9c24e5428285be9255edd542ce679129c3702124c4c4fed62fab24ced443267dffe2473f3a173d0dc914da5a4af9b40d5e3c2f9495e835f5b01ef7199ca1932b20945ce164e1d3d7321b43d95f131130726ea513e65a95b25ca78369007d3c24b35a40ff0d67cb28fa988778c7", @ANYRES16=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9, 0x0, 0x400000000}, 0x18) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000140)={0x0, 0xfffffed9, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030127bd7000ffdbdf250f00000008000300", @ANYRES32=r11, @ANYRES16=r2], 0x2c}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000840)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in=@broadcast, 0x4e21, 0xd, 0x4e20, 0x6747, 0xa, 0x20, 0x120, 0x5c, r11, r12}, {0x1, 0x800, 0x6, 0x3, 0x5, 0xf, 0x3, 0x9}, {0x7, 0x101, 0x800, 0x5}, 0x81, 0x6e6bb0, 0x0, 0x1, 0x0, 0x9166c3a26e923b99}, {{@in=@local, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x0, 0x0, 0x2, 0x1, 0x9, 0x2}}, 0xe8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth0\x00'}) 191.372037ms ago: executing program 5 (id=4301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 158.656017ms ago: executing program 3 (id=4302): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) migrate_pages(0x0, 0x78d9, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$cgroup_subtree(r2, &(0x7f0000000340)={[{0x2b, 'net_cls'}, {0x2b, 'hugetlb'}]}, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x10000002}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x8, 0x7, 0x6, 0x0, 0x4}, {0x6, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0xfffffff6, 0x4, 0x8, 0x5, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0x7fff, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x201, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x6}, {0x4, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x1, 0x3ff, 0x7, 0x7}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x3, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0x8b, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458f}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x5, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0xc, 0xfeff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x4, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x4}, {0x80, 0xfffff001, 0x7, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2012, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x1, 0x3, 0x0, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x1, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7fff, 0x6}, {0x7, 0x6, 0x10000000, 0x80, 0x8, 0xfffffff6}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x6, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x2, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x4, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x8, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x800007f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0x3, 0x5, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5ef}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0x483, 0x4, 0x7}, {0x1000001, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7894, 0x4}, {0x8, 0x800, 0xfffffffe, 0x4, 0x7, 0x101}, {0xf512, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x3fe, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x3, 0xfffffffb, 0x8, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x2, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x3ff, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0x1, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x0, 0x7224, 0x8, 0xfffff90e, 0xffffffff, 0x7d6a7490}, {0x2, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x0, 0x1}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0123ffff"], 0x36) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 128.550678ms ago: executing program 5 (id=4303): r0 = io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x160, 0x800, 0xfffffffc}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80), 0x0}, 0x20) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) ioctl$SG_GET_COMMAND_Q(r10, 0x2270, &(0x7f00000000c0)) r13 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') utimensat(r13, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) 114.113488ms ago: executing program 2 (id=4304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 63.986209ms ago: executing program 0 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001d00)={0x2, 0xa, 0xd, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4c004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_prefetch_bitmaps\x00', r4}, 0x18) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setresuid(0xee00, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}]}}) setreuid(0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000b40)) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r10, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 62.784479ms ago: executing program 1 (id=4306): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) r5 = io_uring_setup(0x192, &(0x7f0000000240)={0x0, 0x4914, 0x400, 0x7fffffe, 0x3d7}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x14, 0x30, 0xffff, 0x3}, 0x14}}, 0x0) unshare(0x1000) gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 38.802169ms ago: executing program 2 (id=4307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 37.278939ms ago: executing program 3 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x4000000000000c1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)='%pK \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x20000000}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 359.38µs ago: executing program 0 (id=4309): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0xca4c, &(0x7f0000000180), 0x83, 0x5f5, &(0x7f0000000c00)="$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") (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = dup(r0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x8, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe91, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x6, 0x9, 0x5, 0x2, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x6b, &(0x7f00000000c0)=""/107, 0x41000, 0x1, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x3, 0xb99e, 0x1ff}, 0x10, 0x660c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r5, r6], 0x0, 0x10, 0xc468, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000440)=[{0x705, 0x92, 0x41, 0x1}, {0x81, 0x2, 0x2, 0x8}, {0x1785, 0x8, 0x6, 0xbc}, {0x4, 0x6, 0x7, 0x2}, {0x723, 0x4, 0x7, 0x6}, {0x5, 0x0, 0x1a, 0x6}, {0x401, 0x6, 0x8, 0xd1d}, {0x5, 0x0, 0x7, 0x3}, {0xe, 0x9, 0x8, 0x2}, {0x9, 0x4, 0x9, 0x6}]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000000580)={0x3, 0x50, [0xe, 0x7, 0x9, 0x6], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 0s ago: executing program 2 (id=4310): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect(0xffffffffffffffff, &(0x7f0000000300)=@hci={0x1f, 0x3, 0x7}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) splice(r4, 0x0, r6, 0x0, 0x714f, 0x0) kernel console output (not intermixed with test programs): 117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.082826][ T29] audit: type=1326 audit(1745326727.986:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.082866][ T29] audit: type=1326 audit(1745326727.986:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.082908][ T29] audit: type=1326 audit(1745326727.986:10539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.083011][ T29] audit: type=1326 audit(1745326727.986:10540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.083047][ T29] audit: type=1326 audit(1745326727.986:10541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14117 comm="syz.1.3749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 227.306248][T14128] FAULT_INJECTION: forcing a failure. [ 227.306248][T14128] name failslab, interval 1, probability 0, space 0, times 0 [ 227.327656][T14128] CPU: 1 UID: 0 PID: 14128 Comm: syz.0.3751 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 227.327717][T14128] Tainted: [W]=WARN [ 227.327724][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.327736][T14128] Call Trace: [ 227.327743][T14128] [ 227.327751][T14128] dump_stack_lvl+0xf6/0x150 [ 227.327780][T14128] dump_stack+0x15/0x1a [ 227.327797][T14128] should_fail_ex+0x261/0x270 [ 227.327874][T14128] should_failslab+0x8f/0xb0 [ 227.327899][T14128] __kmalloc_cache_noprof+0x55/0x320 [ 227.328081][T14128] ? tcf_proto_create+0x45/0x1a0 [ 227.328105][T14128] tcf_proto_create+0x45/0x1a0 [ 227.328164][T14128] tc_new_tfilter+0x976/0x1110 [ 227.328198][T14128] ? __pfx_tc_new_tfilter+0x10/0x10 [ 227.328277][T14128] rtnetlink_rcv_msg+0x65a/0x740 [ 227.328305][T14128] ? should_fail_ex+0xd7/0x270 [ 227.328326][T14128] ? ref_tracker_free+0x3b8/0x420 [ 227.328351][T14128] netlink_rcv_skb+0x12f/0x230 [ 227.328401][T14128] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.328437][T14128] rtnetlink_rcv+0x1c/0x30 [ 227.328462][T14128] netlink_unicast+0x605/0x6c0 [ 227.328518][T14128] netlink_sendmsg+0x609/0x720 [ 227.328543][T14128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.328575][T14128] __sock_sendmsg+0x140/0x180 [ 227.328605][T14128] ____sys_sendmsg+0x350/0x4e0 [ 227.328640][T14128] __sys_sendmsg+0x1a0/0x240 [ 227.328677][T14128] __x64_sys_sendmsg+0x46/0x50 [ 227.328702][T14128] x64_sys_call+0x26f3/0x2e10 [ 227.328829][T14128] do_syscall_64+0xc9/0x1a0 [ 227.328854][T14128] ? clear_bhb_loop+0x25/0x80 [ 227.328876][T14128] ? clear_bhb_loop+0x25/0x80 [ 227.328897][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.328919][T14128] RIP: 0033:0x7f9bbf11e169 [ 227.328981][T14128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.329002][T14128] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.329020][T14128] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 227.329032][T14128] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000007 [ 227.329044][T14128] RBP: 00007f9bbd787090 R08: 0000000000000000 R09: 0000000000000000 [ 227.329056][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.329067][T14128] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 227.329092][T14128] [ 227.371850][T14131] netlink: 'syz.5.3752': attribute type 3 has an invalid length. [ 227.525396][T14137] loop5: detected capacity change from 0 to 8192 [ 227.720263][T14149] bridge0: port 3(gretap0) entered blocking state [ 227.726913][T14149] bridge0: port 3(gretap0) entered disabled state [ 227.733605][T14149] gretap0: entered allmulticast mode [ 227.739641][T14149] gretap0: entered promiscuous mode [ 227.745311][T14149] bridge0: port 3(gretap0) entered blocking state [ 227.751807][T14149] bridge0: port 3(gretap0) entered forwarding state [ 227.811175][T14156] netlink: 'syz.1.3760': attribute type 1 has an invalid length. [ 227.870075][T14156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.924389][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 227.940642][T14156] bond1 (unregistering): Released all slaves [ 228.007289][T14169] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3764'. [ 228.256739][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 228.265756][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 228.340134][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 228.768901][T14195] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 228.777349][T14195] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 229.031210][T14206] loop2: detected capacity change from 0 to 512 [ 229.058383][T14206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.099958][T14206] EXT4-fs (loop2): 1 truncate cleaned up [ 229.123590][T14206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.213179][T14226] loop5: detected capacity change from 0 to 1024 [ 229.232266][T11868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.250459][T14226] EXT4-fs: Ignoring removed nobh option [ 229.256094][T14226] EXT4-fs: Ignoring removed bh option [ 229.303719][T14226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.382490][ T6492] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.488583][T14238] sctp: [Deprecated]: syz.0.3785 (pid 14238) Use of int in max_burst socket option. [ 229.488583][T14238] Use struct sctp_assoc_value instead [ 229.933276][T14271] loop3: detected capacity change from 0 to 1024 [ 229.941026][T14271] EXT4-fs: Ignoring removed nobh option [ 229.946665][T14271] EXT4-fs: Ignoring removed bh option [ 230.028331][T14271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.102751][T12062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.127483][T14288] vxcan2: entered promiscuous mode [ 230.132852][T14288] vxcan2: entered allmulticast mode [ 230.140142][T14289] veth0: entered promiscuous mode [ 230.183948][T14295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 230.192376][T14295] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 230.211109][T14297] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 230.232152][T14288] veth0: left promiscuous mode [ 230.253407][T14297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.261425][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3807'. [ 230.302838][T14302] bond1 (unregistering): Released all slaves [ 230.390414][T14314] FAULT_INJECTION: forcing a failure. [ 230.390414][T14314] name failslab, interval 1, probability 0, space 0, times 0 [ 230.403166][T14314] CPU: 1 UID: 0 PID: 14314 Comm: syz.2.3815 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 230.403237][T14314] Tainted: [W]=WARN [ 230.403246][T14314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.403261][T14314] Call Trace: [ 230.403270][T14314] [ 230.403279][T14314] dump_stack_lvl+0xf6/0x150 [ 230.403311][T14314] dump_stack+0x15/0x1a [ 230.403371][T14314] should_fail_ex+0x261/0x270 [ 230.403401][T14314] should_failslab+0x8f/0xb0 [ 230.403429][T14314] __kmalloc_noprof+0xad/0x410 [ 230.403462][T14314] ? sel_write_create+0x1b3/0x4f0 [ 230.403513][T14314] sel_write_create+0x1b3/0x4f0 [ 230.403541][T14314] selinux_transaction_write+0xba/0x100 [ 230.403571][T14314] ? __pfx_selinux_transaction_write+0x10/0x10 [ 230.403602][T14314] vfs_write+0x295/0x950 [ 230.403623][T14314] ? putname+0xe1/0x100 [ 230.403698][T14314] ? __fget_files+0x186/0x1c0 [ 230.403721][T14314] ksys_write+0xeb/0x1b0 [ 230.403742][T14314] __x64_sys_write+0x42/0x50 [ 230.403765][T14314] x64_sys_call+0x2a45/0x2e10 [ 230.403793][T14314] do_syscall_64+0xc9/0x1a0 [ 230.403856][T14314] ? clear_bhb_loop+0x25/0x80 [ 230.403950][T14314] ? clear_bhb_loop+0x25/0x80 [ 230.403971][T14314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.403997][T14314] RIP: 0033:0x7f526595e169 [ 230.404015][T14314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.404032][T14314] RSP: 002b:00007f5263fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.404101][T14314] RAX: ffffffffffffffda RBX: 00007f5265b85fa0 RCX: 00007f526595e169 [ 230.404116][T14314] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000003 [ 230.404127][T14314] RBP: 00007f5263fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.404218][T14314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.404232][T14314] R13: 0000000000000000 R14: 00007f5265b85fa0 R15: 00007ffff79fa3c8 [ 230.404255][T14314] [ 230.665586][T14326] loop2: detected capacity change from 0 to 1024 [ 230.672482][T14326] EXT4-fs: Ignoring removed nobh option [ 230.678138][T14326] EXT4-fs: Ignoring removed bh option [ 230.740853][T14326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.773431][T11868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.801239][T14344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14344 comm=syz.2.3820 [ 230.922766][ T4568] bridge_slave_1: left allmulticast mode [ 230.928478][ T4568] bridge_slave_1: left promiscuous mode [ 230.934311][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.942931][ T4568] bridge_slave_0: left allmulticast mode [ 230.948685][ T4568] bridge_slave_0: left promiscuous mode [ 230.954558][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.995818][T14365] FAULT_INJECTION: forcing a failure. [ 230.995818][T14365] name failslab, interval 1, probability 0, space 0, times 0 [ 231.008684][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.0.3828 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 231.008720][T14365] Tainted: [W]=WARN [ 231.008727][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.008739][T14365] Call Trace: [ 231.008746][T14365] [ 231.008753][T14365] dump_stack_lvl+0xf6/0x150 [ 231.008917][T14365] dump_stack+0x15/0x1a [ 231.008932][T14365] should_fail_ex+0x261/0x270 [ 231.008963][T14365] should_failslab+0x8f/0xb0 [ 231.008982][T14365] kmem_cache_alloc_noprof+0x59/0x340 [ 231.009044][T14365] ? skb_clone+0x154/0x1f0 [ 231.009128][T14365] skb_clone+0x154/0x1f0 [ 231.009157][T14365] nfnetlink_rcv+0x30b/0x1610 [ 231.009187][T14365] ? __kfree_skb+0x102/0x150 [ 231.009212][T14365] ? nlmon_xmit+0x51/0x60 [ 231.009244][T14365] ? __kfree_skb+0x102/0x150 [ 231.009298][T14365] ? consume_skb+0x49/0x160 [ 231.009320][T14365] ? nlmon_xmit+0x51/0x60 [ 231.009353][T14365] ? dev_hard_start_xmit+0x3d1/0x400 [ 231.009381][T14365] ? __dev_queue_xmit+0xb76/0x20b0 [ 231.009525][T14365] ? should_fail_ex+0xd7/0x270 [ 231.009550][T14365] ? ref_tracker_free+0x3b8/0x420 [ 231.009626][T14365] netlink_unicast+0x605/0x6c0 [ 231.009742][T14365] netlink_sendmsg+0x609/0x720 [ 231.009772][T14365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.009843][T14365] __sock_sendmsg+0x140/0x180 [ 231.009874][T14365] ____sys_sendmsg+0x350/0x4e0 [ 231.009908][T14365] __sys_sendmsg+0x1a0/0x240 [ 231.009981][T14365] __x64_sys_sendmsg+0x46/0x50 [ 231.010010][T14365] x64_sys_call+0x26f3/0x2e10 [ 231.010035][T14365] do_syscall_64+0xc9/0x1a0 [ 231.010077][T14365] ? clear_bhb_loop+0x25/0x80 [ 231.010097][T14365] ? clear_bhb_loop+0x25/0x80 [ 231.010117][T14365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.010143][T14365] RIP: 0033:0x7f9bbf11e169 [ 231.010160][T14365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.010183][T14365] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.010205][T14365] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 231.010268][T14365] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 231.010279][T14365] RBP: 00007f9bbd787090 R08: 0000000000000000 R09: 0000000000000000 [ 231.010294][T14365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.010308][T14365] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 231.010331][T14365] [ 231.302123][ T4568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.318137][ T4568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.338379][ T4568] bond0 (unregistering): Released all slaves [ 231.358209][ T4568] bond1 (unregistering): left allmulticast mode [ 231.364581][ T4568] bond2 (unregistering): left allmulticast mode [ 231.371084][ T4568] bond1 (unregistering): left promiscuous mode [ 231.377271][ T4568] bond2 (unregistering): left promiscuous mode [ 231.393320][ T4568] bond1 (unregistering): (slave bond2): Releasing backup interface [ 231.394975][ T4568] bond1 (unregistering): Released all slaves [ 231.413288][ T4568] bond2 (unregistering): Released all slaves [ 231.420098][T14317] chnl_net:caif_netlink_parms(): no params data found [ 231.497873][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.505231][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.513079][T14317] bridge_slave_0: entered allmulticast mode [ 231.522580][T14317] bridge_slave_0: entered promiscuous mode [ 231.530737][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.537866][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.569429][T14317] bridge_slave_1: entered allmulticast mode [ 231.576427][T14317] bridge_slave_1: entered promiscuous mode [ 231.583169][ T4568] tipc: Left network mode [ 231.602436][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.615113][ T4568] hsr_slave_0: left promiscuous mode [ 231.624273][ T4568] hsr_slave_1: left promiscuous mode [ 231.632592][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.640547][ T4568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.712737][ T4568] team0 (unregistering): Port device team_slave_1 removed [ 231.737490][ T4568] team0 (unregistering): Port device team_slave_0 removed [ 231.757121][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3849'. [ 231.778706][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.791873][T14414] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 231.800231][T14414] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 231.839211][T14317] team0: Port device team_slave_0 added [ 231.847491][T14317] team0: Port device team_slave_1 added [ 231.853589][T14416] loop2: detected capacity change from 0 to 8192 [ 231.898191][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.905319][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.931403][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.943236][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.950274][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.976307][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.000720][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 232.031992][T14317] hsr_slave_0: entered promiscuous mode [ 232.043111][T14317] hsr_slave_1: entered promiscuous mode [ 232.050419][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.058212][T14317] Cannot create hsr debugfs directory [ 232.092736][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 232.092752][ T29] audit: type=1326 audit(1745326733.026:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.123420][ T29] audit: type=1326 audit(1745326733.026:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.147178][ T29] audit: type=1326 audit(1745326733.026:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.171029][ T29] audit: type=1326 audit(1745326733.026:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.195173][ T29] audit: type=1326 audit(1745326733.026:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.219026][ T29] audit: type=1326 audit(1745326733.026:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.242740][ T29] audit: type=1326 audit(1745326733.026:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.266503][ T29] audit: type=1326 audit(1745326733.026:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.290072][ T29] audit: type=1326 audit(1745326733.026:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.314469][ T29] audit: type=1326 audit(1745326733.026:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.1.3858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692e1de169 code=0x7ffc0000 [ 232.462330][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'. [ 232.537838][T14468] loop3: detected capacity change from 0 to 1024 [ 232.545002][T14468] EXT4-fs: Ignoring removed nobh option [ 232.550670][T14468] EXT4-fs: Ignoring removed bh option [ 232.582539][T14468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.600338][T14473] x_tables: ip_tables: udp match: only valid for protocol 17 [ 232.631152][T14475] netlink: 'syz.0.3872': attribute type 33 has an invalid length. [ 232.639418][T14475] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3872'. [ 232.650868][T12062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.658975][T14475] SELinux: syz.0.3872 (14475) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.684495][T14317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.696198][T14481] random: crng reseeded on system resumption [ 232.769081][T14317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.780142][T14317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.792318][T14317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.802940][T14483] loop3: detected capacity change from 0 to 8192 [ 232.848127][T14481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3876'. [ 232.850469][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.865150][T14483] loop3: p1 p3 p4 [ 232.869159][T14483] loop3: p1 size 3506438656 extends beyond EOD, truncated [ 232.877960][T14483] loop3: p3 start 218103808 is beyond EOD, truncated [ 232.884808][T14483] loop3: p4 size 50331648 extends beyond EOD, truncated [ 232.898264][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.909329][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.916627][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.928522][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.935742][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.950567][T14483] vlan1: entered allmulticast mode [ 232.955811][T14483] bond0: entered allmulticast mode [ 232.961019][T14483] bond_slave_0: entered allmulticast mode [ 232.966776][T14483] bond_slave_1: entered allmulticast mode [ 232.975080][T14483] bridge0: port 3(vlan1) entered blocking state [ 232.981439][T14483] bridge0: port 3(vlan1) entered disabled state [ 232.989225][T14483] vlan1: entered promiscuous mode [ 232.994339][T14483] bond0: entered promiscuous mode [ 232.999514][T14483] bond_slave_0: entered promiscuous mode [ 233.005418][T14483] bond_slave_1: entered promiscuous mode [ 233.012192][T14483] bridge0: port 3(vlan1) entered blocking state [ 233.013083][T14486] SELinux: syz.0.3872 (14486) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 233.018616][T14483] bridge0: port 3(vlan1) entered forwarding state [ 233.042026][T14487] vlan2: entered allmulticast mode [ 233.128422][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.194970][T14499] loop3: detected capacity change from 0 to 512 [ 233.202198][T14499] EXT4-fs: Ignoring removed nobh option [ 233.215249][T14499] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.3877: corrupted inode contents [ 233.227642][T14499] EXT4-fs (loop3): Remounting filesystem read-only [ 233.236729][T14499] EXT4-fs (loop3): 1 truncate cleaned up [ 233.243296][T14499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.257681][ T4615] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.268304][ T4615] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.279166][ T4615] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 233.281205][T14499] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.301447][T14499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.313421][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 233.342702][T14317] veth0_vlan: entered promiscuous mode [ 233.362300][T14317] veth1_vlan: entered promiscuous mode [ 233.399334][T14317] veth0_macvtap: entered promiscuous mode [ 233.418028][T14317] veth1_macvtap: entered promiscuous mode [ 233.443365][T14521] loop3: detected capacity change from 0 to 8192 [ 233.454540][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.465200][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.475438][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.486154][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.496043][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.507053][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.517016][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.527596][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.538792][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.546355][T14528] FAULT_INJECTION: forcing a failure. [ 233.546355][T14528] name failslab, interval 1, probability 0, space 0, times 0 [ 233.559179][T14528] CPU: 1 UID: 0 PID: 14528 Comm: syz.0.3883 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 233.559219][T14528] Tainted: [W]=WARN [ 233.559228][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.559244][T14528] Call Trace: [ 233.559270][T14528] [ 233.559280][T14528] dump_stack_lvl+0xf6/0x150 [ 233.559309][T14528] dump_stack+0x15/0x1a [ 233.559331][T14528] should_fail_ex+0x261/0x270 [ 233.559409][T14528] should_failslab+0x8f/0xb0 [ 233.559435][T14528] kmem_cache_alloc_noprof+0x59/0x340 [ 233.559464][T14528] ? skb_clone+0x154/0x1f0 [ 233.559524][T14528] skb_clone+0x154/0x1f0 [ 233.559554][T14528] __netlink_deliver_tap+0x2bd/0x4f0 [ 233.559581][T14528] netlink_sendskb+0x12c/0x150 [ 233.559734][T14528] netlink_unicast+0x296/0x6c0 [ 233.559772][T14528] nlmsg_notify+0x10f/0x170 [ 233.559853][T14528] rtnetlink_send+0x4a/0x60 [ 233.559878][T14528] qdisc_notify+0x275/0x2b0 [ 233.559915][T14528] qdisc_graft+0xbb7/0xcb0 [ 233.559951][T14528] tc_modify_qdisc+0xe62/0x14d0 [ 233.560016][T14528] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 233.560050][T14528] rtnetlink_rcv_msg+0x6b7/0x740 [ 233.560082][T14528] ? ref_tracker_free+0x3b8/0x420 [ 233.560122][T14528] netlink_rcv_skb+0x12f/0x230 [ 233.560197][T14528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.560231][T14528] rtnetlink_rcv+0x1c/0x30 [ 233.560258][T14528] netlink_unicast+0x605/0x6c0 [ 233.560299][T14528] netlink_sendmsg+0x609/0x720 [ 233.560378][T14528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.560403][T14528] __sock_sendmsg+0x140/0x180 [ 233.560467][T14528] ____sys_sendmsg+0x350/0x4e0 [ 233.560498][T14528] __sys_sendmsg+0x1a0/0x240 [ 233.560606][T14528] __x64_sys_sendmsg+0x46/0x50 [ 233.560629][T14528] x64_sys_call+0x26f3/0x2e10 [ 233.560651][T14528] do_syscall_64+0xc9/0x1a0 [ 233.560691][T14528] ? clear_bhb_loop+0x25/0x80 [ 233.560716][T14528] ? clear_bhb_loop+0x25/0x80 [ 233.560743][T14528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.560770][T14528] RIP: 0033:0x7f9bbf11e169 [ 233.560789][T14528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.560885][T14528] RSP: 002b:00007f9bbd766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.560907][T14528] RAX: ffffffffffffffda RBX: 00007f9bbf346080 RCX: 00007f9bbf11e169 [ 233.560918][T14528] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 233.560930][T14528] RBP: 00007f9bbd766090 R08: 0000000000000000 R09: 0000000000000000 [ 233.560941][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.560954][T14528] R13: 0000000000000000 R14: 00007f9bbf346080 R15: 00007ffcb7f44158 [ 233.560978][T14528] [ 233.852395][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.863543][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.873665][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.884179][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.894136][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.904829][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.914876][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.925452][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.936497][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.955654][T14317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.964826][T14317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.973723][T14317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.982718][T14317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.985395][T14532] loop3: detected capacity change from 0 to 1024 [ 234.002348][T14532] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 234.014115][T14532] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 234.025706][T14532] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #32: comm syz.3.3887: iget: special inode unallocated [ 234.042362][T14532] EXT4-fs (loop3): Remounting filesystem read-only [ 234.049257][T14532] EXT4-fs (loop3): no journal found [ 234.054941][T14532] EXT4-fs (loop3): can't get journal size [ 234.071870][T14532] EXT4-fs (loop3): failed to initialize system zone (-117) [ 234.086680][T14532] EXT4-fs (loop3): mount failed [ 234.116530][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'. [ 234.150883][T14550] loop3: detected capacity change from 0 to 512 [ 234.164952][T14550] EXT4-fs: Ignoring removed nobh option [ 234.172756][T14552] netlink: 'syz.5.3892': attribute type 33 has an invalid length. [ 234.180871][T14552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3892'. [ 234.193804][T14552] SELinux: syz.5.3892 (14552) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 234.213066][T14550] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.3891: corrupted inode contents [ 234.234954][T14552] loop5: detected capacity change from 0 to 2048 [ 234.243942][T14550] EXT4-fs (loop3): Remounting filesystem read-only [ 234.253092][T14552] EXT4-fs: Ignoring removed bh option [ 234.258952][T14550] EXT4-fs (loop3): 1 truncate cleaned up [ 234.266685][T14550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.279584][ T4615] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.291484][ T4615] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.305911][ T4615] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 234.318852][T14552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.335387][T14550] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.349386][T14550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.478663][T14561] SELinux: syz.5.3892 (14561) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 234.670894][T14566] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 234.680782][T14566] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 234.751274][T14568] FAULT_INJECTION: forcing a failure. [ 234.751274][T14568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.764959][T14568] CPU: 1 UID: 0 PID: 14568 Comm: syz.3.3896 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 234.765016][T14568] Tainted: [W]=WARN [ 234.765022][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.765034][T14568] Call Trace: [ 234.765039][T14568] [ 234.765073][T14568] dump_stack_lvl+0xf6/0x150 [ 234.765098][T14568] dump_stack+0x15/0x1a [ 234.765114][T14568] should_fail_ex+0x261/0x270 [ 234.765206][T14568] should_fail+0xb/0x10 [ 234.765229][T14568] should_fail_usercopy+0x1a/0x20 [ 234.765339][T14568] strncpy_from_user+0x25/0x230 [ 234.765374][T14568] ? getname_flags+0x81/0x3b0 [ 234.765405][T14568] getname_flags+0xb0/0x3b0 [ 234.765435][T14568] getname_uflags+0x21/0x30 [ 234.765483][T14568] __x64_sys_execveat+0x5e/0x90 [ 234.765514][T14568] x64_sys_call+0x2ac7/0x2e10 [ 234.765539][T14568] do_syscall_64+0xc9/0x1a0 [ 234.765648][T14568] ? clear_bhb_loop+0x25/0x80 [ 234.765672][T14568] ? clear_bhb_loop+0x25/0x80 [ 234.765697][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.765729][T14568] RIP: 0033:0x7fc76dbee169 [ 234.765748][T14568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.765768][T14568] RSP: 002b:00007fc76c257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 234.765793][T14568] RAX: ffffffffffffffda RBX: 00007fc76de15fa0 RCX: 00007fc76dbee169 [ 234.765807][T14568] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.765818][T14568] RBP: 00007fc76c257090 R08: 0000000000001000 R09: 0000000000000000 [ 234.765830][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.765899][T14568] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 234.765918][T14568] [ 235.074637][ T4615] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.104457][ T4615] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 235.117072][ T4615] EXT4-fs (loop5): This should not happen!! Data will be lost [ 235.117072][ T4615] [ 235.127097][ T4615] EXT4-fs (loop5): Total free blocks count 0 [ 235.133377][ T4615] EXT4-fs (loop5): Free/Dirty block details [ 235.139714][ T4615] EXT4-fs (loop5): free_blocks=2415919104 [ 235.145489][ T4615] EXT4-fs (loop5): dirty_blocks=8224 [ 235.151329][ T4615] EXT4-fs (loop5): Block reservation details [ 235.157362][ T4615] EXT4-fs (loop5): i_reserved_data_blocks=514 [ 235.225292][ T4568] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 235.295845][T14594] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 235.304281][T14594] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 235.382803][T14602] FAULT_INJECTION: forcing a failure. [ 235.382803][T14602] name failslab, interval 1, probability 0, space 0, times 0 [ 235.396231][T14602] CPU: 1 UID: 0 PID: 14602 Comm: syz.3.3909 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 235.396273][T14602] Tainted: [W]=WARN [ 235.396281][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.396294][T14602] Call Trace: [ 235.396301][T14602] [ 235.396365][T14602] dump_stack_lvl+0xf6/0x150 [ 235.396391][T14602] dump_stack+0x15/0x1a [ 235.396413][T14602] should_fail_ex+0x261/0x270 [ 235.396498][T14602] should_failslab+0x8f/0xb0 [ 235.396592][T14602] __kmalloc_noprof+0xad/0x410 [ 235.396628][T14602] ? user_preparse+0x71/0xf0 [ 235.396667][T14602] user_preparse+0x71/0xf0 [ 235.396708][T14602] __key_create_or_update+0x2ad/0x780 [ 235.396792][T14602] key_create_or_update+0x42/0x60 [ 235.396828][T14602] __se_sys_add_key+0x2a1/0x330 [ 235.396852][T14602] ? fput+0x99/0xd0 [ 235.396919][T14602] __x64_sys_add_key+0x67/0x80 [ 235.396939][T14602] x64_sys_call+0x1f10/0x2e10 [ 235.396962][T14602] do_syscall_64+0xc9/0x1a0 [ 235.397041][T14602] ? clear_bhb_loop+0x25/0x80 [ 235.397067][T14602] ? clear_bhb_loop+0x25/0x80 [ 235.397087][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.397108][T14602] RIP: 0033:0x7fc76dbee169 [ 235.397126][T14602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.397207][T14602] RSP: 002b:00007fc76c257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 235.397226][T14602] RAX: ffffffffffffffda RBX: 00007fc76de15fa0 RCX: 00007fc76dbee169 [ 235.397238][T14602] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 00002000000001c0 [ 235.397249][T14602] RBP: 00007fc76c257090 R08: ffffffffffffffff R09: 0000000000000000 [ 235.397262][T14602] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 235.397277][T14602] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 235.397325][T14602] [ 235.608206][T14605] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 235.616766][T14605] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 235.685266][T14614] SELinux: syz.3.3912 (14614) set checkreqprot to 1. This is no longer supported. [ 235.706480][T14614] loop3: detected capacity change from 0 to 512 [ 235.714945][T14614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.733763][T14614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.748399][T14614] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.763851][T14614] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3912: corrupted xattr block 19: overlapping e_value [ 235.781586][T14614] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 235.790884][T14614] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3912: corrupted xattr block 19: overlapping e_value [ 235.806312][T14614] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3912: corrupted xattr block 19: overlapping e_value [ 235.825507][T14628] 9pnet: Could not find request transport: fl [ 235.842556][T14614] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 235.854326][T14614] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #15: comm syz.3.3912: corrupted xattr block 19: overlapping e_value [ 235.906096][T12062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.030299][T14646] openvswitch: netlink: Message has 6 unknown bytes. [ 236.107598][T14650] FAULT_INJECTION: forcing a failure. [ 236.107598][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 236.121111][T14650] CPU: 0 UID: 0 PID: 14650 Comm: syz.3.3923 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 236.121150][T14650] Tainted: [W]=WARN [ 236.121157][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.121169][T14650] Call Trace: [ 236.121178][T14650] [ 236.121188][T14650] dump_stack_lvl+0xf6/0x150 [ 236.121217][T14650] dump_stack+0x15/0x1a [ 236.121301][T14650] should_fail_ex+0x261/0x270 [ 236.121330][T14650] should_failslab+0x8f/0xb0 [ 236.121357][T14650] __kmalloc_cache_noprof+0x55/0x320 [ 236.121393][T14650] ? flow_init+0x31/0x80 [ 236.121438][T14650] flow_init+0x31/0x80 [ 236.121496][T14650] tcf_proto_create+0x12f/0x1a0 [ 236.121522][T14650] tc_new_tfilter+0x976/0x1110 [ 236.121567][T14650] ? __pfx_tc_new_tfilter+0x10/0x10 [ 236.121594][T14650] rtnetlink_rcv_msg+0x65a/0x740 [ 236.121671][T14650] ? should_fail_ex+0xd7/0x270 [ 236.121691][T14650] ? ref_tracker_free+0x3b8/0x420 [ 236.121715][T14650] netlink_rcv_skb+0x12f/0x230 [ 236.121736][T14650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.121780][T14650] rtnetlink_rcv+0x1c/0x30 [ 236.121811][T14650] netlink_unicast+0x605/0x6c0 [ 236.121851][T14650] netlink_sendmsg+0x609/0x720 [ 236.121951][T14650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.121976][T14650] __sock_sendmsg+0x140/0x180 [ 236.122014][T14650] ____sys_sendmsg+0x350/0x4e0 [ 236.122183][T14650] __sys_sendmsg+0x1a0/0x240 [ 236.122234][T14650] __x64_sys_sendmsg+0x46/0x50 [ 236.122265][T14650] x64_sys_call+0x26f3/0x2e10 [ 236.122287][T14650] do_syscall_64+0xc9/0x1a0 [ 236.122397][T14650] ? clear_bhb_loop+0x25/0x80 [ 236.122482][T14650] ? clear_bhb_loop+0x25/0x80 [ 236.122509][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.122585][T14650] RIP: 0033:0x7fc76dbee169 [ 236.122605][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.122629][T14650] RSP: 002b:00007fc76c257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.122719][T14650] RAX: ffffffffffffffda RBX: 00007fc76de15fa0 RCX: 00007fc76dbee169 [ 236.122735][T14650] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000006 [ 236.122751][T14650] RBP: 00007fc76c257090 R08: 0000000000000000 R09: 0000000000000000 [ 236.122767][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.122782][T14650] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 236.122808][T14650] [ 236.580464][T14678] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 236.612219][T14678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.623405][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 236.681299][T14687] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 236.689800][T14687] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 236.741751][T14698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.749242][T14698] IPv6: NLM_F_CREATE should be set when creating new route [ 236.868495][T14717] loop3: detected capacity change from 0 to 512 [ 236.872023][T14719] loop2: detected capacity change from 0 to 512 [ 236.886429][T14717] journal_path: Non-blockdev passed as './bus' [ 236.893239][T14717] EXT4-fs: error: could not find journal device path [ 236.897885][T14719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.912985][T14719] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.953147][T14728] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 236.962201][T14728] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 237.011910][T14719] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.3950: corrupted inode contents [ 237.026637][T14719] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.3950: mark_inode_dirty error [ 237.040628][T14719] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.3950: corrupted inode contents [ 237.054039][T14719] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.3950: mark_inode_dirty error [ 237.066764][T14719] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.3950: mark inode dirty (error -117) [ 237.080044][T14734] loop5: detected capacity change from 0 to 512 [ 237.081116][T14719] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 237.109433][T14734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 237.115703][T14738] loop3: detected capacity change from 0 to 128 [ 237.129986][T14738] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.131756][T14734] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.142678][T14738] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.161119][T11868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 237.186684][T14742] netlink: 'syz.2.3958': attribute type 3 has an invalid length. [ 237.196432][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3956'. [ 237.241497][T14742] loop2: detected capacity change from 0 to 8192 [ 237.248156][ T4563] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.288922][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 237.288942][ T29] audit: type=1400 audit(1745326738.216:10995): avc: denied { bind } for pid=14744 comm="syz.0.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.327948][T14734] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #19: comm syz.5.3956: corrupted inode contents [ 237.340736][T14734] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #19: comm syz.5.3956: mark_inode_dirty error [ 237.354371][T14734] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #19: comm syz.5.3956: corrupted inode contents [ 237.368162][T14747] loop3: detected capacity change from 0 to 256 [ 237.376284][T14734] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.3956: mark_inode_dirty error [ 237.393011][T14734] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.3956: mark inode dirty (error -117) [ 237.406382][T14734] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 237.438185][T14755] loop2: detected capacity change from 0 to 164 [ 237.446325][ T29] audit: type=1400 audit(1745326738.376:10996): avc: denied { mount } for pid=14754 comm="syz.2.3964" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 237.476403][T14317] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 237.491187][T14755] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 237.522090][ T29] audit: type=1400 audit(1745326738.456:10997): avc: denied { unmount } for pid=11868 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 237.615965][T14769] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 237.627523][T14771] netlink: 'syz.2.3972': attribute type 33 has an invalid length. [ 237.633461][T14769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.635439][T14771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3972'. [ 237.652027][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'. [ 237.663360][T14774] loop5: detected capacity change from 0 to 512 [ 237.670410][ T29] audit: type=1326 audit(1745326738.586:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7fc00000 [ 237.695379][ T29] audit: type=1400 audit(1745326738.586:10999): avc: denied { read } for pid=14766 comm="syz.5.3970" path="socket:[49338]" dev="sockfs" ino=49338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 237.695419][ T29] audit: type=1326 audit(1745326738.586:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc83831e169 code=0x7fc00000 [ 237.700865][T14774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 237.727590][T14769] bond2 (unregistering): Released all slaves [ 237.745545][T14774] System zones: 1-12 [ 237.760479][T14778] SELinux: syz.2.3972 (14778) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 237.780241][T14774] EXT4-fs error (device loop5): dx_probe:793: inode #2: comm syz.5.3970: Directory hole found for htree index block 0 [ 237.795268][T14778] loop2: detected capacity change from 0 to 2048 [ 237.807439][T14774] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 237.809357][T14778] EXT4-fs: Ignoring removed bh option [ 237.835511][T14774] EXT4-fs error (device loop5): dx_probe:793: inode #2: comm syz.5.3970: Directory hole found for htree index block 0 [ 237.848885][T14774] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 237.863186][T14774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.881008][T14784] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 237.889440][T14784] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 237.913384][T14778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.916202][ T29] audit: type=1326 audit(1745326738.846:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14766 comm="syz.5.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7fc00000 [ 237.994607][T14317] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.066851][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3979'. [ 238.137073][ T29] audit: type=1326 audit(1745326739.066:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 238.161742][ T29] audit: type=1326 audit(1745326739.066:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 238.185566][ T29] audit: type=1326 audit(1745326739.066:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 238.189522][T14808] SELinux: syz.2.3972 (14808) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 238.262759][T14815] FAULT_INJECTION: forcing a failure. [ 238.262759][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 238.262799][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.3.3985 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 238.262862][T14815] Tainted: [W]=WARN [ 238.262871][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.262924][T14815] Call Trace: [ 238.262932][T14815] [ 238.262941][T14815] dump_stack_lvl+0xf6/0x150 [ 238.262971][T14815] dump_stack+0x15/0x1a [ 238.262992][T14815] should_fail_ex+0x261/0x270 [ 238.263031][T14815] should_failslab+0x8f/0xb0 [ 238.263055][T14815] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 238.263135][T14815] ? sock_alloc_inode+0x34/0xa0 [ 238.263208][T14815] ? selinux_socket_create+0x100/0x180 [ 238.263259][T14815] sock_alloc_inode+0x34/0xa0 [ 238.263296][T14815] ? __pfx_sock_alloc_inode+0x10/0x10 [ 238.263344][T14815] alloc_inode+0x40/0x170 [ 238.263362][T14815] __sock_create+0x12b/0x5a0 [ 238.263394][T14815] __sys_socketpair+0x1d5/0x440 [ 238.263435][T14815] __x64_sys_socketpair+0x52/0x60 [ 238.263496][T14815] x64_sys_call+0x2230/0x2e10 [ 238.263596][T14815] do_syscall_64+0xc9/0x1a0 [ 238.263692][T14815] ? clear_bhb_loop+0x25/0x80 [ 238.263718][T14815] ? clear_bhb_loop+0x25/0x80 [ 238.263745][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.263770][T14815] RIP: 0033:0x7fc76dbee169 [ 238.263788][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.263809][T14815] RSP: 002b:00007fc76c257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 238.263832][T14815] RAX: ffffffffffffffda RBX: 00007fc76de15fa0 RCX: 00007fc76dbee169 [ 238.263897][T14815] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 238.263911][T14815] RBP: 00007fc76c257090 R08: 0000000000000000 R09: 0000000000000000 [ 238.263925][T14815] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 238.264019][T14815] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 238.264042][T14815] [ 238.264065][T14815] socket: no more sockets [ 238.304980][T14817] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 238.305010][T14817] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 238.382471][T14822] loop3: detected capacity change from 0 to 1024 [ 238.384558][T14822] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.395624][T14821] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 238.418612][T14822] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.3987: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 238.418786][T14822] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.3987: Bad quota inode: 3, type: 0 [ 238.418877][T14822] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 238.419052][T14822] EXT4-fs (loop3): mount failed [ 238.424648][T14821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.434064][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 238.443699][T14821] bond1 (unregistering): Released all slaves [ 238.488083][T14819] netlink: 'syz.3.3987': attribute type 1 has an invalid length. [ 238.504387][T14819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.508483][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3987'. [ 238.515519][T14819] bond1 (unregistering): Released all slaves [ 238.626741][T14828] 9pnet_fd: Insufficient options for proto=fd [ 238.772899][ T4615] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 238.791174][ T4615] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 238.803493][ T4615] EXT4-fs (loop2): This should not happen!! Data will be lost [ 238.803493][ T4615] [ 238.813194][ T4615] EXT4-fs (loop2): Total free blocks count 0 [ 238.819316][ T4615] EXT4-fs (loop2): Free/Dirty block details [ 238.825502][ T4615] EXT4-fs (loop2): free_blocks=2415919104 [ 238.831277][ T4615] EXT4-fs (loop2): dirty_blocks=8224 [ 238.836774][ T4615] EXT4-fs (loop2): Block reservation details [ 238.842903][ T4615] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 238.896007][ T4615] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 238.896383][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 239.295066][T14866] : renamed from vlan0 (while UP) [ 239.298147][T14865] FAULT_INJECTION: forcing a failure. [ 239.298147][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 239.312988][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.5.4002 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 239.313019][T14865] Tainted: [W]=WARN [ 239.313027][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.313048][T14865] Call Trace: [ 239.313056][T14865] [ 239.313066][T14865] dump_stack_lvl+0xf6/0x150 [ 239.313095][T14865] dump_stack+0x15/0x1a [ 239.313113][T14865] should_fail_ex+0x261/0x270 [ 239.313142][T14865] should_failslab+0x8f/0xb0 [ 239.313222][T14865] __kvmalloc_node_noprof+0x12c/0x520 [ 239.313259][T14865] ? xt_alloc_table_info+0x3d/0x80 [ 239.313296][T14865] ? should_fail_ex+0xd7/0x270 [ 239.313324][T14865] xt_alloc_table_info+0x3d/0x80 [ 239.313408][T14865] do_ip6t_set_ctl+0x597/0x840 [ 239.313440][T14865] ? kstrtouint+0x7b/0xc0 [ 239.313473][T14865] nf_setsockopt+0x195/0x1b0 [ 239.313502][T14865] ipv6_setsockopt+0x10f/0x130 [ 239.313527][T14865] tcp_setsockopt+0x93/0xb0 [ 239.313647][T14865] sock_common_setsockopt+0x64/0x80 [ 239.313680][T14865] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.313710][T14865] __sys_setsockopt+0x187/0x200 [ 239.313857][T14865] __x64_sys_setsockopt+0x66/0x80 [ 239.313878][T14865] x64_sys_call+0x2a09/0x2e10 [ 239.314046][T14865] do_syscall_64+0xc9/0x1a0 [ 239.314131][T14865] ? clear_bhb_loop+0x25/0x80 [ 239.314157][T14865] ? clear_bhb_loop+0x25/0x80 [ 239.314184][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.314208][T14865] RIP: 0033:0x7fc83831e169 [ 239.314230][T14865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.314247][T14865] RSP: 002b:00007fc836987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.314264][T14865] RAX: ffffffffffffffda RBX: 00007fc838545fa0 RCX: 00007fc83831e169 [ 239.314276][T14865] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 239.314287][T14865] RBP: 00007fc836987090 R08: 0000000000000518 R09: 0000000000000000 [ 239.314299][T14865] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001 [ 239.314347][T14865] R13: 0000000000000000 R14: 00007fc838545fa0 R15: 00007ffe285864a8 [ 239.314373][T14865] [ 239.709216][T14873] 9pnet_fd: Insufficient options for proto=fd [ 239.883120][T14886] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 239.891575][T14886] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 239.994659][T14887] netem: change failed [ 240.062908][T14902] FAULT_INJECTION: forcing a failure. [ 240.062908][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 240.075633][T14902] CPU: 1 UID: 0 PID: 14902 Comm: syz.0.4015 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 240.075753][T14902] Tainted: [W]=WARN [ 240.075762][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.075779][T14902] Call Trace: [ 240.075790][T14902] [ 240.075801][T14902] dump_stack_lvl+0xf6/0x150 [ 240.075836][T14902] dump_stack+0x15/0x1a [ 240.075860][T14902] should_fail_ex+0x261/0x270 [ 240.075949][T14902] should_failslab+0x8f/0xb0 [ 240.075991][T14902] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 240.076030][T14902] ? __d_alloc+0x3d/0x350 [ 240.076066][T14902] __d_alloc+0x3d/0x350 [ 240.076099][T14902] d_alloc_pseudo+0x1e/0x80 [ 240.076152][T14902] alloc_file_pseudo+0x75/0x160 [ 240.076188][T14902] ? alloc_fd+0x3b3/0x3e0 [ 240.076223][T14902] anon_inode_getfile_fmode+0xa5/0x150 [ 240.076258][T14902] do_eventfd+0x110/0x1a0 [ 240.076299][T14902] __x64_sys_eventfd2+0x2d/0x40 [ 240.076402][T14902] x64_sys_call+0x123c/0x2e10 [ 240.076460][T14902] do_syscall_64+0xc9/0x1a0 [ 240.076495][T14902] ? clear_bhb_loop+0x25/0x80 [ 240.076523][T14902] ? clear_bhb_loop+0x25/0x80 [ 240.076611][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.076666][T14902] RIP: 0033:0x7f9bbf11e169 [ 240.076681][T14902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.076699][T14902] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 240.076718][T14902] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 240.076758][T14902] RDX: 0000000000000000 RSI: 0000000000080001 RDI: 0000000000000000 [ 240.076774][T14902] RBP: 00007f9bbd787090 R08: 0000000000000000 R09: 0000000000000000 [ 240.076790][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.076806][T14902] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 240.076831][T14902] [ 240.195960][T14900] loop3: detected capacity change from 0 to 512 [ 240.303796][T14900] EXT4-fs: Ignoring removed nobh option [ 240.312749][T14906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.312766][T14906] IPv6: NLM_F_CREATE should be set when creating new route [ 240.372602][T14900] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4016: corrupted inode contents [ 240.372787][T14900] EXT4-fs (loop3): Remounting filesystem read-only [ 240.372857][T14900] EXT4-fs (loop3): 1 truncate cleaned up [ 240.373245][T14900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.373395][T14900] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.373839][T14900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.374013][ T1292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.374058][ T1292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.374084][ T1292] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 240.556589][T14919] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 240.564933][T14919] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 240.639928][T14909] FAULT_INJECTION: forcing a failure. [ 240.639928][T14909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.653257][T14909] CPU: 0 UID: 0 PID: 14909 Comm: syz.0.4019 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 240.653295][T14909] Tainted: [W]=WARN [ 240.653302][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.653316][T14909] Call Trace: [ 240.653324][T14909] [ 240.653334][T14909] dump_stack_lvl+0xf6/0x150 [ 240.653364][T14909] dump_stack+0x15/0x1a [ 240.653385][T14909] should_fail_ex+0x261/0x270 [ 240.653461][T14909] should_fail+0xb/0x10 [ 240.653486][T14909] should_fail_usercopy+0x1a/0x20 [ 240.653517][T14909] _copy_from_user+0x1c/0xa0 [ 240.653545][T14909] do_ipv6_setsockopt+0x1e0/0x2220 [ 240.653595][T14909] ? kstrtouint+0x7b/0xc0 [ 240.653619][T14909] ? __rcu_read_unlock+0x4e/0x70 [ 240.653670][T14909] ? avc_has_perm_noaudit+0x1cc/0x210 [ 240.653702][T14909] ? selinux_netlbl_socket_setsockopt+0xea/0x2d0 [ 240.653912][T14909] ? avc_has_perm+0xd6/0x150 [ 240.653952][T14909] ipv6_setsockopt+0x57/0x130 [ 240.654014][T14909] rawv6_setsockopt+0x23d/0x460 [ 240.654044][T14909] sock_common_setsockopt+0x64/0x80 [ 240.654130][T14909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 240.654170][T14909] __sys_setsockopt+0x187/0x200 [ 240.654198][T14909] __x64_sys_setsockopt+0x66/0x80 [ 240.654226][T14909] x64_sys_call+0x2a09/0x2e10 [ 240.654324][T14909] do_syscall_64+0xc9/0x1a0 [ 240.654348][T14909] ? clear_bhb_loop+0x25/0x80 [ 240.654370][T14909] ? clear_bhb_loop+0x25/0x80 [ 240.654396][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.654425][T14909] RIP: 0033:0x7f9bbf11e169 [ 240.654441][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.654470][T14909] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.654493][T14909] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 240.654508][T14909] RDX: 00000000000000cd RSI: 0000000000000029 RDI: 0000000000000003 [ 240.654522][T14909] RBP: 00007f9bbd787090 R08: 000000000000005c R09: 0000000000000000 [ 240.654536][T14909] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 240.654630][T14909] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 240.654720][T14909] [ 240.941055][T14932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4026'. [ 240.987669][T14932] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4026'. [ 241.036285][T14941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.043642][T14941] IPv6: NLM_F_CREATE should be set when creating new route [ 241.056901][T14940] loop2: detected capacity change from 0 to 128 [ 241.102779][T14943] loop5: detected capacity change from 0 to 512 [ 241.109732][T14943] EXT4-fs: Ignoring removed nobh option [ 241.163001][T14943] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4030: corrupted inode contents [ 241.199268][T14943] EXT4-fs (loop5): Remounting filesystem read-only [ 241.206842][T14960] capability: warning: `syz.2.4037' uses deprecated v2 capabilities in a way that may be insecure [ 241.221065][T14943] EXT4-fs (loop5): 1 truncate cleaned up [ 241.227217][T14943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.241956][ T4615] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.252641][ T4615] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.268071][T14943] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.278683][ T4615] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 241.292538][T14943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.484687][T14976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.540561][T14984] loop5: detected capacity change from 0 to 2048 [ 241.567773][T14990] FAULT_INJECTION: forcing a failure. [ 241.567773][T14990] name failslab, interval 1, probability 0, space 0, times 0 [ 241.580522][T14990] CPU: 0 UID: 0 PID: 14990 Comm: syz.0.4049 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 241.580559][T14990] Tainted: [W]=WARN [ 241.580566][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.580579][T14990] Call Trace: [ 241.580585][T14990] [ 241.580593][T14990] dump_stack_lvl+0xf6/0x150 [ 241.580618][T14990] dump_stack+0x15/0x1a [ 241.580674][T14990] should_fail_ex+0x261/0x270 [ 241.580698][T14990] should_failslab+0x8f/0xb0 [ 241.580720][T14990] __kmalloc_cache_noprof+0x55/0x320 [ 241.580796][T14990] ? nft_trans_table_add+0x38/0x1a0 [ 241.580818][T14990] nft_trans_table_add+0x38/0x1a0 [ 241.580840][T14990] nf_tables_newtable+0x9df/0xf10 [ 241.580880][T14990] nfnetlink_rcv+0xb6e/0x1610 [ 241.580984][T14990] ? __kfree_skb+0x102/0x150 [ 241.581032][T14990] netlink_unicast+0x605/0x6c0 [ 241.581066][T14990] netlink_sendmsg+0x609/0x720 [ 241.581116][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.581137][T14990] __sock_sendmsg+0x140/0x180 [ 241.581173][T14990] ____sys_sendmsg+0x350/0x4e0 [ 241.581200][T14990] __sys_sendmsg+0x1a0/0x240 [ 241.581318][T14990] __x64_sys_sendmsg+0x46/0x50 [ 241.581341][T14990] x64_sys_call+0x26f3/0x2e10 [ 241.581363][T14990] do_syscall_64+0xc9/0x1a0 [ 241.581388][T14990] ? clear_bhb_loop+0x25/0x80 [ 241.581417][T14990] ? clear_bhb_loop+0x25/0x80 [ 241.581438][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.581459][T14990] RIP: 0033:0x7f9bbf11e169 [ 241.581473][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.581502][T14990] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.581520][T14990] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 241.581533][T14990] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 241.581545][T14990] RBP: 00007f9bbd787090 R08: 0000000000000000 R09: 0000000000000000 [ 241.581556][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.581567][T14990] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 241.581620][T14990] [ 241.583179][T14979] Invalid ELF header magic: != ELF [ 241.614351][T14984] loop5: p1 < > p4 [ 241.793844][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x7 [ 241.799657][T14984] loop5: p4 size 8388608 extends beyond EOD, [ 241.801334][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.806373][T14984] truncated [ 241.835267][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.843208][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.851159][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.859054][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.866869][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.874721][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.882641][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.890482][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.898297][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.906142][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.913972][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.921782][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.929619][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.937400][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.945205][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.952998][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.961435][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.969289][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.977030][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.984880][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 241.992659][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.000553][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.008415][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.016307][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.024197][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.031968][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.039745][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.047575][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.055568][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.063357][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.071317][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.079180][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.087025][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.094816][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.102669][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.110469][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.118242][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.126013][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.133824][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.141596][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.149443][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.157275][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.165118][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.173003][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.180763][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.188638][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.196406][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.204237][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.211995][ T3380] hid-generic 0000:0000:20000003.0004: unknown main item tag 0x0 [ 242.225268][ T3380] hid-generic 0000:0000:20000003.0004: hidraw0: HID v0.01 Device [syz1] on syz1 [ 242.300847][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 242.300862][ T29] audit: type=1400 audit(1745326743.236:11327): avc: denied { write } for pid=15005 comm="syz.1.4053" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.367382][ T29] audit: type=1326 audit(1745326743.296:11328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.392049][ T29] audit: type=1326 audit(1745326743.296:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.419314][ T29] audit: type=1326 audit(1745326743.346:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.443711][ T29] audit: type=1326 audit(1745326743.346:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.467490][ T29] audit: type=1326 audit(1745326743.346:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.491389][ T29] audit: type=1326 audit(1745326743.346:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.515475][ T29] audit: type=1326 audit(1745326743.346:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.515515][ T29] audit: type=1326 audit(1745326743.346:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.515596][ T29] audit: type=1326 audit(1745326743.346:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.3.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 242.522221][T15008] : renamed from vlan0 (while UP) [ 242.592435][T15010] loop3: detected capacity change from 0 to 512 [ 242.604827][T15010] EXT4-fs: Ignoring removed nobh option [ 242.607465][T15006] __nla_validate_parse: 1 callbacks suppressed [ 242.607487][T15006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4053'. [ 242.671751][T15010] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4054: corrupted inode contents [ 242.736544][T15010] EXT4-fs (loop3): Remounting filesystem read-only [ 242.778055][T15010] EXT4-fs (loop3): 1 truncate cleaned up [ 242.795151][ T1292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.805838][ T1292] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 242.826249][T15010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.869299][T15010] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.888478][ T1292] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 242.900095][T15010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.998759][T15036] netlink: 'syz.0.4063': attribute type 21 has an invalid length. [ 243.006826][T15036] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 243.036006][T15042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.178389][T15059] loop2: detected capacity change from 0 to 2048 [ 243.189769][T15059] EXT4-fs (loop2): unable to read superblock [ 243.209473][T15059] FAULT_INJECTION: forcing a failure. [ 243.209473][T15059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.223228][T15059] CPU: 1 UID: 0 PID: 15059 Comm: syz.2.4073 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 243.223266][T15059] Tainted: [W]=WARN [ 243.223275][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.223362][T15059] Call Trace: [ 243.223372][T15059] [ 243.223381][T15059] dump_stack_lvl+0xf6/0x150 [ 243.223413][T15059] dump_stack+0x15/0x1a [ 243.223441][T15059] should_fail_ex+0x261/0x270 [ 243.223527][T15059] should_fail+0xb/0x10 [ 243.223573][T15059] should_fail_usercopy+0x1a/0x20 [ 243.223605][T15059] _copy_from_user+0x1c/0xa0 [ 243.223639][T15059] kstrtouint_from_user+0x84/0x100 [ 243.223743][T15059] ? 0xffffffff81000000 [ 243.223770][T15059] ? selinux_file_permission+0x22d/0x360 [ 243.223792][T15059] proc_fail_nth_write+0x54/0x160 [ 243.223828][T15059] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.224013][T15059] vfs_write+0x295/0x950 [ 243.224034][T15059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.224075][T15059] ? __fget_files+0x186/0x1c0 [ 243.224106][T15059] ksys_write+0xeb/0x1b0 [ 243.224204][T15059] __x64_sys_write+0x42/0x50 [ 243.224226][T15059] x64_sys_call+0x2a45/0x2e10 [ 243.224254][T15059] do_syscall_64+0xc9/0x1a0 [ 243.224287][T15059] ? clear_bhb_loop+0x25/0x80 [ 243.224337][T15059] ? clear_bhb_loop+0x25/0x80 [ 243.224364][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.224391][T15059] RIP: 0033:0x7f526595cc1f [ 243.224409][T15059] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.224433][T15059] RSP: 002b:00007f5263fc7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.224456][T15059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f526595cc1f [ 243.224471][T15059] RDX: 0000000000000001 RSI: 00007f5263fc70a0 RDI: 0000000000000004 [ 243.224547][T15059] RBP: 00007f5263fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.224562][T15059] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 243.224577][T15059] R13: 0000000000000000 R14: 00007f5265b85fa0 R15: 00007ffff79fa3c8 [ 243.224600][T15059] [ 243.332560][T15067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15067 comm=syz.3.4071 [ 243.570269][T15057] syzkaller0: entered promiscuous mode [ 243.576362][T15057] syzkaller0: entered allmulticast mode [ 243.760896][T15077] loop2: detected capacity change from 0 to 128 [ 243.771323][T15077] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.785072][T15077] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.809934][ T4563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.826461][T15082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4079'. [ 243.838574][T15082] netlink: 'syz.1.4079': attribute type 39 has an invalid length. [ 243.875289][T15091] netlink: 'syz.5.4082': attribute type 2 has an invalid length. [ 243.883224][T15091] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4082'. [ 243.902044][T15091] vlan2: entered promiscuous mode [ 243.907160][T15091] macvtap0: entered promiscuous mode [ 243.989530][T15099] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 243.999921][T15099] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 244.190406][T15127] dummy0: entered promiscuous mode [ 244.199920][T15126] dummy0: left promiscuous mode [ 244.225616][T15131] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 244.233915][T15131] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 244.262478][T15135] FAULT_INJECTION: forcing a failure. [ 244.262478][T15135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.275659][T15135] CPU: 1 UID: 0 PID: 15135 Comm: syz.3.4102 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 244.275748][T15135] Tainted: [W]=WARN [ 244.275757][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.275772][T15135] Call Trace: [ 244.275781][T15135] [ 244.275791][T15135] dump_stack_lvl+0xf6/0x150 [ 244.275821][T15135] dump_stack+0x15/0x1a [ 244.275841][T15135] should_fail_ex+0x261/0x270 [ 244.275919][T15135] should_fail+0xb/0x10 [ 244.275943][T15135] should_fail_usercopy+0x1a/0x20 [ 244.276034][T15135] _copy_from_user+0x1c/0xa0 [ 244.276062][T15135] kstrtouint_from_user+0x84/0x100 [ 244.276149][T15135] ? 0xffffffff81000000 [ 244.276165][T15135] ? selinux_file_permission+0x22d/0x360 [ 244.276189][T15135] proc_fail_nth_write+0x54/0x160 [ 244.276283][T15135] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.276321][T15135] vfs_write+0x295/0x950 [ 244.276340][T15135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.276403][T15135] ? __fget_files+0x186/0x1c0 [ 244.276436][T15135] ksys_write+0xeb/0x1b0 [ 244.276460][T15135] __x64_sys_write+0x42/0x50 [ 244.276499][T15135] x64_sys_call+0x2a45/0x2e10 [ 244.276520][T15135] do_syscall_64+0xc9/0x1a0 [ 244.276656][T15135] ? clear_bhb_loop+0x25/0x80 [ 244.276682][T15135] ? clear_bhb_loop+0x25/0x80 [ 244.276753][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.276779][T15135] RIP: 0033:0x7fc76dbecc1f [ 244.276797][T15135] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 244.276818][T15135] RSP: 002b:00007fc76c257030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 244.276841][T15135] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc76dbecc1f [ 244.276857][T15135] RDX: 0000000000000001 RSI: 00007fc76c2570a0 RDI: 0000000000000003 [ 244.276871][T15135] RBP: 00007fc76c257090 R08: 0000000000000000 R09: 0000000000000000 [ 244.276942][T15135] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000002 [ 244.276956][T15135] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 244.276978][T15135] [ 244.583880][T15147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.694547][T15157] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 244.702952][T15157] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 244.810798][T15162] gretap0: left promiscuous mode [ 244.858070][T15162] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.865446][T15162] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.877090][T15162] team_slave_0: left promiscuous mode [ 244.882771][T15162] team_slave_1: left promiscuous mode [ 244.943050][T15173] block device autoloading is deprecated and will be removed. [ 244.977863][T15162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.988403][T15162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.059902][T15162] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.068557][T15162] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.077013][T15162] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.085512][T15162] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.153657][T15167] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 245.162015][T15167] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 245.307729][T15193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.367259][T15202] netlink: 'syz.0.4126': attribute type 33 has an invalid length. [ 245.375313][T15202] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4126'. [ 245.401588][T15201] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 245.409865][T15201] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 245.418562][T15205] SELinux: syz.0.4126 (15205) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 245.563078][T15213] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 245.571399][T15213] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 245.654092][T15219] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 245.662511][T15219] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 245.710807][T15221] SELinux: syz.0.4126 (15221) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 245.738788][T15225] netlink: 'syz.1.4134': attribute type 33 has an invalid length. [ 245.746809][T15225] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4134'. [ 245.792034][T15227] SELinux: syz.1.4134 (15227) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 245.825707][T15229] netlink: 'syz.3.4135': attribute type 33 has an invalid length. [ 245.833645][T15229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4135'. [ 245.911842][T15225] loop1: detected capacity change from 0 to 2048 [ 245.919530][T15225] EXT4-fs: Ignoring removed bh option [ 245.939650][T15229] SELinux: syz.3.4135 (15229) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 245.959843][T15225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.985271][T15229] loop3: detected capacity change from 0 to 2048 [ 245.992185][T15229] EXT4-fs: Ignoring removed bh option [ 246.019841][T15229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.139734][T15238] SELinux: syz.1.4134 (15238) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.220234][T15240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.238436][T15243] SELinux: syz.3.4135 (15243) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.474013][T15259] loop2: detected capacity change from 0 to 1024 [ 246.496137][ T3412] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.528162][T15259] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.540909][ T3412] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.553262][ T3412] EXT4-fs (loop1): This should not happen!! Data will be lost [ 246.553262][ T3412] [ 246.562981][ T3412] EXT4-fs (loop1): Total free blocks count 0 [ 246.569223][ T3412] EXT4-fs (loop1): Free/Dirty block details [ 246.572706][T15259] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.4144: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 246.575212][ T3412] EXT4-fs (loop1): free_blocks=2415919104 [ 246.575230][ T3412] EXT4-fs (loop1): dirty_blocks=8224 [ 246.575245][ T3412] EXT4-fs (loop1): Block reservation details [ 246.610294][ T3412] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 246.632920][T15262] netlink: 'syz.0.4146': attribute type 1 has an invalid length. [ 246.641910][T15259] EXT4-fs error (device loop2): ext4_quota_enable:7129: comm syz.2.4144: Bad quota inode: 3, type: 0 [ 246.652273][ T3412] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 246.677742][T15259] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 246.692745][T15259] EXT4-fs (loop2): mount failed [ 246.705506][T15259] netlink: 'syz.2.4144': attribute type 1 has an invalid length. [ 246.743705][T15259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.844431][ T1292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.859713][ T1292] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.871969][ T1292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 246.871969][ T1292] [ 246.881991][ T1292] EXT4-fs (loop3): Total free blocks count 0 [ 246.888001][ T1292] EXT4-fs (loop3): Free/Dirty block details [ 246.894497][ T1292] EXT4-fs (loop3): free_blocks=2415919104 [ 246.900312][ T1292] EXT4-fs (loop3): dirty_blocks=7968 [ 246.901356][T15274] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 246.905594][ T1292] EXT4-fs (loop3): Block reservation details [ 246.905610][ T1292] EXT4-fs (loop3): i_reserved_data_blocks=498 [ 246.923523][ T1292] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 246.963984][T15273] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 247.096914][T15290] sg_write: data in/out 1717986882/116 bytes for SCSI command 0x30-- guessing data in; [ 247.096914][T15290] program syz.3.4149 not setting count and/or reply_len properly [ 247.145917][T15296] loop2: detected capacity change from 0 to 2048 [ 247.190667][T15296] Alternate GPT is invalid, using primary GPT. [ 247.197120][T15296] loop2: p1 p2 p3 [ 247.364296][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 247.364314][ T29] audit: type=1400 audit(1745326748.296:11648): avc: denied { create } for pid=15320 comm="syz.2.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.394688][ T29] audit: type=1400 audit(1745326748.326:11649): avc: denied { write } for pid=15320 comm="syz.2.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.428208][T15323] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 247.429648][ T29] audit: type=1400 audit(1745326748.356:11650): avc: denied { read } for pid=15322 comm="syz.5.4163" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.460539][ T29] audit: type=1400 audit(1745326748.356:11651): avc: denied { open } for pid=15322 comm="syz.5.4163" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.486258][ T29] audit: type=1400 audit(1745326748.386:11652): avc: denied { ioctl } for pid=15322 comm="+}[@" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.514664][T15325] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 247.523074][T15325] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 247.627957][T15337] loop5: detected capacity change from 0 to 2048 [ 247.635061][T15337] EXT4-fs (loop5): unable to read superblock [ 247.657578][ T29] audit: type=1326 audit(1745326748.586:11653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.5.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7ffc0000 [ 247.681290][ T29] audit: type=1326 audit(1745326748.586:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.5.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7ffc0000 [ 247.705129][ T29] audit: type=1326 audit(1745326748.586:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.5.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc83831e169 code=0x7ffc0000 [ 247.729228][ T29] audit: type=1326 audit(1745326748.586:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.5.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7ffc0000 [ 247.753153][ T29] audit: type=1326 audit(1745326748.586:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.5.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83831e169 code=0x7ffc0000 [ 247.874408][T15358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4176'. [ 247.883562][T15358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4176'. [ 247.893849][T15354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4175'. [ 248.332912][T15391] loop2: detected capacity change from 0 to 512 [ 248.340096][T15391] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.349404][T15391] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 248.360599][T15391] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 248.370164][T15391] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 248.378323][T15391] System zones: 0-2, 18-18, 34-35 [ 248.381633][T15388] netlink: 2168 bytes leftover after parsing attributes in process `syz.0.4188'. [ 248.385351][T15391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.394246][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 248.427260][T11868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.658358][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4201'. [ 248.681334][T15424] xt_connbytes: Forcing CT accounting to be enabled [ 248.687976][T15424] set match dimension is over the limit! [ 248.699858][T15426] usb usb8: usbfs: process 15426 (syz.1.4202) did not claim interface 0 before use [ 248.719895][T15426] 9p: Unknown access argument "5: -22 [ 248.795451][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 248.807333][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4204'. [ 248.821101][T15434] FAULT_INJECTION: forcing a failure. [ 248.821101][T15434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.834269][T15434] CPU: 1 UID: 0 PID: 15434 Comm: syz.2.4204 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 248.834373][T15434] Tainted: [W]=WARN [ 248.834382][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.834403][T15434] Call Trace: [ 248.834411][T15434] [ 248.834419][T15434] dump_stack_lvl+0xf6/0x150 [ 248.834443][T15434] dump_stack+0x15/0x1a [ 248.834534][T15434] should_fail_ex+0x261/0x270 [ 248.834563][T15434] should_fail+0xb/0x10 [ 248.834587][T15434] should_fail_usercopy+0x1a/0x20 [ 248.834617][T15434] _copy_from_user+0x1c/0xa0 [ 248.834647][T15434] copy_msghdr_from_user+0x54/0x2b0 [ 248.834711][T15434] ? __fget_files+0x186/0x1c0 [ 248.834741][T15434] __sys_sendmsg+0x141/0x240 [ 248.834790][T15434] __x64_sys_sendmsg+0x46/0x50 [ 248.834870][T15434] x64_sys_call+0x26f3/0x2e10 [ 248.834897][T15434] do_syscall_64+0xc9/0x1a0 [ 248.834927][T15434] ? clear_bhb_loop+0x25/0x80 [ 248.834960][T15434] ? clear_bhb_loop+0x25/0x80 [ 248.834986][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.835011][T15434] RIP: 0033:0x7f526595e169 [ 248.835029][T15434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.835051][T15434] RSP: 002b:00007f5263fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.835152][T15434] RAX: ffffffffffffffda RBX: 00007f5265b85fa0 RCX: 00007f526595e169 [ 248.835167][T15434] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000004 [ 248.835182][T15434] RBP: 00007f5263fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.835197][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.835211][T15434] R13: 0000000000000000 R14: 00007f5265b85fa0 R15: 00007ffff79fa3c8 [ 248.835234][T15434] [ 249.027601][T15438] sg_write: process 528 (syz.1.4206) changed security contexts after opening file descriptor, this is not allowed. [ 249.073957][T15442] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 249.073957][T15442] program syz.3.4208 not setting count and/or reply_len properly [ 249.107521][T15445] FAULT_INJECTION: forcing a failure. [ 249.107521][T15445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.120792][T15445] CPU: 0 UID: 0 PID: 15445 Comm: syz.1.4210 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 249.120832][T15445] Tainted: [W]=WARN [ 249.120838][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.120850][T15445] Call Trace: [ 249.120857][T15445] [ 249.120865][T15445] dump_stack_lvl+0xf6/0x150 [ 249.120895][T15445] dump_stack+0x15/0x1a [ 249.120916][T15445] should_fail_ex+0x261/0x270 [ 249.120986][T15445] should_fail+0xb/0x10 [ 249.121011][T15445] should_fail_usercopy+0x1a/0x20 [ 249.121043][T15445] _copy_from_user+0x1c/0xa0 [ 249.121078][T15445] sg_write+0x20a/0x770 [ 249.121122][T15445] vfs_writev+0x3f3/0x880 [ 249.121199][T15445] ? get_pid_task+0x94/0xd0 [ 249.121222][T15445] ? __pfx_sg_write+0x10/0x10 [ 249.121290][T15445] do_writev+0xf7/0x230 [ 249.121330][T15445] __x64_sys_writev+0x45/0x50 [ 249.121356][T15445] x64_sys_call+0x1d68/0x2e10 [ 249.121383][T15445] do_syscall_64+0xc9/0x1a0 [ 249.121407][T15445] ? clear_bhb_loop+0x25/0x80 [ 249.121432][T15445] ? clear_bhb_loop+0x25/0x80 [ 249.121506][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.121539][T15445] RIP: 0033:0x7f692e1de169 [ 249.121594][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.121615][T15445] RSP: 002b:00007f692c847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 249.121637][T15445] RAX: ffffffffffffffda RBX: 00007f692e405fa0 RCX: 00007f692e1de169 [ 249.121651][T15445] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000005 [ 249.121665][T15445] RBP: 00007f692c847090 R08: 0000000000000000 R09: 0000000000000000 [ 249.121679][T15445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.121754][T15445] R13: 0000000000000000 R14: 00007f692e405fa0 R15: 00007fff9bd0efc8 [ 249.121774][T15445] [ 249.342315][T15455] netlink: 'syz.1.4213': attribute type 33 has an invalid length. [ 249.350339][T15455] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4213'. [ 249.353455][T15455] SELinux: syz.1.4213 (15455) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 249.386238][T15455] loop1: detected capacity change from 0 to 2048 [ 249.393166][T15455] EXT4-fs: Ignoring removed bh option [ 249.393254][T15453] loop2: detected capacity change from 0 to 512 [ 249.405536][T15453] EXT4-fs: Ignoring removed nobh option [ 249.433166][T15455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.436809][T15453] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.4214: corrupted inode contents [ 249.463262][T15453] EXT4-fs (loop2): Remounting filesystem read-only [ 249.470118][T15453] EXT4-fs (loop2): 1 truncate cleaned up [ 249.476271][T15453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.489886][T15453] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.510054][ T3412] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.520671][ T3412] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 249.531381][T15453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.554951][ T3412] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 249.560263][T15472] loop9: detected capacity change from 0 to 7 [ 249.605971][T15470] loop5: detected capacity change from 0 to 2048 [ 249.619719][T15470] EXT4-fs (loop5): unable to read superblock [ 249.635160][T15472] Buffer I/O error on dev loop9, logical block 0, async page read [ 249.643553][T15472] Buffer I/O error on dev loop9, logical block 0, async page read [ 249.651500][T15472] loop9: unable to read partition table [ 249.657583][T15475] SELinux: syz.1.4213 (15475) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 249.671464][T15472] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 249.671464][T15472] U) failed (rc=-5) [ 249.799005][T15477] loop2: detected capacity change from 0 to 8192 [ 249.809178][T15477] vfat: Unknown parameter '' [ 249.960016][ T4568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.975618][ T4568] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 249.987947][ T4568] EXT4-fs (loop1): This should not happen!! Data will be lost [ 249.987947][ T4568] [ 249.997701][ T4568] EXT4-fs (loop1): Total free blocks count 0 [ 250.003815][ T4568] EXT4-fs (loop1): Free/Dirty block details [ 250.009746][ T4568] EXT4-fs (loop1): free_blocks=2415919104 [ 250.015605][ T4568] EXT4-fs (loop1): dirty_blocks=8224 [ 250.021109][ T4568] EXT4-fs (loop1): Block reservation details [ 250.027169][ T4568] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 250.040990][ T4568] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 250.198397][T15484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 250.205250][T15484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.212941][T15484] vhci_hcd vhci_hcd.0: Device attached [ 250.222695][T15486] vhci_hcd: connection closed [ 250.223071][ T3412] vhci_hcd: stop threads [ 250.232266][ T3412] vhci_hcd: release socket [ 250.236698][ T3412] vhci_hcd: disconnect device [ 250.441701][T15495] FAULT_INJECTION: forcing a failure. [ 250.441701][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 250.454526][T15495] CPU: 0 UID: 0 PID: 15495 Comm: syz.3.4225 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 250.454571][T15495] Tainted: [W]=WARN [ 250.454579][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.454594][T15495] Call Trace: [ 250.454603][T15495] [ 250.454611][T15495] dump_stack_lvl+0xf6/0x150 [ 250.454640][T15495] dump_stack+0x15/0x1a [ 250.454657][T15495] should_fail_ex+0x261/0x270 [ 250.454688][T15495] should_failslab+0x8f/0xb0 [ 250.454747][T15495] kmem_cache_alloc_noprof+0x59/0x340 [ 250.454777][T15495] ? audit_log_start+0x37f/0x6e0 [ 250.454811][T15495] audit_log_start+0x37f/0x6e0 [ 250.454959][T15495] ? kstrtouint+0x7b/0xc0 [ 250.454986][T15495] audit_seccomp+0x49/0x100 [ 250.455018][T15495] __seccomp_filter+0x694/0x10e0 [ 250.455046][T15495] ? vfs_write+0x669/0x950 [ 250.455105][T15495] __secure_computing+0x7e/0x150 [ 250.455205][T15495] syscall_trace_enter+0xcf/0x1f0 [ 250.455231][T15495] ? fpregs_assert_state_consistent+0x83/0xa0 [ 250.455269][T15495] do_syscall_64+0xaa/0x1a0 [ 250.455299][T15495] ? clear_bhb_loop+0x25/0x80 [ 250.455382][T15495] ? clear_bhb_loop+0x25/0x80 [ 250.455407][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.455433][T15495] RIP: 0033:0x7fc76dbee169 [ 250.455451][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.455473][T15495] RSP: 002b:00007fc76c257038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 250.455503][T15495] RAX: ffffffffffffffda RBX: 00007fc76de15fa0 RCX: 00007fc76dbee169 [ 250.455518][T15495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.455532][T15495] RBP: 00007fc76c257090 R08: 0000000000000000 R09: 0000000000000000 [ 250.455546][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.455559][T15495] R13: 0000000000000000 R14: 00007fc76de15fa0 R15: 00007fff3ca620f8 [ 250.455583][T15495] [ 250.747754][T15501] loop5: detected capacity change from 0 to 128 [ 250.756340][T15501] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.768764][T15501] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.928654][T15512] loop2: detected capacity change from 0 to 128 [ 250.948139][T14317] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.969135][T15518] loop5: detected capacity change from 0 to 128 [ 251.041053][T15519] loop3: detected capacity change from 0 to 1024 [ 251.047917][T15519] EXT4-fs: Ignoring removed i_version option [ 251.054901][T15519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.063712][T15519] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 251.073917][T15519] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 251.161401][T15523] loop5: detected capacity change from 0 to 512 [ 251.242392][T15523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 251.295524][T15523] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.337974][T15530] x_tables: duplicate underflow at hook 1 [ 251.377496][T14317] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 251.426063][T15534] FAULT_INJECTION: forcing a failure. [ 251.426063][T15534] name failslab, interval 1, probability 0, space 0, times 0 [ 251.438971][T15534] CPU: 0 UID: 0 PID: 15534 Comm: syz.5.4239 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 251.439011][T15534] Tainted: [W]=WARN [ 251.439019][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.439036][T15534] Call Trace: [ 251.439043][T15534] [ 251.439052][T15534] dump_stack_lvl+0xf6/0x150 [ 251.439161][T15534] dump_stack+0x15/0x1a [ 251.439181][T15534] should_fail_ex+0x261/0x270 [ 251.439210][T15534] should_failslab+0x8f/0xb0 [ 251.439235][T15534] kmem_cache_alloc_noprof+0x59/0x340 [ 251.439288][T15534] ? __anon_vma_prepare+0x73/0x310 [ 251.439314][T15534] __anon_vma_prepare+0x73/0x310 [ 251.439333][T15534] ? do_wp_page+0x1861/0x24e0 [ 251.439358][T15534] do_wp_page+0x1869/0x24e0 [ 251.439415][T15534] ? __rcu_read_lock+0x36/0x50 [ 251.439444][T15534] handle_mm_fault+0xc6c/0x2e80 [ 251.439471][T15534] ? mas_walk+0x204/0x320 [ 251.439493][T15534] ? __rcu_read_unlock+0x4e/0x70 [ 251.439522][T15534] exc_page_fault+0x3b9/0x6a0 [ 251.439550][T15534] asm_exc_page_fault+0x26/0x30 [ 251.439627][T15534] RIP: 0033:0x7fc8381e0be3 [ 251.439646][T15534] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 251.439668][T15534] RSP: 002b:00007fc8369864a0 EFLAGS: 00010202 [ 251.439687][T15534] RAX: 0000000000000400 RBX: 00007fc836986540 RCX: 00007fc82e567000 [ 251.439701][T15534] RDX: 00007fc8369866e0 RSI: 0000000000000011 RDI: 00007fc8369865e0 [ 251.439716][T15534] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003bd [ 251.439731][T15534] R10: 00000000000003cc R11: 00007fc836986540 R12: 0000000000000001 [ 251.439744][T15534] R13: 00007fc8383bbf40 R14: 0000000000000020 R15: 00007fc8369865e0 [ 251.439827][T15534] [ 251.618474][T15534] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 251.631981][T15534] loop5: detected capacity change from 0 to 512 [ 251.673101][T15534] EXT4-fs (loop5): 1 orphan inode deleted [ 251.679848][T15534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.692718][ T4563] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 251.692772][T15534] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.724791][T14317] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.747721][T15545] FAULT_INJECTION: forcing a failure. [ 251.747721][T15545] name failslab, interval 1, probability 0, space 0, times 0 [ 251.762211][T15545] CPU: 1 UID: 0 PID: 15545 Comm: syz.5.4242 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 251.762259][T15545] Tainted: [W]=WARN [ 251.762265][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.762276][T15545] Call Trace: [ 251.762281][T15545] [ 251.762287][T15545] dump_stack_lvl+0xf6/0x150 [ 251.762390][T15545] dump_stack+0x15/0x1a [ 251.762405][T15545] should_fail_ex+0x261/0x270 [ 251.762427][T15545] should_failslab+0x8f/0xb0 [ 251.762446][T15545] __kvmalloc_node_noprof+0x12c/0x520 [ 251.762551][T15545] ? io_sqe_buffers_register+0xcf/0x550 [ 251.762582][T15545] io_sqe_buffers_register+0xcf/0x550 [ 251.762615][T15545] __se_sys_io_uring_register+0xb04/0x1f50 [ 251.762703][T15545] ? kstrtouint_from_user+0xbf/0x100 [ 251.762724][T15545] ? __rcu_read_unlock+0x4e/0x70 [ 251.762742][T15545] ? get_pid_task+0x94/0xd0 [ 251.762758][T15545] ? proc_fail_nth_write+0x12d/0x160 [ 251.762828][T15545] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 251.762857][T15545] ? vfs_write+0x669/0x950 [ 251.762895][T15545] ? ktime_get+0x1ef/0x210 [ 251.762916][T15545] ? __fget_files+0x186/0x1c0 [ 251.762947][T15545] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 251.762973][T15545] __x64_sys_io_uring_register+0x55/0x70 [ 251.763013][T15545] x64_sys_call+0xb9d/0x2e10 [ 251.763092][T15545] do_syscall_64+0xc9/0x1a0 [ 251.763114][T15545] ? clear_bhb_loop+0x25/0x80 [ 251.763137][T15545] ? clear_bhb_loop+0x25/0x80 [ 251.763206][T15545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.763233][T15545] RIP: 0033:0x7fc83831e169 [ 251.763247][T15545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.763263][T15545] RSP: 002b:00007fc836987038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 251.763359][T15545] RAX: ffffffffffffffda RBX: 00007fc838545fa0 RCX: 00007fc83831e169 [ 251.763370][T15545] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 251.763381][T15545] RBP: 00007fc836987090 R08: 0000000000000000 R09: 0000000000000000 [ 251.763391][T15545] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 251.763402][T15545] R13: 0000000000000000 R14: 00007fc838545fa0 R15: 00007ffe285864a8 [ 251.763420][T15545] [ 252.188429][T15568] netlink: 'syz.0.4252': attribute type 13 has an invalid length. [ 252.235487][T15568] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.242929][T15568] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.256884][T15568] team_slave_0: left promiscuous mode [ 252.262617][T15568] team_slave_1: left promiscuous mode [ 252.362977][T15568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.374969][T15568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.414551][T15568] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.423017][T15568] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.431690][T15568] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.440342][T15568] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.443376][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 252.443415][ T29] audit: type=1326 audit(2000000001.690:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.478972][ T29] audit: type=1326 audit(2000000001.700:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.502844][ T29] audit: type=1326 audit(2000000001.700:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.507654][T15587] loop3: detected capacity change from 0 to 512 [ 252.526508][ T29] audit: type=1326 audit(2000000001.700:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.535418][T15587] EXT4-fs: Ignoring removed nobh option [ 252.556562][ T29] audit: type=1326 audit(2000000001.700:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.585777][ T29] audit: type=1326 audit(2000000001.700:12088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.592360][T15587] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.4260: corrupted inode contents [ 252.609559][ T29] audit: type=1326 audit(2000000001.700:12089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.609594][ T29] audit: type=1326 audit(2000000001.700:12090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.609695][ T29] audit: type=1326 audit(2000000001.700:12091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.623699][T15587] EXT4-fs (loop3): Remounting filesystem read-only [ 252.645090][ T29] audit: type=1326 audit(2000000001.700:12092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15586 comm="syz.3.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc76dbee169 code=0x7ffc0000 [ 252.723094][T15587] EXT4-fs (loop3): 1 truncate cleaned up [ 252.729488][T15587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.742219][T15587] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.742816][ T4568] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.758422][T15587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.763311][ T4568] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.783667][ T4568] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 252.801590][T15583] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 252.810130][T15583] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 252.819418][T15592] FAULT_INJECTION: forcing a failure. [ 252.819418][T15592] name failslab, interval 1, probability 0, space 0, times 0 [ 252.832248][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.0.4261 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 252.832367][T15592] Tainted: [W]=WARN [ 252.832376][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.832392][T15592] Call Trace: [ 252.832399][T15592] [ 252.832407][T15592] dump_stack_lvl+0xf6/0x150 [ 252.832432][T15592] dump_stack+0x15/0x1a [ 252.832501][T15592] should_fail_ex+0x261/0x270 [ 252.832531][T15592] should_failslab+0x8f/0xb0 [ 252.832558][T15592] kmem_cache_alloc_noprof+0x59/0x340 [ 252.832666][T15592] ? key_alloc+0x2a6/0xa40 [ 252.832731][T15592] key_alloc+0x2a6/0xa40 [ 252.832770][T15592] __key_create_or_update+0x680/0x780 [ 252.832820][T15592] key_create_or_update+0x42/0x60 [ 252.832862][T15592] __se_sys_add_key+0x2a1/0x330 [ 252.832884][T15592] ? fput+0x99/0xd0 [ 252.832929][T15592] __x64_sys_add_key+0x67/0x80 [ 252.832955][T15592] x64_sys_call+0x1f10/0x2e10 [ 252.832977][T15592] do_syscall_64+0xc9/0x1a0 [ 252.833010][T15592] ? clear_bhb_loop+0x25/0x80 [ 252.833033][T15592] ? clear_bhb_loop+0x25/0x80 [ 252.833059][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.833085][T15592] RIP: 0033:0x7f9bbf11e169 [ 252.833113][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.833191][T15592] RSP: 002b:00007f9bbd787038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 252.833214][T15592] RAX: ffffffffffffffda RBX: 00007f9bbf345fa0 RCX: 00007f9bbf11e169 [ 252.833229][T15592] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000000 [ 252.833296][T15592] RBP: 00007f9bbd787090 R08: fffffffffffffffd R09: 0000000000000000 [ 252.833311][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.833325][T15592] R13: 0000000000000000 R14: 00007f9bbf345fa0 R15: 00007ffcb7f44158 [ 252.833392][T15592] [ 252.866727][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 253.085123][T15607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4267'. [ 253.095289][T15607] netem: change failed [ 253.153544][T15616] netlink: 'syz.3.4271': attribute type 33 has an invalid length. [ 253.161753][T15616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4271'. [ 253.176263][T15615] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 253.178017][T15616] SELinux: syz.3.4271 (15616) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 253.201769][T15618] usb usb8: usbfs: process 15618 (syz.0.4272) did not claim interface 0 before use [ 253.202401][T15620] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 253.219428][T15620] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 253.225272][T15618] 9p: Unknown access argument "5: -22 [ 253.245213][T15616] loop3: detected capacity change from 0 to 2048 [ 253.256615][T15616] EXT4-fs: Ignoring removed bh option [ 253.281656][T15616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.360263][T15629] loop1: detected capacity change from 0 to 512 [ 253.369730][T15629] EXT4-fs: Ignoring removed nobh option [ 253.395323][T15629] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.4275: corrupted inode contents [ 253.421888][T15629] EXT4-fs (loop1): Remounting filesystem read-only [ 253.435550][T15635] SELinux: syz.3.4271 (15635) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 253.452527][T15629] EXT4-fs (loop1): 1 truncate cleaned up [ 253.461172][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 253.472152][ T4563] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 253.482891][ T4563] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 253.494115][T15629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.509305][T15629] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.536936][ T4563] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 253.549543][T15629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.687179][ T4568] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 253.703971][ T4568] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 253.716224][ T4568] EXT4-fs (loop3): This should not happen!! Data will be lost [ 253.716224][ T4568] [ 253.726032][ T4568] EXT4-fs (loop3): Total free blocks count 0 [ 253.732110][ T4568] EXT4-fs (loop3): Free/Dirty block details [ 253.738080][ T4568] EXT4-fs (loop3): free_blocks=2415919104 [ 253.743900][ T4568] EXT4-fs (loop3): dirty_blocks=8224 [ 253.749230][ T4568] EXT4-fs (loop3): Block reservation details [ 253.755213][ T4568] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 253.765579][ T4568] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 253.821012][T15661] usb usb8: usbfs: process 15661 (syz.5.4285) did not claim interface 0 before use [ 253.837675][T15661] 9p: Unknown access argument "5: -22 [ 254.129354][T15678] loop5: detected capacity change from 0 to 512 [ 254.136321][T15678] EXT4-fs: Ignoring removed nobh option [ 254.162706][T15678] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.4291: corrupted inode contents [ 254.188282][T15678] EXT4-fs (loop5): Remounting filesystem read-only [ 254.203072][T15678] EXT4-fs (loop5): 1 truncate cleaned up [ 254.216897][T15678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.231466][ T4568] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.242558][ T4568] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.249890][T15678] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.265052][ T4568] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 254.275686][T15678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.318567][T15687] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 254.364406][T15687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.378316][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4294'. [ 254.390726][T15697] loop5: detected capacity change from 0 to 128 [ 254.401458][T15695] bond2 (unregistering): Released all slaves [ 254.456493][T15703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4300'. [ 254.465731][T15703] netlink: 30 bytes leftover after parsing attributes in process `syz.1.4300'. [ 254.474827][T15703] netlink: 30 bytes leftover after parsing attributes in process `syz.1.4300'. [ 254.544984][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 254.572650][T15713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4306'. [ 254.638865][T15718] sd 0:0:1:0: device reset [ 254.652838][T15725] ================================================================== [ 254.660970][T15725] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 254.667873][T15725] [ 254.670214][T15725] write to 0xffff888104578a10 of 8 bytes by task 15720 on cpu 0: [ 254.677946][T15725] call_rcu+0x3d/0x430 [ 254.682081][T15725] mas_replace_node+0x2fd/0x430 [ 254.687414][T15725] mas_wr_store_entry+0x1e80/0x2460 [ 254.692743][T15725] mas_store_prealloc+0x6d5/0x960 [ 254.697796][T15725] vma_iter_store_new+0x1d3/0x210 [ 254.702943][T15725] vma_complete+0x12b/0x570 [ 254.707553][T15725] __split_vma+0x56c/0x630 [ 254.712005][T15725] vma_modify+0x105/0x200 [ 254.716379][T15725] vma_modify_flags+0x10a/0x140 [ 254.721237][T15725] mprotect_fixup+0x30f/0x5d0 [ 254.725954][T15725] do_mprotect_pkey+0x6ce/0x9a0 [ 254.730848][T15725] __x64_sys_mprotect+0x48/0x60 [ 254.735723][T15725] x64_sys_call+0x272f/0x2e10 [ 254.740705][T15725] do_syscall_64+0xc9/0x1a0 [ 254.745441][T15725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.751462][T15725] [ 254.753791][T15725] read to 0xffff888104578a10 of 8 bytes by task 15725 on cpu 1: [ 254.761454][T15725] mtree_range_walk+0x1b3/0x460 [ 254.766319][T15725] mas_walk+0x16e/0x320 [ 254.770492][T15725] lock_vma_under_rcu+0xa7/0x340 [ 254.775443][T15725] exc_page_fault+0x150/0x6a0 [ 254.780126][T15725] asm_exc_page_fault+0x26/0x30 [ 254.784982][T15725] [ 254.787308][T15725] Reported by Kernel Concurrency Sanitizer on: [ 254.793653][T15725] CPU: 1 UID: 0 PID: 15725 Comm: syz.0.4309 Tainted: G W 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 254.807828][T15725] Tainted: [W]=WARN [ 254.811640][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.821703][T15725] ==================================================================