last executing test programs: 1m30.119154945s ago: executing program 4 (id=788): syz_open_pts(0xffffffffffffffff, 0x101) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x5d5, &(0x7f0000000980)="$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") 1m29.996215648s ago: executing program 4 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') 1m29.909025479s ago: executing program 4 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) 1m29.700225962s ago: executing program 4 (id=794): prctl$PR_SET_IO_FLUSHER(0x39, 0x1ffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@debug}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) prctl$PR_SET_SECCOMP(0x48, 0x1, &(0x7f0000000080)={0x0, 0x0}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x13, 0x5, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) 1m29.415010497s ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x26060400) semop(0x0, &(0x7f0000000000)=[{0x3, 0x7, 0x1000}], 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) 1m28.59238946s ago: executing program 4 (id=805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) 1m28.544222181s ago: executing program 32 (id=805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) 53.395060639s ago: executing program 5 (id=1424): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) iopl(0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x80, 0x1, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x401, 0x4, 0x4, 0x403}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0xfd77, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x8, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x40, 0x2, 0x0, 0x0, 0x9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4000080, 0x8003, 0x0, 0x100000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@debug}]}, 0x3, 0x434, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xa}, 0x4841, 0xab3, 0x0, 0x3, 0x40000008, 0x8, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 52.67179309s ago: executing program 5 (id=1433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 52.66771814s ago: executing program 5 (id=1436): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x47bc, 0x2, 0x0, 0x0, 0x0) 52.643140011s ago: executing program 5 (id=1438): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioperm(0x7, 0x40, 0x1631) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(0xffffffffffffffff, r0, 0x80000) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 52.621076261s ago: executing program 5 (id=1439): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") stat(&(0x7f0000003700)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="8000000024000000", @ANYRES32, @ANYRES64=0x0], 0x20) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20142, 0x0) r5 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x78d7, 0x0, &(0x7f0000000080)=[r3, r3, 0xffffffffffffffff, r2, r2, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') lseek(r6, 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@user_xattr}, {@user_xattr}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x439, &(0x7f00000015c0)="$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") unlink(&(0x7f0000000180)='./file1\x00') 52.334654726s ago: executing program 5 (id=1443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000400)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000440)='./file0\x00', 0xc9028ba210c11fcf) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) getresgid(&(0x7f0000000c40)=0x0, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRES64=r5, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYRES16=r4], 0x1, 0x1fa, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r11, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) unshare(0x2c020400) 45.922678849s ago: executing program 2 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f8, 0x20, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ifs_status\x00', r1, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000300)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}, {@grpquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r6, r5, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x18) unshare(0x64000600) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) 42.707154221s ago: executing program 2 (id=1540): r0 = socket$inet(0x2, 0x6, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 42.564207084s ago: executing program 2 (id=1542): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000003c0)={[{@user_xattr}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}, {@noblock_validity}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@orlov}, {@abort}, {@grpid}]}, 0x0, 0x448, &(0x7f0000000740)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000003c0)={[{@user_xattr}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}, {@noblock_validity}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@orlov}, {@abort}, {@grpid}]}, 0x0, 0x448, &(0x7f0000000740)="$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") (async) 42.414712186s ago: executing program 2 (id=1545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x18, 0x27, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0xee, 0x0, 0x0, @ipv4=@remote}]}, 0x18}], 0x1}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000015c0)='vm_unmapped_area\x00', r2}, 0x18) io_setup(0x5, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x6, 0xe, 0x4, 0x7, 0x7, 0xc7e, 0xa}, 0x1c) 42.051088491s ago: executing program 2 (id=1550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) acct(0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7317000000000000, 0x6, &(0x7f0000000000)=0x1) recvmmsg(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x101) syz_usb_disconnect(0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26}, 0x1c}}, 0x0) 41.900134814s ago: executing program 2 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") chdir(&(0x7f0000000200)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noxattr}, {@directio}, {@loose}]}}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_open_dev$tty20(0xc, 0x4, 0x0) 41.860845705s ago: executing program 33 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") chdir(&(0x7f0000000200)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noxattr}, {@directio}, {@loose}]}}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) syz_open_dev$tty20(0xc, 0x4, 0x0) 37.100646642s ago: executing program 34 (id=1443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000400)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f0000000440)='./file0\x00', 0xc9028ba210c11fcf) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) getresgid(&(0x7f0000000c40)=0x0, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRES64=r5, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYRES16=r4], 0x1, 0x1fa, &(0x7f0000000500)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r11, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) unshare(0x2c020400) 3.75043143s ago: executing program 3 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, &(0x7f0000000240)='./file0\x00') 3.687606341s ago: executing program 3 (id=2250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0xffff, &(0x7f0000001080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b33000000000000000005"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r8, &(0x7f0000000200)="5280", 0x2) 2.954066533s ago: executing program 1 (id=2258): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=@newqdisc={0x104, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x7fff}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfa}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0x7ff, 0x3a3, 0x0, 0x6, 0x5, 0x2}}, {0x8, 0x2, [0xfff7, 0x4]}}, {{0x1c, 0x1, {0x5, 0x0, 0x3ff, 0x1, 0x0, 0x1, 0x8, 0x6}}, {0x10, 0x2, [0x8, 0x5, 0x8, 0x8000, 0x6, 0xed]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80020000}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1a, 0x0, 0x9, 0x56e5, 0x2, 0x7, 0x5, 0x7}}, {0x12, 0x2, [0x4, 0x1, 0x6633, 0x2e19, 0x1, 0x8c, 0xd1]}}, {{0x1c, 0x1, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xdc5, 0x2}}, {0x8, 0x2, [0x5, 0x6]}}]}]}, 0x104}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000000)=0x821, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000380)={r6, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r6, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pread64(r10, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='br_fdb_external_learn_add\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) 2.857552935s ago: executing program 1 (id=2262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2.021418808s ago: executing program 1 (id=2275): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r1, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xe000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}}}}}}}, 0x0) 1.978051609s ago: executing program 1 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r2 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.103230053s ago: executing program 1 (id=2285): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1722, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb702000000000000b703000001000100850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r2, &(0x7f0000000bc0), 0xffffffae) r3 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r3, &(0x7f0000000100)=""/106, 0xffffff39) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r4, &(0x7f0000000100)=""/106, 0xffffff39) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syncfs(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010001000100fddbdf252100000008000300", @ANYRES32, @ANYBLOB="24002d80080002001600000005000400010000ea040001"], 0x40}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) syz_open_dev$hidraw(&(0x7f0000000600), 0xb5df, 0xa000) execveat(r9, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000080)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='GPL\x00']}, &(0x7f0000000440)={[&(0x7f00000002c0)='#\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)='*:[\xc8{/#\x00', &(0x7f0000000400)='-\x00']}, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.093360363s ago: executing program 6 (id=2286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.040058014s ago: executing program 7 (id=2288): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x7, 0x40, 0x1631) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(0xffffffffffffffff, r1, 0x80000) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.038884964s ago: executing program 0 (id=2298): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000040)}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x3e, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff2a, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r5, @ANYBLOB="0c5602abf50bc5122401a55babcc7588f9934dc8fc99f6745cf7f019c8b130f6d81a5bd2d458fd5df9f3b1ac2ba46e46b6b312c27d9a962ac422918e7a077cce47312baeb0c2b343543192ddf8c0ca362588610d371b2be50591ad5d15fc559d9ff93b027e733f3e31799862b66ab461744c6f90509f4b7f86038ca6a9ed57a085f9f2234e2409ca9b74f0c776982300541f082ec12639df82aa786c972f1a4e2c81dd1c3ccc868647626cb9337276c0eb979aa5343dde32038e914b4ad17dae392644b3b5f90ae93093fa", @ANYRESDEC], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xffffffffffffff63, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001433fffe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setrlimit(0x9, &(0x7f0000000a00)={0x0, 0x100000001}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000600)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x13?\x1e\xe8\x15V\x91\x10,\xd5\xa0\xff.p\xc4\x94\xd2Fs)9v.\xe2\xee\x8e\x03c\xfd\xcc\xa2\\]\xa7\x97\x13\xa1g\"uI[\xd6\x89\xa48\x98T\x11T\xd1p\x14Y\xc7\x01\n\xb5\xbd\t\n\x97\xb6\xec\x9e\xf4\xe2z:\x9c\xf7@\xe2b\xf6\aoi;\xe0\xd8A\x8e]\xe4\xc6\xf1\x17X#\xde\xdd-)\xca\xca\x95b\xcf\xae\x7f\xd55\xcf\x17h\x0f\xccn\x8eR\x1f\x8e\x96C}3\x1e/k\x89\xa0\x7f\x88T\xb8\xa0R\xd7\xaaAE\xed\x12\x95\xfe\xc5G\xe1\xb0@\x1dw\xda\x04u<\xef\xf5\x90|$\xc8\xa4\xae\x91\xc1\xd6\xe8;\xefm\xb5c\x9b\xc6\xfeM\xec!\xbb7\x88\xc0\x04~P\x89C\"\xc4\xa5&|LO\xca\xfc\xc4[\xd4A\x12\xe22\x86Ww\x9c\x06\x1e\x02\xeb\xc7\xc9Z~<6\xcd']}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.011772654s ago: executing program 7 (id=2289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0xcdc}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(r2, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000002700000000000000", @ANYRES32=r6, @ANYBLOB="000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000"/28], 0x50) 982.180755ms ago: executing program 0 (id=2290): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xf}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 470.032803ms ago: executing program 3 (id=2295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r2 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 279.960146ms ago: executing program 1 (id=2296): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000062de75c4fb00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffbfb703000008000000b70400000000000085000000820000009d0039ac508a00002085002a1bff68c7eea912e8b432d9db7a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000300)={0x9, 0x2, {0x0, 0x0, 0x3, 0x2}, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000a40)="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", 0x228}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319", 0x51}], 0x3}, 0x20000000) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r5, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1b) 238.759257ms ago: executing program 0 (id=2297): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x3, 0x0, 0x0, 0x2}}, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_read_part_table(0x104d, &(0x7f00000000c0)="$eJzszzEKwkAQBdC/bjZG8RDpLKytPYR4SSuPZmepBI14ARHhvWL5y3wGJvzW4vNTtpfsx9raMvekyzpDbilTqSTZJRlbDhmSWqZ3tnlvSHKdQ3Jc1ZbuNatzqU//DKfzl68DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/wCAAA//8CiQZr") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x309, 0x12) 224.725827ms ago: executing program 6 (id=2299): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a18e33631206cc1d718a0000000000000000940000000000000000000000000000000000000000000bbd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 203.014208ms ago: executing program 6 (id=2300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2b4, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x288, 0x4, 0x0, 0x1, [{0x284, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x274, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_TO_DATA={0x214, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x10d, 0x1, "d58d25bab9b7bc170a0c1c82e756c0ea4ac069b3e2c3d478a03f975b5104a3ba736167afce674bf069353556ed1150fe61053b983820b96085b864123eacc05b9567f4296191cb463fbe7422415384f0d8d30ec2e18c70f0a689df841479f21928adbd909f4b4e9e1b9732800e009a219a9e15e0f88e28d73eead8f2d832960ce6a9acfab4bf2604834646cd8abd1c16564c77909881b6d8981b0660d3fb968dfec71737f9d559d8f5f1af02d18b6c965467afb21fd26ea5a9215212e4c8d10131a40c967f5aa0ccb5665f57c4c895b7432712571d4711b254c97c53e18d1ab2948af9b61eb28c61da8ae7838b2cd59a4d29a0e3070e8459fc8f13df4a9a1354ee11eb2c2232ea3a31"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x25, 0x1, "b0f574f06fa13b668e9addcfaf9a7745f926b9a59d004affc66fb08ddd62ab4013"}, @NFTA_DATA_VALUE={0x4c, 0x1, "0b1f5d0768c4a5812ae5f919ca2ac7f2cd44a92b890d4ee8d49d8281f56f3ae87c27ce43017468da57a35acd5da3cea3d7db6f88a8804970677c318ae2796388751e79c3ad880eac"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2a020480) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0xfffffffe, 0x1f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000006c0)=[@ioring_restriction_sqe_op={0x1, 0x56}], 0x1) 156.174848ms ago: executing program 6 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0xffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000740000007400000008000000000000000000000300000000040000000100000004000000040000000000000c03000000000000000700000d000000000c000000000000000f000000050100000d000000020000000f000000000000000200000005000000090000003d0000000b000000000000000d0000000000000b030000000000002e6161"], 0x0, 0x94, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000150a01020000000076a7cafd"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r5}}, 0xc) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0x4c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 155.370118ms ago: executing program 7 (id=2302): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000040)}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x3e, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff2a, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r5, @ANYBLOB="0c5602abf50bc5122401a55babcc7588f9934dc8fc99f6745cf7f019c8b130f6d81a5bd2d458fd5df9f3b1ac2ba46e46b6b312c27d9a962ac422918e7a077cce47312baeb0c2b343543192ddf8c0ca362588610d371b2be50591ad5d15fc559d9ff93b027e733f3e31799862b66ab461744c6f90509f4b7f86038ca6a9ed57a085f9f2234e2409ca9b74f0c776982300541f082ec12639df82aa786c972f1a4e2c81dd1c3ccc868647626cb9337276c0eb979aa5343dde32038e914b4ad17dae392644b3b5f90ae93093fa", @ANYRESDEC], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xffffffffffffff63, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001433fffe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setrlimit(0x9, &(0x7f0000000a00)={0x0, 0x100000001}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000600)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x13?\x1e\xe8\x15V\x91\x10,\xd5\xa0\xff.p\xc4\x94\xd2Fs)9v.\xe2\xee\x8e\x03c\xfd\xcc\xa2\\]\xa7\x97\x13\xa1g\"uI[\xd6\x89\xa48\x98T\x11T\xd1p\x14Y\xc7\x01\n\xb5\xbd\t\n\x97\xb6\xec\x9e\xf4\xe2z:\x9c\xf7@\xe2b\xf6\aoi;\xe0\xd8A\x8e]\xe4\xc6\xf1\x17X#\xde\xdd-)\xca\xca\x95b\xcf\xae\x7f\xd55\xcf\x17h\x0f\xccn\x8eR\x1f\x8e\x96C}3\x1e/k\x89\xa0\x7f\x88T\xb8\xa0R\xd7\xaaAE\xed\x12\x95\xfe\xc5G\xe1\xb0@\x1dw\xda\x04u<\xef\xf5\x90|$\xc8\xa4\xae\x91\xc1\xd6\xe8;\xefm\xb5c\x9b\xc6\xfeM\xec!\xbb7\x88\xc0\x04~P\x89C\"\xc4\xa5&|LO\xca\xfc\xc4[\xd4A\x12\xe22\x86Ww\x9c\x06\x1e\x02\xeb\xc7\xc9Z~<6\xcd']}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 125.951249ms ago: executing program 7 (id=2303): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x3e, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff2a, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r5, @ANYBLOB="0c5602abf50bc5122401a55babcc7588f9934dc8fc99f6745cf7f019c8b130f6d81a5bd2d458fd5df9f3b1ac2ba46e46b6b312c27d9a962ac422918e7a077cce47312baeb0c2b343543192ddf8c0ca362588610d371b2be50591ad5d15fc559d9ff93b027e733f3e31799862b66ab461744c6f90509f4b7f86038ca6a9ed57a085f9f2234e2409ca9b74f0c776982300541f082ec12639df82aa786c972f1a4e2c81dd1c3ccc868647626cb9337276c0eb979aa5343dde32038e914b4ad17dae392644b3b5f90ae93093fa", @ANYRESDEC], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xffffffffffffff63, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001433fffe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x58) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setrlimit(0x9, &(0x7f0000000a00)={0x0, 0x100000001}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000600)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x13?\x1e\xe8\x15V\x91\x10,\xd5\xa0\xff.p\xc4\x94\xd2Fs)9v.\xe2\xee\x8e\x03c\xfd\xcc\xa2\\]\xa7\x97\x13\xa1g\"uI[\xd6\x89\xa48\x98T\x11T\xd1p\x14Y\xc7\x01\n\xb5\xbd\t\n\x97\xb6\xec\x9e\xf4\xe2z:\x9c\xf7@\xe2b\xf6\aoi;\xe0\xd8A\x8e]\xe4\xc6\xf1\x17X#\xde\xdd-)\xca\xca\x95b\xcf\xae\x7f\xd55\xcf\x17h\x0f\xccn\x8eR\x1f\x8e\x96C}3\x1e/k\x89\xa0\x7f\x88T\xb8\xa0R\xd7\xaaAE\xed\x12\x95\xfe\xc5G\xe1\xb0@\x1dw\xda\x04u<\xef\xf5\x90|$\xc8\xa4\xae\x91\xc1\xd6\xe8;\xefm\xb5c\x9b\xc6\xfeM\xec!\xbb7\x88\xc0\x04~P\x89C\"\xc4\xa5&|LO\xca\xfc\xc4[\xd4A\x12\xe22\x86Ww\x9c\x06\x1e\x02\xeb\xc7\xc9Z~<6\xcd']}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 107.196129ms ago: executing program 6 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x357}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r1, 0x47bc, 0x2, 0x0, 0x0, 0x0) 91.569309ms ago: executing program 0 (id=2305): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x38}, 0x0) 90.744269ms ago: executing program 7 (id=2306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xf}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 65.86598ms ago: executing program 6 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0xa4, 0x30, 0x809, 0x0, 0x0, {}, [{0x90, 0x1, [@m_sample={0x8c, 0x15, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x200}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x33bd}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff01, 0x0, 0x2, 0x9, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xbb}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x5, 0x6, "d8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0xfffffffe}, 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000010", @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf25010000000000000001410000001800170000000b0000000e69623a70696d726567310000"], 0x34}, 0x1, 0x0, 0x0, 0x820}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x3, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x4000) 48.67993ms ago: executing program 0 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1722, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb702000000000000b703000001000100850000002d000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042) write$hidraw(r2, &(0x7f0000000bc0), 0xffffffae) r3 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r3, &(0x7f0000000100)=""/106, 0xffffff39) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x905040) read$hidraw(r4, &(0x7f0000000100)=""/106, 0xffffff39) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) syncfs(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010001000100fddbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="24002d80080002001600000005000400010000ea040001"], 0x40}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) syz_open_dev$hidraw(&(0x7f0000000600), 0xb5df, 0xa000) execveat(r9, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000080)='\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='GPL\x00']}, &(0x7f0000000440)={[&(0x7f00000002c0)='#\x00', &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)='*:[\xc8{/#\x00', &(0x7f0000000400)='-\x00']}, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=2309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000001500)="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", &(0x7f00000002c0)=""/151, &(0x7f0000000380), &(0x7f00000006c0)="67a5c1a6605b54ade2ccc6ea7cb0af0d86aa1caa4b97a2d6b276ac782ab6c8b80099207faa4842cf8d115e98c7afb67672d0f84e32e0dfde7a2452cb922252d6b59d2228eefb23bbcdde9e4b482e5cd96fb5003a97ee7608374e45db558a5049f0c8c427cf457aa3e31dde0cb92020ba1db608e9f464952c47c51357b3644439b60ba65e3245d149ee4d0523e145c1ded1f6b71a854cc93c388b63742751d012c4d21747859efe0b338051a3c6ab2bed423cd174626e685c0d", 0x4, 0xffffffffffffffff, 0x4}, 0x38) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2000000) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xd}) fcntl$setlease(r6, 0x400, 0x2) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0xec0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18d2b0615cdd0ecf970000000ec000000700000033000000"], 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ink: 28 bytes leftover after parsing attributes in process `syz.6.1600'. [ 145.585067][ T29] audit: type=1400 audit(1743264976.120:4204): avc: denied { create } for pid=8298 comm="syz.6.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.604577][ T29] audit: type=1400 audit(1743264976.120:4205): avc: denied { setopt } for pid=8298 comm="syz.6.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.625295][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 145.639860][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1602'. [ 145.649637][ T29] audit: type=1400 audit(1743264976.140:4206): avc: denied { bind } for pid=8298 comm="syz.6.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.673545][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.691909][ T8269] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.713942][ T8315] loop3: detected capacity change from 0 to 512 [ 145.725757][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.732939][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.751518][ T8315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.763460][ T8315] EXT4-fs (loop3): 1 truncate cleaned up [ 145.769526][ T8315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.774104][ T390] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.789127][ T390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.853039][ T8269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.863637][ T8269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.998114][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.230393][ T8269] veth0_vlan: entered promiscuous mode [ 146.266629][ T8269] veth1_vlan: entered promiscuous mode [ 146.295759][ T8351] FAULT_INJECTION: forcing a failure. [ 146.295759][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 146.308472][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.6.1612 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 146.308498][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.308510][ T8351] Call Trace: [ 146.308516][ T8351] [ 146.308523][ T8351] dump_stack_lvl+0xf6/0x150 [ 146.308609][ T8351] dump_stack+0x15/0x1a [ 146.308624][ T8351] should_fail_ex+0x261/0x270 [ 146.308652][ T8351] should_failslab+0x8f/0xb0 [ 146.308672][ T8351] __kmalloc_noprof+0xad/0x410 [ 146.308702][ T8351] ? tcf_idr_create+0x42/0x4c0 [ 146.308788][ T8351] tcf_idr_create+0x42/0x4c0 [ 146.308892][ T8351] ? idr_alloc_u32+0x129/0x180 [ 146.308928][ T8351] tcf_idr_create_from_flags+0x63/0x80 [ 146.308959][ T8351] tcf_pedit_init+0x28a/0x920 [ 146.308989][ T8351] ? should_fail_ex+0xd7/0x270 [ 146.309106][ T8351] tcf_action_init_1+0x34b/0x4c0 [ 146.309151][ T8351] tcf_action_init+0x1ce/0x620 [ 146.309219][ T8351] tc_ctl_action+0x2be/0x880 [ 146.309271][ T8351] ? __pfx_tc_ctl_action+0x10/0x10 [ 146.309308][ T8351] rtnetlink_rcv_msg+0x6b7/0x740 [ 146.309422][ T8351] ? ref_tracker_free+0x3b8/0x420 [ 146.309455][ T8351] netlink_rcv_skb+0x12f/0x230 [ 146.309498][ T8351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.309540][ T8351] rtnetlink_rcv+0x1c/0x30 [ 146.309575][ T8351] netlink_unicast+0x605/0x6c0 [ 146.309602][ T8351] netlink_sendmsg+0x609/0x720 [ 146.309685][ T8351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.309729][ T8351] __sock_sendmsg+0x140/0x180 [ 146.309754][ T8351] ____sys_sendmsg+0x350/0x4e0 [ 146.309800][ T8351] __sys_sendmsg+0x1a0/0x240 [ 146.309846][ T8351] __x64_sys_sendmsg+0x46/0x50 [ 146.309891][ T8351] x64_sys_call+0x26f3/0x2e10 [ 146.309911][ T8351] do_syscall_64+0xc9/0x1c0 [ 146.310000][ T8351] ? clear_bhb_loop+0x25/0x80 [ 146.310020][ T8351] ? clear_bhb_loop+0x25/0x80 [ 146.310045][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.310067][ T8351] RIP: 0033:0x7fddd772d169 [ 146.310085][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.310106][ T8351] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.310188][ T8351] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 146.310203][ T8351] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 146.310217][ T8351] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 146.310231][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.310242][ T8351] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 146.310259][ T8351] [ 146.602585][ T8269] veth0_macvtap: entered promiscuous mode [ 146.615845][ T8269] veth1_macvtap: entered promiscuous mode [ 146.628596][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.639123][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.649051][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.659703][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.669683][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.680206][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.690043][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.700887][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.710756][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.721363][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.731342][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.741829][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.754632][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 146.774738][ T8355] loop6: detected capacity change from 0 to 2048 [ 146.780054][ T8357] loop1: detected capacity change from 0 to 2048 [ 146.792407][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 146.802975][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.819159][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.829947][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.840454][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.851678][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.862751][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.873451][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.875486][ T8355] loop6: p1 < > p4 [ 146.883536][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.890019][ T8357] loop1: p1 < > p4 [ 146.897861][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.902182][ T8357] loop1: p4 size 8388608 extends beyond EOD, [ 146.911489][ T8269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.911512][ T8269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.915001][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.917813][ T8357] truncated [ 146.928425][ T8355] loop6: p4 size 8388608 extends beyond EOD, [ 146.946739][ T8269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.948317][ T8355] truncated [ 146.967819][ T8269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.976655][ T8269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.985617][ T8269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.043900][ T8362] loop7: detected capacity change from 0 to 1024 [ 147.051336][ T8362] EXT4-fs: test_dummy_encryption option not supported [ 147.077368][ T8362] netlink: 'syz.7.1592': attribute type 1 has an invalid length. [ 147.083625][ T8315] syz.3.1606 (8315) used greatest stack depth: 7208 bytes left [ 147.085203][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1592'. [ 147.103557][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.133735][ T8362] loop7: detected capacity change from 0 to 1764 [ 147.242082][ T8379] netlink: 'syz.0.1622': attribute type 21 has an invalid length. [ 147.250029][ T8379] netlink: 'syz.0.1622': attribute type 20 has an invalid length. [ 147.258405][ T8379] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.289439][ T8383] loop7: detected capacity change from 0 to 512 [ 147.296303][ T8383] ext4: Unknown parameter 'subj_role' [ 147.314649][ T8385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1626'. [ 147.324132][ T8385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1626'. [ 147.639959][ T8392] FAULT_INJECTION: forcing a failure. [ 147.639959][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.653211][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.1.1629 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 147.653245][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.653259][ T8392] Call Trace: [ 147.653266][ T8392] [ 147.653294][ T8392] dump_stack_lvl+0xf6/0x150 [ 147.653321][ T8392] dump_stack+0x15/0x1a [ 147.653340][ T8392] should_fail_ex+0x261/0x270 [ 147.653378][ T8392] should_fail+0xb/0x10 [ 147.653434][ T8392] should_fail_usercopy+0x1a/0x20 [ 147.653471][ T8392] strncpy_from_user+0x25/0x230 [ 147.653503][ T8392] strncpy_from_user_nofault+0x66/0xe0 [ 147.653621][ T8392] bpf_probe_read_user_str+0x2a/0x70 [ 147.653648][ T8392] bpf_prog_78f9c3f13797e2ae+0x3e/0x40 [ 147.653666][ T8392] bpf_trace_run2+0x106/0x1d0 [ 147.653707][ T8392] __bpf_trace_sys_enter+0x10/0x30 [ 147.653810][ T8392] trace_sys_enter+0x85/0x110 [ 147.653843][ T8392] syscall_trace_enter+0x13d/0x1f0 [ 147.653876][ T8392] do_syscall_64+0xaa/0x1c0 [ 147.653964][ T8392] ? clear_bhb_loop+0x25/0x80 [ 147.653992][ T8392] ? clear_bhb_loop+0x25/0x80 [ 147.654019][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.654046][ T8392] RIP: 0033:0x7fca46f5d169 [ 147.654063][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.654089][ T8392] RSP: 002b:00007fca455bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 147.654110][ T8392] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5d169 [ 147.654123][ T8392] RDX: 0000000000000007 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 147.654137][ T8392] RBP: 00007fca455bf090 R08: 0000000000000000 R09: 0000000000000000 [ 147.654150][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.654164][ T8392] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 147.654195][ T8392] [ 147.655676][ T8390] bridge0: port 3(veth0_to_bond) entered blocking state [ 147.864551][ T8390] bridge0: port 3(veth0_to_bond) entered disabled state [ 147.874017][ T8390] veth0_to_bond: entered allmulticast mode [ 147.884547][ T8390] veth0_to_bond: entered promiscuous mode [ 147.892303][ T8390] bridge0: port 3(veth0_to_bond) entered blocking state [ 147.899813][ T8390] bridge0: port 3(veth0_to_bond) entered forwarding state [ 147.924033][ T8398] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.973563][ T8398] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.021798][ T8398] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.101426][ T8398] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.223075][ T8407] loop3: detected capacity change from 0 to 8192 [ 148.245165][ T8416] hub 9-0:1.0: USB hub found [ 148.250311][ T8416] hub 9-0:1.0: 8 ports detected [ 148.270702][ T8418] FAULT_INJECTION: forcing a failure. [ 148.270702][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 148.283468][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.0.1639 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 148.283500][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.283515][ T8418] Call Trace: [ 148.283588][ T8418] [ 148.283597][ T8418] dump_stack_lvl+0xf6/0x150 [ 148.283631][ T8418] dump_stack+0x15/0x1a [ 148.283647][ T8418] should_fail_ex+0x261/0x270 [ 148.283712][ T8418] should_failslab+0x8f/0xb0 [ 148.283736][ T8418] kmem_cache_alloc_noprof+0x59/0x340 [ 148.283832][ T8418] ? alloc_empty_file+0x78/0x200 [ 148.283865][ T8418] ? _raw_spin_unlock+0x26/0x50 [ 148.283888][ T8418] alloc_empty_file+0x78/0x200 [ 148.283920][ T8418] alloc_file_pseudo+0xcb/0x160 [ 148.284038][ T8418] hugetlb_file_setup+0x290/0x3c0 [ 148.284080][ T8418] ksys_mmap_pgoff+0x174/0x340 [ 148.284107][ T8418] x64_sys_call+0x1945/0x2e10 [ 148.284276][ T8418] do_syscall_64+0xc9/0x1c0 [ 148.284303][ T8418] ? clear_bhb_loop+0x25/0x80 [ 148.284327][ T8418] ? clear_bhb_loop+0x25/0x80 [ 148.284353][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.284374][ T8418] RIP: 0033:0x7f10841ad169 [ 148.284464][ T8418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.284482][ T8418] RSP: 002b:00007f108280f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.284501][ T8418] RAX: ffffffffffffffda RBX: 00007f10843c5fa0 RCX: 00007f10841ad169 [ 148.284515][ T8418] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 148.284530][ T8418] RBP: 00007f108280f090 R08: ffffffffffffffff R09: 0000000000000000 [ 148.284544][ T8418] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 148.284559][ T8418] R13: 0000000000000000 R14: 00007f10843c5fa0 R15: 00007ffc101ed918 [ 148.284581][ T8418] [ 148.467802][ T8407] loop3: p2 p3 p4 [ 148.471584][ T8407] loop3: p2 size 64053 extends beyond EOD, truncated [ 148.480225][ T37] usb 13-1: enqueue for inactive port 0 [ 148.489942][ T8398] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.499081][ T37] usb 13-1: enqueue for inactive port 0 [ 148.505520][ T8407] loop3: p3 start 65280 is beyond EOD, truncated [ 148.511978][ T8407] loop3: p4 size 50331904 extends beyond EOD, truncated [ 148.578142][ T37] vhci_hcd: vhci_device speed not set [ 148.584907][ T8426] loop6: detected capacity change from 0 to 512 [ 148.588541][ T8398] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.598715][ T8426] EXT4-fs: test_dummy_encryption option not supported [ 148.650216][ T8398] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.754946][ T8398] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.862637][ T8447] loop6: detected capacity change from 0 to 512 [ 148.873442][ T8447] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 148.887795][ T8448] loop1: detected capacity change from 0 to 256 [ 148.907547][ T8447] xt_CONNSECMARK: invalid mode: 0 [ 148.923471][ T8448] FAT-fs (loop1): Directory bread(block 64) failed [ 148.932515][ T8448] FAT-fs (loop1): Directory bread(block 65) failed [ 148.939240][ T8448] FAT-fs (loop1): Directory bread(block 66) failed [ 148.950442][ T8448] FAT-fs (loop1): Directory bread(block 67) failed [ 148.962694][ T8448] FAT-fs (loop1): Directory bread(block 68) failed [ 148.973748][ T8448] FAT-fs (loop1): Directory bread(block 69) failed [ 148.985008][ T8448] FAT-fs (loop1): Directory bread(block 70) failed [ 149.002924][ T8448] FAT-fs (loop1): Directory bread(block 71) failed [ 149.016855][ T8452] loop7: detected capacity change from 0 to 2048 [ 149.017785][ T8448] FAT-fs (loop1): Directory bread(block 72) failed [ 149.043462][ T8448] FAT-fs (loop1): Directory bread(block 73) failed [ 149.119061][ T8458] loop6: detected capacity change from 0 to 512 [ 149.148162][ T8458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.183000][ T8458] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.203464][ T8463] hub 9-0:1.0: USB hub found [ 149.210059][ T8463] hub 9-0:1.0: 8 ports detected [ 149.253623][ T8465] loop7: detected capacity change from 0 to 512 [ 149.271069][ T8465] ext4: Unknown parameter 'subj_role' [ 149.278118][ T8120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.310953][ T8467] loop6: detected capacity change from 0 to 512 [ 149.318184][ T8467] ext4: Unknown parameter 'subj_role' [ 149.679551][ T8489] hub 9-0:1.0: USB hub found [ 149.684231][ T8489] hub 9-0:1.0: 8 ports detected [ 149.749796][ T8492] FAULT_INJECTION: forcing a failure. [ 149.749796][ T8492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.762996][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.3.1664 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 149.763044][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.763056][ T8492] Call Trace: [ 149.763064][ T8492] [ 149.763073][ T8492] dump_stack_lvl+0xf6/0x150 [ 149.763096][ T8492] dump_stack+0x15/0x1a [ 149.763111][ T8492] should_fail_ex+0x261/0x270 [ 149.763215][ T8492] should_fail+0xb/0x10 [ 149.763244][ T8492] should_fail_usercopy+0x1a/0x20 [ 149.763274][ T8492] strncpy_from_user+0x25/0x230 [ 149.763296][ T8492] ? getname_flags+0x81/0x3b0 [ 149.763369][ T8492] getname_flags+0xb0/0x3b0 [ 149.763396][ T8492] user_path_at+0x26/0x140 [ 149.763433][ T8492] __se_sys_mount+0x25e/0x2e0 [ 149.763465][ T8492] __x64_sys_mount+0x67/0x80 [ 149.763491][ T8492] x64_sys_call+0xd11/0x2e10 [ 149.763546][ T8492] do_syscall_64+0xc9/0x1c0 [ 149.763579][ T8492] ? clear_bhb_loop+0x25/0x80 [ 149.763602][ T8492] ? clear_bhb_loop+0x25/0x80 [ 149.763629][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.763655][ T8492] RIP: 0033:0x7fb656bfd169 [ 149.763714][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.763750][ T8492] RSP: 002b:00007fb655225038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.763772][ T8492] RAX: ffffffffffffffda RBX: 00007fb656e16160 RCX: 00007fb656bfd169 [ 149.763788][ T8492] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 149.763803][ T8492] RBP: 00007fb655225090 R08: 0000200000000300 R09: 0000000000000000 [ 149.763818][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.763833][ T8492] R13: 0000000000000000 R14: 00007fb656e16160 R15: 00007ffe8d2a91f8 [ 149.763853][ T8492] [ 149.955144][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 149.955163][ T29] audit: type=1400 audit(1743264980.500:4349): avc: denied { listen } for pid=8490 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 149.999028][ T29] audit: type=1400 audit(1743264980.550:4350): avc: denied { setopt } for pid=8480 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 150.019559][ T29] audit: type=1400 audit(1743264980.550:4351): avc: denied { getopt } for pid=8480 comm="syz.6.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 150.084659][ T8495] loop7: detected capacity change from 0 to 512 [ 150.113473][ T8495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.130431][ T8495] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.159265][ T29] audit: type=1326 audit(1743264980.710:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.7.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1f2d169 code=0x7ffc0000 [ 150.195105][ T29] audit: type=1326 audit(1743264980.720:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.7.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1f2d169 code=0x7ffc0000 [ 150.219622][ T29] audit: type=1326 audit(1743264980.720:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.7.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f87e1f2d169 code=0x7ffc0000 [ 150.263701][ T29] audit: type=1326 audit(1743264980.810:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.7.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1f2d169 code=0x7ffc0000 [ 150.303404][ T29] audit: type=1326 audit(1743264980.810:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.7.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e1f2d169 code=0x7ffc0000 [ 150.349581][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.378131][ T29] audit: type=1326 audit(1743264980.930:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 150.406182][ T29] audit: type=1326 audit(1743264980.950:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 150.454468][ T8524] loop7: detected capacity change from 0 to 2048 [ 150.472492][ T8521] __nla_validate_parse: 1 callbacks suppressed [ 150.472504][ T8521] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1678'. [ 150.490806][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 150.505242][ T8521] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 150.526273][ T8524] loop7: p1 < > p4 [ 150.530254][ T8521] loop6: detected capacity change from 0 to 1024 [ 150.537447][ T8524] loop7: p4 size 8388608 extends beyond EOD, truncated [ 150.546000][ T8521] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.556986][ T8521] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.575270][ T8521] JBD2: no valid journal superblock found [ 150.581080][ T8521] EXT4-fs (loop6): Could not load journal inode [ 150.613527][ T8537] FAULT_INJECTION: forcing a failure. [ 150.613527][ T8537] name failslab, interval 1, probability 0, space 0, times 0 [ 150.626300][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.6.1683 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 150.626436][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.626448][ T8537] Call Trace: [ 150.626453][ T8537] [ 150.626468][ T8537] dump_stack_lvl+0xf6/0x150 [ 150.626496][ T8537] dump_stack+0x15/0x1a [ 150.626515][ T8537] should_fail_ex+0x261/0x270 [ 150.626552][ T8537] should_failslab+0x8f/0xb0 [ 150.626699][ T8537] kmem_cache_alloc_noprof+0x59/0x340 [ 150.626732][ T8537] ? skb_clone+0x154/0x1f0 [ 150.626835][ T8537] skb_clone+0x154/0x1f0 [ 150.626871][ T8537] __netlink_deliver_tap+0x2bd/0x4f0 [ 150.626901][ T8537] netlink_unicast+0x69e/0x6c0 [ 150.626960][ T8537] netlink_sendmsg+0x609/0x720 [ 150.626995][ T8537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.627024][ T8537] __sock_sendmsg+0x140/0x180 [ 150.627047][ T8537] ____sys_sendmsg+0x350/0x4e0 [ 150.627084][ T8537] __sys_sendmsg+0x1a0/0x240 [ 150.627191][ T8537] __x64_sys_sendmsg+0x46/0x50 [ 150.627219][ T8537] x64_sys_call+0x26f3/0x2e10 [ 150.627301][ T8537] do_syscall_64+0xc9/0x1c0 [ 150.627353][ T8537] ? clear_bhb_loop+0x25/0x80 [ 150.627374][ T8537] ? clear_bhb_loop+0x25/0x80 [ 150.627394][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.627445][ T8537] RIP: 0033:0x7fddd772d169 [ 150.627469][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.627491][ T8537] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.627512][ T8537] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 150.627523][ T8537] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 150.627535][ T8537] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 150.627545][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.627629][ T8537] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 150.627652][ T8537] [ 150.857785][ T8529] netlink: 'syz.3.1679': attribute type 3 has an invalid length. [ 150.858616][ T8539] loop6: detected capacity change from 0 to 1764 [ 151.055610][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 151.071497][ T8548] loop6: detected capacity change from 0 to 512 [ 151.118298][ T8548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.133941][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 151.173818][ T8548] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.306877][ T8559] loop7: detected capacity change from 0 to 512 [ 151.313516][ T8559] ext4: Unknown parameter 'subj_role' [ 151.351960][ T8120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.369045][ T8566] loop7: detected capacity change from 0 to 256 [ 151.473820][ T8567] hub 9-0:1.0: USB hub found [ 151.527327][ T8567] hub 9-0:1.0: 8 ports detected [ 151.563150][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1704'. [ 151.594339][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1704'. [ 151.609158][ T8593] loop3: detected capacity change from 0 to 512 [ 151.618133][ T8590] loop6: detected capacity change from 0 to 512 [ 151.624668][ T8590] ext4: Unknown parameter 'subj_role' [ 151.633095][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.664478][ T8593] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.680990][ T8601] syzkaller0: entered allmulticast mode [ 151.692446][ T8601] syzkaller0: entered promiscuous mode [ 151.700346][ T8601] syzkaller0 (unregistering): left promiscuous mode [ 151.707356][ T8601] syzkaller0 (unregistering): left allmulticast mode [ 151.745558][ T8606] loop7: detected capacity change from 0 to 1764 [ 151.760687][ T8607] loop6: detected capacity change from 0 to 2048 [ 151.788482][ T8609] FAULT_INJECTION: forcing a failure. [ 151.788482][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.801838][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.1.1713 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 151.801937][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.801949][ T8609] Call Trace: [ 151.801954][ T8609] [ 151.801961][ T8609] dump_stack_lvl+0xf6/0x150 [ 151.802025][ T8609] dump_stack+0x15/0x1a [ 151.802043][ T8609] should_fail_ex+0x261/0x270 [ 151.802073][ T8609] should_fail+0xb/0x10 [ 151.802097][ T8609] should_fail_usercopy+0x1a/0x20 [ 151.802185][ T8609] _copy_to_user+0x20/0xa0 [ 151.802202][ T8609] simple_read_from_buffer+0xb2/0x130 [ 151.802220][ T8609] proc_fail_nth_read+0x103/0x140 [ 151.802241][ T8609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.802312][ T8609] vfs_read+0x1b2/0x710 [ 151.802339][ T8609] ? __rcu_read_unlock+0x4e/0x70 [ 151.802361][ T8609] ? __fget_files+0x186/0x1c0 [ 151.802459][ T8609] ksys_read+0xeb/0x1b0 [ 151.802520][ T8609] __x64_sys_read+0x42/0x50 [ 151.802547][ T8609] x64_sys_call+0x2a3b/0x2e10 [ 151.802618][ T8609] do_syscall_64+0xc9/0x1c0 [ 151.802643][ T8609] ? clear_bhb_loop+0x25/0x80 [ 151.802660][ T8609] ? clear_bhb_loop+0x25/0x80 [ 151.802678][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.802773][ T8609] RIP: 0033:0x7fca46f5bb7c [ 151.802791][ T8609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.802858][ T8609] RSP: 002b:00007fca455bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.802873][ T8609] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5bb7c [ 151.802884][ T8609] RDX: 000000000000000f RSI: 00007fca455bf0a0 RDI: 0000000000000005 [ 151.802894][ T8609] RBP: 00007fca455bf090 R08: 0000000000000000 R09: 0000000000000000 [ 151.802904][ T8609] R10: 0000000000000083 R11: 0000000000000246 R12: 0000000000000001 [ 151.802915][ T8609] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 151.802931][ T8609] [ 151.804390][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.858072][ T8607] loop6: p1 < > p4 [ 151.975939][ T8614] loop7: detected capacity change from 0 to 512 [ 151.993225][ T8607] loop6: p4 size 8388608 extends beyond EOD, truncated [ 152.046865][ T8620] FAULT_INJECTION: forcing a failure. [ 152.046865][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 152.060078][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.3.1715 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 152.060105][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.060237][ T8620] Call Trace: [ 152.060243][ T8620] [ 152.060250][ T8620] dump_stack_lvl+0xf6/0x150 [ 152.060277][ T8620] dump_stack+0x15/0x1a [ 152.060296][ T8620] should_fail_ex+0x261/0x270 [ 152.060333][ T8620] should_failslab+0x8f/0xb0 [ 152.060364][ T8620] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 152.060471][ T8620] ? __alloc_skb+0x10d/0x320 [ 152.060626][ T8620] __alloc_skb+0x10d/0x320 [ 152.060674][ T8620] netlink_ack+0xf1/0x4f0 [ 152.060700][ T8620] netlink_rcv_skb+0x19f/0x230 [ 152.060724][ T8620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.060763][ T8620] genl_rcv+0x28/0x40 [ 152.060877][ T8620] netlink_unicast+0x605/0x6c0 [ 152.060905][ T8620] netlink_sendmsg+0x609/0x720 [ 152.060940][ T8620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.060965][ T8620] __sock_sendmsg+0x140/0x180 [ 152.060988][ T8620] ____sys_sendmsg+0x350/0x4e0 [ 152.061042][ T8620] __sys_sendmsg+0x1a0/0x240 [ 152.061152][ T8620] __x64_sys_sendmsg+0x46/0x50 [ 152.061186][ T8620] x64_sys_call+0x26f3/0x2e10 [ 152.061212][ T8620] do_syscall_64+0xc9/0x1c0 [ 152.061282][ T8620] ? clear_bhb_loop+0x25/0x80 [ 152.061371][ T8620] ? clear_bhb_loop+0x25/0x80 [ 152.061398][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.061420][ T8620] RIP: 0033:0x7fb656bfd169 [ 152.061434][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.061451][ T8620] RSP: 002b:00007fb655267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.061523][ T8620] RAX: ffffffffffffffda RBX: 00007fb656e15fa0 RCX: 00007fb656bfd169 [ 152.061538][ T8620] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 152.061553][ T8620] RBP: 00007fb655267090 R08: 0000000000000000 R09: 0000000000000000 [ 152.061567][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.061578][ T8620] R13: 0000000000000000 R14: 00007fb656e15fa0 R15: 00007ffe8d2a91f8 [ 152.061616][ T8620] [ 152.176060][ T8614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.294108][ T8614] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.316520][ T8624] loop3: detected capacity change from 0 to 8192 [ 152.330467][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1721'. [ 152.352942][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1721'. [ 152.382706][ T8624] loop3: p3 < > [ 152.454400][ T8635] loop6: detected capacity change from 0 to 1764 [ 152.483298][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1716'. [ 152.511331][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 152.535869][ T8639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 152.542570][ T8639] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 152.550285][ T8639] vhci_hcd vhci_hcd.0: Device attached [ 152.571867][ T8643] vhci_hcd: connection closed [ 152.572126][ T52] vhci_hcd: stop threads [ 152.581209][ T52] vhci_hcd: release socket [ 152.585744][ T52] vhci_hcd: disconnect device [ 152.593454][ T8624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 152.594435][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.600066][ T8624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 152.600206][ T8624] vhci_hcd vhci_hcd.0: Device attached [ 152.643804][ T8647] vhci_hcd: connection closed [ 152.644113][ T52] vhci_hcd: stop threads [ 152.653113][ T52] vhci_hcd: release socket [ 152.657741][ T52] vhci_hcd: disconnect device [ 152.690229][ T8642] loop1: detected capacity change from 0 to 128 [ 152.772779][ T8659] loop1: detected capacity change from 0 to 1024 [ 152.779739][ T8659] EXT4-fs: Ignoring removed nobh option [ 152.785323][ T8659] EXT4-fs: Ignoring removed bh option [ 152.796995][ T8659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.864570][ T8663] FAULT_INJECTION: forcing a failure. [ 152.864570][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 152.877306][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.7.1729 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 152.877360][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.877376][ T8663] Call Trace: [ 152.877381][ T8663] [ 152.877388][ T8663] dump_stack_lvl+0xf6/0x150 [ 152.877410][ T8663] dump_stack+0x15/0x1a [ 152.877425][ T8663] should_fail_ex+0x261/0x270 [ 152.877508][ T8663] should_failslab+0x8f/0xb0 [ 152.877535][ T8663] __kvmalloc_node_noprof+0x12c/0x520 [ 152.877632][ T8663] ? alloc_netdev_mqs+0x8d1/0xac0 [ 152.877671][ T8663] ? __kmalloc_cache_noprof+0x22b/0x320 [ 152.877699][ T8663] alloc_netdev_mqs+0x8d1/0xac0 [ 152.877731][ T8663] register_vlan_device+0x26d/0x3d0 [ 152.877761][ T8663] vlan_ioctl_handler+0x1b1/0x4f0 [ 152.877797][ T8663] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 152.877819][ T8663] sock_ioctl+0x4ca/0x630 [ 152.877878][ T8663] ? __pfx_sock_ioctl+0x10/0x10 [ 152.877911][ T8663] __se_sys_ioctl+0xc9/0x140 [ 152.878005][ T8663] __x64_sys_ioctl+0x43/0x50 [ 152.878035][ T8663] x64_sys_call+0x168d/0x2e10 [ 152.878054][ T8663] do_syscall_64+0xc9/0x1c0 [ 152.878089][ T8663] ? clear_bhb_loop+0x25/0x80 [ 152.878162][ T8663] ? clear_bhb_loop+0x25/0x80 [ 152.878188][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.878213][ T8663] RIP: 0033:0x7f87e1f2d169 [ 152.878230][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.878252][ T8663] RSP: 002b:00007f87e054d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.878277][ T8663] RAX: ffffffffffffffda RBX: 00007f87e2146160 RCX: 00007f87e1f2d169 [ 152.878368][ T8663] RDX: 0000200000000300 RSI: 0000000000008983 RDI: 000000000000000b [ 152.878383][ T8663] RBP: 00007f87e054d090 R08: 0000000000000000 R09: 0000000000000000 [ 152.878395][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.878405][ T8663] R13: 0000000000000000 R14: 00007f87e2146160 R15: 00007ffd26dbfc78 [ 152.878422][ T8663] [ 153.114956][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.147745][ T8665] loop1: detected capacity change from 0 to 1764 [ 153.155197][ T8665] ISOFS: unable to read i-node block [ 153.160541][ T8665] isofs_fill_super: get root inode failed [ 153.177655][ T8665] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.185241][ T8665] smc: net device bond0 erased user defined pnetid SYZ0 [ 153.692717][ T8686] loop7: detected capacity change from 0 to 512 [ 153.700866][ T8686] EXT4-fs (loop7): orphan cleanup on readonly fs [ 153.710743][ T8686] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1741: bg 0: block 248: padding at end of block bitmap is not set [ 153.725629][ T8686] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1741: Failed to acquire dquot type 1 [ 153.740867][ T8686] EXT4-fs (loop7): 1 truncate cleaned up [ 153.748081][ T8686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.877521][ T8686] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.1741: deleted inode referenced: 12 [ 153.911842][ T8686] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.1741: deleted inode referenced: 12 [ 154.000493][ T8692] EXT4-fs error (device loop7): ext4_lookup:1793: inode #2: comm syz.7.1741: deleted inode referenced: 12 [ 154.170722][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.460048][ T8694] loop6: detected capacity change from 0 to 1024 [ 154.506999][ T8694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.570071][ T8694] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 154.576733][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.584450][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 154.648009][ T8697] vhci_hcd: connection closed [ 154.648222][ T52] vhci_hcd: stop threads [ 154.657269][ T52] vhci_hcd: release socket [ 154.661684][ T52] vhci_hcd: disconnect device [ 154.703533][ T8702] loop1: detected capacity change from 0 to 512 [ 154.722481][ T8704] loop7: detected capacity change from 0 to 512 [ 154.739340][ T8702] ext4: Unknown parameter 'subj_role' [ 154.767859][ T8704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.794701][ T8704] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.880572][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.979882][ T8721] loop1: detected capacity change from 0 to 512 [ 155.018086][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 155.018102][ T29] audit: type=1400 audit(1743264985.570:4501): avc: denied { create } for pid=8723 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.055296][ T8724] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 155.073997][ T8721] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.083126][ T8721] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 155.104634][ T29] audit: type=1400 audit(1743264985.600:4502): avc: denied { write } for pid=8723 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 155.127369][ T8721] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 155.136943][ T8721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 155.144955][ T8721] System zones: 0-2, 18-18, 34-34 [ 155.153101][ T8721] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 155.178884][ T8721] EXT4-fs (loop1): 1 truncate cleaned up [ 155.184878][ T8721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.206861][ T8120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.230808][ T29] audit: type=1400 audit(1743264985.780:4503): avc: denied { read write } for pid=8720 comm="syz.1.1752" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.253562][ T29] audit: type=1400 audit(1743264985.780:4504): avc: denied { open } for pid=8720 comm="syz.1.1752" path="/353/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.277438][ T29] audit: type=1400 audit(1743264985.810:4505): avc: denied { ioctl } for pid=8720 comm="syz.1.1752" path="/353/file2/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.302004][ T29] audit: type=1400 audit(1743264985.810:4506): avc: denied { create } for pid=8720 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.331954][ T8733] loop3: detected capacity change from 0 to 512 [ 155.338678][ T8733] ext4: Unknown parameter 'subj_role' [ 155.344120][ T29] audit: type=1400 audit(1743264985.880:4507): avc: denied { read } for pid=8720 comm="syz.1.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.389140][ T8721] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 155.400663][ T8736] FAULT_INJECTION: forcing a failure. [ 155.400663][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 155.403780][ T29] audit: type=1400 audit(1743264985.950:4508): avc: denied { relabelto } for pid=8720 comm="syz.1.1752" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 155.413351][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.6.1754 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 155.413376][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.413387][ T8736] Call Trace: [ 155.413394][ T8736] [ 155.413401][ T8736] dump_stack_lvl+0xf6/0x150 [ 155.413425][ T8736] dump_stack+0x15/0x1a [ 155.413496][ T8736] should_fail_ex+0x261/0x270 [ 155.413536][ T8736] should_failslab+0x8f/0xb0 [ 155.413563][ T8736] __kmalloc_cache_noprof+0x55/0x320 [ 155.413599][ T8736] ? __add_metainfo+0x5c/0x210 [ 155.413627][ T8736] __add_metainfo+0x5c/0x210 [ 155.413681][ T8736] use_all_metadata+0x98/0x150 [ 155.413774][ T8736] tcf_ife_init+0x6ea/0x880 [ 155.413809][ T8736] tcf_action_init_1+0x34b/0x4c0 [ 155.413858][ T8736] tcf_action_init+0x1ce/0x620 [ 155.413974][ T8736] tc_ctl_action+0x2be/0x880 [ 155.414067][ T8736] ? __pfx_tc_ctl_action+0x10/0x10 [ 155.414117][ T8736] rtnetlink_rcv_msg+0x6b7/0x740 [ 155.414158][ T8736] ? ref_tracker_free+0x3b8/0x420 [ 155.414221][ T8736] netlink_rcv_skb+0x12f/0x230 [ 155.414251][ T8736] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.414345][ T8736] rtnetlink_rcv+0x1c/0x30 [ 155.414386][ T8736] netlink_unicast+0x605/0x6c0 [ 155.414473][ T8736] netlink_sendmsg+0x609/0x720 [ 155.414511][ T8736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.414543][ T8736] __sock_sendmsg+0x140/0x180 [ 155.414570][ T8736] ____sys_sendmsg+0x350/0x4e0 [ 155.414657][ T8736] __sys_sendmsg+0x1a0/0x240 [ 155.414747][ T8736] __x64_sys_sendmsg+0x46/0x50 [ 155.414810][ T8736] x64_sys_call+0x26f3/0x2e10 [ 155.414838][ T8736] do_syscall_64+0xc9/0x1c0 [ 155.414877][ T8736] ? clear_bhb_loop+0x25/0x80 [ 155.414905][ T8736] ? clear_bhb_loop+0x25/0x80 [ 155.414983][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.415009][ T8736] RIP: 0033:0x7fddd772d169 [ 155.415033][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.415056][ T8736] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.415079][ T8736] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 155.415102][ T8736] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 155.415117][ T8736] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 155.415155][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.415170][ T8736] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 155.415192][ T8736] [ 155.443553][ T8730] hub 9-0:1.0: USB hub found [ 155.695180][ T8730] hub 9-0:1.0: 8 ports detected [ 155.715858][ T29] audit: type=1326 audit(1743264986.250:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 155.739418][ T29] audit: type=1326 audit(1743264986.260:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8752 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 155.774424][ T8757] __nla_validate_parse: 6 callbacks suppressed [ 155.774439][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 155.792572][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1763'. [ 155.802928][ T8759] loop3: detected capacity change from 0 to 1024 [ 155.814592][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.834742][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.853216][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 155.864786][ T8766] loop6: detected capacity change from 0 to 128 [ 155.872580][ T8766] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 155.900451][ T8759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 155.907119][ T8759] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.914844][ T8759] vhci_hcd vhci_hcd.0: Device attached [ 155.924863][ T8771] vhci_hcd: connection closed [ 155.925006][ T31] vhci_hcd: stop threads [ 155.933983][ T31] vhci_hcd: release socket [ 155.938438][ T31] vhci_hcd: disconnect device [ 155.966343][ T8766] loop6: detected capacity change from 0 to 8192 [ 156.050517][ T8776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56855 sclass=netlink_route_socket pid=8776 comm=syz.6.1768 [ 156.075709][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 156.098421][ T8766] syzkaller0: entered promiscuous mode [ 156.104451][ T8766] syzkaller0: entered allmulticast mode [ 156.309406][ T8778] loop7: detected capacity change from 0 to 1024 [ 156.316675][ T8778] EXT4-fs: test_dummy_encryption option not supported [ 156.332215][ T8778] netlink: 'syz.7.1770': attribute type 1 has an invalid length. [ 156.340051][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1770'. [ 156.370514][ T8780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.387120][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1772'. [ 156.440285][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.474651][ T8787] hub 9-0:1.0: USB hub found [ 156.479408][ T8787] hub 9-0:1.0: 8 ports detected [ 156.528254][ T8791] random: crng reseeded on system resumption [ 156.547463][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1777'. [ 156.643095][ T8800] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1780'. [ 156.655455][ T8800] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1780'. [ 156.679692][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1780'. [ 156.716956][ T8808] loop7: detected capacity change from 0 to 1024 [ 156.727270][ T8808] EXT4-fs: test_dummy_encryption option not supported [ 156.741309][ T8811] loop3: detected capacity change from 0 to 1024 [ 156.758142][ T8808] netlink: 'syz.7.1782': attribute type 1 has an invalid length. [ 156.767534][ T8811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.797039][ T8816] hub 9-0:1.0: USB hub found [ 156.801798][ T8816] hub 9-0:1.0: 8 ports detected [ 156.822971][ T8811] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 156.829603][ T8811] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.837303][ T8811] vhci_hcd vhci_hcd.0: Device attached [ 156.882678][ T8826] loop7: detected capacity change from 0 to 2048 [ 156.892691][ T8817] vhci_hcd: connection closed [ 156.893588][ T35] vhci_hcd: stop threads [ 156.902754][ T35] vhci_hcd: release socket [ 156.907491][ T35] vhci_hcd: disconnect device [ 156.911675][ T8831] loop1: detected capacity change from 0 to 164 [ 156.922744][ T8826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.938463][ T8831] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 156.986784][ T8841] random: crng reseeded on system resumption [ 157.065683][ T8848] FAULT_INJECTION: forcing a failure. [ 157.065683][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 157.078409][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.1.1793 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 157.078512][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.078523][ T8848] Call Trace: [ 157.078528][ T8848] [ 157.078535][ T8848] dump_stack_lvl+0xf6/0x150 [ 157.078608][ T8848] dump_stack+0x15/0x1a [ 157.078629][ T8848] should_fail_ex+0x261/0x270 [ 157.078718][ T8848] should_failslab+0x8f/0xb0 [ 157.078736][ T8848] __kmalloc_noprof+0xad/0x410 [ 157.078775][ T8848] ? nla_strdup+0x7d/0xc0 [ 157.078858][ T8848] nla_strdup+0x7d/0xc0 [ 157.078885][ T8848] nf_tables_newtable+0x40b/0xf10 [ 157.078991][ T8848] nfnetlink_rcv+0xb6e/0x1610 [ 157.079019][ T8848] ? __kfree_skb+0x102/0x150 [ 157.079090][ T8848] netlink_unicast+0x605/0x6c0 [ 157.079111][ T8848] netlink_sendmsg+0x609/0x720 [ 157.079136][ T8848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.079157][ T8848] __sock_sendmsg+0x140/0x180 [ 157.079174][ T8848] ____sys_sendmsg+0x350/0x4e0 [ 157.079272][ T8848] __sys_sendmsg+0x1a0/0x240 [ 157.079309][ T8848] __x64_sys_sendmsg+0x46/0x50 [ 157.079333][ T8848] x64_sys_call+0x26f3/0x2e10 [ 157.079350][ T8848] do_syscall_64+0xc9/0x1c0 [ 157.079380][ T8848] ? clear_bhb_loop+0x25/0x80 [ 157.079398][ T8848] ? clear_bhb_loop+0x25/0x80 [ 157.079426][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.079443][ T8848] RIP: 0033:0x7fca46f5d169 [ 157.079456][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.079471][ T8848] RSP: 002b:00007fca455bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.079487][ T8848] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5d169 [ 157.079498][ T8848] RDX: 0000000020008844 RSI: 00002000000000c0 RDI: 0000000000000004 [ 157.079508][ T8848] RBP: 00007fca455bf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.079517][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.079527][ T8848] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 157.079542][ T8848] [ 157.338459][ T8868] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 157.373524][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.404979][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.418872][ T8884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 157.443400][ T8909] loop3: detected capacity change from 0 to 512 [ 157.467395][ T8909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.484070][ T8909] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.538007][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.581020][ T2968] kernel write not supported for file /1010/attr/exec (pid: 2968 comm: kworker/0:2) [ 157.604529][ T8927] random: crng reseeded on system resumption [ 157.704184][ T8936] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 157.747603][ T8941] loop6: detected capacity change from 0 to 256 [ 157.863176][ T8947] FAULT_INJECTION: forcing a failure. [ 157.863176][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 157.875928][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.0.1811 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 157.875961][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.875976][ T8947] Call Trace: [ 157.875983][ T8947] [ 157.875991][ T8947] dump_stack_lvl+0xf6/0x150 [ 157.876027][ T8947] dump_stack+0x15/0x1a [ 157.876046][ T8947] should_fail_ex+0x261/0x270 [ 157.876082][ T8947] should_failslab+0x8f/0xb0 [ 157.876107][ T8947] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 157.876141][ T8947] ? __d_alloc+0x3d/0x350 [ 157.876172][ T8947] ? get_random_u32+0x1a6/0x250 [ 157.876210][ T8947] __d_alloc+0x3d/0x350 [ 157.876241][ T8947] ? mpol_shared_policy_init+0xd2/0x510 [ 157.876279][ T8947] d_alloc_pseudo+0x1e/0x80 [ 157.876312][ T8947] alloc_file_pseudo+0x75/0x160 [ 157.876348][ T8947] __shmem_file_setup+0x1bb/0x1f0 [ 157.876378][ T8947] shmem_zero_setup+0x63/0xe0 [ 157.876406][ T8947] mmap_region+0xebb/0x1630 [ 157.876462][ T8947] do_mmap+0x9ef/0xc80 [ 157.876489][ T8947] vm_mmap_pgoff+0x16d/0x2d0 [ 157.876517][ T8947] ksys_mmap_pgoff+0xd0/0x340 [ 157.876538][ T8947] ? syscall_trace_enter+0x102/0x1f0 [ 157.876570][ T8947] ? fpregs_assert_state_consistent+0x83/0xa0 [ 157.876608][ T8947] x64_sys_call+0x1945/0x2e10 [ 157.876633][ T8947] do_syscall_64+0xc9/0x1c0 [ 157.876666][ T8947] ? clear_bhb_loop+0x25/0x80 [ 157.876691][ T8947] ? clear_bhb_loop+0x25/0x80 [ 157.876715][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.876739][ T8947] RIP: 0033:0x7f10841ad169 [ 157.876756][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.876777][ T8947] RSP: 002b:00007f108280f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.876798][ T8947] RAX: ffffffffffffffda RBX: 00007f10843c5fa0 RCX: 00007f10841ad169 [ 157.876813][ T8947] RDX: 0000000000000002 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 157.876827][ T8947] RBP: 00007f108280f090 R08: ffffffffffffffff R09: 0000000000000000 [ 157.876840][ T8947] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 157.876854][ T8947] R13: 0000000000000000 R14: 00007f10843c5fa0 R15: 00007ffc101ed918 [ 157.876875][ T8947] [ 158.275380][ T8959] loop1: detected capacity change from 0 to 512 [ 158.288220][ T8959] EXT4-fs: test_dummy_encryption option not supported [ 158.345861][ T8959] loop1: detected capacity change from 0 to 512 [ 158.370676][ T8959] EXT4-fs (loop1): Invalid log cluster size: 2130706432 [ 158.430623][ T8967] random: crng reseeded on system resumption [ 158.699470][ T8999] loop1: detected capacity change from 0 to 512 [ 158.718701][ T8999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.751008][ T9003] hub 9-0:1.0: USB hub found [ 158.756081][ T9003] hub 9-0:1.0: 8 ports detected [ 158.772495][ T9003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.797760][ T8999] ext4 filesystem being mounted at /365/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.815122][ T8999] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #4: comm syz.1.1830: corrupted inode contents [ 158.882820][ T8999] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #4: comm syz.1.1830: mark_inode_dirty error [ 158.915428][ T8999] EXT4-fs error (device loop1): ext4_do_update_inode:5194: inode #4: comm syz.1.1830: corrupted inode contents [ 158.930374][ T8999] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.1830: mark_inode_dirty error [ 158.941867][ T8999] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1830: Failed to acquire dquot type 1 [ 158.963784][ T9019] loop3: detected capacity change from 0 to 764 [ 158.982683][ T9021] loop6: detected capacity change from 0 to 1024 [ 159.005569][ T9019] support for the xor transformation has been removed. [ 159.086381][ T9027] program syz.3.1840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.366231][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.425557][ T9038] loop1: detected capacity change from 0 to 1024 [ 159.432430][ T9038] EXT4-fs: test_dummy_encryption option not supported [ 159.500385][ T9048] loop1: detected capacity change from 0 to 1024 [ 159.511501][ T9048] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1853: bad orphan inode 2304 [ 159.522345][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.022867][ T9081] random: crng reseeded on system resumption [ 160.045758][ T9083] futex_wake_op: syz.3.1867 tries to shift op by -1; fix this program [ 160.087778][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 160.087795][ T29] audit: type=1326 audit(1743264990.640:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.0.1865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10841ad169 code=0x0 [ 160.129735][ T9091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.167352][ T29] audit: type=1326 audit(1743264990.710:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.190898][ T29] audit: type=1326 audit(1743264990.710:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.214385][ T29] audit: type=1326 audit(1743264990.710:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.237881][ T29] audit: type=1326 audit(1743264990.710:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.261491][ T29] audit: type=1326 audit(1743264990.710:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.284969][ T29] audit: type=1326 audit(1743264990.710:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 160.312845][ T9095] loop6: detected capacity change from 0 to 256 [ 160.374215][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.432526][ T29] audit: type=1326 audit(1743264990.980:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10841ad169 code=0x7ffc0000 [ 160.456080][ T29] audit: type=1326 audit(1743264990.980:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9104 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10841ad169 code=0x7ffc0000 [ 160.481934][ T29] audit: type=1326 audit(1743264991.010:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.1.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 160.612793][ T9124] hub 9-0:1.0: USB hub found [ 160.619808][ T9124] hub 9-0:1.0: 8 ports detected [ 160.716941][ T9132] netlink: 'syz.3.1884': attribute type 3 has an invalid length. [ 160.819580][ T9144] FAULT_INJECTION: forcing a failure. [ 160.819580][ T9144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.832721][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.1.1889 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 160.832748][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.832823][ T9144] Call Trace: [ 160.832828][ T9144] [ 160.832835][ T9144] dump_stack_lvl+0xf6/0x150 [ 160.832859][ T9144] dump_stack+0x15/0x1a [ 160.832878][ T9144] should_fail_ex+0x261/0x270 [ 160.832914][ T9144] should_fail+0xb/0x10 [ 160.833037][ T9144] should_fail_usercopy+0x1a/0x20 [ 160.833073][ T9144] _copy_to_user+0x20/0xa0 [ 160.833095][ T9144] copy_to_sockptr+0x68/0xb0 [ 160.833162][ T9144] ipv6_get_msfilter+0x212/0x270 [ 160.833317][ T9144] do_ipv6_getsockopt+0x997/0x1480 [ 160.833345][ T9144] ? avc_has_perm_noaudit+0x1cc/0x210 [ 160.833385][ T9144] ? avc_has_perm+0xd6/0x150 [ 160.833425][ T9144] ipv6_getsockopt+0x78/0x1e0 [ 160.833530][ T9144] udpv6_getsockopt+0x73/0x80 [ 160.833558][ T9144] sock_common_getsockopt+0x5b/0x70 [ 160.833585][ T9144] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 160.833620][ T9144] do_sock_getsockopt+0x1fc/0x290 [ 160.833738][ T9144] __x64_sys_getsockopt+0x191/0x210 [ 160.833825][ T9144] x64_sys_call+0x128f/0x2e10 [ 160.833845][ T9144] do_syscall_64+0xc9/0x1c0 [ 160.833883][ T9144] ? clear_bhb_loop+0x25/0x80 [ 160.833908][ T9144] ? clear_bhb_loop+0x25/0x80 [ 160.833935][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.833996][ T9144] RIP: 0033:0x7fca46f5d169 [ 160.834011][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.834028][ T9144] RSP: 002b:00007fca455bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 160.834045][ T9144] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5d169 [ 160.834056][ T9144] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000008 [ 160.834067][ T9144] RBP: 00007fca455bf090 R08: 0000200000001000 R09: 0000000000000000 [ 160.834081][ T9144] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.834096][ T9144] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 160.834119][ T9144] [ 160.857417][ T9143] loop3: detected capacity change from 0 to 512 [ 161.054008][ T9143] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 161.062899][ T9143] EXT4-fs (loop3): invalid journal inode [ 161.068741][ T9143] EXT4-fs (loop3): can't get journal size [ 161.077364][ T9143] EXT4-fs (loop3): 1 truncate cleaned up [ 161.085726][ T9143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.199258][ T9157] __nla_validate_parse: 22 callbacks suppressed [ 161.199279][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1894'. [ 161.264502][ T9161] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.377353][ T9173] loop6: detected capacity change from 0 to 512 [ 161.424640][ T9173] ext4: Unknown parameter 'subj_role' [ 161.447446][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.465267][ T9179] FAULT_INJECTION: forcing a failure. [ 161.465267][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 161.477992][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.0.1904 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 161.478066][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.478081][ T9179] Call Trace: [ 161.478089][ T9179] [ 161.478098][ T9179] dump_stack_lvl+0xf6/0x150 [ 161.478126][ T9179] dump_stack+0x15/0x1a [ 161.478201][ T9179] should_fail_ex+0x261/0x270 [ 161.478230][ T9179] should_failslab+0x8f/0xb0 [ 161.478250][ T9179] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 161.478283][ T9179] ? __alloc_skb+0x10d/0x320 [ 161.478352][ T9179] __alloc_skb+0x10d/0x320 [ 161.478382][ T9179] netlink_ack+0xf1/0x4f0 [ 161.478410][ T9179] ? ref_tracker_free+0x3b8/0x420 [ 161.478447][ T9179] netlink_rcv_skb+0x19f/0x230 [ 161.478527][ T9179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.478573][ T9179] rtnetlink_rcv+0x1c/0x30 [ 161.478608][ T9179] netlink_unicast+0x605/0x6c0 [ 161.478632][ T9179] netlink_sendmsg+0x609/0x720 [ 161.478731][ T9179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.478755][ T9179] __sock_sendmsg+0x140/0x180 [ 161.478773][ T9179] ____sys_sendmsg+0x350/0x4e0 [ 161.478869][ T9179] __sys_sendmsg+0x1a0/0x240 [ 161.478913][ T9179] __x64_sys_sendmsg+0x46/0x50 [ 161.478947][ T9179] x64_sys_call+0x26f3/0x2e10 [ 161.478969][ T9179] do_syscall_64+0xc9/0x1c0 [ 161.479060][ T9179] ? clear_bhb_loop+0x25/0x80 [ 161.479098][ T9179] ? clear_bhb_loop+0x25/0x80 [ 161.479123][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.479148][ T9179] RIP: 0033:0x7f10841ad169 [ 161.479240][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.479262][ T9179] RSP: 002b:00007f108280f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.479309][ T9179] RAX: ffffffffffffffda RBX: 00007f10843c5fa0 RCX: 00007f10841ad169 [ 161.479324][ T9179] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000007 [ 161.479338][ T9179] RBP: 00007f108280f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.479349][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.479363][ T9179] R13: 0000000000000000 R14: 00007f10843c5fa0 R15: 00007ffc101ed918 [ 161.479384][ T9179] [ 161.727499][ T9189] loop3: detected capacity change from 0 to 256 [ 161.768499][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1908'. [ 161.882220][ T9196] loop7: detected capacity change from 0 to 512 [ 161.894140][ T9200] IPVS: Unknown mcast interface: veth1_to_batadv [ 161.903999][ T9196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.942858][ T9196] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.996867][ T9196] EXT4-fs error (device loop7): ext4_do_update_inode:5194: inode #2: comm syz.7.1910: corrupted inode contents [ 162.022942][ T9210] loop6: detected capacity change from 0 to 1024 [ 162.035480][ T9210] EXT4-fs: test_dummy_encryption option not supported [ 162.037836][ T9208] block device autoloading is deprecated and will be removed. [ 162.049951][ T9208] bio_check_eod: 41 callbacks suppressed [ 162.049966][ T9208] syz.0.1916: attempt to access beyond end of device [ 162.049966][ T9208] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 162.050804][ T9196] EXT4-fs error (device loop7): ext4_dirty_inode:6086: inode #2: comm syz.7.1910: mark_inode_dirty error [ 162.057416][ T9208] random: crng reseeded on system resumption [ 162.122358][ T9196] EXT4-fs error (device loop7): ext4_do_update_inode:5194: inode #2: comm syz.7.1910: corrupted inode contents [ 162.207678][ T9196] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1910: mark_inode_dirty error [ 162.272952][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.287311][ T9220] loop6: detected capacity change from 0 to 512 [ 162.294101][ T9220] ext4: Unknown parameter 'subj_role' [ 162.548952][ T9238] program syz.6.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.622080][ T9246] loop7: detected capacity change from 0 to 1024 [ 162.628540][ T9238] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.641807][ T9246] EXT4-fs: test_dummy_encryption option not supported [ 162.676165][ T9251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 162.790787][ T9262] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1935'. [ 162.797186][ T9260] loop3: detected capacity change from 0 to 512 [ 162.811051][ T9260] ext4: Unknown parameter 'subj_role' [ 162.826945][ T9262] loop7: detected capacity change from 0 to 512 [ 162.836658][ T9262] journal_path: Non-blockdev passed as './bus' [ 162.842873][ T9262] EXT4-fs: error: could not find journal device path [ 162.877113][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1937'. [ 162.888886][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1937'. [ 162.952339][ T9272] loop7: detected capacity change from 0 to 256 [ 163.396914][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1942'. [ 163.411347][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1942'. [ 163.520009][ T9287] FAULT_INJECTION: forcing a failure. [ 163.520009][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 163.532798][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.6.1947 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 163.532847][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.532858][ T9287] Call Trace: [ 163.532864][ T9287] [ 163.532872][ T9287] dump_stack_lvl+0xf6/0x150 [ 163.532898][ T9287] dump_stack+0x15/0x1a [ 163.532916][ T9287] should_fail_ex+0x261/0x270 [ 163.533016][ T9287] should_failslab+0x8f/0xb0 [ 163.533036][ T9287] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 163.533065][ T9287] ? __alloc_skb+0x10d/0x320 [ 163.533089][ T9287] __alloc_skb+0x10d/0x320 [ 163.533114][ T9287] ? should_fail_ex+0xd7/0x270 [ 163.533166][ T9287] netlink_dump+0x165/0x810 [ 163.533191][ T9287] ? __kmalloc_cache_noprof+0x18d/0x320 [ 163.533253][ T9287] ? __inet_diag_dump_start+0x53/0x780 [ 163.533289][ T9287] __netlink_dump_start+0x433/0x520 [ 163.533328][ T9287] inet_diag_handler_cmd+0x101/0x150 [ 163.533360][ T9287] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 163.533386][ T9287] ? __pfx_inet_diag_dump+0x10/0x10 [ 163.533488][ T9287] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 163.533516][ T9287] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 163.533549][ T9287] sock_diag_rcv_msg+0x2b8/0x2e0 [ 163.533596][ T9287] netlink_rcv_skb+0x12f/0x230 [ 163.533632][ T9287] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 163.533666][ T9287] sock_diag_rcv+0x1c/0x30 [ 163.533696][ T9287] netlink_unicast+0x605/0x6c0 [ 163.533733][ T9287] netlink_sendmsg+0x609/0x720 [ 163.533819][ T9287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.533912][ T9287] __sock_sendmsg+0x140/0x180 [ 163.533950][ T9287] ____sys_sendmsg+0x350/0x4e0 [ 163.533986][ T9287] __sys_sendmsg+0x1a0/0x240 [ 163.534024][ T9287] __x64_sys_sendmsg+0x46/0x50 [ 163.534101][ T9287] x64_sys_call+0x26f3/0x2e10 [ 163.534169][ T9287] do_syscall_64+0xc9/0x1c0 [ 163.534204][ T9287] ? clear_bhb_loop+0x25/0x80 [ 163.534225][ T9287] ? clear_bhb_loop+0x25/0x80 [ 163.534247][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.534343][ T9287] RIP: 0033:0x7fddd772d169 [ 163.534361][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.534382][ T9287] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.534402][ T9287] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 163.534413][ T9287] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 163.534424][ T9287] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 163.534438][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.534452][ T9287] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 163.534473][ T9287] [ 163.835370][ T9289] loop6: detected capacity change from 0 to 512 [ 163.866171][ T9293] loop7: detected capacity change from 0 to 512 [ 163.872885][ T9293] ext4: Unknown parameter 'subj_role' [ 163.920004][ T9289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.940646][ T9289] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.993390][ T8120] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.006723][ T9302] loop1: detected capacity change from 0 to 512 [ 164.023061][ T9302] ext4: Unknown parameter 'subj_role' [ 164.078817][ T9314] random: crng reseeded on system resumption [ 164.111454][ T9319] loop3: detected capacity change from 0 to 256 [ 164.193392][ T9324] loop7: detected capacity change from 0 to 8192 [ 164.232561][ T9324] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1963'. [ 164.251815][ T9324] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1963'. [ 164.271914][ T9324] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1963'. [ 164.318200][ T9335] loop1: detected capacity change from 0 to 512 [ 164.328194][ T9335] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.336115][ T9335] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1965: bg 0: block 248: padding at end of block bitmap is not set [ 164.351109][ T9335] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1965: Failed to acquire dquot type 1 [ 164.363074][ T9335] EXT4-fs (loop1): 1 truncate cleaned up [ 164.373023][ T9335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.386953][ T9335] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.1965: deleted inode referenced: 12 [ 164.399980][ T9335] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.1965: deleted inode referenced: 12 [ 164.437100][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.459019][ T9348] FAULT_INJECTION: forcing a failure. [ 164.459019][ T9348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.472467][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.1.1970 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 164.472494][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.472505][ T9348] Call Trace: [ 164.472512][ T9348] [ 164.472519][ T9348] dump_stack_lvl+0xf6/0x150 [ 164.472546][ T9348] dump_stack+0x15/0x1a [ 164.472565][ T9348] should_fail_ex+0x261/0x270 [ 164.472680][ T9348] should_fail+0xb/0x10 [ 164.472712][ T9348] should_fail_usercopy+0x1a/0x20 [ 164.472773][ T9348] _copy_from_iter+0xd8/0xd10 [ 164.472803][ T9348] ? kmalloc_reserve+0x16e/0x190 [ 164.472904][ T9348] ? __build_skb_around+0x199/0x1f0 [ 164.472932][ T9348] ? __alloc_skb+0x227/0x320 [ 164.472962][ T9348] ? __virt_addr_valid+0x1ed/0x250 [ 164.472983][ T9348] ? __check_object_size+0x367/0x510 [ 164.473018][ T9348] netlink_sendmsg+0x492/0x720 [ 164.473125][ T9348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.473151][ T9348] __sock_sendmsg+0x140/0x180 [ 164.473173][ T9348] ____sys_sendmsg+0x350/0x4e0 [ 164.473208][ T9348] __sys_sendmsg+0x1a0/0x240 [ 164.473247][ T9348] __x64_sys_sendmsg+0x46/0x50 [ 164.473362][ T9348] x64_sys_call+0x26f3/0x2e10 [ 164.473386][ T9348] do_syscall_64+0xc9/0x1c0 [ 164.473421][ T9348] ? clear_bhb_loop+0x25/0x80 [ 164.473446][ T9348] ? clear_bhb_loop+0x25/0x80 [ 164.473503][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.473524][ T9348] RIP: 0033:0x7fca46f5d169 [ 164.473541][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.473562][ T9348] RSP: 002b:00007fca455bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.473666][ T9348] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5d169 [ 164.473681][ T9348] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 164.473696][ T9348] RBP: 00007fca455bf090 R08: 0000000000000000 R09: 0000000000000000 [ 164.473710][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.473721][ T9348] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 164.473738][ T9348] [ 164.711838][ T9354] random: crng reseeded on system resumption [ 164.854998][ T9367] loop1: detected capacity change from 0 to 512 [ 164.877608][ T9367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.890399][ T9367] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.922296][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.993279][ T9378] loop6: detected capacity change from 0 to 512 [ 164.999888][ T9378] ext4: Unknown parameter 'subj_role' [ 165.037770][ T9390] random: crng reseeded on system resumption [ 165.108666][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 165.108683][ T29] audit: type=1326 audit(1743264995.660:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9389 comm="syz.6.1989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x0 [ 165.157610][ T9405] loop1: detected capacity change from 0 to 512 [ 165.184409][ T9405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.209740][ T29] audit: type=1326 audit(1743264995.760:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.6.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 165.215353][ T9415] FAULT_INJECTION: forcing a failure. [ 165.215353][ T9415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.233270][ T29] audit: type=1326 audit(1743264995.760:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.6.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 165.246370][ T9415] CPU: 1 UID: 0 PID: 9415 Comm: syz.3.1998 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 165.246406][ T9415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.246423][ T9415] Call Trace: [ 165.246432][ T9415] [ 165.246441][ T9415] dump_stack_lvl+0xf6/0x150 [ 165.246485][ T9415] dump_stack+0x15/0x1a [ 165.246506][ T9415] should_fail_ex+0x261/0x270 [ 165.246545][ T9415] should_fail+0xb/0x10 [ 165.246579][ T9415] should_fail_usercopy+0x1a/0x20 [ 165.246679][ T9415] _copy_from_user+0x1c/0xa0 [ 165.246705][ T9415] move_addr_to_kernel+0x8c/0x130 [ 165.246773][ T9415] __sys_bind+0xa3/0x190 [ 165.246846][ T9415] __x64_sys_bind+0x41/0x50 [ 165.246874][ T9415] x64_sys_call+0x1e4a/0x2e10 [ 165.246972][ T9415] do_syscall_64+0xc9/0x1c0 [ 165.247063][ T9415] ? clear_bhb_loop+0x25/0x80 [ 165.247091][ T9415] ? clear_bhb_loop+0x25/0x80 [ 165.247118][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.247206][ T9415] RIP: 0033:0x7fb656bfd169 [ 165.247220][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.247286][ T9415] RSP: 002b:00007fb655267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 165.247310][ T9415] RAX: ffffffffffffffda RBX: 00007fb656e15fa0 RCX: 00007fb656bfd169 [ 165.247325][ T9415] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 165.247341][ T9415] RBP: 00007fb655267090 R08: 0000000000000000 R09: 0000000000000000 [ 165.247384][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.247399][ T9415] R13: 0000000000000000 R14: 00007fb656e15fa0 R15: 00007ffe8d2a91f8 [ 165.247421][ T9415] [ 165.270818][ T9405] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.282283][ T29] audit: type=1326 audit(1743264995.760:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.6.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 165.294162][ T9417] loop7: detected capacity change from 0 to 256 [ 165.295575][ T29] audit: type=1326 audit(1743264995.760:4763): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.6.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 165.380182][ T9419] loop6: detected capacity change from 0 to 512 [ 165.481302][ T9421] loop0: detected capacity change from 0 to 2048 [ 165.521538][ T9419] ext4: Unknown parameter 'subj_role' [ 165.541052][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.617553][ T29] audit: type=1400 audit(1743264996.170:4764): avc: denied { relabelfrom } for pid=9429 comm="syz.3.2006" name="NETLINK" dev="sockfs" ino=41219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.642112][ T29] audit: type=1400 audit(1743264996.170:4765): avc: denied { relabelto } for pid=9429 comm="syz.3.2006" name="NETLINK" dev="sockfs" ino=41219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 165.676638][ T9421] loop0: p1 < > p4 [ 165.684558][ T9421] loop0: p4 size 8388608 extends beyond EOD, truncated [ 165.750990][ T29] audit: type=1326 audit(1743264996.300:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.1.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 165.774501][ T29] audit: type=1326 audit(1743264996.300:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.1.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 165.798319][ T29] audit: type=1326 audit(1743264996.350:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9444 comm="syz.1.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 165.875259][ T9450] Falling back ldisc for ttyS3. [ 165.897460][ T9461] loop6: detected capacity change from 0 to 256 [ 166.307086][ T9487] team0 (unregistering): Port device team_slave_0 removed [ 166.331188][ T9489] usb usb5: usbfs: process 9489 (syz.7.2031) did not claim interface 0 before use [ 166.345899][ T9487] team0 (unregistering): Port device team_slave_1 removed [ 166.444450][ T9489] loop7: detected capacity change from 0 to 2048 [ 166.515493][ T9489] loop7: p1 < > p4 [ 166.520018][ T9489] loop7: p4 size 8388608 extends beyond EOD, truncated [ 166.583964][ T9498] loop0: detected capacity change from 0 to 512 [ 166.607903][ T9498] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.2035: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 166.626033][ T9498] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.2035: Bad quota inode: 3, type: 0 [ 166.637186][ T9498] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 166.651956][ T9498] EXT4-fs (loop0): mount failed [ 166.677987][ T9507] __nla_validate_parse: 7 callbacks suppressed [ 166.678015][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2038'. [ 166.696624][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2038'. [ 166.771064][ T9511] loop0: detected capacity change from 0 to 2048 [ 166.815273][ T9511] loop0: p1 < > p4 [ 166.821977][ T9511] loop0: p4 size 8388608 extends beyond EOD, truncated [ 166.856947][ T9524] loop6: detected capacity change from 0 to 512 [ 166.863590][ T9524] ext4: Unknown parameter 'subj_role' [ 166.969569][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.983219][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.994481][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2047'. [ 167.005949][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 167.017464][ T9533] random: crng reseeded on system resumption [ 167.294837][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2051'. [ 167.460415][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.469751][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.603358][ T9550] loop0: detected capacity change from 0 to 256 [ 167.615273][ T9552] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 167.615273][ T9552] program syz.1.2056 not setting count and/or reply_len properly [ 167.677110][ T9556] IPv6: addrconf: prefix option has invalid lifetime [ 167.751213][ T9563] loop1: detected capacity change from 0 to 512 [ 167.758304][ T9563] ext4: Unknown parameter 'subj_role' [ 167.999683][ T9576] loop1: detected capacity change from 0 to 512 [ 168.067936][ T9576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.125595][ T9594] loop6: detected capacity change from 0 to 512 [ 168.535502][ T9576] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.551063][ T2968] IPVS: starting estimator thread 0... [ 168.598832][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.645474][ T9596] IPVS: using max 2016 ests per chain, 100800 per kthread [ 168.673400][ T9661] loop1: detected capacity change from 0 to 512 [ 168.682449][ T9661] ext4: Unknown parameter 'subj_role' [ 168.764680][ T1041] IPVS: starting estimator thread 0... [ 168.865509][ T9737] loop3: detected capacity change from 0 to 256 [ 168.870879][ T9739] loop0: detected capacity change from 0 to 512 [ 168.875217][ T9713] IPVS: using max 1968 ests per chain, 98400 per kthread [ 169.007903][ T9739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.035188][ T9739] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.089830][ T9749] loop7: detected capacity change from 0 to 512 [ 169.179409][ T9749] ext4: Unknown parameter 'subj_role' [ 169.296760][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.830135][ T9795] program syz.0.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.844880][ T9795] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 169.845201][ T9812] FAULT_INJECTION: forcing a failure. [ 169.845201][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 169.865907][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.1.2097 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 169.865939][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.865951][ T9812] Call Trace: [ 169.865958][ T9812] [ 169.865965][ T9812] dump_stack_lvl+0xf6/0x150 [ 169.865986][ T9812] dump_stack+0x15/0x1a [ 169.866006][ T9812] should_fail_ex+0x261/0x270 [ 169.866040][ T9812] should_failslab+0x8f/0xb0 [ 169.866064][ T9812] kmem_cache_alloc_noprof+0x59/0x340 [ 169.866089][ T9812] ? vm_area_alloc+0x2c/0x130 [ 169.866108][ T9812] vm_area_alloc+0x2c/0x130 [ 169.866126][ T9812] mmap_region+0x824/0x1630 [ 169.866179][ T9812] do_mmap+0x9ef/0xc80 [ 169.866205][ T9812] vm_mmap_pgoff+0x16d/0x2d0 [ 169.866233][ T9812] ksys_mmap_pgoff+0xd0/0x340 [ 169.866255][ T9812] ? fpregs_assert_state_consistent+0x83/0xa0 [ 169.866287][ T9812] x64_sys_call+0x1945/0x2e10 [ 169.866306][ T9812] do_syscall_64+0xc9/0x1c0 [ 169.866334][ T9812] ? clear_bhb_loop+0x25/0x80 [ 169.866358][ T9812] ? clear_bhb_loop+0x25/0x80 [ 169.866380][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.866399][ T9812] RIP: 0033:0x7fca46f5d1a3 [ 169.866412][ T9812] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 169.866429][ T9812] RSP: 002b:00007fca455bee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.866451][ T9812] RAX: ffffffffffffffda RBX: 0000000000000547 RCX: 00007fca46f5d1a3 [ 169.866465][ T9812] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 169.866479][ T9812] RBP: 0000200000001802 R08: 00000000ffffffff R09: 0000000000000000 [ 169.866493][ T9812] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 169.866506][ T9812] R13: 00007fca455beef0 R14: 00007fca455beeb0 R15: 0000200000000140 [ 169.866527][ T9812] [ 170.068190][ T9814] loop3: detected capacity change from 0 to 512 [ 170.109821][ T9820] FAULT_INJECTION: forcing a failure. [ 170.109821][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 170.122529][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.1.2100 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 170.122643][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.122658][ T9820] Call Trace: [ 170.122666][ T9820] [ 170.122675][ T9820] dump_stack_lvl+0xf6/0x150 [ 170.122702][ T9820] dump_stack+0x15/0x1a [ 170.122721][ T9820] should_fail_ex+0x261/0x270 [ 170.122758][ T9820] should_failslab+0x8f/0xb0 [ 170.122844][ T9820] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 170.122989][ T9820] ? sidtab_sid2str_get+0xb8/0x140 [ 170.123019][ T9820] ? vsnprintf+0x84d/0x8a0 [ 170.123040][ T9820] kmemdup_noprof+0x2b/0x70 [ 170.123112][ T9820] sidtab_sid2str_get+0xb8/0x140 [ 170.123139][ T9820] security_sid_to_context_core+0x1eb/0x2f0 [ 170.123166][ T9820] security_sid_to_context+0x27/0x30 [ 170.123197][ T9820] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 170.123230][ T9820] security_lsmprop_to_secctx+0x40/0x80 [ 170.123270][ T9820] audit_log_task_context+0x7a/0x180 [ 170.123369][ T9820] audit_log_task+0xfb/0x250 [ 170.123401][ T9820] audit_seccomp+0x68/0x130 [ 170.123496][ T9820] __seccomp_filter+0x694/0x10e0 [ 170.123532][ T9820] ? vfs_write+0x669/0x950 [ 170.123635][ T9820] __secure_computing+0x7e/0x160 [ 170.123667][ T9820] syscall_trace_enter+0xcf/0x1f0 [ 170.123701][ T9820] do_syscall_64+0xaa/0x1c0 [ 170.123732][ T9820] ? clear_bhb_loop+0x25/0x80 [ 170.123816][ T9820] ? clear_bhb_loop+0x25/0x80 [ 170.123836][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.123856][ T9820] RIP: 0033:0x7fca46f5d169 [ 170.123873][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.123904][ T9820] RSP: 002b:00007fca455bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 170.123925][ T9820] RAX: ffffffffffffffda RBX: 00007fca47175fa0 RCX: 00007fca46f5d169 [ 170.123939][ T9820] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000004 [ 170.123954][ T9820] RBP: 00007fca455bf090 R08: 0000000000000000 R09: 0000000000000000 [ 170.123968][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.123992][ T9820] R13: 0000000000000000 R14: 00007fca47175fa0 R15: 00007fffb4e65a68 [ 170.124053][ T9820] [ 170.124063][ T9820] audit_panic: 156 callbacks suppressed [ 170.124073][ T9820] audit: error in audit_log_task_context [ 170.207286][ T9822] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2101'. [ 170.212875][ T29] audit: type=1326 audit(1743265000.660:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 170.350353][ T9822] loop7: detected capacity change from 0 to 256 [ 170.353660][ T29] audit: type=1400 audit(1743265000.790:4926): avc: denied { getopt } for pid=9821 comm="syz.7.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.361174][ T9814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.368318][ T29] audit: type=1326 audit(1743265000.800:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca46f5bb7c code=0x7ffc0000 [ 170.450817][ T29] audit: type=1326 audit(1743265000.800:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca46f5bc1f code=0x7ffc0000 [ 170.474139][ T29] audit: type=1326 audit(1743265000.800:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca46f5bdca code=0x7ffc0000 [ 170.497387][ T29] audit: type=1326 audit(1743265000.800:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 170.520849][ T29] audit: type=1326 audit(1743265000.800:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9819 comm="syz.1.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca46f5d169 code=0x7ffc0000 [ 170.548785][ T9822] vfat: Unknown parameter 'ÿÿÿÿÿÿÿ' [ 170.554837][ T9814] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.638676][ T9828] loop0: detected capacity change from 0 to 512 [ 170.655984][ T9828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.678543][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.687812][ T9828] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 170.708216][ T29] audit: type=1400 audit(1743265001.260:4932): avc: denied { write } for pid=9827 comm="syz.0.2103" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.866776][ T9836] loop3: detected capacity change from 0 to 256 [ 171.235299][ T29] audit: type=1326 audit(1743265001.740:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9850 comm="syz.0.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10841ad169 code=0x7ffc0000 [ 171.446933][ T9855] FAULT_INJECTION: forcing a failure. [ 171.446933][ T9855] name failslab, interval 1, probability 0, space 0, times 0 [ 171.459683][ T9855] CPU: 1 UID: 0 PID: 9855 Comm: syz.7.2112 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 171.459789][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.459850][ T9855] Call Trace: [ 171.459856][ T9855] [ 171.459864][ T9855] dump_stack_lvl+0xf6/0x150 [ 171.459898][ T9855] dump_stack+0x15/0x1a [ 171.459918][ T9855] should_fail_ex+0x261/0x270 [ 171.459955][ T9855] should_failslab+0x8f/0xb0 [ 171.459981][ T9855] kmem_cache_alloc_noprof+0x59/0x340 [ 171.460074][ T9855] ? skb_clone+0x154/0x1f0 [ 171.460112][ T9855] skb_clone+0x154/0x1f0 [ 171.460141][ T9855] __netlink_deliver_tap+0x2bd/0x4f0 [ 171.460178][ T9855] netlink_unicast+0x69e/0x6c0 [ 171.460209][ T9855] netlink_sendmsg+0x609/0x720 [ 171.460324][ T9855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.460355][ T9855] __sock_sendmsg+0x140/0x180 [ 171.460493][ T9855] ____sys_sendmsg+0x350/0x4e0 [ 171.460523][ T9855] __sys_sendmsg+0x1a0/0x240 [ 171.460577][ T9855] __x64_sys_sendmsg+0x46/0x50 [ 171.460668][ T9855] x64_sys_call+0x26f3/0x2e10 [ 171.460694][ T9855] do_syscall_64+0xc9/0x1c0 [ 171.460768][ T9855] ? clear_bhb_loop+0x25/0x80 [ 171.460792][ T9855] ? clear_bhb_loop+0x25/0x80 [ 171.460883][ T9855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.460943][ T9855] RIP: 0033:0x7f87e1f2d169 [ 171.460963][ T9855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.460984][ T9855] RSP: 002b:00007f87e058f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.461008][ T9855] RAX: ffffffffffffffda RBX: 00007f87e2145fa0 RCX: 00007f87e1f2d169 [ 171.461022][ T9855] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000005 [ 171.461109][ T9855] RBP: 00007f87e058f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.461124][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.461138][ T9855] R13: 0000000000000000 R14: 00007f87e2145fa0 R15: 00007ffd26dbfc78 [ 171.461160][ T9855] [ 171.728268][ T9861] FAULT_INJECTION: forcing a failure. [ 171.728268][ T9861] name failslab, interval 1, probability 0, space 0, times 0 [ 171.741014][ T9861] CPU: 1 UID: 0 PID: 9861 Comm: syz.7.2115 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 171.741041][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.741052][ T9861] Call Trace: [ 171.741058][ T9861] [ 171.741068][ T9861] dump_stack_lvl+0xf6/0x150 [ 171.741122][ T9861] dump_stack+0x15/0x1a [ 171.741211][ T9861] should_fail_ex+0x261/0x270 [ 171.741248][ T9861] should_failslab+0x8f/0xb0 [ 171.741267][ T9861] __kmalloc_cache_noprof+0x55/0x320 [ 171.741368][ T9861] ? audit_log_d_path+0x8e/0x150 [ 171.741390][ T9861] audit_log_d_path+0x8e/0x150 [ 171.741447][ T9861] audit_log_d_path_exe+0x42/0x70 [ 171.741473][ T9861] audit_log_task+0x1f1/0x250 [ 171.741547][ T9861] audit_seccomp+0x68/0x130 [ 171.741586][ T9861] __seccomp_filter+0x694/0x10e0 [ 171.741620][ T9861] ? vfs_write+0x669/0x950 [ 171.741762][ T9861] __secure_computing+0x7e/0x160 [ 171.741787][ T9861] syscall_trace_enter+0xcf/0x1f0 [ 171.741818][ T9861] do_syscall_64+0xaa/0x1c0 [ 171.741859][ T9861] ? clear_bhb_loop+0x25/0x80 [ 171.741885][ T9861] ? clear_bhb_loop+0x25/0x80 [ 171.741947][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.741989][ T9861] RIP: 0033:0x7f87e1f2d169 [ 171.742006][ T9861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.742029][ T9861] RSP: 002b:00007f87e058f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000111 [ 171.742051][ T9861] RAX: ffffffffffffffda RBX: 00007f87e2145fa0 RCX: 00007f87e1f2d169 [ 171.742065][ T9861] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00002000000005c0 [ 171.742080][ T9861] RBP: 00007f87e058f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.742090][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.742103][ T9861] R13: 0000000000000000 R14: 00007f87e2145fa0 R15: 00007ffd26dbfc78 [ 171.742131][ T9861] [ 171.965227][ T9866] random: crng reseeded on system resumption [ 172.084272][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2124'. [ 172.126440][ T9885] program syz.7.2122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.282406][ T9889] loop6: detected capacity change from 0 to 256 [ 172.372772][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.381551][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.728729][ T9902] program syz.7.2132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.845092][ T9902] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.881086][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 172.910853][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.095857][ T9941] loop3: detected capacity change from 0 to 128 [ 173.110982][ T9941] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.174638][ T9941] ext4 filesystem being mounted at /413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.256233][ T9935] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.274403][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 173.296097][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2143'. [ 173.368929][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2147'. [ 173.577597][T10021] 9pnet_fd: Insufficient options for proto=fd [ 173.585960][T10018] loop6: detected capacity change from 0 to 512 [ 173.599384][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'. [ 173.627678][T10018] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.662609][T10018] EXT4-fs (loop6): mount failed [ 173.703633][T10044] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.721610][T10049] loop7: detected capacity change from 0 to 2048 [ 173.729693][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2161'. [ 173.741911][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2161'. [ 173.761770][T10049] loop7: p1 < > p4 [ 173.767352][T10049] loop7: p4 size 8388608 extends beyond EOD, truncated [ 173.842827][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.985316][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2169'. [ 174.035992][T10093] loop7: detected capacity change from 0 to 2048 [ 174.060247][T10093] EXT4-fs: Ignoring removed bh option [ 174.103628][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2174'. [ 174.135999][T10093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.195584][T10089] program syz.3.2163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.215050][T10089] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 174.226191][T10126] FAULT_INJECTION: forcing a failure. [ 174.226191][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 174.238949][T10126] CPU: 1 UID: 0 PID: 10126 Comm: syz.6.2179 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 174.239006][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.239020][T10126] Call Trace: [ 174.239026][T10126] [ 174.239035][T10126] dump_stack_lvl+0xf6/0x150 [ 174.239061][T10126] dump_stack+0x15/0x1a [ 174.239080][T10126] should_fail_ex+0x261/0x270 [ 174.239139][T10126] should_failslab+0x8f/0xb0 [ 174.239162][T10126] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 174.239190][T10126] ? security_set_bools+0x8b/0x350 [ 174.239222][T10126] ? __rcu_read_unlock+0x4e/0x70 [ 174.239314][T10126] kmemdup_noprof+0x2b/0x70 [ 174.239353][T10126] security_set_bools+0x8b/0x350 [ 174.239381][T10126] ? sel_commit_bools_write+0x16d/0x270 [ 174.239438][T10126] sel_commit_bools_write+0x1ed/0x270 [ 174.239477][T10126] vfs_writev+0x3f3/0x880 [ 174.239505][T10126] ? get_pid_task+0x94/0xd0 [ 174.239614][T10126] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 174.239667][T10126] ? mutex_lock+0xd/0x40 [ 174.239694][T10126] do_writev+0xf7/0x230 [ 174.239723][T10126] __x64_sys_writev+0x45/0x50 [ 174.239812][T10126] x64_sys_call+0x1d68/0x2e10 [ 174.239835][T10126] do_syscall_64+0xc9/0x1c0 [ 174.239866][T10126] ? clear_bhb_loop+0x25/0x80 [ 174.239900][T10126] ? clear_bhb_loop+0x25/0x80 [ 174.239979][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.239997][T10126] RIP: 0033:0x7fddd772d169 [ 174.240113][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.240132][T10126] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 174.240153][T10126] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 174.240166][T10126] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 174.240179][T10126] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 174.240192][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.240205][T10126] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 174.240226][T10126] [ 174.587899][T10141] loop0: detected capacity change from 0 to 512 [ 174.608214][T10141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.621129][T10141] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.634551][T10141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.650203][T10144] FAULT_INJECTION: forcing a failure. [ 174.650203][T10144] name failslab, interval 1, probability 0, space 0, times 0 [ 174.662895][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.6.2186 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 174.662941][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.662956][T10144] Call Trace: [ 174.662964][T10144] [ 174.662972][T10144] dump_stack_lvl+0xf6/0x150 [ 174.663002][T10144] dump_stack+0x15/0x1a [ 174.663021][T10144] should_fail_ex+0x261/0x270 [ 174.663132][T10144] should_failslab+0x8f/0xb0 [ 174.663157][T10144] kmem_cache_alloc_noprof+0x59/0x340 [ 174.663188][T10144] ? skb_clone+0x154/0x1f0 [ 174.663223][T10144] skb_clone+0x154/0x1f0 [ 174.663304][T10144] __netlink_deliver_tap+0x2bd/0x4f0 [ 174.663341][T10144] netlink_unicast+0x69e/0x6c0 [ 174.663363][T10144] netlink_sendmsg+0x609/0x720 [ 174.663389][T10144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.663420][T10144] __sock_sendmsg+0x140/0x180 [ 174.663465][T10144] ____sys_sendmsg+0x350/0x4e0 [ 174.663580][T10144] __sys_sendmsg+0x1a0/0x240 [ 174.663635][T10144] __x64_sys_sendmsg+0x46/0x50 [ 174.663669][T10144] x64_sys_call+0x26f3/0x2e10 [ 174.663695][T10144] do_syscall_64+0xc9/0x1c0 [ 174.663722][T10144] ? clear_bhb_loop+0x25/0x80 [ 174.663756][T10144] ? clear_bhb_loop+0x25/0x80 [ 174.663776][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.663795][T10144] RIP: 0033:0x7fddd772d169 [ 174.663809][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.663826][T10144] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.663847][T10144] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 174.663859][T10144] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 174.663954][T10144] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 174.663968][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.663982][T10144] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 174.664004][T10144] [ 174.880155][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.943066][T10156] Invalid logical block size (4095) [ 175.027835][T10169] loop0: detected capacity change from 0 to 1024 [ 175.040932][T10169] EXT4-fs: Ignoring removed orlov option [ 175.046793][T10169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.061797][T10169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.083126][T10171] loop7: detected capacity change from 0 to 512 [ 175.096327][T10171] EXT4-fs error (device loop7): ext4_orphan_get:1390: comm syz.7.2198: inode #15: comm syz.7.2198: iget: illegal inode # [ 175.109493][T10171] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2198: couldn't read orphan inode 15 (err -117) [ 175.122216][T10171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.139085][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 175.139102][ T29] audit: type=1400 audit(1743265005.690:5083): avc: denied { ioctl } for pid=10170 comm="syz.7.2198" path="socket:[43638]" dev="sockfs" ino=43638 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.172567][ T29] audit: type=1400 audit(1743265005.730:5084): avc: denied { setcheckreqprot } for pid=10168 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 175.193502][T10177] netlink: 'syz.0.2197': attribute type 16 has an invalid length. [ 175.201390][T10177] netlink: 'syz.0.2197': attribute type 17 has an invalid length. [ 175.244894][ T29] audit: type=1400 audit(1743265005.790:5085): avc: denied { write } for pid=10168 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.296780][ T29] audit: type=1400 audit(1743265005.850:5086): avc: denied { write } for pid=10168 comm="syz.0.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.347760][T10177] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 175.360122][T10177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.383670][T10187] tmpfs: Bad value for 'mpol' [ 175.399732][ T29] audit: type=1400 audit(1743265005.930:5087): avc: denied { mounton } for pid=10185 comm="syz.3.2200" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 175.443191][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.478115][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.502293][T10191] loop0: detected capacity change from 0 to 256 [ 175.617574][ T29] audit: type=1326 audit(1743265006.140:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 175.641124][ T29] audit: type=1326 audit(1743265006.140:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 175.664778][ T29] audit: type=1326 audit(1743265006.140:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 175.688445][ T29] audit: type=1326 audit(1743265006.140:5091): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb656bfd169 code=0x7ffc0000 [ 175.744155][ T29] audit: type=1326 audit(1743265006.290:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10207 comm="syz.6.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd772d169 code=0x7ffc0000 [ 175.772215][T10208] batman_adv: batadv0: Adding interface: dummy0 [ 175.778615][T10208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.778729][T10212] loop3: detected capacity change from 0 to 512 [ 175.810213][T10208] batman_adv: batadv0: Interface activated: dummy0 [ 175.822009][T10212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.835504][T10212] EXT4-fs (loop3): 1 truncate cleaned up [ 175.838127][T10215] bridge0: entered promiscuous mode [ 175.841536][T10212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.863734][T10215] bridge0: port 3(macsec1) entered blocking state [ 175.870235][T10215] bridge0: port 3(macsec1) entered disabled state [ 175.870436][T10219] loop0: detected capacity change from 0 to 512 [ 175.876923][T10215] macsec1: entered allmulticast mode [ 175.888377][T10215] bridge0: entered allmulticast mode [ 175.897238][T10215] macsec1: left allmulticast mode [ 175.902384][T10215] bridge0: left allmulticast mode [ 175.908455][T10215] bridge0: left promiscuous mode [ 175.917573][T10219] EXT4-fs error (device loop0): ext4_orphan_get:1390: comm syz.0.2213: inode #15: comm syz.0.2213: iget: illegal inode # [ 175.932580][T10219] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2213: couldn't read orphan inode 15 (err -117) [ 175.951051][T10219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.139628][T10238] loop7: detected capacity change from 0 to 1764 [ 176.146823][T10238] ISOFS: unable to read i-node block [ 176.152170][T10238] isofs_fill_super: get root inode failed [ 176.171262][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.255058][T10238] smc: net device bond0 applied user defined pnetid SYZ0 [ 176.275187][T10245] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.354914][T10247] loop0: detected capacity change from 0 to 256 [ 176.382332][T10249] FAULT_INJECTION: forcing a failure. [ 176.382332][T10249] name failslab, interval 1, probability 0, space 0, times 0 [ 176.395193][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.6.2225 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 176.395221][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.395235][T10249] Call Trace: [ 176.395243][T10249] [ 176.395251][T10249] dump_stack_lvl+0xf6/0x150 [ 176.395279][T10249] dump_stack+0x15/0x1a [ 176.395350][T10249] should_fail_ex+0x261/0x270 [ 176.395387][T10249] should_failslab+0x8f/0xb0 [ 176.395412][T10249] __kmalloc_cache_noprof+0x55/0x320 [ 176.395517][T10249] ? audit_log_d_path+0x8e/0x150 [ 176.395539][T10249] audit_log_d_path+0x8e/0x150 [ 176.395565][T10249] audit_log_d_path_exe+0x42/0x70 [ 176.395591][T10249] audit_log_task+0x1f1/0x250 [ 176.395647][T10249] audit_seccomp+0x68/0x130 [ 176.395682][T10249] __seccomp_filter+0x694/0x10e0 [ 176.395754][T10249] ? vfs_write+0x669/0x950 [ 176.395801][T10249] __secure_computing+0x7e/0x160 [ 176.395875][T10249] syscall_trace_enter+0xcf/0x1f0 [ 176.395908][T10249] ? fpregs_assert_state_consistent+0x83/0xa0 [ 176.395949][T10249] do_syscall_64+0xaa/0x1c0 [ 176.395985][T10249] ? clear_bhb_loop+0x25/0x80 [ 176.396085][T10249] ? clear_bhb_loop+0x25/0x80 [ 176.396111][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.396133][T10249] RIP: 0033:0x7fddd772d169 [ 176.396147][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.396211][T10249] RSP: 002b:00007fddd5d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 176.396233][T10249] RAX: ffffffffffffffda RBX: 00007fddd7945fa0 RCX: 00007fddd772d169 [ 176.396248][T10249] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 176.396262][T10249] RBP: 00007fddd5d97090 R08: 0000000000000000 R09: 0000000000000000 [ 176.396275][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.396289][T10249] R13: 0000000000000000 R14: 00007fddd7945fa0 R15: 00007ffdba7ed278 [ 176.396343][T10249] [ 176.621055][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.171643][T10268] loop1: detected capacity change from 0 to 8192 [ 177.237530][T10268] loop1: p3 < > [ 177.286299][T10272] random: crng reseeded on system resumption [ 177.448502][T10286] __nla_validate_parse: 9 callbacks suppressed [ 177.448521][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'. [ 177.492071][T10293] loop7: detected capacity change from 0 to 1024 [ 177.499149][T10293] EXT4-fs: Ignoring removed orlov option [ 177.504839][T10293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.515954][T10294] wireguard0: entered promiscuous mode [ 177.521492][T10294] wireguard0: entered allmulticast mode [ 177.530992][T10293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.559464][T10299] loop0: detected capacity change from 0 to 256 [ 177.571047][T10293] netlink: 'syz.7.2242': attribute type 16 has an invalid length. [ 177.579043][T10293] netlink: 'syz.7.2242': attribute type 17 has an invalid length. [ 177.631595][T10293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.727897][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.739669][T10306] loop3: detected capacity change from 0 to 8192 [ 177.785621][T10306] loop3: p3 < > [ 177.848079][T10308] loop1: detected capacity change from 0 to 1764 [ 177.888260][T10308] ISOFS: unable to read i-node block [ 177.893646][T10308] isofs_fill_super: get root inode failed [ 177.987267][T10308] smc: net device bond0 applied user defined pnetid SYZ0 [ 178.018732][T10308] smc: net device bond0 erased user defined pnetid SYZ0 [ 178.091569][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2250'. [ 178.128217][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.139505][ T8886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.154666][T10317] random: crng reseeded on system resumption [ 178.555653][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'. [ 178.576836][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2254'. [ 178.597907][T10333] loop7: detected capacity change from 0 to 512 [ 178.604556][T10333] EXT4-fs: Ignoring removed orlov option [ 178.613492][T10333] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 178.627763][T10333] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.2256: iget: bad extended attribute block 512 [ 178.640611][T10333] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2256: couldn't read orphan inode 15 (err -117) [ 178.655179][T10333] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.656202][T10338] sctp: [Deprecated]: syz.1.2258 (pid 10338) Use of int in maxseg socket option. [ 178.656202][T10338] Use struct sctp_assoc_value instead [ 178.676991][T10333] netlink: 146340 bytes leftover after parsing attributes in process `syz.7.2256'. [ 178.694606][T10333] netlink: zone id is out of range [ 178.699782][T10333] netlink: zone id is out of range [ 178.707152][T10333] netlink: zone id is out of range [ 178.712283][T10333] netlink: zone id is out of range [ 178.717527][T10333] netlink: zone id is out of range [ 178.722642][T10333] netlink: zone id is out of range [ 178.727950][T10333] netlink: zone id is out of range [ 178.733065][T10333] netlink: zone id is out of range [ 178.739270][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 178.768803][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2261'. [ 178.782342][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.806334][T10351] random: crng reseeded on system resumption [ 178.995155][T10359] program syz.0.2264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.020483][T10359] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 179.074828][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2269'. [ 179.089336][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2269'. [ 179.374227][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2272'. [ 179.641208][T10383] loop0: detected capacity change from 0 to 512 [ 179.664091][T10383] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.2276: casefold flag without casefold feature [ 179.676898][T10388] loop6: detected capacity change from 0 to 2048 [ 179.679356][T10383] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2276: couldn't read orphan inode 15 (err -117) [ 179.695629][T10383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.705551][T10388] loop6: p1 < > p4 [ 179.713289][T10388] loop6: p4 size 8388608 extends beyond EOD, truncated [ 180.358425][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.405702][T10402] loop0: detected capacity change from 0 to 512 [ 180.412408][T10402] EXT4-fs: Ignoring removed orlov option [ 180.418902][T10402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.430103][T10402] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.2282: iget: bad extended attribute block 512 [ 180.447279][T10402] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2282: couldn't read orphan inode 15 (err -117) [ 180.459753][T10402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.474740][T10402] net_ratelimit: 76 callbacks suppressed [ 180.474752][T10402] netlink: zone id is out of range [ 180.485661][T10402] netlink: zone id is out of range [ 180.490882][T10402] netlink: zone id is out of range [ 180.496045][T10402] netlink: zone id is out of range [ 180.501168][T10402] netlink: zone id is out of range [ 180.506359][T10402] netlink: zone id is out of range [ 180.511507][T10402] netlink: zone id is out of range [ 180.516660][T10402] netlink: zone id is out of range [ 180.521974][T10402] netlink: zone id is out of range [ 180.527143][T10402] netlink: zone id is out of range [ 180.571724][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.689474][T10425] loop0: detected capacity change from 0 to 512 [ 180.699639][T10425] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.2291: casefold flag without casefold feature [ 180.712568][T10425] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2291: couldn't read orphan inode 15 (err -117) [ 180.727114][T10425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.756019][T10408] program syz.1.2285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.766804][T10408] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 181.397685][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.453764][T10442] loop0: detected capacity change from 0 to 8192 [ 181.485495][T10442] loop0: p3 < > [ 181.645343][T10466] loop7: detected capacity change from 0 to 512 [ 181.662608][T10466] EXT4-fs error (device loop7): ext4_orphan_get:1390: inode #15: comm syz.7.2309: casefold flag without casefold feature [ 181.687201][T10466] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.2309: couldn't read orphan inode 15 (err -117) [ 181.729564][T10467] ================================================================== [ 181.733691][T10466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.737688][T10467] BUG: KCSAN: data-race in _copy_to_iter / copy_page_from_iter_atomic [ 181.737731][T10467] [ 181.737738][T10467] write to 0xffff88811d91b440 of 3008 bytes by task 10463 on cpu 1: [ 181.768608][T10467] copy_page_from_iter_atomic+0x294/0xfa0 [ 181.774357][T10467] generic_perform_write+0x2d2/0x4b0 [ 181.779667][T10467] shmem_file_write_iter+0xc2/0xe0 [ 181.784798][T10467] vfs_write+0x79b/0x950 [ 181.789060][T10467] ksys_write+0xeb/0x1b0 [ 181.793304][T10467] __x64_sys_write+0x42/0x50 [ 181.797894][T10467] x64_sys_call+0x2a45/0x2e10 [ 181.802576][T10467] do_syscall_64+0xc9/0x1c0 [ 181.807098][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.813001][T10467] [ 181.815412][T10467] read to 0xffff88811d91b000 of 4096 bytes by task 10467 on cpu 0: [ 181.823304][T10467] _copy_to_iter+0x133/0xd10 [ 181.827918][T10467] copy_page_to_iter+0x171/0x2b0 [ 181.832909][T10467] shmem_file_read_iter+0x2c3/0x540 [ 181.838126][T10467] vfs_read+0x5e6/0x710 [ 181.842298][T10467] ksys_read+0xeb/0x1b0 [ 181.846472][T10467] __x64_sys_read+0x42/0x50 [ 181.850994][T10467] x64_sys_call+0x2a3b/0x2e10 [ 181.855679][T10467] do_syscall_64+0xc9/0x1c0 [ 181.860202][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.866101][T10467] [ 181.868425][T10467] Reported by Kernel Concurrency Sanitizer on: [ 181.874575][T10467] CPU: 0 UID: 0 PID: 10467 Comm: syz.0.2308 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 181.886731][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.896796][T10467] ================================================================== [ 181.960099][T10463] program syz.0.2308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.969635][T10463] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 182.505331][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.538309][ T8269] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.785389][ T8896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.266187][ T8886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.915330][ T8893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration