last executing test programs: 3m4.962471547s ago: executing program 3 (id=766): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x200200, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@quota}]}, 0x1, 0x4f9, &(0x7f00000079c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r4, 0x2ff5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x0, 0x0, 0x2000000000000000}) 3m4.691470544s ago: executing program 3 (id=769): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) 3m4.610330762s ago: executing program 3 (id=770): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0, 0x261c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/156, 0x9d}, {&(0x7f0000004000)=""/4059, 0xfe9}, {&(0x7f0000001040)=""/4121, 0x1010}, {&(0x7f00000002c0)=""/60, 0x2c}, {&(0x7f0000000340)=""/158, 0xf1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000780)=""/114, 0x6b}], 0x7, 0x0, 0x6ad01e860514292c}, 0x40012120) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x2c004080) 3m3.705066881s ago: executing program 3 (id=788): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}]}, 0x1, 0x783, &(0x7f0000002200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2e0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2e0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) eventfd(0xe382) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000010000000c0000000900000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) (async) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize}, {@noextend}, {@noextend}, {@version_9p2000}, {@cache_none}, {@cache_none}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'nodiscard'}}]}}) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0x1}]) (async) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0x1}]) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, 0x1, 0x4, [@remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x110) (async) creat(&(0x7f0000000000)='./file0/file0\x00', 0x110) 3m2.752786504s ago: executing program 3 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m1.88225257s ago: executing program 3 (id=819): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x12) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70f, 0x9800000000000000, 0xff, 0x1, 0x80000000003, 0x0, 0x5, 0x6, 0x3ff, 0x4, 0x100, 0x800f, 0x9, 0x405, 0x9}}, 0xa0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff28, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f000001a840)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200376200000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000008000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) 3m1.866512401s ago: executing program 32 (id=819): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x12) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70f, 0x9800000000000000, 0xff, 0x1, 0x80000000003, 0x0, 0x5, 0x6, 0x3ff, 0x4, 0x100, 0x800f, 0x9, 0x405, 0x9}}, 0xa0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff28, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f000001a840)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200376200000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000008000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) 47.297535606s ago: executing program 1 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 47.122210983s ago: executing program 1 (id=3019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0xfffffff7, {{0xa, 0x3, 0xffffffbb, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x80040000, @dev={0xfe, 0x80, '\x00', 0x46}}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000"], 0x10c}}, 0x0) 47.04914294s ago: executing program 1 (id=3022): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f0600080000000000000009000000000000001184"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc20"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 46.832769572s ago: executing program 1 (id=3027): r0 = socket(0x2b, 0x80801, 0x1) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nombcache}, {@resgid}, {@minixdf}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xfe, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) read(r3, &(0x7f0000000400)=""/4096, 0x1000) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf25120000000800080008008dc678e0f9bc27030000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/54, 0x36}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x73a0}], 0x2, 0x42, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000001b00)={0x15, 0x110, 0xfa00, {r11, 0x5839, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @ib={0x1b, 0x7fff, 0xf52a, {"d06e737740d1f1b13a94e7d34a2b90e7"}, 0xffffffffffff8000, 0x3db}}}, 0x118) 46.697387205s ago: executing program 1 (id=3030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 46.216059912s ago: executing program 1 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109026c000201f740050904000001020d00000824060001c25ae705240001000d240f010700000000080300026e7b458b06241ac300020824070804000400052401010909058103cf03730ba80904090000020d00000904010102020d00000905820208000606050905030200000905ffa0a2c3ab81cba14b6974d5fbee60b54af3f7ea2bdc0bc98aaf1094a5147ff3ba36e9db0beb41e0b3d994cbffa05b27659428300b31f0d7e726f453e551628e0e480a4f157a8ae18b92ce29b2c88c05f91ef4d1fef0bed7b1"], &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x3, 0x0, 0x4, 0xff, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x8, [{0xd0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/356]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x400a}}, {0x4a, &(0x7f0000000b40)=ANY=[@ANYBLOB="4a039bd717a595eeedc5e2c54f72f2581e1c83e2e466f391593c812b1153300dbc05c2c705b3c44193c0c3d614f6e8145e0ec735780c18861b31797a5a5f4ac2c24d36337dcbac9fdcbf2b4dc7ccf4f684e779c835c30e3ba36a845371fa721fd76865c50d1bbcd246c97ac4313a35a4d49622717ccae8ae4151e468e7e5dca6cdb8641032132de71cfd266f7ee413e20eaad55ac51992f98d80f62b4b3c096fb451e00610214bb8466408c62f9cb28f18049a86a2a2444e"]}, {0xed, &(0x7f0000000840)=ANY=[@ANYBLOB="ed03fa79487e54fd8aecb0af938e2ede5188c94a51e0b250892c9e5c3faaffa13eb91009f15cab2c73bde09a53599cb771795c1e58db20de5413c73f5cb0484e9d7a1db3674cc92e91fd7d919211f963cffcfbc7872e86667ce873aef6679a1514589125f70b27ef842eb1d7712023ba0347804ee66147c97b77724363d10200000094afc76b5393bc61a847018360306d1e128372128a1670cd54f06fb68d5ce81393fc455344a924e5eba2169d62bc44bfe66ffe71ab41c3d7f9319380f242267573f7347bd4c96b8d65549bc5497320067dea353e4b79477fa69a6875c6f53987e9012a417bf2a20553675ea4594e220e414d4d62099ff6f9854a044dfbd7c8498c1761c991488b67e9b5c80515b50a2cfa6345c9e0c2281bb6409858adaa5d53247b03276656075733050a08af97b459ea49fe737c1efaf75ee86e57869afe3edb3093844d82d7dbad386233a2f01c06786af472b23f48c35d7d30faaeac971ebcb5b85593511f"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x418}}]}) 46.215675102s ago: executing program 33 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109026c000201f740050904000001020d00000824060001c25ae705240001000d240f010700000000080300026e7b458b06241ac300020824070804000400052401010909058103cf03730ba80904090000020d00000904010102020d00000905820208000606050905030200000905ffa0a2c3ab81cba14b6974d5fbee60b54af3f7ea2bdc0bc98aaf1094a5147ff3ba36e9db0beb41e0b3d994cbffa05b27659428300b31f0d7e726f453e551628e0e480a4f157a8ae18b92ce29b2c88c05f91ef4d1fef0bed7b1"], &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x3, 0x0, 0x4, 0xff, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x8, [{0xd0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/356]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x400a}}, {0x4a, &(0x7f0000000b40)=ANY=[@ANYBLOB="4a039bd717a595eeedc5e2c54f72f2581e1c83e2e466f391593c812b1153300dbc05c2c705b3c44193c0c3d614f6e8145e0ec735780c18861b31797a5a5f4ac2c24d36337dcbac9fdcbf2b4dc7ccf4f684e779c835c30e3ba36a845371fa721fd76865c50d1bbcd246c97ac4313a35a4d49622717ccae8ae4151e468e7e5dca6cdb8641032132de71cfd266f7ee413e20eaad55ac51992f98d80f62b4b3c096fb451e00610214bb8466408c62f9cb28f18049a86a2a2444e"]}, {0xed, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x418}}]}) 42.899342198s ago: executing program 4 (id=3093): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x18ff5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x12) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70f, 0x9800000000000000, 0xff, 0x1, 0x80000000003, 0x0, 0x5, 0x6, 0x3ff, 0x4, 0x100, 0x800f, 0x9, 0x405, 0x9}}, 0xa0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000005c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff28, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) 42.763980311s ago: executing program 4 (id=3096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a300000000014000780"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 42.734019384s ago: executing program 4 (id=3097): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0'}, 0x29) 42.649293412s ago: executing program 4 (id=3098): r0 = socket(0x2b, 0x80801, 0x1) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nombcache}, {@resgid}, {@minixdf}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xfe, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) read(r3, &(0x7f0000000400)=""/4096, 0x1000) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf25120000000800080008008dc678e0f9bc27030000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/54, 0x36}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x73a0}], 0x2, 0x42, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000001b00)={0x15, 0x110, 0xfa00, {r11, 0x5839, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @ib={0x1b, 0x7fff, 0xf52a, {"d06e737740d1f1b13a94e7d34a2b90e7"}, 0xffffffffffff8000, 0x3db}}}, 0x118) 42.542211393s ago: executing program 4 (id=3101): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 41.879012118s ago: executing program 4 (id=3110): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0, 0x261c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/156, 0x9d}, {&(0x7f0000004000)=""/4059, 0xfe9}, {&(0x7f0000001040)=""/4121, 0x1010}, {&(0x7f00000002c0)=""/60, 0x2c}, {&(0x7f0000000340)=""/158, 0xf1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000780)=""/114, 0x6b}], 0x7, 0x0, 0x6ad01e860514292c}, 0x40012120) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x2c004080) 41.873663849s ago: executing program 34 (id=3110): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0, 0x261c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/156, 0x9d}, {&(0x7f0000004000)=""/4059, 0xfe9}, {&(0x7f0000001040)=""/4121, 0x1010}, {&(0x7f00000002c0)=""/60, 0x2c}, {&(0x7f0000000340)=""/158, 0xf1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000780)=""/114, 0x6b}], 0x7, 0x0, 0x6ad01e860514292c}, 0x40012120) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x2c004080) 2.010019133s ago: executing program 0 (id=3757): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4000000) 1.909032093s ago: executing program 0 (id=3761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x4, 0x300, 0x4, 0x20}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="00000085f3000000000000181200005e0486138c43266d5b00aa", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a183000000000000000005"], 0x28}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r13, 0xffffffffffffffff, 0x0) 1.878999246s ago: executing program 0 (id=3762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.813354642s ago: executing program 0 (id=3764): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x30, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknodat$loop(0xffffffffffffffff, 0x0, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x10c}}, 0x0) 1.679094095s ago: executing program 0 (id=3769): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = socket$inet6(0x10, 0x1, 0x7) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.616046501s ago: executing program 0 (id=3770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000180)={0x93, [0x800003, 0xe], 0x3}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 1.158225657s ago: executing program 5 (id=3776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 1.157721667s ago: executing program 7 (id=3777): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) r8 = socket$inet6(0x10, 0x1, 0x7) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.148192618s ago: executing program 5 (id=3778): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) io_uring_setup(0x6a7b, &(0x7f0000000000)={0x0, 0x9d1d, 0x40, 0x0, 0x3e4}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="080001"], 0x90}}, 0x0) 1.1205588s ago: executing program 7 (id=3779): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.013992001s ago: executing program 5 (id=3780): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, 0x0, &(0x7f00000005c0)}, 0x20) 950.094687ms ago: executing program 5 (id=3781): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0'}, 0x29) 949.896377ms ago: executing program 5 (id=3782): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 927.637629ms ago: executing program 5 (id=3783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 626.478119ms ago: executing program 6 (id=3786): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x7, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x154}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffd80, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79800951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920323f9a94100"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 537.186207ms ago: executing program 6 (id=3788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 504.783651ms ago: executing program 6 (id=3790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x4, 0x300, 0x4, 0x20}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="00000085f3000000000000181200005e0486138c43266d5b00aa", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a183000000000000000005"], 0x28}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r14, 0xffffffffffffffff, 0x0) 356.921815ms ago: executing program 6 (id=3791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 332.333278ms ago: executing program 6 (id=3792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x1, 0x7800, 0x3, 0x10001, {{0x8, 0x4, 0x3, 0x31, 0x20, 0x68, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0xb, 0xfd, [@dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="270000003000040000000000", @ANYRES32=r4, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000000030000008759080000000000232330000000000049ba300001000000b38001000d000000186a00000200000000000000080000009566e100000000000000950000000005000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x92, &(0x7f00000001c0)=""/146, 0x41100, 0x92, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x0, 0xffffffff, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r6], 0x0, 0x10, 0x7}, 0x94) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000840)="f5b8df7af6b539aa4cdfe3bc4fe8d9886aee78c4cc6bba4dbded13e19e15c10ed14233a2a522098aff3300cac376f23bef634c495114ad182fc745d951aed267bfbe9c1a1042d4e219e79e9eebce1a0dde46", 0x52}], 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000740)={r8}) 322.403769ms ago: executing program 7 (id=3793): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 281.029333ms ago: executing program 6 (id=3794): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={0x0, 0x261c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRES32=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/156, 0x9d}, {&(0x7f0000004000)=""/4059, 0xfe9}, {&(0x7f0000001040)=""/4121, 0x1010}, {&(0x7f00000002c0)=""/60, 0x2c}, {&(0x7f0000000340)=""/158, 0xf1}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000780)=""/114, 0x6b}], 0x7, 0x0, 0x6ad01e860514292c}, 0x40012120) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x2c004080) 280.581393ms ago: executing program 7 (id=3795): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x30, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mknodat$loop(0xffffffffffffffff, 0x0, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f"], 0x10c}}, 0x0) 276.416693ms ago: executing program 2 (id=3796): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40040, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 184.192332ms ago: executing program 7 (id=3797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') sigaltstack(0x0, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x31}) sigaltstack(&(0x7f0000000480)={0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 101.823961ms ago: executing program 2 (id=3801): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x7, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r5, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x60, '\x00', r5, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xfffffd80, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db79800951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920323f9a94100"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 92.451821ms ago: executing program 7 (id=3802): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40040, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 0s ago: executing program 2 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0xee01, 0xffffffffffffffff) acct(0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000002c0)) stat(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) kernel console output (not intermixed with test programs): audit(1761171530.728:22823): avc: denied { search } for pid=3041 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.396181][ T29] audit: type=1400 audit(1761171530.728:22824): avc: denied { remove_name } for pid=3041 comm="dhcpcd" name="pid" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.418434][ T29] audit: type=1400 audit(1761171530.728:22825): avc: denied { unlink } for pid=3041 comm="dhcpcd" name="pid" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.534059][ T29] audit: type=1326 audit(1761171530.888:22826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.0.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911c48efc9 code=0x7ffc0000 [ 222.557906][ T29] audit: type=1326 audit(1761171530.888:22827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.0.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911c48efc9 code=0x7ffc0000 [ 222.608588][ T29] audit: type=1326 audit(1761171530.908:22828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.0.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f911c48efc9 code=0x7ffc0000 [ 222.632420][ T29] audit: type=1326 audit(1761171530.908:22829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.0.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911c48efc9 code=0x7ffc0000 [ 222.656150][ T29] audit: type=1326 audit(1761171530.908:22830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.0.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911c48efc9 code=0x7ffc0000 [ 222.681058][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 222.689991][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 222.698967][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3211'. [ 222.721423][T12878] loop7: detected capacity change from 0 to 512 [ 222.739991][T12886] tipc: Started in network mode [ 222.745037][T12886] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 222.754409][T12886] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 222.762865][T12886] tipc: Enabled bearer , priority 10 [ 222.779188][T12878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.805640][T12883] bridge_slave_1: left allmulticast mode [ 222.808476][T12878] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.811568][T12883] bridge_slave_1: left promiscuous mode [ 222.827627][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.837391][T12883] bridge_slave_0: left allmulticast mode [ 222.843269][T12883] bridge_slave_0: left promiscuous mode [ 222.848980][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.901843][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.030368][ T3669] Bluetooth: hci0: sending frame failed (-49) [ 223.036589][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 223.055086][T12924] tipc: Started in network mode [ 223.060044][T12924] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 223.068971][T12924] tipc: Enabling of bearer rejected, failed to enable media [ 223.269359][T12947] loop5: detected capacity change from 0 to 512 [ 223.276266][T12949] loop7: detected capacity change from 0 to 1024 [ 223.283316][T12949] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 223.286253][T12947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.304748][T12947] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.356628][T12957] bridge0: port 3(gretap0) entered blocking state [ 223.363276][T12957] bridge0: port 3(gretap0) entered disabled state [ 223.369855][T12957] gretap0: entered allmulticast mode [ 223.375697][T12957] gretap0: entered promiscuous mode [ 223.381094][T12957] bridge0: port 3(gretap0) entered blocking state [ 223.387648][T12957] bridge0: port 3(gretap0) entered forwarding state [ 223.399779][T12957] gretap0: left allmulticast mode [ 223.404905][T12957] gretap0: left promiscuous mode [ 223.410052][T12957] bridge0: port 3(gretap0) entered disabled state [ 223.417130][T12958] loop7: detected capacity change from 0 to 164 [ 223.890685][ T23] tipc: Node number set to 1 [ 224.039579][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.053702][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.057793][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.074974][T12973] loop2: detected capacity change from 0 to 256 [ 224.122304][T12981] loop5: detected capacity change from 0 to 1024 [ 224.129271][T12981] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 224.234563][T12981] loop5: detected capacity change from 0 to 164 [ 224.454725][T12989] loop5: detected capacity change from 0 to 2048 [ 224.513011][T12989] loop5: p1 p2 p3 [ 224.585503][T12991] loop5: detected capacity change from 0 to 2048 [ 224.592671][T12991] EXT4-fs: Ignoring removed bh option [ 224.603253][T12991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.626855][T12991] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 224.644469][T12991] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 224.656949][T12991] EXT4-fs (loop5): This should not happen!! Data will be lost [ 224.656949][T12991] [ 224.666644][T12991] EXT4-fs (loop5): Total free blocks count 0 [ 224.672691][T12991] EXT4-fs (loop5): Free/Dirty block details [ 224.678627][T12991] EXT4-fs (loop5): free_blocks=2415919104 [ 224.684532][T12991] EXT4-fs (loop5): dirty_blocks=128 [ 224.690007][T12991] EXT4-fs (loop5): Block reservation details [ 224.696130][T12991] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 224.789950][T13004] FAULT_INJECTION: forcing a failure. [ 224.789950][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 224.802702][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.6.3251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.802795][T13004] Tainted: [W]=WARN [ 224.802803][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.802816][T13004] Call Trace: [ 224.802899][T13004] [ 224.802906][T13004] __dump_stack+0x1d/0x30 [ 224.802927][T13004] dump_stack_lvl+0xe8/0x140 [ 224.802945][T13004] dump_stack+0x15/0x1b [ 224.802962][T13004] should_fail_ex+0x265/0x280 [ 224.802996][T13004] should_failslab+0x8c/0xb0 [ 224.803029][T13004] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 224.803063][T13004] ? __alloc_skb+0x101/0x320 [ 224.803149][T13004] __alloc_skb+0x101/0x320 [ 224.803175][T13004] netlink_alloc_large_skb+0xbf/0xf0 [ 224.803234][T13004] netlink_sendmsg+0x3cf/0x6b0 [ 224.803272][T13004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.803370][T13004] __sock_sendmsg+0x145/0x180 [ 224.803414][T13004] ____sys_sendmsg+0x31e/0x4e0 [ 224.803503][T13004] ___sys_sendmsg+0x17b/0x1d0 [ 224.803549][T13004] __x64_sys_sendmsg+0xd4/0x160 [ 224.803632][T13004] x64_sys_call+0x191e/0x3000 [ 224.803659][T13004] do_syscall_64+0xd2/0x200 [ 224.803679][T13004] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 224.803708][T13004] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 224.803803][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.803824][T13004] RIP: 0033:0x7fe29236efc9 [ 224.803841][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.803881][T13004] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.803896][T13004] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 224.803904][T13004] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 224.803913][T13004] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.803921][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.803929][T13004] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 224.803941][T13004] [ 225.086286][T13008] loop6: detected capacity change from 0 to 512 [ 225.095112][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.118218][T13008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.138303][T13015] loop5: detected capacity change from 0 to 1024 [ 225.145588][T13015] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 225.154192][T13017] loop2: detected capacity change from 0 to 1024 [ 225.161107][T13008] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.182140][T13017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.211674][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.235471][T13015] loop5: detected capacity change from 0 to 164 [ 225.248513][T13024] __nla_validate_parse: 12 callbacks suppressed [ 225.248532][T13024] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3257'. [ 225.281086][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.333250][T13036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13036 comm=syz.6.3257 [ 225.376085][T13033] loop2: detected capacity change from 0 to 512 [ 225.396597][T13033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.412261][T13033] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.497883][T13033] EXT4-fs error (device loop2): ext4_get_first_dir_block:3529: inode #12: comm syz.2.3260: Attempting to read directory block (0) that is past i_size (3) [ 225.526497][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3260'. [ 225.546144][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.730529][T13045] loop6: detected capacity change from 0 to 128 [ 225.740317][T13045] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.755073][T13045] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.787458][T13051] loop2: detected capacity change from 0 to 512 [ 225.794357][T13051] ext4: Unknown parameter 'pcr' [ 225.832174][T13045] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 225.840851][T13045] FAT-fs (loop6): Filesystem has been set read-only [ 226.022152][T13057] loop6: detected capacity change from 0 to 512 [ 226.046911][T13057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.059655][T13057] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.087613][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 226.114307][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.120761][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 226.123537][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.183765][T13064] loop7: detected capacity change from 0 to 1024 [ 226.212454][T13064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.306844][T13073] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3273'. [ 226.324564][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.350057][T13075] loop7: detected capacity change from 0 to 2048 [ 226.376759][T13078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13078 comm=syz.5.3273 [ 226.385369][T13075] loop7: p1 p2 p3 [ 226.512415][ T7161] Bluetooth: hci1: Frame reassembly failed (-84) [ 226.515306][T13087] loop5: detected capacity change from 0 to 512 [ 226.532208][T13087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.544920][T13087] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.567742][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3279'. [ 226.591202][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.617556][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.626352][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.637122][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3276'. [ 226.697234][T13093] loop5: detected capacity change from 0 to 128 [ 226.704433][T13093] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.716469][T13093] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.728788][T13093] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 226.737341][T13093] FAT-fs (loop5): Filesystem has been set read-only [ 226.888479][T13101] lo: entered allmulticast mode [ 226.894723][T13101] tunl0: entered allmulticast mode [ 226.900798][T13101] gre0: entered allmulticast mode [ 226.906737][T13101] gretap0: entered allmulticast mode [ 226.913231][T13101] erspan0: entered allmulticast mode [ 226.920247][T13101] ip_vti0: entered allmulticast mode [ 226.926765][T13101] ip6_vti0: entered allmulticast mode [ 226.933494][T13101] sit0: entered allmulticast mode [ 226.939553][T13101] ip6tnl0: entered allmulticast mode [ 226.946075][T13101] ip6gre0: entered allmulticast mode [ 226.952525][T13101] syz_tun: entered allmulticast mode [ 226.959101][T13101] ip6gretap0: entered allmulticast mode [ 226.965917][T13101] bridge0: entered allmulticast mode [ 226.975140][T13101] vcan0: entered allmulticast mode [ 226.981238][T13101] bond0: entered allmulticast mode [ 226.986499][T13101] bond_slave_0: entered allmulticast mode [ 226.992392][T13101] bond_slave_1: entered allmulticast mode [ 227.001743][T13101] team0: entered allmulticast mode [ 227.006961][T13101] team_slave_0: entered allmulticast mode [ 227.012850][T13101] team_slave_1: entered allmulticast mode [ 227.019825][T13101] dummy0: entered allmulticast mode [ 227.030436][T13101] nlmon0: entered allmulticast mode [ 227.037082][T13101] caif0: entered allmulticast mode [ 227.042235][T13101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.289011][T13113] loop7: detected capacity change from 0 to 256 [ 227.296276][T13113] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.673818][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 227.673835][ T29] audit: type=1326 audit(1761171536.028:23062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.703824][ T29] audit: type=1326 audit(1761171536.028:23063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.711090][T13123] chnl_net:caif_netlink_parms(): no params data found [ 227.727480][ T29] audit: type=1326 audit(1761171536.028:23064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.739334][T13138] loop5: detected capacity change from 0 to 512 [ 227.757991][ T29] audit: type=1326 audit(1761171536.028:23065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.787966][ T29] audit: type=1326 audit(1761171536.028:23066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.812598][ T29] audit: type=1326 audit(1761171536.028:23067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.814965][T13138] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 227.836315][ T29] audit: type=1326 audit(1761171536.028:23068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.836371][ T29] audit: type=1326 audit(1761171536.028:23069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.836398][ T29] audit: type=1326 audit(1761171536.028:23070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.836904][ T29] audit: type=1326 audit(1761171536.028:23071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13136 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 227.919988][T13135] loop7: detected capacity change from 0 to 128 [ 227.950702][T13135] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.963411][T13135] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.975394][ T7135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.006304][T13135] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 228.015077][T13135] FAT-fs (loop7): Filesystem has been set read-only [ 228.031219][ T7135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.045090][T13123] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.052187][T13123] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.060397][T13123] bridge_slave_0: entered allmulticast mode [ 228.067324][T13123] bridge_slave_0: entered promiscuous mode [ 228.081390][T13123] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.088556][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.096406][T13123] bridge_slave_1: entered allmulticast mode [ 228.103042][T13123] bridge_slave_1: entered promiscuous mode [ 228.113016][ T7135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.151804][T13123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.169573][T13123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.190886][ T7135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.201221][ T7401] Bluetooth: hci0: command 0x1003 tx timeout [ 228.201322][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 228.239948][T13123] team0: Port device team_slave_0 added [ 228.247168][T13150] loop7: detected capacity change from 0 to 2048 [ 228.247395][T13123] team0: Port device team_slave_1 added [ 228.253973][T13150] EXT4-fs: Ignoring removed bh option [ 228.292288][T13150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.330243][ T7135] bridge_slave_0: left allmulticast mode [ 228.336211][ T7135] bridge_slave_0: left promiscuous mode [ 228.342168][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.349742][T13150] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.370842][T13150] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 228.383276][T13150] EXT4-fs (loop7): This should not happen!! Data will be lost [ 228.383276][T13150] [ 228.392945][T13150] EXT4-fs (loop7): Total free blocks count 0 [ 228.398953][T13150] EXT4-fs (loop7): Free/Dirty block details [ 228.404955][T13150] EXT4-fs (loop7): free_blocks=2415919104 [ 228.410792][T13150] EXT4-fs (loop7): dirty_blocks=128 [ 228.416001][T13150] EXT4-fs (loop7): Block reservation details [ 228.422020][T13150] EXT4-fs (loop7): i_reserved_data_blocks=8 [ 228.433002][ T7135] ip6gretap0 (unregistering): left promiscuous mode [ 228.462352][ T7135] bridge0 (unregistering): left promiscuous mode [ 228.497886][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.521088][ T3669] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 228.523685][ T3511] Bluetooth: hci1: command 0x1003 tx timeout [ 228.541432][ T7135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.553794][ T7135] bond_slave_0: left allmulticast mode [ 228.560263][ T7135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.569423][ T7135] bond_slave_1: left allmulticast mode [ 228.575907][ T7135] bond0 (unregistering): Released all slaves [ 228.584585][T13123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.591581][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.617535][T13123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.618211][T13169] loop7: detected capacity change from 0 to 2048 [ 228.628959][T13123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.641484][T13123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.667467][T13123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.680240][T13159] bridge0: port 3(gretap0) entered blocking state [ 228.686899][T13159] bridge0: port 3(gretap0) entered disabled state [ 228.693726][T13159] gretap0: entered allmulticast mode [ 228.699591][T13159] gretap0: entered promiscuous mode [ 228.705990][T13159] bridge0: port 3(gretap0) entered blocking state [ 228.712487][T13159] bridge0: port 3(gretap0) entered forwarding state [ 228.731754][T13169] loop7: p1 p2 p3 [ 228.736602][T13162] gretap0: left allmulticast mode [ 228.741686][T13162] gretap0: left promiscuous mode [ 228.746865][T13162] bridge0: port 3(gretap0) entered disabled state [ 228.752871][ T8720] kernel read not supported for file bpf-prog (pid: 8720 comm: kworker/1:5) [ 228.825995][ T7135] hsr_slave_0: left promiscuous mode [ 228.840439][ T7135] hsr_slave_1: left promiscuous mode [ 228.846516][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.853945][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.873186][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.880765][ T7135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.906198][T13181] loop7: detected capacity change from 0 to 2048 [ 228.913018][ T7135] veth1_macvtap: left promiscuous mode [ 228.918511][ T7135] veth0_macvtap: left promiscuous mode [ 228.924568][ T7135] veth1_vlan: left promiscuous mode [ 228.929873][ T7135] veth0_vlan: left promiscuous mode [ 228.989885][ T7135] team_slave_1 (unregistering): left allmulticast mode [ 228.991682][T13181] loop7: p1 p2 p3 [ 229.003574][ T7135] team0 (unregistering): Port device team_slave_1 removed [ 229.015195][ T7135] team_slave_0 (unregistering): left allmulticast mode [ 229.022459][ T7135] team0 (unregistering): Port device team_slave_0 removed [ 229.046024][ T7135] team0 (unregistering): Port device dummy0 removed [ 229.059637][T13123] hsr_slave_0: entered promiscuous mode [ 229.065782][T13123] hsr_slave_1: entered promiscuous mode [ 229.072425][T13123] debugfs: 'hsr0' already exists in 'hsr' [ 229.078184][T13123] Cannot create hsr debugfs directory [ 229.125742][ T1035] kernel write not supported for file /1349/net/rt_cache (pid: 1035 comm: kworker/1:2) [ 229.139230][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3308'. [ 229.175776][T13192] wireguard0: entered promiscuous mode [ 229.181402][T13192] wireguard0: entered allmulticast mode [ 229.383357][T13204] loop5: detected capacity change from 0 to 1024 [ 229.390378][T13204] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 229.460708][T13204] loop5: detected capacity change from 0 to 164 [ 229.473107][T13123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.482565][T13123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.491846][T13123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.501773][T13123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.543948][T13123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.564887][T13123] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.574685][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.581793][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.593682][ T7127] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.600764][ T7127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.626126][T13123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.636532][T13123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.723607][T13123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.794774][T13224] bridge0: port 3(gretap0) entered blocking state [ 229.801325][T13224] bridge0: port 3(gretap0) entered disabled state [ 229.808088][T13224] gretap0: entered allmulticast mode [ 229.817439][T13224] gretap0: entered promiscuous mode [ 229.823224][T13224] bridge0: port 3(gretap0) entered blocking state [ 229.829684][T13224] bridge0: port 3(gretap0) entered forwarding state [ 229.842659][T13224] gretap0: left allmulticast mode [ 229.847740][T13224] gretap0: left promiscuous mode [ 229.852993][T13224] bridge0: port 3(gretap0) entered disabled state [ 230.056632][T13123] veth0_vlan: entered promiscuous mode [ 230.068749][T13123] veth1_vlan: entered promiscuous mode [ 230.118455][T13123] veth0_macvtap: entered promiscuous mode [ 230.128518][T13123] veth1_macvtap: entered promiscuous mode [ 230.140664][T13123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.150464][T13123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.164901][ T7100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.174269][ T7100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.183521][ T7100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.217877][ T7100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.290958][T13234] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3289'. [ 230.511678][T13240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13240 comm=syz.2.3289 [ 231.020014][T13250] loop2: detected capacity change from 0 to 1024 [ 231.042274][T13250] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 231.129612][T13250] loop2: detected capacity change from 0 to 164 [ 231.205601][T13258] loop5: detected capacity change from 0 to 2048 [ 231.276298][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3326'. [ 231.285353][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3326'. [ 231.294598][T13262] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 231.322027][T13258] loop5: p1 p2 p3 [ 231.328628][T13262] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 231.427832][T13272] loop2: detected capacity change from 0 to 1024 [ 231.445889][T13274] loop7: detected capacity change from 0 to 2048 [ 231.456157][T13266] lo speed is unknown, defaulting to 1000 [ 231.470949][T13274] EXT4-fs: Ignoring removed bh option [ 231.477025][T13272] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 231.520212][T13274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.596249][T13266] lo speed is unknown, defaulting to 1000 [ 231.607330][T13274] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.629163][T13282] loop2: detected capacity change from 0 to 164 [ 231.639821][T13274] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 231.652419][T13274] EXT4-fs (loop7): This should not happen!! Data will be lost [ 231.652419][T13274] [ 231.662187][T13274] EXT4-fs (loop7): Total free blocks count 0 [ 231.668183][T13274] EXT4-fs (loop7): Free/Dirty block details [ 231.674165][T13274] EXT4-fs (loop7): free_blocks=2415919104 [ 231.679898][T13274] EXT4-fs (loop7): dirty_blocks=128 [ 231.685135][T13274] EXT4-fs (loop7): Block reservation details [ 231.691147][T13274] EXT4-fs (loop7): i_reserved_data_blocks=8 [ 231.762034][T13266] lo speed is unknown, defaulting to 1000 [ 231.825276][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 231.834650][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'. [ 231.893445][T13266] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 231.914077][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.961819][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3336'. [ 231.966732][T13266] lo speed is unknown, defaulting to 1000 [ 231.978613][T13266] lo speed is unknown, defaulting to 1000 [ 232.011015][T13266] lo speed is unknown, defaulting to 1000 [ 232.017290][T13266] lo speed is unknown, defaulting to 1000 [ 232.055605][T13266] lo speed is unknown, defaulting to 1000 [ 232.061905][T13266] lo speed is unknown, defaulting to 1000 [ 232.068022][T13266] lo speed is unknown, defaulting to 1000 [ 232.074264][T13266] lo speed is unknown, defaulting to 1000 [ 232.236781][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.259501][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.315045][T13313] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3344'. [ 232.431329][T13317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13317 comm=syz.5.3344 [ 232.511964][T13319] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3345'. [ 232.577254][T13321] loop5: detected capacity change from 0 to 512 [ 232.596064][T13321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.609499][T13321] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.654832][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.682447][T13332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13332 comm=syz.7.3345 [ 232.795373][T13336] loop5: detected capacity change from 0 to 2048 [ 232.834592][T13340] FAULT_INJECTION: forcing a failure. [ 232.834592][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 232.847384][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.7.3350 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.847419][T13340] Tainted: [W]=WARN [ 232.847426][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.847461][T13340] Call Trace: [ 232.847468][T13340] [ 232.847476][T13340] __dump_stack+0x1d/0x30 [ 232.847500][T13340] dump_stack_lvl+0xe8/0x140 [ 232.847542][T13340] dump_stack+0x15/0x1b [ 232.847564][T13340] should_fail_ex+0x265/0x280 [ 232.847598][T13340] should_failslab+0x8c/0xb0 [ 232.847693][T13340] kmem_cache_alloc_noprof+0x50/0x480 [ 232.847721][T13340] ? alloc_empty_file+0x76/0x200 [ 232.847748][T13340] ? mntput+0x4b/0x80 [ 232.847814][T13340] alloc_empty_file+0x76/0x200 [ 232.847847][T13340] path_openat+0x68/0x2170 [ 232.847870][T13340] ? _parse_integer_limit+0x170/0x190 [ 232.847948][T13340] ? kstrtoull+0x111/0x140 [ 232.847980][T13340] ? kstrtouint+0x76/0xc0 [ 232.848013][T13340] do_filp_open+0x109/0x230 [ 232.848086][T13340] do_sys_openat2+0xa6/0x110 [ 232.848109][T13340] __x64_sys_openat+0xf2/0x120 [ 232.848131][T13340] x64_sys_call+0x2eab/0x3000 [ 232.848162][T13340] do_syscall_64+0xd2/0x200 [ 232.848182][T13340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.848206][T13340] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 232.848255][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.848278][T13340] RIP: 0033:0x7f1ad91fefc9 [ 232.848295][T13340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.848366][T13340] RSP: 002b:00007f1ad7c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.848388][T13340] RAX: ffffffffffffffda RBX: 00007f1ad9455fa0 RCX: 00007f1ad91fefc9 [ 232.848403][T13340] RDX: 0000000000084d03 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 232.848416][T13340] RBP: 00007f1ad7c67090 R08: 0000000000000000 R09: 0000000000000000 [ 232.848427][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.848441][T13340] R13: 00007f1ad9456038 R14: 00007f1ad9455fa0 R15: 00007fff2e6dd6f8 [ 232.848461][T13340] [ 233.080010][T13298] lo speed is unknown, defaulting to 1000 [ 233.113232][T13342] random: crng reseeded on system resumption [ 233.164349][T13336] loop5: p1 p2 p3 [ 233.259260][ T3511] Bluetooth: hci0: sending frame failed (-49) [ 233.265412][ T3669] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 233.295220][T13343] loop7: detected capacity change from 0 to 512 [ 233.356734][T13354] loop6: detected capacity change from 0 to 2048 [ 233.383038][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 233.383056][ T29] audit: type=1326 audit(1761171541.738:23162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.388889][T13349] lo speed is unknown, defaulting to 1000 [ 233.389443][ T29] audit: type=1326 audit(1761171541.738:23163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.446888][T13354] loop6: p1 p2 p3 [ 233.450785][ T29] audit: type=1326 audit(1761171541.778:23164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.474453][ T29] audit: type=1326 audit(1761171541.778:23165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.498092][ T29] audit: type=1326 audit(1761171541.778:23166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.521820][ T29] audit: type=1326 audit(1761171541.798:23167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.537097][T13343] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3352: bg 0: block 248: padding at end of block bitmap is not set [ 233.545505][ T29] audit: type=1326 audit(1761171541.798:23168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.545551][ T29] audit: type=1326 audit(1761171541.798:23169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.545578][ T29] audit: type=1326 audit(1761171541.798:23170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.545604][ T29] audit: type=1326 audit(1761171541.798:23171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.5.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 233.681648][T13362] loop5: detected capacity change from 0 to 512 [ 233.716909][T13362] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 233.726919][T13343] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3352: Failed to acquire dquot type 1 [ 233.775963][T13343] EXT4-fs (loop7): 1 truncate cleaned up [ 233.783583][T13355] lo speed is unknown, defaulting to 1000 [ 233.790212][T13357] lo speed is unknown, defaulting to 1000 [ 233.857541][T13343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.873222][T13343] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.915242][T13360] lo speed is unknown, defaulting to 1000 [ 233.963997][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.003438][T13377] loop6: detected capacity change from 0 to 2048 [ 234.010693][T13379] xt_hashlimit: max too large, truncated to 1048576 [ 234.023888][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3364'. [ 234.024266][ T8720] kernel read not supported for file bpf-prog (pid: 8720 comm: kworker/1:5) [ 234.032907][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3364'. [ 234.082293][T13377] loop6: p1 p2 p3 [ 234.176448][ T7167] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.333078][ T3421] kernel read not supported for file bpf-prog (pid: 3421 comm: kworker/0:5) [ 234.387947][T13401] loop7: detected capacity change from 0 to 128 [ 234.395192][T13399] FAULT_INJECTION: forcing a failure. [ 234.395192][T13399] name failslab, interval 1, probability 0, space 0, times 0 [ 234.395821][T13401] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.408038][T13399] CPU: 1 UID: 0 PID: 13399 Comm: syz.6.3370 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.408076][T13399] Tainted: [W]=WARN [ 234.408083][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.408094][T13399] Call Trace: [ 234.408101][T13399] [ 234.408110][T13399] __dump_stack+0x1d/0x30 [ 234.408185][T13399] dump_stack_lvl+0xe8/0x140 [ 234.408205][T13399] dump_stack+0x15/0x1b [ 234.408223][T13399] should_fail_ex+0x265/0x280 [ 234.408289][T13399] should_failslab+0x8c/0xb0 [ 234.408316][T13399] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 234.408359][T13399] ? __alloc_skb+0x101/0x320 [ 234.408424][T13399] __alloc_skb+0x101/0x320 [ 234.408450][T13399] netlink_dump+0x10d/0x8a0 [ 234.408478][T13399] ? __kfree_skb+0x109/0x150 [ 234.408504][T13399] ? nlmon_xmit+0x4f/0x60 [ 234.408601][T13399] ? consume_skb+0x49/0x150 [ 234.408632][T13399] __netlink_dump_start+0x43e/0x520 [ 234.408717][T13399] ? __pfx_rtnl_dump_all+0x10/0x10 [ 234.408739][T13399] rtnetlink_rcv_msg+0x552/0x6d0 [ 234.408759][T13399] ? __pfx_rtnl_dump_all+0x10/0x10 [ 234.408780][T13399] ? __pfx_rtnl_dumpit+0x10/0x10 [ 234.408813][T13399] ? __pfx_rtnl_dump_all+0x10/0x10 [ 234.408835][T13399] netlink_rcv_skb+0x123/0x220 [ 234.408863][T13399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.408983][T13399] rtnetlink_rcv+0x1c/0x30 [ 234.409007][T13399] netlink_unicast+0x5c0/0x690 [ 234.409035][T13399] netlink_sendmsg+0x58b/0x6b0 [ 234.409066][T13399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.409157][T13399] __sock_sendmsg+0x145/0x180 [ 234.409181][T13399] sock_write_iter+0x1a7/0x1f0 [ 234.409204][T13399] ? __pfx_sock_write_iter+0x10/0x10 [ 234.409273][T13399] vfs_write+0x52a/0x960 [ 234.409300][T13399] ksys_write+0xda/0x1a0 [ 234.409324][T13399] __x64_sys_write+0x40/0x50 [ 234.409372][T13399] x64_sys_call+0x2802/0x3000 [ 234.409393][T13399] do_syscall_64+0xd2/0x200 [ 234.409410][T13399] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.409498][T13399] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 234.409529][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.409575][T13399] RIP: 0033:0x7fe29236efc9 [ 234.409592][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.409609][T13399] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.409631][T13399] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 234.409644][T13399] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 234.409656][T13399] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.409732][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.409744][T13399] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 234.409762][T13399] [ 234.697226][T13403] lo speed is unknown, defaulting to 1000 [ 234.697506][T13401] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.736388][T13393] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 234.745003][T13393] FAT-fs (loop7): Filesystem has been set read-only [ 234.780970][T13409] FAULT_INJECTION: forcing a failure. [ 234.780970][T13409] name failslab, interval 1, probability 0, space 0, times 0 [ 234.793824][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.0.3375 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.793860][T13409] Tainted: [W]=WARN [ 234.793868][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.793881][T13409] Call Trace: [ 234.793887][T13409] [ 234.793896][T13409] __dump_stack+0x1d/0x30 [ 234.793922][T13409] dump_stack_lvl+0xe8/0x140 [ 234.793943][T13409] dump_stack+0x15/0x1b [ 234.793987][T13409] should_fail_ex+0x265/0x280 [ 234.794169][T13409] should_failslab+0x8c/0xb0 [ 234.794326][T13409] kmem_cache_alloc_noprof+0x50/0x480 [ 234.794350][T13409] ? sk_prot_alloc+0x3f/0x190 [ 234.794404][T13409] ? __account_obj_stock+0x211/0x350 [ 234.794427][T13409] sk_prot_alloc+0x3f/0x190 [ 234.794452][T13409] sk_alloc+0x34/0x360 [ 234.794518][T13409] tipc_sk_create+0xec/0x11c0 [ 234.794535][T13409] ? kmem_cache_alloc_noprof+0x242/0x480 [ 234.794630][T13409] ? security_inode_alloc+0x37/0x100 [ 234.794648][T13409] ? selinux_inode_alloc_security+0x105/0x130 [ 234.794674][T13409] ? security_inode_alloc+0x69/0x100 [ 234.794698][T13409] ? inode_init_always_gfp+0x4cd/0x500 [ 234.794722][T13409] __sock_create+0x2ec/0x5b0 [ 234.794744][T13409] __sys_socketpair+0x170/0x430 [ 234.794765][T13409] ? ksys_write+0x192/0x1a0 [ 234.794791][T13409] __x64_sys_socketpair+0x52/0x60 [ 234.794813][T13409] x64_sys_call+0x2bf6/0x3000 [ 234.794834][T13409] do_syscall_64+0xd2/0x200 [ 234.794849][T13409] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.794874][T13409] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 234.794899][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.795061][T13409] RIP: 0033:0x7f911c48efc9 [ 234.795074][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.795090][T13409] RSP: 002b:00007f911aef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 234.795109][T13409] RAX: ffffffffffffffda RBX: 00007f911c6e5fa0 RCX: 00007f911c48efc9 [ 234.795132][T13409] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 234.795142][T13409] RBP: 00007f911aef7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.795153][T13409] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 234.795192][T13409] R13: 00007f911c6e6038 R14: 00007f911c6e5fa0 R15: 00007ffc74775ea8 [ 234.795208][T13409] [ 235.044442][T13413] loop2: detected capacity change from 0 to 512 [ 235.053169][T13413] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 235.088585][T13411] loop6: detected capacity change from 0 to 164 [ 235.144485][T13407] lo speed is unknown, defaulting to 1000 [ 235.167214][T13424] xt_bpf: check failed: parse error [ 235.172660][T13413] lo speed is unknown, defaulting to 1000 [ 235.180858][T13424] dns_resolver: Unsupported content type (231) [ 235.205922][ T8720] kernel read not supported for file bpf-prog (pid: 8720 comm: kworker/1:5) [ 235.215261][T13428] netlink: 'syz.7.3382': attribute type 2 has an invalid length. [ 235.273560][ T8720] IPVS: starting estimator thread 0... [ 235.296504][T13428] loop7: detected capacity change from 0 to 2048 [ 235.360699][T13439] IPVS: using max 2640 ests per chain, 132000 per kthread [ 235.409781][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3390'. [ 235.420896][T13454] 9pnet_virtio: no channels available for device 127.0.0.1 [ 235.441684][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 235.493912][T13463] FAULT_INJECTION: forcing a failure. [ 235.493912][T13463] name failslab, interval 1, probability 0, space 0, times 0 [ 235.506692][T13463] CPU: 1 UID: 0 PID: 13463 Comm: syz.2.3394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.506726][T13463] Tainted: [W]=WARN [ 235.506734][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.506804][T13463] Call Trace: [ 235.506811][T13463] [ 235.506820][T13463] __dump_stack+0x1d/0x30 [ 235.506843][T13463] dump_stack_lvl+0xe8/0x140 [ 235.506875][T13463] dump_stack+0x15/0x1b [ 235.506908][T13463] should_fail_ex+0x265/0x280 [ 235.506943][T13463] ? __request_module+0x1c4/0x3e0 [ 235.506972][T13463] should_failslab+0x8c/0xb0 [ 235.506998][T13463] ? __sock_create+0x1b0/0x5b0 [ 235.507055][T13463] __kmalloc_cache_noprof+0x4c/0x4a0 [ 235.507086][T13463] ? __sock_create+0x1b0/0x5b0 [ 235.507106][T13463] __request_module+0x1c4/0x3e0 [ 235.507137][T13463] ? selinux_inode_alloc_security+0x105/0x130 [ 235.507191][T13463] __sock_create+0x284/0x5b0 [ 235.507213][T13463] __sys_socketpair+0x170/0x430 [ 235.507236][T13463] ? ksys_write+0x192/0x1a0 [ 235.507265][T13463] __x64_sys_socketpair+0x52/0x60 [ 235.507348][T13463] x64_sys_call+0x2bf6/0x3000 [ 235.507417][T13463] do_syscall_64+0xd2/0x200 [ 235.507453][T13463] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.507476][T13463] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 235.507507][T13463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.507678][T13463] RIP: 0033:0x7fc4abc2efc9 [ 235.507696][T13463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.507716][T13463] RSP: 002b:00007fc4aa68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 235.507736][T13463] RAX: ffffffffffffffda RBX: 00007fc4abe85fa0 RCX: 00007fc4abc2efc9 [ 235.507784][T13463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.507863][T13463] RBP: 00007fc4aa68f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.507877][T13463] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 235.507888][T13463] R13: 00007fc4abe86038 R14: 00007fc4abe85fa0 R15: 00007ffd16777b38 [ 235.507905][T13463] [ 235.816062][T13468] bridge0: port 3(gretap0) entered blocking state [ 235.822626][T13468] bridge0: port 3(gretap0) entered disabled state [ 235.829315][T13468] gretap0: entered allmulticast mode [ 235.835323][T13468] gretap0: entered promiscuous mode [ 235.841087][T13468] bridge0: port 3(gretap0) entered blocking state [ 235.847610][T13468] bridge0: port 3(gretap0) entered forwarding state [ 235.855885][T13468] gretap0: left allmulticast mode [ 235.860978][T13468] gretap0: left promiscuous mode [ 235.866063][T13468] bridge0: port 3(gretap0) entered disabled state [ 235.942586][T13483] loop2: detected capacity change from 0 to 2048 [ 235.966124][T13485] bridge0: port 3(gretap0) entered blocking state [ 235.973003][T13485] bridge0: port 3(gretap0) entered disabled state [ 235.974213][T13483] loop2: p1 p2 p3 [ 235.979602][T13485] gretap0: entered allmulticast mode [ 235.989136][T13485] gretap0: entered promiscuous mode [ 235.994924][T13485] bridge0: port 3(gretap0) entered blocking state [ 236.001396][T13485] bridge0: port 3(gretap0) entered forwarding state [ 236.015794][T13485] gretap0: left allmulticast mode [ 236.020913][T13485] gretap0: left promiscuous mode [ 236.026251][T13485] bridge0: port 3(gretap0) entered disabled state [ 236.133903][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 236.200672][ T3669] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.217382][T13493] loop6: detected capacity change from 0 to 2048 [ 236.230900][T13493] EXT4-fs: Ignoring removed bh option [ 236.255796][T13493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.296756][T13493] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.342160][T13495] loop5: detected capacity change from 0 to 164 [ 236.370705][T13493] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 236.378302][T13503] FAULT_INJECTION: forcing a failure. [ 236.378302][T13503] name failslab, interval 1, probability 0, space 0, times 0 [ 236.383138][T13493] EXT4-fs (loop6): This should not happen!! Data will be lost [ 236.383138][T13493] [ 236.395763][T13503] CPU: 1 UID: 0 PID: 13503 Comm: syz.0.3409 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.395800][T13503] Tainted: [W]=WARN [ 236.395807][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.395869][T13503] Call Trace: [ 236.395877][T13503] [ 236.395885][T13503] __dump_stack+0x1d/0x30 [ 236.395908][T13503] dump_stack_lvl+0xe8/0x140 [ 236.395929][T13503] dump_stack+0x15/0x1b [ 236.396023][T13503] should_fail_ex+0x265/0x280 [ 236.396128][T13503] should_failslab+0x8c/0xb0 [ 236.396155][T13503] kmem_cache_alloc_noprof+0x50/0x480 [ 236.396182][T13503] ? audit_log_start+0x342/0x720 [ 236.396284][T13503] audit_log_start+0x342/0x720 [ 236.396304][T13503] ? kstrtouint+0x76/0xc0 [ 236.396333][T13503] audit_seccomp+0x48/0x100 [ 236.396384][T13503] ? __seccomp_filter+0x82d/0x1250 [ 236.396435][T13503] __seccomp_filter+0x83e/0x1250 [ 236.396528][T13503] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 236.396622][T13503] ? vfs_write+0x7e8/0x960 [ 236.396696][T13503] __secure_computing+0x82/0x150 [ 236.396793][T13503] syscall_trace_enter+0xcf/0x1e0 [ 236.396954][T13503] do_syscall_64+0xac/0x200 [ 236.397038][T13503] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.397135][T13503] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 236.397167][T13503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.397188][T13503] RIP: 0033:0x7f911c48efc9 [ 236.397254][T13503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.397329][T13503] RSP: 002b:00007f911aef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 236.397416][T13503] RAX: ffffffffffffffda RBX: 00007f911c6e5fa0 RCX: 00007f911c48efc9 [ 236.397429][T13503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.397441][T13503] RBP: 00007f911aef7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.397453][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.397465][T13503] R13: 00007f911c6e6038 R14: 00007f911c6e5fa0 R15: 00007ffc74775ea8 [ 236.397484][T13503] [ 236.424285][T13504] bridge0: port 3(gretap0) entered blocking state [ 236.430955][T13493] EXT4-fs (loop6): Total free blocks count 0 [ 236.434326][T13504] bridge0: port 3(gretap0) entered disabled state [ 236.437195][T13493] EXT4-fs (loop6): Free/Dirty block details [ 236.443874][T13504] gretap0: entered allmulticast mode [ 236.446151][T13493] EXT4-fs (loop6): free_blocks=2415919104 [ 236.450910][T13504] gretap0: entered promiscuous mode [ 236.455004][T13493] EXT4-fs (loop6): dirty_blocks=128 [ 236.459707][T13504] bridge0: port 3(gretap0) entered blocking state [ 236.464972][T13493] EXT4-fs (loop6): Block reservation details [ 236.469920][T13504] bridge0: port 3(gretap0) entered forwarding state [ 236.474705][T13493] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 236.572833][T13501] gretap0: left allmulticast mode [ 236.688966][T13501] gretap0: left promiscuous mode [ 236.694474][T13501] bridge0: port 3(gretap0) entered disabled state [ 236.707037][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.740911][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.749668][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.861645][T13506] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 236.869435][T13506] netlink: 'syz.0.3409': attribute type 2 has an invalid length. [ 237.034274][T13487] lo speed is unknown, defaulting to 1000 [ 237.061290][T13519] netlink: 'syz.5.3414': attribute type 1 has an invalid length. [ 237.069143][T13519] netlink: 'syz.5.3414': attribute type 2 has an invalid length. [ 237.298269][T13527] loop2: detected capacity change from 0 to 2048 [ 237.333937][T13527] loop2: p1 p2 p3 [ 237.373775][ T7161] Bluetooth: hci0: Frame reassembly failed (-84) [ 237.450066][T13525] loop6: detected capacity change from 0 to 128 [ 237.450850][T13536] loop2: detected capacity change from 0 to 2048 [ 237.456949][T13525] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.475147][T13525] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.490536][T13525] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 237.499404][T13525] FAT-fs (loop6): Filesystem has been set read-only [ 237.501777][T13536] loop2: p1 p2 p3 [ 237.542829][T13538] loop2: detected capacity change from 0 to 2048 [ 237.549429][T13538] EXT4-fs: Ignoring removed bh option [ 237.562088][T13538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.564856][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3424'. [ 237.579712][T13538] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 237.598982][T13538] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 237.611541][T13538] EXT4-fs (loop2): This should not happen!! Data will be lost [ 237.611541][T13538] [ 237.621238][T13538] EXT4-fs (loop2): Total free blocks count 0 [ 237.627317][T13538] EXT4-fs (loop2): Free/Dirty block details [ 237.633261][T13538] EXT4-fs (loop2): free_blocks=2415919104 [ 237.638999][T13538] EXT4-fs (loop2): dirty_blocks=128 [ 237.640695][ T3511] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 237.644244][T13538] EXT4-fs (loop2): Block reservation details [ 237.656342][T13538] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 237.678608][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.687191][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.698538][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.259903][T13568] loop7: detected capacity change from 0 to 2048 [ 238.312139][T13568] loop7: p1 p2 p3 [ 238.469836][T13571] loop7: detected capacity change from 0 to 128 [ 238.476701][T13571] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.489346][T13571] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.509736][T13570] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 238.518347][T13570] FAT-fs (loop7): Filesystem has been set read-only [ 238.531600][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 238.531708][ T29] audit: type=1326 audit(1761171546.888:23375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.7.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 238.562714][ T29] audit: type=1326 audit(1761171546.928:23376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.7.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 238.586459][ T29] audit: type=1326 audit(1761171546.928:23377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.7.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 238.671458][T13575] FAULT_INJECTION: forcing a failure. [ 238.671458][T13575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.684595][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.6.3436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.684630][T13575] Tainted: [W]=WARN [ 238.684637][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.684650][T13575] Call Trace: [ 238.684690][T13575] [ 238.684695][T13575] __dump_stack+0x1d/0x30 [ 238.684712][T13575] dump_stack_lvl+0xe8/0x140 [ 238.684725][T13575] dump_stack+0x15/0x1b [ 238.684736][T13575] should_fail_ex+0x265/0x280 [ 238.684812][T13575] should_fail+0xb/0x20 [ 238.684851][T13575] should_fail_usercopy+0x1a/0x20 [ 238.684864][T13575] _copy_from_user+0x1c/0xb0 [ 238.684975][T13575] do_ipv6_setsockopt+0x124/0x2160 [ 238.684994][T13575] ? _parse_integer_limit+0x170/0x190 [ 238.685014][T13575] ? _parse_integer+0x27/0x40 [ 238.685079][T13575] ? kstrtoull+0x111/0x140 [ 238.685097][T13575] ? __rcu_read_unlock+0x4f/0x70 [ 238.685113][T13575] ? avc_has_perm_noaudit+0x1b1/0x200 [ 238.685128][T13575] ipv6_setsockopt+0x59/0x130 [ 238.685168][T13575] tcp_setsockopt+0x98/0xb0 [ 238.685188][T13575] sock_common_setsockopt+0x69/0x80 [ 238.685216][T13575] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.685231][T13575] smc_setsockopt+0x183/0x750 [ 238.685245][T13575] ? __pfx_smc_setsockopt+0x10/0x10 [ 238.685258][T13575] __sys_setsockopt+0x184/0x200 [ 238.685277][T13575] __x64_sys_setsockopt+0x64/0x80 [ 238.685295][T13575] x64_sys_call+0x20ec/0x3000 [ 238.685318][T13575] do_syscall_64+0xd2/0x200 [ 238.685330][T13575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.685347][T13575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 238.685410][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.685443][T13575] RIP: 0033:0x7fe29236efc9 [ 238.685454][T13575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.685466][T13575] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.685521][T13575] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 238.685577][T13575] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 238.685585][T13575] RBP: 00007fe290dd7090 R08: 0000000000000398 R09: 0000000000000000 [ 238.685593][T13575] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 238.685601][T13575] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 238.685613][T13575] [ 239.053636][T13579] lo speed is unknown, defaulting to 1000 [ 239.243516][T13578] loop5: detected capacity change from 0 to 2048 [ 239.250479][T13578] EXT4-fs: Ignoring removed bh option [ 239.455004][ T7401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.461351][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 239.516917][T13578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.564598][T13578] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.585919][T13578] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 239.598470][T13578] EXT4-fs (loop5): This should not happen!! Data will be lost [ 239.598470][T13578] [ 239.608144][T13578] EXT4-fs (loop5): Total free blocks count 0 [ 239.614243][T13578] EXT4-fs (loop5): Free/Dirty block details [ 239.620139][T13578] EXT4-fs (loop5): free_blocks=2415919104 [ 239.625953][T13578] EXT4-fs (loop5): dirty_blocks=128 [ 239.631195][T13578] EXT4-fs (loop5): Block reservation details [ 239.637237][T13578] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 239.648300][T13590] loop6: detected capacity change from 0 to 512 [ 239.707276][T13590] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.712220][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.743691][T13590] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 239.787987][T13590] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3439: bg 0: block 248: padding at end of block bitmap is not set [ 239.833699][T13590] Quota error (device loop6): write_blk: dquota write failed [ 239.841227][T13590] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 239.851648][T13590] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3439: Failed to acquire dquot type 1 [ 239.866292][T13590] EXT4-fs (loop6): 1 truncate cleaned up [ 239.872523][T13590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 239.916992][T13620] lo speed is unknown, defaulting to 1000 [ 239.959410][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 239.997372][T13626] lo speed is unknown, defaulting to 1000 [ 240.171162][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3458'. [ 240.247192][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3460'. [ 240.260321][T13643] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.317461][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 240.352360][T13648] loop2: detected capacity change from 0 to 2048 [ 240.372824][T13650] loop6: detected capacity change from 0 to 2048 [ 240.422009][T13650] loop6: p1 p2 p3 [ 240.508820][T13648] loop2: p1 p2 p3 [ 240.579996][T13655] loop2: detected capacity change from 0 to 2048 [ 240.633166][T13655] loop2: p1 p2 p3 [ 240.685060][T13666] wireguard0: entered promiscuous mode [ 240.690755][T13666] wireguard0: entered allmulticast mode [ 240.713921][T13670] wireguard0: entered promiscuous mode [ 240.719452][T13670] wireguard0: entered allmulticast mode [ 240.729575][T13672] bridge0: port 3(gretap0) entered blocking state [ 240.736159][T13672] bridge0: port 3(gretap0) entered disabled state [ 240.743407][T13672] gretap0: entered allmulticast mode [ 240.751353][T13672] gretap0: entered promiscuous mode [ 240.753152][ T29] audit: type=1400 audit(1761171549.108:23378): avc: denied { map } for pid=13651 comm="syz.6.3465" path="socket:[46190]" dev="sockfs" ino=46190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.761842][T13672] bridge0: port 3(gretap0) entered blocking state [ 240.779903][ T29] audit: type=1400 audit(1761171549.108:23379): avc: denied { read } for pid=13651 comm="syz.6.3465" path="socket:[46190]" dev="sockfs" ino=46190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.786480][T13672] bridge0: port 3(gretap0) entered forwarding state [ 240.847513][T13675] gretap0: left allmulticast mode [ 240.852638][T13675] gretap0: left promiscuous mode [ 240.857829][T13675] bridge0: port 3(gretap0) entered disabled state [ 240.948533][T13681] loop7: detected capacity change from 0 to 1024 [ 240.965301][T13681] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 241.068211][T13687] loop7: detected capacity change from 0 to 164 [ 241.222646][T13691] loop7: detected capacity change from 0 to 512 [ 241.255312][T13691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.274172][T13691] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.277221][T13628] lo speed is unknown, defaulting to 1000 [ 241.333588][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3479'. [ 241.364360][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.511993][T13698] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3480'. [ 241.563143][T13698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13698 comm=syz.7.3480 [ 241.688464][ T29] audit: type=1326 audit(1761171550.038:23380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.7.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 241.712197][ T29] audit: type=1326 audit(1761171550.038:23381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.7.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 241.738055][ T29] audit: type=1326 audit(1761171550.038:23382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.7.3483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 241.943335][T13711] loop6: detected capacity change from 0 to 2048 [ 241.991369][T13711] loop6: p1 p2 p3 [ 242.080056][T13726] loop6: detected capacity change from 0 to 2048 [ 242.086871][T13726] EXT4-fs: Ignoring removed bh option [ 242.108502][T13726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.122346][T13730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3493'. [ 242.154819][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.172498][T13734] loop2: detected capacity change from 0 to 1024 [ 242.184658][T13734] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 242.184939][T13738] FAULT_INJECTION: forcing a failure. [ 242.184939][T13738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.206486][T13738] CPU: 0 UID: 0 PID: 13738 Comm: syz.6.3496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.206524][T13738] Tainted: [W]=WARN [ 242.206598][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.206611][T13738] Call Trace: [ 242.206619][T13738] [ 242.206690][T13738] __dump_stack+0x1d/0x30 [ 242.206714][T13738] dump_stack_lvl+0xe8/0x140 [ 242.206736][T13738] dump_stack+0x15/0x1b [ 242.206756][T13738] should_fail_ex+0x265/0x280 [ 242.206822][T13738] should_fail+0xb/0x20 [ 242.206837][T13738] should_fail_usercopy+0x1a/0x20 [ 242.206860][T13738] _copy_from_user+0x1c/0xb0 [ 242.206887][T13738] ___sys_sendmsg+0xc1/0x1d0 [ 242.206989][T13738] __x64_sys_sendmsg+0xd4/0x160 [ 242.207024][T13738] x64_sys_call+0x191e/0x3000 [ 242.207091][T13738] do_syscall_64+0xd2/0x200 [ 242.207110][T13738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 242.207178][T13738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 242.207213][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.207232][T13738] RIP: 0033:0x7fe29236efc9 [ 242.207246][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.207264][T13738] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.207285][T13738] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 242.207297][T13738] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 242.207313][T13738] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.207324][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.207336][T13738] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 242.207354][T13738] [ 242.316881][T13734] loop2: detected capacity change from 0 to 164 [ 242.379484][T13754] loop2: detected capacity change from 0 to 512 [ 242.432656][T13754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.432716][T13754] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.448715][T13760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3505'. [ 242.449322][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3503'. [ 242.492280][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.610904][ T7100] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.646121][T13776] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3511'. [ 242.655367][T13776] netlink: 'syz.7.3511': attribute type 9 has an invalid length. [ 242.663178][T13776] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3511'. [ 242.672276][T13776] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3511'. [ 242.937062][T13783] loop7: detected capacity change from 0 to 1024 [ 243.044961][T13783] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 243.184469][T13789] bridge0: port 3(gretap0) entered blocking state [ 243.191040][T13789] bridge0: port 3(gretap0) entered disabled state [ 243.197892][T13789] gretap0: entered allmulticast mode [ 243.204107][T13789] gretap0: entered promiscuous mode [ 243.209601][T13789] bridge0: port 3(gretap0) entered blocking state [ 243.216129][T13789] bridge0: port 3(gretap0) entered forwarding state [ 243.226880][T13789] gretap0: left allmulticast mode [ 243.232174][T13789] gretap0: left promiscuous mode [ 243.237271][T13789] bridge0: port 3(gretap0) entered disabled state [ 243.259538][T13791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3517'. [ 243.273367][T13783] loop7: detected capacity change from 0 to 164 [ 243.361487][ T3421] kernel read not supported for file bpf-prog (pid: 3421 comm: kworker/0:5) [ 243.370951][T13802] loop7: detected capacity change from 0 to 1024 [ 243.383039][T13802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.431700][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.448629][T13808] bridge0: port 3(gretap0) entered blocking state [ 243.455280][T13808] bridge0: port 3(gretap0) entered disabled state [ 243.461981][T13808] gretap0: entered allmulticast mode [ 243.468232][T13808] gretap0: entered promiscuous mode [ 243.473829][T13808] bridge0: port 3(gretap0) entered blocking state [ 243.480357][T13808] bridge0: port 3(gretap0) entered forwarding state [ 243.492719][T13808] gretap0: left allmulticast mode [ 243.497887][T13808] gretap0: left promiscuous mode [ 243.503212][T13808] bridge0: port 3(gretap0) entered disabled state [ 243.527099][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.535672][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.569047][T13817] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3529'. [ 243.569050][T13818] netlink: 'syz.0.3528': attribute type 9 has an invalid length. [ 243.683993][T13839] bridge0: port 3(gretap0) entered blocking state [ 243.690512][T13839] bridge0: port 3(gretap0) entered disabled state [ 243.697154][T13839] gretap0: entered allmulticast mode [ 243.703008][T13839] gretap0: entered promiscuous mode [ 243.708461][T13839] bridge0: port 3(gretap0) entered blocking state [ 243.714937][T13839] bridge0: port 3(gretap0) entered forwarding state [ 243.722870][T13839] gretap0: left allmulticast mode [ 243.727914][T13839] gretap0: left promiscuous mode [ 243.733111][T13839] bridge0: port 3(gretap0) entered disabled state [ 243.978833][T13847] loop6: detected capacity change from 0 to 128 [ 243.985732][T13847] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.997962][T13847] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.014724][T13846] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 244.023396][T13846] FAT-fs (loop6): Filesystem has been set read-only [ 244.030567][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 244.030583][ T29] audit: type=1326 audit(1761171552.378:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13845 comm="syz.6.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.060686][ T29] audit: type=1326 audit(1761171552.378:23507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13845 comm="syz.6.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.084282][ T29] audit: type=1326 audit(1761171552.388:23508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13845 comm="syz.6.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.107903][ T29] audit: type=1326 audit(1761171552.388:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13845 comm="syz.6.3540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.140973][ T7095] smc: removing ib device syz1 [ 244.146972][ T10] syz1: Port: 1 Link DOWN [ 244.330669][T13858] loop6: detected capacity change from 0 to 128 [ 244.337487][T13858] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.349469][T13858] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.363778][T13857] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 244.372410][T13857] FAT-fs (loop6): Filesystem has been set read-only [ 244.380321][ T29] audit: type=1326 audit(1761171552.728:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.404066][ T29] audit: type=1326 audit(1761171552.728:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.427756][ T29] audit: type=1326 audit(1761171552.728:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13856 comm="syz.6.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29236efc9 code=0x7ffc0000 [ 244.499099][T13869] bridge0: port 3(gretap0) entered blocking state [ 244.499931][ T29] audit: type=1326 audit(1761171552.848:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.5.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 244.505666][T13869] bridge0: port 3(gretap0) entered disabled state [ 244.505825][T13869] gretap0: entered allmulticast mode [ 244.529396][ T29] audit: type=1326 audit(1761171552.848:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.5.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 244.539745][ T29] audit: type=1326 audit(1761171552.888:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.5.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 244.544312][T13869] gretap0: entered promiscuous mode [ 244.566792][T13872] FAULT_INJECTION: forcing a failure. [ 244.566792][T13872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.589249][T13869] bridge0: port 3(gretap0) entered blocking state [ 244.593928][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.6.3547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.594036][T13872] Tainted: [W]=WARN [ 244.594043][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.594054][T13872] Call Trace: [ 244.594060][T13872] [ 244.594067][T13872] __dump_stack+0x1d/0x30 [ 244.594090][T13872] dump_stack_lvl+0xe8/0x140 [ 244.594116][T13872] dump_stack+0x15/0x1b [ 244.594134][T13872] should_fail_ex+0x265/0x280 [ 244.594224][T13872] should_fail+0xb/0x20 [ 244.594240][T13872] should_fail_usercopy+0x1a/0x20 [ 244.594261][T13872] _copy_to_user+0x20/0xa0 [ 244.594284][T13872] simple_read_from_buffer+0xb5/0x130 [ 244.594308][T13872] proc_fail_nth_read+0x10e/0x150 [ 244.594365][T13872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.594392][T13872] vfs_read+0x1a8/0x770 [ 244.594414][T13872] ? __rcu_read_unlock+0x4f/0x70 [ 244.594438][T13872] ? __fget_files+0x184/0x1c0 [ 244.594522][T13872] ksys_read+0xda/0x1a0 [ 244.594545][T13872] __x64_sys_read+0x40/0x50 [ 244.594568][T13872] x64_sys_call+0x27c0/0x3000 [ 244.594660][T13872] do_syscall_64+0xd2/0x200 [ 244.594678][T13872] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.594704][T13872] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 244.594731][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.594804][T13872] RIP: 0033:0x7fe29236d9dc [ 244.594820][T13872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.594837][T13872] RSP: 002b:00007fe290db6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.594857][T13872] RAX: ffffffffffffffda RBX: 00007fe2925c6090 RCX: 00007fe29236d9dc [ 244.594869][T13872] RDX: 000000000000000f RSI: 00007fe290db60a0 RDI: 0000000000000006 [ 244.594882][T13872] RBP: 00007fe290db6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.594894][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.594908][T13872] R13: 00007fe2925c6128 R14: 00007fe2925c6090 R15: 00007ffdd05353a8 [ 244.594926][T13872] [ 244.599424][T13875] loop5: detected capacity change from 0 to 512 [ 244.607062][T13869] bridge0: port 3(gretap0) entered forwarding state [ 244.614176][T13875] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 244.626129][T13873] gretap0: left allmulticast mode [ 244.790629][ T7401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 244.791232][T13873] gretap0: left promiscuous mode [ 244.855196][T13873] bridge0: port 3(gretap0) entered disabled state [ 244.894812][T13877] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 244.897737][T13871] lo speed is unknown, defaulting to 1000 [ 244.912257][T13877] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 244.966182][T13875] lo speed is unknown, defaulting to 1000 [ 245.150491][T13895] FAULT_INJECTION: forcing a failure. [ 245.150491][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 245.163238][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.5.3556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.163275][T13895] Tainted: [W]=WARN [ 245.163281][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.163291][T13895] Call Trace: [ 245.163297][T13895] [ 245.163303][T13895] __dump_stack+0x1d/0x30 [ 245.163328][T13895] dump_stack_lvl+0xe8/0x140 [ 245.163363][T13895] dump_stack+0x15/0x1b [ 245.163383][T13895] should_fail_ex+0x265/0x280 [ 245.163415][T13895] should_failslab+0x8c/0xb0 [ 245.163444][T13895] kmem_cache_alloc_noprof+0x50/0x480 [ 245.163500][T13895] ? getname_flags+0x80/0x3b0 [ 245.163537][T13895] getname_flags+0x80/0x3b0 [ 245.163568][T13895] user_path_at+0x28/0x130 [ 245.163586][T13895] do_faccessat+0x380/0x800 [ 245.163610][T13895] __x64_sys_faccessat+0x41/0x50 [ 245.163680][T13895] x64_sys_call+0x950/0x3000 [ 245.163722][T13895] do_syscall_64+0xd2/0x200 [ 245.163738][T13895] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.163765][T13895] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.163790][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.163811][T13895] RIP: 0033:0x7ff37830efc9 [ 245.163827][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.163861][T13895] RSP: 002b:00007ff376d6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 245.163880][T13895] RAX: ffffffffffffffda RBX: 00007ff378565fa0 RCX: 00007ff37830efc9 [ 245.163894][T13895] RDX: 0000000000000005 RSI: 0000200000000000 RDI: ffffffffffffffff [ 245.163908][T13895] RBP: 00007ff376d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.163921][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.163934][T13895] R13: 00007ff378566038 R14: 00007ff378565fa0 R15: 00007ffd9fc41ec8 [ 245.163953][T13895] [ 245.507871][T13905] loop5: detected capacity change from 0 to 1024 [ 245.554288][T13905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.567785][T13896] loop7: detected capacity change from 0 to 128 [ 245.574826][T13896] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.577518][T13913] bridge0: port 3(gretap0) entered blocking state [ 245.586874][T13896] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 245.593140][T13913] bridge0: port 3(gretap0) entered disabled state [ 245.620813][T13891] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 245.629366][T13891] FAT-fs (loop7): Filesystem has been set read-only [ 245.631220][T13913] gretap0: entered allmulticast mode [ 245.656519][T13913] gretap0: entered promiscuous mode [ 245.670390][T13913] bridge0: port 3(gretap0) entered blocking state [ 245.676956][T13913] bridge0: port 3(gretap0) entered forwarding state [ 245.780704][T13914] gretap0: left allmulticast mode [ 245.785820][T13914] gretap0: left promiscuous mode [ 245.790910][T13914] bridge0: port 3(gretap0) entered disabled state [ 245.805556][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.830220][T13921] loop5: detected capacity change from 0 to 1024 [ 245.837354][T13921] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 245.878481][T13923] lo speed is unknown, defaulting to 1000 [ 245.950059][T13926] loop6: detected capacity change from 0 to 512 [ 245.982749][T13927] loop5: detected capacity change from 0 to 164 [ 246.023810][T13926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.042931][T13926] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.090192][T13925] lo speed is unknown, defaulting to 1000 [ 246.351962][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.375954][T13942] loop5: detected capacity change from 0 to 2048 [ 246.401737][T13947] loop2: detected capacity change from 0 to 1024 [ 246.412865][T13947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.426693][T13942] loop5: p1 p2 p3 [ 246.455058][T13956] __nla_validate_parse: 10 callbacks suppressed [ 246.455134][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3577'. [ 246.468348][T13958] loop5: detected capacity change from 0 to 1024 [ 246.477948][T13958] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 246.505496][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.576743][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 246.608643][T13965] bridge0: port 3(gretap0) entered blocking state [ 246.615265][T13960] loop5: detected capacity change from 0 to 164 [ 246.615319][T13965] bridge0: port 3(gretap0) entered disabled state [ 246.629625][T13965] gretap0: entered allmulticast mode [ 246.635766][T13965] gretap0: entered promiscuous mode [ 246.641376][T13965] bridge0: port 3(gretap0) entered blocking state [ 246.647860][T13965] bridge0: port 3(gretap0) entered forwarding state [ 246.658471][T13965] gretap0: left allmulticast mode [ 246.663591][T13965] gretap0: left promiscuous mode [ 246.668706][T13965] bridge0: port 3(gretap0) entered disabled state [ 246.786802][T13971] loop2: detected capacity change from 0 to 2048 [ 246.829115][T13979] loop5: detected capacity change from 0 to 1024 [ 246.836616][T13979] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 246.868009][T13982] loop6: detected capacity change from 0 to 2048 [ 246.872172][T13971] loop2: p1 p2 p3 [ 246.909092][T13986] lo speed is unknown, defaulting to 1000 [ 246.978854][T13988] loop5: detected capacity change from 0 to 164 [ 247.055427][T13982] loop6: p1 p2 p3 [ 247.070530][T13992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.093745][T13992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.139213][T13989] lo speed is unknown, defaulting to 1000 [ 247.527855][T13995] loop2: detected capacity change from 0 to 512 [ 247.542958][T13995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.555796][T13995] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.580738][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 247.623364][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.673470][T14007] loop6: detected capacity change from 0 to 2048 [ 247.720855][T14007] loop6: p1 p2 p3 [ 247.725274][T14021] bridge0: port 3(gretap0) entered blocking state [ 247.731828][T14021] bridge0: port 3(gretap0) entered disabled state [ 247.738934][T14021] gretap0: entered allmulticast mode [ 247.744836][T14021] gretap0: entered promiscuous mode [ 247.750727][T14021] bridge0: port 3(gretap0) entered blocking state [ 247.757196][T14021] bridge0: port 3(gretap0) entered forwarding state [ 247.768836][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3605'. [ 247.778155][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3605'. [ 247.778402][T14024] loop5: detected capacity change from 0 to 2048 [ 247.796778][T14019] wireguard0: entered promiscuous mode [ 247.802308][T14019] wireguard0: entered allmulticast mode [ 247.812367][T14021] gretap0: left allmulticast mode [ 247.817428][T14021] gretap0: left promiscuous mode [ 247.822605][T14021] bridge0: port 3(gretap0) entered disabled state [ 247.846401][T14024] loop5: p1 p2 p3 [ 247.892671][T14032] loop6: detected capacity change from 0 to 512 [ 247.901745][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.910765][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.918290][T14032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.933092][T14032] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.985994][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3607'. [ 248.014194][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.073306][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3620'. [ 248.082367][T14065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3620'. [ 248.120236][T14068] loop6: detected capacity change from 0 to 2048 [ 248.175098][T14068] loop6: p1 p2 p3 [ 248.282342][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3627'. [ 248.374291][T14094] loop5: detected capacity change from 0 to 2048 [ 248.411986][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 248.421761][T14094] loop5: p1 p2 p3 [ 248.584674][T14120] FAULT_INJECTION: forcing a failure. [ 248.584674][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 248.597439][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.2.3644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.597473][T14120] Tainted: [W]=WARN [ 248.597481][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.597495][T14120] Call Trace: [ 248.597501][T14120] [ 248.597508][T14120] __dump_stack+0x1d/0x30 [ 248.597530][T14120] dump_stack_lvl+0xe8/0x140 [ 248.597551][T14120] dump_stack+0x15/0x1b [ 248.597572][T14120] should_fail_ex+0x265/0x280 [ 248.597610][T14120] should_failslab+0x8c/0xb0 [ 248.597713][T14120] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 248.597748][T14120] ? __alloc_skb+0x101/0x320 [ 248.597782][T14120] __alloc_skb+0x101/0x320 [ 248.597812][T14120] ? audit_log_start+0x342/0x720 [ 248.597861][T14120] audit_log_start+0x3a0/0x720 [ 248.597879][T14120] ? kstrtouint+0x76/0xc0 [ 248.597910][T14120] audit_seccomp+0x48/0x100 [ 248.597946][T14120] ? __seccomp_filter+0x82d/0x1250 [ 248.598029][T14120] __seccomp_filter+0x83e/0x1250 [ 248.598059][T14120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 248.598102][T14120] ? vfs_write+0x7e8/0x960 [ 248.598129][T14120] __secure_computing+0x82/0x150 [ 248.598218][T14120] syscall_trace_enter+0xcf/0x1e0 [ 248.598251][T14120] do_syscall_64+0xac/0x200 [ 248.598272][T14120] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.598302][T14120] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 248.598386][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.598405][T14120] RIP: 0033:0x7fc4abc2efc9 [ 248.598421][T14120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.598442][T14120] RSP: 002b:00007fc4aa68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 248.598466][T14120] RAX: ffffffffffffffda RBX: 00007fc4abe85fa0 RCX: 00007fc4abc2efc9 [ 248.598481][T14120] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 248.598508][T14120] RBP: 00007fc4aa68f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.598519][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.598531][T14120] R13: 00007fc4abe86038 R14: 00007fc4abe85fa0 R15: 00007ffd16777b38 [ 248.598548][T14120] [ 248.890492][T14129] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 248.960799][T14148] loop6: detected capacity change from 0 to 1024 [ 248.976178][T14148] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3657: Failed to acquire dquot type 0 [ 248.988244][T14148] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 249.003592][T14148] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3657: corrupted inode contents [ 249.016977][T14151] loop5: detected capacity change from 0 to 512 [ 249.023951][T14148] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.3657: mark_inode_dirty error [ 249.053186][T14148] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3657: corrupted inode contents [ 249.068038][T14148] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3657: mark_inode_dirty error [ 249.084037][T14148] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3657: corrupted inode contents [ 249.096720][T14148] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 249.100515][T14151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.119859][T14148] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3657: corrupted inode contents [ 249.139059][T14148] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.3657: mark_inode_dirty error [ 249.150528][T14151] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.161196][T14148] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 249.181987][T14171] loop2: detected capacity change from 0 to 2048 [ 249.188863][T14148] EXT4-fs (loop6): 1 truncate cleaned up [ 249.199807][T14148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.220924][T14148] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 249.245427][T14171] loop2: p1 p2 p3 [ 249.246150][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.271608][T12256] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.298399][T14184] FAULT_INJECTION: forcing a failure. [ 249.298399][T14184] name failslab, interval 1, probability 0, space 0, times 0 [ 249.311188][T14184] CPU: 1 UID: 0 PID: 14184 Comm: syz.6.3673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.311297][T14184] Tainted: [W]=WARN [ 249.311303][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.311314][T14184] Call Trace: [ 249.311319][T14184] [ 249.311326][T14184] __dump_stack+0x1d/0x30 [ 249.311347][T14184] dump_stack_lvl+0xe8/0x140 [ 249.311439][T14184] dump_stack+0x15/0x1b [ 249.311494][T14184] should_fail_ex+0x265/0x280 [ 249.311523][T14184] should_failslab+0x8c/0xb0 [ 249.311654][T14184] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 249.311679][T14184] ? __alloc_skb+0x101/0x320 [ 249.311703][T14184] __alloc_skb+0x101/0x320 [ 249.311727][T14184] netlink_alloc_large_skb+0xbf/0xf0 [ 249.311755][T14184] netlink_sendmsg+0x3cf/0x6b0 [ 249.311923][T14184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.311950][T14184] __sock_sendmsg+0x145/0x180 [ 249.311971][T14184] ____sys_sendmsg+0x31e/0x4e0 [ 249.312066][T14184] ___sys_sendmsg+0x17b/0x1d0 [ 249.312175][T14184] __x64_sys_sendmsg+0xd4/0x160 [ 249.312205][T14184] x64_sys_call+0x191e/0x3000 [ 249.312246][T14184] do_syscall_64+0xd2/0x200 [ 249.312330][T14184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.312372][T14184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 249.312478][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.312496][T14184] RIP: 0033:0x7fe29236efc9 [ 249.312510][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.312526][T14184] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.312623][T14184] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 249.312635][T14184] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000006 [ 249.312646][T14184] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.312657][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.312803][T14184] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 249.312819][T14184] [ 249.537186][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 249.537205][ T29] audit: type=1326 audit(1761171557.888:23924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.543581][ T29] audit: type=1326 audit(1761171557.888:23925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.590974][ T29] audit: type=1326 audit(1761171557.888:23926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.614563][ T29] audit: type=1326 audit(1761171557.888:23927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.638173][ T29] audit: type=1326 audit(1761171557.888:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.661795][ T29] audit: type=1326 audit(1761171557.888:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.685405][ T29] audit: type=1326 audit(1761171557.888:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.708983][ T29] audit: type=1326 audit(1761171557.888:23931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.732848][ T29] audit: type=1326 audit(1761171557.888:23932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.756353][ T29] audit: type=1326 audit(1761171557.888:23933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.5.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37830efc9 code=0x7ffc0000 [ 249.930963][T14213] loop6: detected capacity change from 0 to 2048 [ 249.972174][T14213] loop6: p1 p2 p3 [ 250.022069][T14221] wireguard0: entered promiscuous mode [ 250.027663][T14221] wireguard0: entered allmulticast mode [ 250.062221][T14232] FAULT_INJECTION: forcing a failure. [ 250.062221][T14232] name failslab, interval 1, probability 0, space 0, times 0 [ 250.075004][T14232] CPU: 1 UID: 0 PID: 14232 Comm: syz.6.3691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.075090][T14232] Tainted: [W]=WARN [ 250.075099][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.075165][T14232] Call Trace: [ 250.075171][T14232] [ 250.075181][T14232] __dump_stack+0x1d/0x30 [ 250.075228][T14232] dump_stack_lvl+0xe8/0x140 [ 250.075253][T14232] dump_stack+0x15/0x1b [ 250.075274][T14232] should_fail_ex+0x265/0x280 [ 250.075314][T14232] should_failslab+0x8c/0xb0 [ 250.075354][T14232] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 250.075386][T14232] ? __get_vm_area_node+0x106/0x1d0 [ 250.075422][T14232] __get_vm_area_node+0x106/0x1d0 [ 250.075490][T14232] __vmalloc_node_range_noprof+0x28c/0xed0 [ 250.075573][T14232] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.075614][T14232] ? __rcu_read_unlock+0x4f/0x70 [ 250.075658][T14232] ? cred_has_capability+0x210/0x280 [ 250.075759][T14232] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.075788][T14232] __vmalloc_noprof+0x83/0xc0 [ 250.075860][T14232] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.075898][T14232] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.075934][T14232] ? bpf_prog_alloc+0x2a/0x150 [ 250.076033][T14232] bpf_prog_alloc+0x3c/0x150 [ 250.076068][T14232] bpf_prog_load+0x506/0x1100 [ 250.076102][T14232] ? security_bpf+0x2b/0x90 [ 250.076162][T14232] __sys_bpf+0x469/0x7c0 [ 250.076223][T14232] __x64_sys_bpf+0x41/0x50 [ 250.076256][T14232] x64_sys_call+0x2aee/0x3000 [ 250.076279][T14232] do_syscall_64+0xd2/0x200 [ 250.076300][T14232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.076390][T14232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 250.076425][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.076450][T14232] RIP: 0033:0x7fe29236efc9 [ 250.076469][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.076529][T14232] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.076614][T14232] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 250.076626][T14232] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 250.076641][T14232] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.076656][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.076671][T14232] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 250.076697][T14232] [ 250.076708][T14232] syz.6.3691: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 250.126706][T14219] loop7: detected capacity change from 0 to 128 [ 250.131050][T14232] ,cpuset=/ [ 250.137306][T14219] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.142012][T14232] ,mems_allowed=0 [ 250.142070][T14232] CPU: 1 UID: 0 PID: 14232 Comm: syz.6.3691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.142108][T14232] Tainted: [W]=WARN [ 250.142115][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.142155][T14232] Call Trace: [ 250.142163][T14232] [ 250.142172][T14232] __dump_stack+0x1d/0x30 [ 250.142222][T14232] dump_stack_lvl+0xe8/0x140 [ 250.142243][T14232] dump_stack+0x15/0x1b [ 250.142261][T14232] warn_alloc+0x12b/0x1a0 [ 250.142319][T14232] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 250.142351][T14232] ? __rcu_read_unlock+0x4f/0x70 [ 250.142380][T14232] ? cred_has_capability+0x210/0x280 [ 250.142417][T14232] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.142448][T14232] __vmalloc_noprof+0x83/0xc0 [ 250.142481][T14232] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.142511][T14232] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 250.142543][T14232] ? bpf_prog_alloc+0x2a/0x150 [ 250.142573][T14232] bpf_prog_alloc+0x3c/0x150 [ 250.142602][T14232] bpf_prog_load+0x506/0x1100 [ 250.142631][T14232] ? security_bpf+0x2b/0x90 [ 250.142792][T14232] __sys_bpf+0x469/0x7c0 [ 250.142818][T14232] __x64_sys_bpf+0x41/0x50 [ 250.142846][T14232] x64_sys_call+0x2aee/0x3000 [ 250.142913][T14232] do_syscall_64+0xd2/0x200 [ 250.142931][T14232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.142957][T14232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 250.142986][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.143089][T14232] RIP: 0033:0x7fe29236efc9 [ 250.143105][T14232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.143123][T14232] RSP: 002b:00007fe290dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.143143][T14232] RAX: ffffffffffffffda RBX: 00007fe2925c5fa0 RCX: 00007fe29236efc9 [ 250.143228][T14232] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 250.143241][T14232] RBP: 00007fe290dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 250.143253][T14232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.143266][T14232] R13: 00007fe2925c6038 R14: 00007fe2925c5fa0 R15: 00007ffdd05353a8 [ 250.143284][T14232] [ 250.143292][T14232] Mem-Info: [ 250.154721][T14219] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.158430][T14232] active_anon:13595 inactive_anon:1 isolated_anon:0 [ 250.158430][T14232] active_file:23463 inactive_file:2344 isolated_file:0 [ 250.158430][T14232] unevictable:0 dirty:633 writeback:0 [ 250.158430][T14232] slab_reclaimable:3511 slab_unreclaimable:16521 [ 250.158430][T14232] mapped:32788 shmem:3785 pagetables:1269 [ 250.158430][T14232] sec_pagetables:0 bounce:0 [ 250.158430][T14232] kernel_misc_reclaimable:0 [ 250.158430][T14232] free:1869735 free_pcp:15883 free_cma:0 [ 250.167159][T14219] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 250.168700][T14232] Node 0 active_anon:54380kB inactive_anon:4kB active_file:93852kB inactive_file:9376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131152kB dirty:2532kB writeback:0kB shmem:15140kB kernel_stack:4048kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.174297][T14219] FAT-fs (loop7): Filesystem has been set read-only [ 250.178961][T14232] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.702496][T14232] lowmem_reserve[]: 0 2881 7859 7859 [ 250.707900][T14232] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 250.739016][T14232] lowmem_reserve[]: 0 0 4978 4978 [ 250.744206][T14232] Node 0 Normal free:4520432kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42848kB inactive_anon:4kB active_file:93852kB inactive_file:9388kB unevictable:0kB writepending:2536kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:67976kB local_pcp:36440kB free_cma:0kB [ 250.777285][T14232] lowmem_reserve[]: 0 0 0 0 [ 250.781857][T14232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.794850][T14232] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 250.811108][T14232] Node 0 Normal: 930*4kB (UME) 208*8kB (UM) 85*16kB (UME) 167*32kB (UME) 44*64kB (UME) 136*128kB (UME) 107*256kB (UM) 222*512kB (UM) 184*1024kB (UME) 103*2048kB (UM) 964*4096kB (UM) = 4521272kB [ 250.830439][T14232] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 250.839732][T14232] 26772 total pagecache pages [ 250.844474][T14232] 1 pages in swap cache [ 250.848622][T14232] Free swap = 124992kB [ 250.852890][T14232] Total swap = 124996kB [ 250.857066][T14232] 2097051 pages RAM [ 250.860899][T14232] 0 pages HighMem/MovableOnly [ 250.865582][T14232] 81083 pages reserved [ 250.884865][ T3420] kernel read not supported for file bpf-prog (pid: 3420 comm: kworker/1:4) [ 251.059238][T14251] loop5: detected capacity change from 0 to 1024 [ 251.073282][T14251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.141122][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.326658][T14262] loop5: detected capacity change from 0 to 128 [ 251.333365][T14262] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.345557][T14262] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.364045][T14259] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.372747][T14259] FAT-fs (loop5): Filesystem has been set read-only [ 251.476559][T14276] FAULT_INJECTION: forcing a failure. [ 251.476559][T14276] name failslab, interval 1, probability 0, space 0, times 0 [ 251.489414][T14276] CPU: 0 UID: 0 PID: 14276 Comm: syz.7.3708 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.489443][T14276] Tainted: [W]=WARN [ 251.489449][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.489459][T14276] Call Trace: [ 251.489480][T14276] [ 251.489487][T14276] __dump_stack+0x1d/0x30 [ 251.489560][T14276] dump_stack_lvl+0xe8/0x140 [ 251.489577][T14276] dump_stack+0x15/0x1b [ 251.489592][T14276] should_fail_ex+0x265/0x280 [ 251.489695][T14276] should_failslab+0x8c/0xb0 [ 251.489720][T14276] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 251.489746][T14276] ? set_task_ioprio+0x174/0x270 [ 251.489772][T14276] set_task_ioprio+0x174/0x270 [ 251.489788][T14276] __se_sys_ioprio_set+0x465/0x5a0 [ 251.489871][T14276] ? trace_sys_enter+0xd0/0xf0 [ 251.489896][T14276] __x64_sys_ioprio_set+0x43/0x50 [ 251.489918][T14276] x64_sys_call+0x2fbe/0x3000 [ 251.489981][T14276] do_syscall_64+0xd2/0x200 [ 251.489998][T14276] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.490036][T14276] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 251.490061][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.490088][T14276] RIP: 0033:0x7f1ad91fefc9 [ 251.490102][T14276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.490188][T14276] RSP: 002b:00007f1ad7c67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 251.490206][T14276] RAX: ffffffffffffffda RBX: 00007f1ad9455fa0 RCX: 00007f1ad91fefc9 [ 251.490218][T14276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 251.490228][T14276] RBP: 00007f1ad7c67090 R08: 0000000000000000 R09: 0000000000000000 [ 251.490239][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.490250][T14276] R13: 00007f1ad9456038 R14: 00007f1ad9455fa0 R15: 00007fff2e6dd6f8 [ 251.490324][T14276] [ 251.714366][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.727658][T14285] loop2: detected capacity change from 0 to 1024 [ 251.730742][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.752665][T14285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.778455][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.792102][T14274] loop5: detected capacity change from 0 to 128 [ 251.798925][T14274] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.812785][T14274] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.832522][T14274] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.841247][T14274] FAT-fs (loop5): Filesystem has been set read-only [ 251.869799][T14295] __nla_validate_parse: 10 callbacks suppressed [ 251.869818][T14295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3714'. [ 251.901809][T14291] loop7: detected capacity change from 0 to 128 [ 251.918839][T14291] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.937277][T14295] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.948051][T14291] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.958820][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'. [ 251.970283][T14291] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 251.978865][T14291] FAT-fs (loop7): Filesystem has been set read-only [ 252.158652][T14293] lo speed is unknown, defaulting to 1000 [ 252.325858][T14310] wireguard0: entered promiscuous mode [ 252.331534][T14310] wireguard0: entered allmulticast mode [ 252.397381][T14308] lo speed is unknown, defaulting to 1000 [ 252.478380][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3725'. [ 252.538048][ T3420] kernel read not supported for file bpf-prog (pid: 3420 comm: kworker/1:4) [ 252.782566][T14329] loop6: detected capacity change from 0 to 128 [ 252.789243][T14329] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.790726][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 252.810494][T14329] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.830563][T14324] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 252.839169][T14324] FAT-fs (loop6): Filesystem has been set read-only [ 253.018631][T14336] lo speed is unknown, defaulting to 1000 [ 253.106312][T14348] loop2: detected capacity change from 0 to 1024 [ 253.113456][T14350] bridge0: port 3(gretap0) entered blocking state [ 253.113948][T14348] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 253.119923][T14350] bridge0: port 3(gretap0) entered disabled state [ 253.135488][T14350] gretap0: entered allmulticast mode [ 253.141357][T14350] gretap0: entered promiscuous mode [ 253.149583][T14350] bridge0: port 3(gretap0) entered blocking state [ 253.156107][T14350] bridge0: port 3(gretap0) entered forwarding state [ 253.175410][T14350] gretap0: left allmulticast mode [ 253.180486][T14350] gretap0: left promiscuous mode [ 253.185590][T14350] bridge0: port 3(gretap0) entered disabled state [ 253.227749][T14358] loop2: detected capacity change from 0 to 164 [ 253.315687][T14352] lo speed is unknown, defaulting to 1000 [ 253.414932][T14372] loop7: detected capacity change from 0 to 512 [ 253.457926][T14372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.478341][T14372] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.490282][T14379] bridge0: port 3(gretap0) entered blocking state [ 253.496833][T14379] bridge0: port 3(gretap0) entered disabled state [ 253.503592][T14379] gretap0: entered allmulticast mode [ 253.509679][T14379] gretap0: entered promiscuous mode [ 253.515308][T14379] bridge0: port 3(gretap0) entered blocking state [ 253.521901][T14379] bridge0: port 3(gretap0) entered forwarding state [ 253.543773][T12496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.569885][T14380] gretap0: left allmulticast mode [ 253.575006][T14380] gretap0: left promiscuous mode [ 253.580109][T14380] bridge0: port 3(gretap0) entered disabled state [ 253.616825][T14373] lo speed is unknown, defaulting to 1000 [ 253.622969][T14384] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3749'. [ 253.640372][T14382] loop7: detected capacity change from 0 to 512 [ 253.647535][T14382] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.659392][T14382] SELinux: policydb magic number 0x6f72702f does not match expected magic number 0xf97cff8c [ 253.675254][T14382] SELinux: failed to load policy [ 253.740821][T14386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14386 comm=syz.2.3749 [ 253.804429][T14392] bridge0: port 3(gretap0) entered blocking state [ 253.811073][T14392] bridge0: port 3(gretap0) entered disabled state [ 253.818924][T14392] gretap0: entered allmulticast mode [ 253.825431][T14392] gretap0: entered promiscuous mode [ 253.831283][T14392] bridge0: port 3(gretap0) entered blocking state [ 253.837776][T14392] bridge0: port 3(gretap0) entered forwarding state [ 253.847728][T14392] gretap0: left allmulticast mode [ 253.852991][T14392] gretap0: left promiscuous mode [ 253.858098][T14392] bridge0: port 3(gretap0) entered disabled state [ 253.882236][T14396] loop2: detected capacity change from 0 to 1024 [ 253.889189][T14396] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 253.956818][T14396] loop2: detected capacity change from 0 to 164 [ 253.963243][T14398] loop6: detected capacity change from 0 to 2048 [ 253.994605][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3755'. [ 254.005279][T14398] loop6: p1 p2 p3 [ 254.038824][T14402] loop6: detected capacity change from 0 to 2048 [ 254.081983][T14402] loop6: p1 p2 p3 [ 254.146102][T14410] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3760'. [ 254.160439][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3761'. [ 254.182651][T14412] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.240752][T14413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14413 comm=syz.6.3760 [ 254.422257][T14427] loop5: detected capacity change from 0 to 1024 [ 254.433673][T14427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.448830][T14431] lo speed is unknown, defaulting to 1000 [ 254.484712][T14440] loop7: detected capacity change from 0 to 512 [ 254.491780][T14440] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 254.542750][T14431] lo speed is unknown, defaulting to 1000 [ 254.553269][ T5899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.573703][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 254.573718][ T29] audit: type=1326 audit(1761171562.928:24288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.637348][ T29] audit: type=1326 audit(1761171562.968:24289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.661070][ T29] audit: type=1326 audit(1761171562.988:24290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.684733][ T29] audit: type=1326 audit(1761171562.988:24291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.708375][ T29] audit: type=1326 audit(1761171562.988:24292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.732310][ T29] audit: type=1326 audit(1761171562.988:24293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.755924][ T29] audit: type=1326 audit(1761171562.988:24294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.779604][ T29] audit: type=1326 audit(1761171562.988:24295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.803600][ T29] audit: type=1326 audit(1761171562.988:24296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.827213][ T29] audit: type=1326 audit(1761171562.988:24297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad91fefc9 code=0x7ffc0000 [ 254.896578][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.905370][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.951094][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3778'. [ 254.960125][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3778'. [ 255.043090][T14468] lo speed is unknown, defaulting to 1000 [ 255.164721][T14467] lo speed is unknown, defaulting to 1000 [ 255.168232][T14480] bridge0: port 3(gretap0) entered blocking state [ 255.178045][T14480] bridge0: port 3(gretap0) entered disabled state [ 255.184883][T14480] gretap0: entered allmulticast mode [ 255.190760][T14480] gretap0: entered promiscuous mode [ 255.196157][T14480] bridge0: port 3(gretap0) entered blocking state [ 255.202648][T14480] bridge0: port 3(gretap0) entered forwarding state [ 255.225374][T14480] gretap0: left allmulticast mode [ 255.230472][T14480] gretap0: left promiscuous mode [ 255.235600][T14480] bridge0: port 3(gretap0) entered disabled state [ 255.489191][T14492] loop6: detected capacity change from 0 to 2048 [ 255.490246][T14494] loop2: detected capacity change from 0 to 2048 [ 255.522472][T14492] loop6: p1 p2 p3 [ 255.528257][T14494] loop2: p1 p2 p3 [ 255.611585][ T7100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.622427][T14499] loop2: detected capacity change from 0 to 512 [ 255.637685][T14484] lo speed is unknown, defaulting to 1000 [ 255.653746][T14499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.676636][T14499] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.697828][T14502] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 255.738583][ T7100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.771288][T14484] chnl_net:caif_netlink_parms(): no params data found [ 255.813963][T13123] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.825097][ T7100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.855302][T14484] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.862564][T14484] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.869865][T14484] bridge_slave_0: entered allmulticast mode [ 255.876385][T14484] bridge_slave_0: entered promiscuous mode [ 255.884909][ T7100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.898072][T14484] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.905207][T14484] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.913144][T14484] bridge_slave_1: entered allmulticast mode [ 255.919846][T14484] bridge_slave_1: entered promiscuous mode [ 255.939517][T14484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.950519][T14484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.977367][T14530] Q6\bY4: renamed from lo [ 256.009071][T14539] loop2: detected capacity change from 0 to 2048 [ 256.017754][ T7100] bridge_slave_1: left allmulticast mode [ 256.023580][ T7100] bridge_slave_1: left promiscuous mode [ 256.029329][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.037058][ T7100] bridge_slave_0: left allmulticast mode [ 256.042851][ T7100] bridge_slave_0: left promiscuous mode [ 256.048497][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.071939][T14539] loop2: p1 p2 p3 [ 256.081357][ T7100] ip6gretap0 (unregistering): left promiscuous mode [ 256.104401][ T7100] dvmrp1 (unregistering): left allmulticast mode [ 256.115246][ T7100] bridge0 (unregistering): left promiscuous mode [ 256.231181][T14543] ================================================================== [ 256.239327][T14543] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 256.246385][T14543] [ 256.248724][T14543] write to 0xffff888119c0fa10 of 8 bytes by task 14544 on cpu 0: [ 256.256537][T14543] shmem_fallocate+0x301/0x840 [ 256.261301][T14543] vfs_fallocate+0x3b6/0x400 [ 256.265888][T14543] madvise_vma_behavior+0x1920/0x1cf0 [ 256.271262][T14543] madvise_do_behavior+0x5b7/0x970 [ 256.276373][T14543] do_madvise+0x10e/0x190 [ 256.280706][T14543] __x64_sys_madvise+0x64/0x80 [ 256.285475][T14543] x64_sys_call+0x1f1a/0x3000 [ 256.290146][T14543] do_syscall_64+0xd2/0x200 [ 256.294665][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.300555][T14543] [ 256.302877][T14543] read to 0xffff888119c0fa10 of 8 bytes by task 14543 on cpu 1: [ 256.311016][T14543] shmem_fault+0x90/0x250 [ 256.315339][T14543] __do_fault+0xbc/0x200 [ 256.319576][T14543] handle_mm_fault+0xf78/0x2be0 [ 256.324418][T14543] __get_user_pages+0x102a/0x1ed0 [ 256.329698][T14543] __mm_populate+0x243/0x3a0 [ 256.334283][T14543] vm_mmap_pgoff+0x232/0x2e0 [ 256.338867][T14543] ksys_mmap_pgoff+0xc2/0x310 [ 256.343557][T14543] x64_sys_call+0x14a3/0x3000 [ 256.348240][T14543] do_syscall_64+0xd2/0x200 [ 256.352733][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.358619][T14543] [ 256.360935][T14543] value changed: 0xffffc9000629bb58 -> 0x0000000000000000 [ 256.368043][T14543] [ 256.370359][T14543] Reported by Kernel Concurrency Sanitizer on: [ 256.376514][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.2.3803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 256.387877][T14543] Tainted: [W]=WARN [ 256.391666][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.401740][T14543] ================================================================== [ 256.409874][ T7100] bond0 (unregistering): left promiscuous mode [ 256.416098][ T7100] bond_slave_0: left promiscuous mode [ 256.421842][T14544] loop2: detected capacity change from 0 to 128 [ 256.421834][ T7100] bond_slave_1: left promiscuous mode [ 256.433799][ T7100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.433933][T14544] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.455222][T14544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.464513][ T7100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.475093][ T7100] bond0 (unregistering): Released all slaves [ 256.495261][T14484] team0: Port device team_slave_0 added [ 256.501955][T14484] team0: Port device team_slave_1 added [ 256.515232][T14543] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 256.520663][ T3669] Bluetooth: hci0: command 0x1003 tx timeout [ 256.523873][T14543] FAT-fs (loop2): Filesystem has been set read-only [ 256.529924][ T7401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 256.547905][T14484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.554975][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.580883][T14484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.592686][ T7100] team0: left promiscuous mode [ 256.597551][ T7100] team_slave_0: left promiscuous mode [ 256.603176][ T7100] team_slave_1: left promiscuous mode [ 256.608742][ T7100] dummy0: left promiscuous mode [ 256.616272][ T7100] hsr_slave_0: left promiscuous mode [ 256.624057][ T7100] hsr_slave_1: left promiscuous mode [ 256.629662][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.637170][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.645376][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.652861][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.661771][ T7100] veth1_macvtap: left promiscuous mode [ 256.667316][ T7100] veth0_macvtap: left promiscuous mode [ 256.672825][ T7100] veth1_vlan: left promiscuous mode [ 256.678092][ T7100] veth0_vlan: left promiscuous mode [ 256.733073][ T7100] team0 (unregistering): Port device team_slave_1 removed [ 256.743116][ T7100] team0 (unregistering): Port device team_slave_0 removed [ 256.766562][ T7100] team0 (unregistering): Port device dummy0 removed [ 256.779229][T14484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.786245][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.812357][T14484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.837547][T14484] hsr_slave_0: entered promiscuous mode [ 256.843708][T14484] hsr_slave_1: entered promiscuous mode [ 256.849491][T14484] debugfs: 'hsr0' already exists in 'hsr' [ 256.855256][T14484] Cannot create hsr debugfs directory [ 257.221603][T14484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.230310][T14484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.238596][T14484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.247963][T14484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.280991][T14484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.293707][T14484] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.303318][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.310378][ T7161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.322045][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.329189][ T7121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.385456][T14484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.481160][T14484] veth0_vlan: entered promiscuous mode [ 257.488647][T14484] veth1_vlan: entered promiscuous mode [ 257.502879][T14484] veth0_macvtap: entered promiscuous mode [ 257.510089][T14484] veth1_macvtap: entered promiscuous mode [ 257.520598][T14484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.531464][T14484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.541809][ T7095] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.553162][ T7095] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.562108][ T7095] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.571210][ T7095] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0