last executing test programs: 5m8.178522034s ago: executing program 3 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 5m8.151624344s ago: executing program 3 (id=3428): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000102010100000000000000000a808000000000000000000000000000cd14000400fc010000000000000000000000800001eda0d5588f38679e9b62eef9e0ab1be6cf31ed96ef6cdf809ec17185b7511b9a1884870b4681f891070000000000"], 0x44}}, 0x4004014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) 5m6.251160216s ago: executing program 3 (id=3451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcffffff00000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d7bff0008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000600)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0500000004000000c4ef4631a13c82d7c8c3990000000b00000000000000", @ANYRES32=r2, @ANYRESHEX=r7, @ANYBLOB="000000000000b1edbb195c5a0e13ada1000000000009000000001100", @ANYRES32, @ANYRES8=r3, @ANYRESDEC=r4, @ANYRES8=r8], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600fc0f00000a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r14}, 0x10) 5m5.828335464s ago: executing program 3 (id=3455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) move_mount(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) getpriority(0x0, 0xffffffffffffffff) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x84, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x7, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70200000300001085000000860000009575073f29fa449f6c8478d54a287cf0433a3dcffa04169f494751037539c7d616bf5bf1acdebf658e61c557aed1b155096d8cfab9e91d4d9ddb76c76538157a04dbf4c99cc0d3fe87f38dcf0f3d93e3abd81c75d924d460a60c4a0823504a11b5f1cea8ca2b5ef2b2971e73f8bf52a5da1bfb5edc271ff83cff5f0b2daf4ae23620e84ad6c50037221a4ddcc6175a112073244b6dfad5f5ccef3104c6accefc31e4604371aafa90ebaf7a1a6d724cae1815ecad1610ba9261534b63772bce3c23c009f8b3fad912146e12f917a124c072193fd7"], &(0x7f0000000300)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) 5m5.209986001s ago: executing program 3 (id=3463): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='!pu\xa0\t\xd4\xfe\a/') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000000) 5m3.932552455s ago: executing program 3 (id=3472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0xffffffff}]}) 5m3.926950666s ago: executing program 32 (id=3472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0xffffffff}]}) 1m13.668593511s ago: executing program 0 (id=6353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1m13.597850511s ago: executing program 0 (id=6355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m13.40929479s ago: executing program 0 (id=6359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1m12.794662007s ago: executing program 0 (id=6362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5e0, &(0x7f0000000800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001900)={0x0, 0x9, 0x6, 0x2, 0x4, 0x3, 0xa64, 0x8, 0x9d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.585148137s ago: executing program 0 (id=6369): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x3eaf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.007039864s ago: executing program 0 (id=6379): r0 = socket(0xa, 0x40000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) timer_create(0x5, &(0x7f0000000340)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000200)="2c9f5f0def55bc619312bc2baaf447504e6b6e8c9dfa30679e92fcd300e9a079a6b4cf9bfff50a7dc7ec7d0392ec693be75a48d8fbea376830098edaa9", &(0x7f0000000280)="af34baf9dced7cfa181efea347a8a75a99ff2e9fcc7b352b9703bdeeb9d5056cdbd667534087bb58b0450058dd7a67a4fe484a77a858a8fe8d97653fb0538fd009e279d80bbea07456319b30e4e52f60aa9c24fe3bceea87d1c94469c0542bab559776030805eceb74ab160ac00f7c94284a00f7d81acab1caef0b23ec726a7a51afef611d795566a26a305b46c3c317cf010af1b61cb592c49270573980ac8d895a4124c6"}}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) socket$inet6(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 1m11.959326184s ago: executing program 33 (id=6379): r0 = socket(0xa, 0x40000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) timer_create(0x5, &(0x7f0000000340)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000200)="2c9f5f0def55bc619312bc2baaf447504e6b6e8c9dfa30679e92fcd300e9a079a6b4cf9bfff50a7dc7ec7d0392ec693be75a48d8fbea376830098edaa9", &(0x7f0000000280)="af34baf9dced7cfa181efea347a8a75a99ff2e9fcc7b352b9703bdeeb9d5056cdbd667534087bb58b0450058dd7a67a4fe484a77a858a8fe8d97653fb0538fd009e279d80bbea07456319b30e4e52f60aa9c24fe3bceea87d1c94469c0542bab559776030805eceb74ab160ac00f7c94284a00f7d81acab1caef0b23ec726a7a51afef611d795566a26a305b46c3c317cf010af1b61cb592c49270573980ac8d895a4124c6"}}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) socket$inet6(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 11.975464942s ago: executing program 1 (id=7013): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@local, @initdev, 0x0}, &(0x7f0000000500)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="d486f0ff3912ffff950000000000000018530000060000000000000000000000443c7e473c068bdfdf79b61221aa8d5a2457f2e2c3928fd8b3974aa867fd91d1ca1371a8438fc61001b6f0b7a11f5b16815b36ac2ca05e1684456582e089408da61016e62f5964994109be8f0ac0ec06509f49cb14e0d2ae3ba76c0a7ff72944905bd54d8597e41aca84a0a2a4343b86c1fde6c69c0333f88cf5cc83e88829a66cee44dce88dfc84162283f5e1d8"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xb, 0xa}, {0x5, 0x2, 0x9}, {0x5, 0x1, 0x9, 0xa}, {0x2, 0x5, 0x0, 0x8}], 0x10, 0x2, @void, @value}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9135}, 0x18) socket(0x15, 0x5, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)="b04d2835", 0x4}], 0x1, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000300)=0x1, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 11.706744091s ago: executing program 1 (id=7014): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) 9.684473932s ago: executing program 1 (id=7022): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.255776326s ago: executing program 1 (id=7026): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100000800005, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100005, 0xfffffffffffffffe}, 0x100840, 0x0, 0x0, 0x1, 0x3, 0x3, 0x204, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0x4, 0x7a92, 0x9}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="090378fdea76990000800d"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x10c, 0x10, 0x1, 0x4, 0x0, {{@in=@broadcast, @in=@local, 0x0, 0xc000}, {@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, {}, {0x0, 0x0, 0xffffffffffffffff, 0x3}, {}, 0x0, 0x0, 0x2, 0x1}, [@encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@loopback}}]}, 0x10c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4900040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x408a0}, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 6.953612531s ago: executing program 1 (id=7034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000003d9216d7e3dcb76cfbd381e57ebe0b6ceeef00"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xa8}}, 0x20049080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 6.175819947s ago: executing program 1 (id=7042): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x7ff, 0xffffffff, 0x0, 0x0, 0x80, 0x0, 0xaa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRES64, @ANYRES8, @ANYRES64=r8, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$eJzs3E+LG2UcB/Bf49Zut+4fa622B33Qi6ehuwdPgiyyBdmAUrtCKwhTd6IhYxIyYSEiVk9efR3i0ZsgvoG99DV424vHHsQRk61t2rS6h27E/Xwu8yPP75t5HkIGJsyTg7e++7zTqrJWPozGqVPR6EekuylSNOKeV7Ynxxs3tzebza1rKV3dvL7+Zkpp5dWfP/ryh9d+GZ778MeVn87E/trHB79t/Lp/cf/SwR/XP2tXqV2lbm+Y8nSr1xvmt8oi7barTpbS+2WRV0Vqd6tiMDXeKnv9/ijl3d3lpf6gqKqUd0epU4zSsJeGg1HKP83b3ZRlWVpeCh7r9D+37Hx/t67riLo+Hc9GXdf12ViKc/FcLMdKfB0Rz8f5eCEuxItxMV6Kl+PSuOs4pg8AAAAAAAAAAAAAAAAAAAAnx5P2/6/Gmv3/AAAAAAAAAAAAAAAAAAAAcAw+uHFze7PZ3LqW0mJE+e3ezt7O5DgZ32xFO8oo4kqsxu8x3v0/MamvvtvcupLG1uKb8vZh/vbezjPT+fXx3wkc5hfGY/fy65N8ms6fiaUH8xuxGhdmn39jZn4x3nj9gXwWq3Hnk+hFGbvjc9/Pf7We0jvvNR/KXx73AQAAwP9Blv428/49yx43Pskf4feBh+6vF+LywnzXTkQ1+qKTl2UxmC4WH3lF8e+LxlN650b8RxZ4Qouzh1+aI8b/uszNf/KPFHfOP7FnzhcmjsX9D33eMwEAAAAAAAAAAOAonvKThgsx48myt+ezVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAP//i0XIUQ==") r9 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3) 2.645049441s ago: executing program 4 (id=7073): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500"], 0x0, 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f1114f9f40700090100000000000000000300000000080004", 0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x81000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) nanosleep(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 2.35117419s ago: executing program 4 (id=7077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000003d9216d7e3dcb76cfbd381e57ebe0b6ceeef00"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xa8}}, 0x20049080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'rose0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x0, 0x3b7d, 0x55, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x40, 0x401200, 0xa}}) 2.28406187s ago: executing program 4 (id=7080): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2.24742987s ago: executing program 4 (id=7081): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) 2.24604335s ago: executing program 4 (id=7083): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000", @ANYRES32=r2, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x4004014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) 2.22500089s ago: executing program 6 (id=7084): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x1}, 0x18) 2.148342749s ago: executing program 6 (id=7085): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x458, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESDEC=r0], 0xfe, 0x667, &(0x7f0000000d40)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000003c0)={[{@noquota}, {@dioread_lock}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@grpjquota}, {@noacl}, {@nodelalloc}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x1, 0x556, &(0x7f0000001100)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) dup(r2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x323) pwritev2(r3, 0x0, 0x0, 0x6e45, 0x80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000005000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, 0x0, &(0x7f00000002c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) mremap(&(0x7f0000f7e000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000cf4000/0x2000)=nil) fsmount(r3, 0x1, 0x80) shutdown(r2, 0x1) read(r2, &(0x7f0000000100)=""/216, 0xd8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f00000005c0)=""/120, &(0x7f0000000040)=0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b) 1.608755267s ago: executing program 6 (id=7086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f00000000c0)=""/44, 0x2c) 1.346044496s ago: executing program 5 (id=7088): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sigaltstack(0x0, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x3, 0x5, 0x0, 0x9, 0x0, 0x0, {0x0, r3}}) 1.248570275s ago: executing program 5 (id=7090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r1, &(0x7f0000004740)='\x00', &(0x7f0000000840)=ANY=[@ANYBLOB='\f'], &(0x7f0000000780), 0x1200) 1.222703385s ago: executing program 5 (id=7092): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001200)={0x10, 0x22, 0x601, 0x70bd2a}, 0x10}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x80}, 0x18) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000180)=0xfffffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r9 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x40002, 0x0, 0x0}) 1.128442064s ago: executing program 6 (id=7094): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b80)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0xa, 0xffffffea, {{0x25, 0x4, 0x0, 0x13, 0x94, 0x67, 0x0, 0xd3, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0x7, 0xb6, [@local]}, @timestamp_addr={0x44, 0x1c, 0xea, 0x1, 0x5, [{@loopback, 0x8}, {@empty, 0x2}, {@broadcast, 0x4}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x55, [@private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @end, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x1, 0x7, "43fdd62d46"}, {0x3, 0x12, "687cf4965a0d34303eea1cc266d74a95"}, {0x6, 0x11, "227484571c6bc3853ec3045aea815a"}, {0x1, 0xc, "f08faef7582f3a81f35d"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd4, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0xd4}}, 0x8000001) 1.041987835s ago: executing program 5 (id=7095): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1.041435114s ago: executing program 5 (id=7096): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 866.998054ms ago: executing program 6 (id=7098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 828.861643ms ago: executing program 2 (id=7099): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0xc8, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 268.503131ms ago: executing program 2 (id=7100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f78623e55eeab4fb"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) recvmmsg(r5, &(0x7f0000001640), 0x0, 0x22, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a0000000210001002dbd7000fedbdf25ffffffff000000000000000000000000e00000020000000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e000100000050001100ff010000000000000000000000000001fe8000000000000000000000000000bbac14000000000000fc010000000000000000000000000001330000000635000002000a00ac"], 0xa0}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x4000040) 267.776551ms ago: executing program 2 (id=7101): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 244.020161ms ago: executing program 4 (id=7102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000018c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x98, 0x218, 0x2b8, 0x98, 0x2b8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xc6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0xf}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0x6, 0xa}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f00000000c0)=""/44, 0x2c) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) 243.637851ms ago: executing program 2 (id=7103): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x20004090) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0xffff, 0x0, 0x3, 0xfffffffa, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000002060101000000e8bc77cfb9785a000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c00078008001240000000000900020073797a30000000003b96e8d3d9979ed78002d33295541efa903527d245980890308a860b90e985dd665221198664e0f2e9e271a07567c9b0654bec1d617e5d53f171085af05c3cae9b0f1769f6fdef23be9373f32fc97b5c5165447091e0b4f8218c8a6968f276e9730e387e2208181e946c687a7a21eb755453a5a3974ceb20478a517edfd80c78f10fae16eaef21ffd812cb4574c06971bfe05c29f7090cc57b198131d7566488d43d3bd85076db5231e59aeb21b2b844c5cd51e02c239ed30c46c5ca9f475d8816124ffbc7977cc5a720c10f1ee4959029adb040d6d89b1a9bda10aac3fb0d6ef6a8c0e50d4a08975d85044e903c7f9d4e0579e97e7a4709da"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa0888e, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2ab, &(0x7f00000008c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r6, &(0x7f0000000240)='./bus/file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r7, 0x80184947, 0x0) fsopen(&(0x7f0000000000)='vxfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005ec0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 65.78762ms ago: executing program 5 (id=7104): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x20004090) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0xffff, 0x0, 0x3, 0xfffffffa, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa0888e, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2ab, &(0x7f00000008c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r6, &(0x7f0000000240)='./bus/file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r7, 0x80184947, 0x0) fsopen(&(0x7f0000000000)='vxfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005ec0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 28.039ms ago: executing program 2 (id=7105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xa8}}, 0x20049080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 923.64µs ago: executing program 6 (id=7106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x2}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=7107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcffffff00000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d7bff0008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000600)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="0500000004000000c4ef4631a13c82d7c8c3990000000b00000000000000", @ANYRES32=r2, @ANYRESHEX=r7, @ANYBLOB="000000000000b1edbb195c5a0e13ada1000000000009000000001100", @ANYRES32, @ANYRES8=r3, @ANYRESDEC=r4, @ANYRES8=r8], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r13, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600fc0f00000a00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r15}, 0x10) kernel console output (not intermixed with test programs): comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 513.616818][ T29] audit: type=1326 audit(1736126876.610:526383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78f85dcce7 code=0x7ffc0000 [ 513.640468][ T29] audit: type=1326 audit(1736126876.610:526384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78f8581f29 code=0x7ffc0000 [ 513.664059][ T29] audit: type=1326 audit(1736126876.610:526385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 513.687849][ T29] audit: type=1326 audit(1736126876.610:526386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78f85dcce7 code=0x7ffc0000 [ 513.711697][ T29] audit: type=1326 audit(1736126876.610:526387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f78f8581f29 code=0x7ffc0000 [ 513.735320][ T29] audit: type=1326 audit(1736126876.610:526388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 513.759050][ T29] audit: type=1326 audit(1736126876.620:526389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20607 comm="syz.4.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78f85dcce7 code=0x7ffc0000 [ 513.867701][T20630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 513.883111][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.895665][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.042762][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6343'. [ 514.589025][T20650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6341'. [ 515.802598][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6354'. [ 516.608604][T20713] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 516.622209][T20714] loop0: detected capacity change from 0 to 1024 [ 516.650304][T20714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.743557][T20728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6368'. [ 516.794513][T11172] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 105: padding at end of block bitmap is not set [ 516.830758][T11172] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 516.878722][T11172] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 516.897511][T11172] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 516.960989][T16346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.978521][T20739] netlink: 23 bytes leftover after parsing attributes in process `syz.4.6374'. [ 516.989169][T20743] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6371'. [ 517.081314][T20749] FAULT_INJECTION: forcing a failure. [ 517.081314][T20749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.094658][T20749] CPU: 1 UID: 0 PID: 20749 Comm: syz.4.6376 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 517.106938][T20749] Tainted: [W]=WARN [ 517.110771][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 517.120988][T20749] Call Trace: [ 517.124299][T20749] [ 517.127241][T20749] dump_stack_lvl+0xf2/0x150 [ 517.131965][T20749] dump_stack+0x15/0x1a [ 517.136159][T20749] should_fail_ex+0x223/0x230 [ 517.140866][T20749] should_fail+0xb/0x10 [ 517.145047][T20749] should_fail_usercopy+0x1a/0x20 [ 517.150234][T20749] _copy_from_user+0x1e/0xb0 [ 517.154949][T20749] move_addr_to_kernel+0x82/0x120 [ 517.160188][T20749] __sys_bind+0x9e/0x190 [ 517.164534][T20749] __x64_sys_bind+0x41/0x50 [ 517.169058][T20749] x64_sys_call+0x20ab/0x2dc0 [ 517.173776][T20749] do_syscall_64+0xc9/0x1c0 [ 517.178287][T20749] ? clear_bhb_loop+0x55/0xb0 [ 517.183084][T20749] ? clear_bhb_loop+0x55/0xb0 [ 517.187782][T20749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.193732][T20749] RIP: 0033:0x7f78f85e5d29 [ 517.198172][T20749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.217797][T20749] RSP: 002b:00007f78f6c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 517.226264][T20749] RAX: ffffffffffffffda RBX: 00007f78f87d5fa0 RCX: 00007f78f85e5d29 [ 517.234241][T20749] RDX: 000000000000006e RSI: 00000000200000c0 RDI: 0000000000000007 [ 517.242220][T20749] RBP: 00007f78f6c57090 R08: 0000000000000000 R09: 0000000000000000 [ 517.250206][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.258268][T20749] R13: 0000000000000000 R14: 00007f78f87d5fa0 R15: 00007ffdaa18e968 [ 517.266323][T20749] [ 517.297666][T20751] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 517.379189][ T6665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.445438][T20758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6382'. [ 517.487386][ T6665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.546193][ T6665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.597354][ T6665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.687700][T20779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6387'. [ 517.892528][ T6665] bridge_slave_1: left allmulticast mode [ 517.898246][ T6665] bridge_slave_1: left promiscuous mode [ 517.904073][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.967465][ T6665] bridge_slave_0: left allmulticast mode [ 517.973237][ T6665] bridge_slave_0: left promiscuous mode [ 517.979022][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.128508][ T6665] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 518.235553][ T6665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.260677][ T6665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.288464][ T6665] bond0 (unregistering): Released all slaves [ 518.520362][ T6665] hsr_slave_0: left promiscuous mode [ 518.542313][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.549928][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.596883][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.604434][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.634458][T20785] loop1: detected capacity change from 0 to 512 [ 518.664318][T20785] EXT4-fs: Ignoring removed orlov option [ 518.680854][T20785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.689601][ T6665] veth1_macvtap: left promiscuous mode [ 518.695140][ T6665] veth0_macvtap: left promiscuous mode [ 518.700740][ T6665] veth1_vlan: left promiscuous mode [ 518.706109][ T6665] veth0_vlan: left promiscuous mode [ 518.732054][T20785] EXT4-fs (loop1): orphan cleanup on readonly fs [ 518.749371][T20785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6389: bg 0: block 248: padding at end of block bitmap is not set [ 518.905029][T20785] __quota_error: 35 callbacks suppressed [ 518.905056][T20785] Quota error (device loop1): write_blk: dquota write failed [ 518.918202][T20785] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 518.928270][T20785] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6389: Failed to acquire dquot type 1 [ 518.964162][T20785] EXT4-fs (loop1): 1 truncate cleaned up [ 518.993644][T20785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 519.030845][ T29] audit: type=1400 audit(1736126882.340:526425): avc: denied { remount } for pid=20784 comm="syz.1.6389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 519.057271][T20785] EXT4-fs: Ignoring removed orlov option [ 519.063075][T20785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 519.127103][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6391'. [ 519.137932][T20785] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 519.207675][T20761] chnl_net:caif_netlink_parms(): no params data found [ 519.250092][T20761] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.257243][T20761] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.321505][T20761] bridge_slave_0: entered allmulticast mode [ 519.334409][T20761] bridge_slave_0: entered promiscuous mode [ 519.343845][T20785] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.6389: Abort forced by user [ 519.356968][T20785] EXT4-fs (loop1): Remounting filesystem read-only [ 519.363707][T20785] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 519.452234][T20761] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.459395][T20761] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.485610][T20785] ext4 filesystem being remounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.514807][T20761] bridge_slave_1: entered allmulticast mode [ 519.531115][T20761] bridge_slave_1: entered promiscuous mode [ 519.581170][T20809] audit: audit_lost=5060 audit_rate_limit=0 audit_backlog_limit=64 [ 519.589186][T20809] audit: out of memory in audit_log_start [ 519.645342][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.674038][T20761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.694430][T20761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.721017][T20761] team0: Port device team_slave_0 added [ 519.776521][T20761] team0: Port device team_slave_1 added [ 519.832027][T20761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.839149][T20761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.865207][T20761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.880759][T20761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.887832][T20761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.913938][T20761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.936039][ T6665] IPVS: stop unused estimator thread 0... [ 520.004623][T20761] hsr_slave_0: entered promiscuous mode [ 520.011022][T20761] hsr_slave_1: entered promiscuous mode [ 520.018798][T20761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.026434][T20761] Cannot create hsr debugfs directory [ 520.036015][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6399'. [ 520.195448][T20761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 520.211330][T20761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 520.224091][T20761] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 520.241961][T20761] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 520.249909][ T29] audit: type=1326 audit(1736126883.560:526426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.5.6401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3976f15d29 code=0x0 [ 520.439109][T20761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.451439][T20761] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.500160][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.507448][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.558047][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.565171][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.674633][ T6665] bridge_slave_1: left allmulticast mode [ 520.680383][ T6665] bridge_slave_1: left promiscuous mode [ 520.686076][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.725853][ T6665] bridge_slave_0: left allmulticast mode [ 520.731597][ T6665] bridge_slave_0: left promiscuous mode [ 520.737501][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.017402][T20842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.028588][ T6665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.041119][ T6665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.050146][T20842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.060895][ T6665] bond0 (unregistering): Released all slaves [ 521.077946][T20761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.261800][ T6665] hsr_slave_0: left promiscuous mode [ 521.267869][ T6665] hsr_slave_1: left promiscuous mode [ 521.274020][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.281521][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.290937][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.298401][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.310219][ T6665] veth1_macvtap: left promiscuous mode [ 521.315745][ T6665] veth0_macvtap: left promiscuous mode [ 521.321270][ T6665] veth1_vlan: left promiscuous mode [ 521.326632][ T6665] veth0_vlan: left promiscuous mode [ 521.349258][T20856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6406'. [ 521.365544][T20854] xt_HMARK: spi-set and port-set can't be combined [ 521.543163][ T6665] team0 (unregistering): Port device team_slave_1 removed [ 521.555600][ T6665] team0 (unregistering): Port device team_slave_0 removed [ 521.795212][T20761] veth0_vlan: entered promiscuous mode [ 521.803071][T20761] veth1_vlan: entered promiscuous mode [ 521.836485][ T29] audit: type=1326 audit(1736126885.140:526427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 521.860269][ T29] audit: type=1326 audit(1736126885.140:526428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 521.884039][ T29] audit: type=1326 audit(1736126885.140:526429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 521.907842][ T29] audit: type=1326 audit(1736126885.140:526430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.6408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 521.949660][T20761] veth0_macvtap: entered promiscuous mode [ 521.959465][T20761] veth1_macvtap: entered promiscuous mode [ 522.025999][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.036565][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.046467][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.056998][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.066834][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.077272][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.087202][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.097697][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.107607][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.118118][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.128021][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.138540][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.231751][T20761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.250220][T20877] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 522.263713][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.274251][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.284095][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.294582][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.304447][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.314940][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.324835][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.335264][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.345179][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.355657][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.365590][T20761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.376075][T20761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.445644][T20886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6413'. [ 522.718491][T20761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.792939][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6416'. [ 522.958776][T20761] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.967654][T20761] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.976401][T20761] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.985242][T20761] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.998116][T20897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6415'. [ 523.556675][T20903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6418'. [ 523.571662][T20903] loop1: detected capacity change from 0 to 128 [ 523.606725][ T6665] IPVS: stop unused estimator thread 0... [ 523.989757][T20912] tipc: Started in network mode [ 523.994752][T20912] tipc: Node identity ac141427, cluster identity 4711 [ 524.001721][T20912] tipc: Enabled bearer , priority 10 [ 524.027702][ T1752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.083743][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 524.083830][ T29] audit: type=1400 audit(1736126887.390:526488): avc: denied { getopt } for pid=20933 comm="syz.4.6427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 524.114221][ T1752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.181877][ T1752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.221503][T20942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.275369][T20942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.292569][ T1752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.376288][T20915] chnl_net:caif_netlink_parms(): no params data found [ 524.590425][ T1752] bridge_slave_1: left allmulticast mode [ 524.596195][ T1752] bridge_slave_1: left promiscuous mode [ 524.601874][ T1752] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.611901][ T1752] bridge_slave_0: left allmulticast mode [ 524.617808][ T1752] bridge_slave_0: left promiscuous mode [ 524.623542][ T1752] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.806014][ T1752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.817187][ T1752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.827332][ T1752] bond0 (unregistering): Released all slaves [ 524.861238][T20915] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.861493][ T1752] IPVS: stopping master sync thread 19447 ... [ 524.868370][T20915] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.888171][T20915] bridge_slave_0: entered allmulticast mode [ 524.924074][T20915] bridge_slave_0: entered promiscuous mode [ 524.951682][T20915] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.959045][T20915] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.996661][T20915] bridge_slave_1: entered allmulticast mode [ 525.012090][T20915] bridge_slave_1: entered promiscuous mode [ 525.055944][T20958] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6433'. [ 525.068491][ T29] audit: type=1326 audit(1736126888.380:526489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20960 comm="syz.4.6434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x0 [ 525.083603][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6435'. [ 525.111093][ T1752] hsr_slave_0: left promiscuous mode [ 525.116579][T16167] tipc: Node number set to 2886997031 [ 525.122708][ T1752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.130298][ T1752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.138257][ T1752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.145743][ T1752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.157034][ T1752] veth1_macvtap: left promiscuous mode [ 525.162626][ T1752] veth0_macvtap: left promiscuous mode [ 525.168260][ T1752] veth1_vlan: left promiscuous mode [ 525.173529][ T1752] veth0_vlan: left promiscuous mode [ 525.261493][ T1752] team0 (unregistering): Port device team_slave_1 removed [ 525.276291][ T1752] team0 (unregistering): Port device team_slave_0 removed [ 525.322284][T20915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.347792][T20915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.367669][T20969] ALSA: seq fatal error: cannot create timer (-19) [ 525.378584][ T29] audit: type=1326 audit(1736126888.690:526490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.402495][ T29] audit: type=1326 audit(1736126888.690:526491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.426212][ T29] audit: type=1326 audit(1736126888.690:526492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.449912][ T29] audit: type=1326 audit(1736126888.690:526493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.473659][ T29] audit: type=1326 audit(1736126888.690:526494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.497985][ T29] audit: type=1326 audit(1736126888.770:526495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.521715][ T29] audit: type=1326 audit(1736126888.810:526496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.547398][ T29] audit: type=1326 audit(1736126888.810:526497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20972 comm="syz.1.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 525.565874][T20973] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6437'. [ 525.583060][T20915] team0: Port device team_slave_0 added [ 525.591489][T20915] team0: Port device team_slave_1 added [ 525.628174][T20915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.635277][T20915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.661439][T20915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.686805][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6438'. [ 525.699758][T20915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.706792][T20915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.732846][T20915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.776653][T20915] hsr_slave_0: entered promiscuous mode [ 525.777402][T20977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.794433][T20977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.802487][T20915] hsr_slave_1: entered promiscuous mode [ 525.808711][T20915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.816341][T20915] Cannot create hsr debugfs directory [ 528.370941][T20915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 528.397968][T20915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 528.480133][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.484906][T20915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 528.489110][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.504876][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.516615][T20915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 528.548524][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.557503][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.571016][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 528.573403][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 528.580078][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 528.600006][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 528.627424][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 528.700371][T21034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.731758][T21034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.784437][T20915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.795654][T20915] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.814114][T20915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.824682][T20915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.848692][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.855843][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.872594][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.879736][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.888416][T20915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.914935][T21062] loop1: detected capacity change from 0 to 164 [ 529.927483][T21062] Unable to read rock-ridge attributes [ 530.037349][T21062] Unable to read rock-ridge attributes [ 530.134207][T21062] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 530.302122][T20915] veth0_vlan: entered promiscuous mode [ 530.312917][T20915] veth1_vlan: entered promiscuous mode [ 530.330990][T20915] veth0_macvtap: entered promiscuous mode [ 530.338580][T20915] veth1_macvtap: entered promiscuous mode [ 530.355863][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.366500][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.376373][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.386883][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.396718][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.407162][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.417129][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.427645][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.437476][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.447950][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.457974][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.468461][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.482202][T21102] loop1: detected capacity change from 0 to 512 [ 530.486084][T20915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.498503][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.509218][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.519529][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.520001][T21102] EXT4-fs: Ignoring removed orlov option [ 530.530015][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.545707][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.556314][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.564416][T21102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 530.566237][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.566257][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.566274][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.566291][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.566366][T20915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.566383][T20915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.572396][T20915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.582164][T21102] EXT4-fs (loop1): orphan cleanup on readonly fs [ 530.902864][T20915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.911814][T20915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.920593][T20915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.929311][T20915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.004908][T21102] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6473: bg 0: block 248: padding at end of block bitmap is not set [ 531.022171][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 531.022228][ T29] audit: type=1326 audit(1736126894.330:526519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.053016][ T29] audit: type=1326 audit(1736126894.330:526520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.058096][T21102] Quota error (device loop1): write_blk: dquota write failed [ 531.076740][ T29] audit: type=1326 audit(1736126894.330:526521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.076780][ T29] audit: type=1326 audit(1736126894.330:526522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.084196][T21102] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 531.108008][ T29] audit: type=1326 audit(1736126894.340:526523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.141726][ T29] audit: type=1326 audit(1736126894.450:526524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.165374][T21102] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6473: Failed to acquire dquot type 1 [ 531.192997][T21102] EXT4-fs (loop1): 1 truncate cleaned up [ 531.207146][T21102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 531.227471][ T29] audit: type=1326 audit(1736126894.480:526525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.251399][ T29] audit: type=1326 audit(1736126894.480:526526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21113 comm="syz.2.6477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 531.252500][T21102] EXT4-fs: Ignoring removed orlov option [ 531.281233][T21102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 531.317909][T21102] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 531.357164][T21102] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.6473: Abort forced by user [ 531.358190][T21123] FAULT_INJECTION: forcing a failure. [ 531.358190][T21123] name failslab, interval 1, probability 0, space 0, times 0 [ 531.380028][T21123] CPU: 1 UID: 0 PID: 21123 Comm: syz.4.6480 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 531.385723][T21102] EXT4-fs (loop1): Remounting filesystem read-only [ 531.392307][T21123] Tainted: [W]=WARN [ 531.392318][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 531.398952][T21102] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 531.402659][T21123] Call Trace: [ 531.402670][T21123] [ 531.429412][T21123] dump_stack_lvl+0xf2/0x150 [ 531.434140][T21123] dump_stack+0x15/0x1a [ 531.438381][T21123] should_fail_ex+0x223/0x230 [ 531.443109][T21123] should_failslab+0x8f/0xb0 [ 531.447721][T21123] kmem_cache_alloc_noprof+0x52/0x320 [ 531.453106][T21123] ? audit_log_start+0x34c/0x6b0 [ 531.458135][T21123] audit_log_start+0x34c/0x6b0 [ 531.462926][T21123] audit_seccomp+0x4b/0x130 [ 531.467489][T21123] __seccomp_filter+0x6fa/0x1180 [ 531.472609][T21123] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.478279][T21123] ? vfs_write+0x596/0x920 [ 531.482729][T21123] ? __schedule+0x6fa/0x930 [ 531.487274][T21123] __secure_computing+0x9f/0x1c0 [ 531.492248][T21123] syscall_trace_enter+0xd1/0x1f0 [ 531.497328][T21123] do_syscall_64+0xaa/0x1c0 [ 531.501905][T21123] ? clear_bhb_loop+0x55/0xb0 [ 531.506587][T21123] ? clear_bhb_loop+0x55/0xb0 [ 531.511383][T21123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.517754][T21123] RIP: 0033:0x7f78f85e5d29 [ 531.522197][T21123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.541985][T21123] RSP: 002b:00007f78f6c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 531.550483][T21123] RAX: ffffffffffffffda RBX: 00007f78f87d5fa0 RCX: 00007f78f85e5d29 [ 531.558501][T21123] RDX: 000000000000006e RSI: 00000000200000c0 RDI: 0000000000000006 [ 531.566488][T21123] RBP: 00007f78f6c57090 R08: 0000000000000000 R09: 0000000000000000 [ 531.574470][T21123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.582458][T21123] R13: 0000000000000000 R14: 00007f78f87d5fa0 R15: 00007ffdaa18e968 [ 531.590519][T21123] [ 531.598626][T21102] ext4 filesystem being remounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.675354][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.696241][T21138] loop1: detected capacity change from 0 to 164 [ 531.705737][T21138] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 532.912516][T21199] pim6reg1: entered promiscuous mode [ 532.917993][T21199] pim6reg1: entered allmulticast mode [ 532.938014][T21203] loop1: detected capacity change from 0 to 512 [ 532.953891][T21203] EXT4-fs: Ignoring removed orlov option [ 532.973715][T21203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.992706][T21203] EXT4-fs (loop1): orphan cleanup on readonly fs [ 533.003032][T21203] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6513: bg 0: block 248: padding at end of block bitmap is not set [ 533.032601][T21203] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6513: Failed to acquire dquot type 1 [ 533.060615][T21203] EXT4-fs (loop1): 1 truncate cleaned up [ 533.186482][T21203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.200617][T21203] EXT4-fs: Ignoring removed orlov option [ 533.206940][T21203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.251712][T21203] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 533.263924][T21203] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.6513: Abort forced by user [ 533.275812][T21203] EXT4-fs (loop1): Remounting filesystem read-only [ 533.282363][T21203] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 533.294092][T21203] ext4 filesystem being remounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.933587][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.988693][T21225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.997113][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fe1a400: rx timeout, send abort [ 533.997166][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813fe1a000: rx timeout, send abort [ 534.005451][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88813fe1a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 534.005508][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88813fe1a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 534.082989][T21225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.132593][T21228] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 534.148936][T21228] dvmrp0: linktype set to 65534 [ 534.196377][T21234] netlink: 'syz.6.6522': attribute type 1 has an invalid length. [ 534.867313][T21253] __nla_validate_parse: 11 callbacks suppressed [ 534.867334][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6528'. [ 536.077865][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 536.077963][ T29] audit: type=1326 audit(1736126899.390:526733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21260 comm="syz.4.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 536.108203][ T29] audit: type=1326 audit(1736126899.390:526734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21260 comm="syz.4.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 536.131969][ T29] audit: type=1326 audit(1736126899.390:526735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21260 comm="syz.4.6532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 536.217910][T21270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6533'. [ 536.554940][ T29] audit: type=1400 audit(1736126899.870:526736): avc: denied { name_bind } for pid=21277 comm="syz.4.6535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 536.589051][T21282] siw: device registration error -23 [ 536.665128][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6541'. [ 536.745511][T21294] block device autoloading is deprecated and will be removed. [ 536.880876][T21311] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6548'. [ 536.955676][T21314] FAULT_INJECTION: forcing a failure. [ 536.955676][T21314] name failslab, interval 1, probability 0, space 0, times 0 [ 536.968523][T21314] CPU: 0 UID: 0 PID: 21314 Comm: syz.5.6549 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 536.980806][T21314] Tainted: [W]=WARN [ 536.984636][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.994906][T21314] Call Trace: [ 536.994918][T21314] [ 536.994929][T21314] dump_stack_lvl+0xf2/0x150 [ 536.994975][T21314] dump_stack+0x15/0x1a [ 536.995141][T21314] should_fail_ex+0x223/0x230 [ 536.995195][T21314] should_failslab+0x8f/0xb0 [ 536.995231][T21314] kmem_cache_alloc_node_noprof+0x59/0x320 [ 536.995256][T21314] ? __alloc_skb+0x10b/0x310 [ 536.995349][T21314] __alloc_skb+0x10b/0x310 [ 536.995371][T21314] netlink_alloc_large_skb+0xad/0xe0 [ 536.995394][T21314] netlink_sendmsg+0x3b4/0x6e0 [ 536.995427][T21314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.995507][T21314] __sock_sendmsg+0x140/0x180 [ 536.995557][T21314] ____sys_sendmsg+0x312/0x410 [ 537.024224][T21320] loop1: detected capacity change from 0 to 164 [ 537.025709][T21314] __sys_sendmsg+0x19d/0x230 [ 537.070532][T21314] __x64_sys_sendmsg+0x46/0x50 [ 537.070698][T21314] x64_sys_call+0x2734/0x2dc0 [ 537.070745][T21314] do_syscall_64+0xc9/0x1c0 [ 537.070767][T21314] ? clear_bhb_loop+0x55/0xb0 [ 537.070789][T21314] ? clear_bhb_loop+0x55/0xb0 [ 537.070812][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.070873][T21314] RIP: 0033:0x7f574d305d29 [ 537.070889][T21314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.070909][T21314] RSP: 002b:00007f574b977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.070930][T21314] RAX: ffffffffffffffda RBX: 00007f574d4f5fa0 RCX: 00007f574d305d29 [ 537.070996][T21314] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 537.071075][T21314] RBP: 00007f574b977090 R08: 0000000000000000 R09: 0000000000000000 [ 537.071089][T21314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.071102][T21314] R13: 0000000000000000 R14: 00007f574d4f5fa0 R15: 00007fff41371b58 [ 537.071122][T21314] [ 537.467663][ T29] audit: type=1326 audit(1736126900.780:526737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.468032][ T29] audit: type=1326 audit(1736126900.780:526738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.468392][ T29] audit: type=1326 audit(1736126900.780:526739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.468863][ T29] audit: type=1326 audit(1736126900.780:526740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.469199][ T29] audit: type=1326 audit(1736126900.780:526741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.469453][ T29] audit: type=1326 audit(1736126900.780:526742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21323 comm="syz.5.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 537.517705][T21320] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 537.797741][T21340] FAULT_INJECTION: forcing a failure. [ 537.797741][T21340] name failslab, interval 1, probability 0, space 0, times 0 [ 537.797783][T21340] CPU: 1 UID: 0 PID: 21340 Comm: syz.2.6558 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 537.797893][T21340] Tainted: [W]=WARN [ 537.797903][T21340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.797918][T21340] Call Trace: [ 537.797925][T21340] [ 537.797934][T21340] dump_stack_lvl+0xf2/0x150 [ 537.797974][T21340] dump_stack+0x15/0x1a [ 537.798013][T21340] should_fail_ex+0x223/0x230 [ 537.798097][T21340] should_failslab+0x8f/0xb0 [ 537.798135][T21340] kmem_cache_alloc_node_noprof+0x59/0x320 [ 537.798177][T21340] ? perf_event_alloc+0x157/0x12e0 [ 537.798266][T21340] perf_event_alloc+0x157/0x12e0 [ 537.798291][T21340] ? __fget_files+0x17c/0x1c0 [ 537.798341][T21340] __se_sys_perf_event_open+0x7f2/0x2230 [ 537.798371][T21340] ? vfs_write+0x596/0x920 [ 537.798406][T21340] __x64_sys_perf_event_open+0x67/0x80 [ 537.798580][T21340] x64_sys_call+0x1deb/0x2dc0 [ 537.798603][T21340] do_syscall_64+0xc9/0x1c0 [ 537.798625][T21340] ? clear_bhb_loop+0x55/0xb0 [ 537.798647][T21340] ? clear_bhb_loop+0x55/0xb0 [ 537.798669][T21340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.798778][T21340] RIP: 0033:0x7febf2fa5d29 [ 537.798794][T21340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.798916][T21340] RSP: 002b:00007febf1611038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 537.798937][T21340] RAX: ffffffffffffffda RBX: 00007febf3195fa0 RCX: 00007febf2fa5d29 [ 537.798951][T21340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 537.798965][T21340] RBP: 00007febf1611090 R08: 0000000000000000 R09: 0000000000000000 [ 537.798978][T21340] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 537.798992][T21340] R13: 0000000000000000 R14: 00007febf3195fa0 R15: 00007fff98c6dca8 [ 537.799011][T21340] [ 537.895841][T21345] bond1: entered promiscuous mode [ 537.995840][T21346] loop1: detected capacity change from 0 to 1764 [ 537.998406][T21345] bond1: entered allmulticast mode [ 538.022631][T21345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.162187][T21345] bond1 (unregistering): Released all slaves [ 538.220799][T21354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.266737][T21354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.454350][T21354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.295746][T21354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.324878][T21383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=21383 comm=syz.4.6574 [ 539.346635][T21387] FAULT_INJECTION: forcing a failure. [ 539.346635][T21387] name failslab, interval 1, probability 0, space 0, times 0 [ 539.359398][T21387] CPU: 1 UID: 0 PID: 21387 Comm: syz.6.6571 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 539.371724][T21387] Tainted: [W]=WARN [ 539.375550][T21387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 539.385630][T21387] Call Trace: [ 539.388992][T21387] [ 539.391936][T21387] dump_stack_lvl+0xf2/0x150 [ 539.396598][T21387] dump_stack+0x15/0x1a [ 539.401048][T21387] should_fail_ex+0x223/0x230 [ 539.405745][T21387] should_failslab+0x8f/0xb0 [ 539.410382][T21387] kmem_cache_alloc_noprof+0x52/0x320 [ 539.415782][T21387] ? security_file_alloc+0x32/0x100 [ 539.421012][T21387] security_file_alloc+0x32/0x100 [ 539.426058][T21387] init_file+0x5b/0x1b0 [ 539.430334][T21387] alloc_empty_file+0xea/0x200 [ 539.435123][T21387] path_openat+0x6a/0x1fa0 [ 539.439578][T21387] ? _parse_integer_limit+0x167/0x180 [ 539.444989][T21387] ? _parse_integer+0x27/0x30 [ 539.449686][T21387] ? kstrtoull+0x110/0x140 [ 539.454114][T21387] ? kstrtouint+0x77/0xc0 [ 539.458601][T21387] ? kstrtouint_from_user+0xb0/0xe0 [ 539.463872][T21387] do_filp_open+0x107/0x230 [ 539.468426][T21387] do_sys_openat2+0xab/0x120 [ 539.473052][T21387] __x64_sys_creat+0x66/0x90 [ 539.477688][T21387] x64_sys_call+0x1084/0x2dc0 [ 539.482375][T21387] do_syscall_64+0xc9/0x1c0 [ 539.486987][T21387] ? clear_bhb_loop+0x55/0xb0 [ 539.491666][T21387] ? clear_bhb_loop+0x55/0xb0 [ 539.496411][T21387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.502399][T21387] RIP: 0033:0x7f9e2a9c5d29 [ 539.506837][T21387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.526470][T21387] RSP: 002b:00007f9e29010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 539.535059][T21387] RAX: ffffffffffffffda RBX: 00007f9e2abb6080 RCX: 00007f9e2a9c5d29 [ 539.543106][T21387] RDX: 0000000000000000 RSI: c9028ba210c11f88 RDI: 00000000200000c0 [ 539.551105][T21387] RBP: 00007f9e29010090 R08: 0000000000000000 R09: 0000000000000000 [ 539.559213][T21387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.567206][T21387] R13: 0000000000000000 R14: 00007f9e2abb6080 R15: 00007fff2c17dd08 [ 539.575210][T21387] [ 539.580164][T21393] FAULT_INJECTION: forcing a failure. [ 539.580164][T21393] name failslab, interval 1, probability 0, space 0, times 0 [ 539.592826][T21393] CPU: 1 UID: 0 PID: 21393 Comm: syz.5.6577 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 539.605099][T21393] Tainted: [W]=WARN [ 539.608912][T21393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 539.619077][T21393] Call Trace: [ 539.622373][T21393] [ 539.625345][T21393] dump_stack_lvl+0xf2/0x150 [ 539.630033][T21393] dump_stack+0x15/0x1a [ 539.634221][T21393] should_fail_ex+0x223/0x230 [ 539.639015][T21393] should_failslab+0x8f/0xb0 [ 539.643636][T21393] kmem_cache_alloc_noprof+0x52/0x320 [ 539.649059][T21393] ? sctp_get_port_local+0x410/0xa90 [ 539.654417][T21393] sctp_get_port_local+0x410/0xa90 [ 539.659641][T21393] sctp_do_bind+0x3a1/0x4c0 [ 539.664185][T21393] sctp_connect_new_asoc+0x15b/0x3b0 [ 539.669505][T21393] sctp_sendmsg+0xf05/0x1920 [ 539.674120][T21393] ? __pfx_sctp_sendmsg+0x10/0x10 [ 539.679314][T21393] inet_sendmsg+0xc5/0xd0 [ 539.683673][T21393] __sock_sendmsg+0x102/0x180 [ 539.688370][T21393] __sys_sendto+0x1a8/0x230 [ 539.692978][T21393] __x64_sys_sendto+0x78/0x90 [ 539.697671][T21393] x64_sys_call+0x29fa/0x2dc0 [ 539.702431][T21393] do_syscall_64+0xc9/0x1c0 [ 539.706951][T21393] ? clear_bhb_loop+0x55/0xb0 [ 539.711727][T21393] ? clear_bhb_loop+0x55/0xb0 [ 539.716427][T21393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.722482][T21393] RIP: 0033:0x7f574d305d29 [ 539.726938][T21393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.746557][T21393] RSP: 002b:00007f574b956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.755026][T21393] RAX: ffffffffffffffda RBX: 00007f574d4f6080 RCX: 00007f574d305d29 [ 539.763175][T21393] RDX: 0000000000034000 RSI: 0000000020000180 RDI: 0000000000000004 [ 539.771162][T21393] RBP: 00007f574b956090 R08: 0000000020000480 R09: 000000000000001c [ 539.779215][T21393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.787189][T21393] R13: 0000000000000000 R14: 00007f574d4f6080 R15: 00007fff41371b58 [ 539.795181][T21393] [ 539.851100][T21354] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.875670][T21354] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.891622][T21354] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.903233][T21354] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.943416][T21422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6579'. [ 540.966012][T21422] sctp: [Deprecated]: syz.4.6579 (pid 21422) Use of int in max_burst socket option deprecated. [ 540.966012][T21422] Use struct sctp_assoc_value instead [ 541.257369][T21428] loop1: detected capacity change from 0 to 512 [ 541.272527][T21428] EXT4-fs: Ignoring removed orlov option [ 541.309738][T21428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.350965][T21428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 541.393644][T21428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6585: bg 0: block 248: padding at end of block bitmap is not set [ 541.438411][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 541.438429][ T29] audit: type=1400 audit(1736126904.750:526848): avc: denied { bind } for pid=21436 comm="syz.6.6589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 541.453588][T21428] Quota error (device loop1): write_blk: dquota write failed [ 541.471847][T21428] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 541.481843][T21428] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6585: Failed to acquire dquot type 1 [ 541.523355][T21428] EXT4-fs (loop1): 1 truncate cleaned up [ 541.544668][T21428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 541.582331][T21440] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6590'. [ 541.593719][T21428] EXT4-fs: Ignoring removed orlov option [ 541.599494][T21428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.625419][T21428] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 541.693408][T21428] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.6585: Abort forced by user [ 541.727109][T21428] EXT4-fs (loop1): Remounting filesystem read-only [ 541.733705][T21428] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 541.744557][T21428] ext4 filesystem being remounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 541.817349][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.839496][ T29] audit: type=1326 audit(1736126905.150:526849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.863306][ T29] audit: type=1326 audit(1736126905.150:526850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.887054][ T29] audit: type=1326 audit(1736126905.150:526851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.910812][ T29] audit: type=1326 audit(1736126905.150:526852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.934609][ T29] audit: type=1326 audit(1736126905.150:526853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.958351][ T29] audit: type=1326 audit(1736126905.150:526854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 541.982001][ T29] audit: type=1326 audit(1736126905.150:526855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21454 comm="syz.6.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 542.031143][T21459] .: renamed from bond0 (while UP) [ 542.981469][T21481] ALSA: seq fatal error: cannot create timer (-19) [ 543.248863][T21488] hub 9-0:1.0: USB hub found [ 543.272736][T21488] hub 9-0:1.0: 8 ports detected [ 543.423538][T21496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6608'. [ 543.525618][T21496] loop1: detected capacity change from 0 to 128 [ 543.645216][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6611'. [ 543.877905][T21510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6613'. [ 544.215740][T21526] ALSA: seq fatal error: cannot create timer (-19) [ 545.100758][T21546] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6627'. [ 545.145296][T21548] siw: device registration error -23 [ 545.271065][T21556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6632'. [ 545.395732][T21564] block device autoloading is deprecated and will be removed. [ 545.421051][T21564] FAULT_INJECTION: forcing a failure. [ 545.421051][T21564] name failslab, interval 1, probability 0, space 0, times 0 [ 545.433801][T21564] CPU: 0 UID: 0 PID: 21564 Comm: syz.5.6636 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 545.446146][T21564] Tainted: [W]=WARN [ 545.449968][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.460097][T21564] Call Trace: [ 545.463458][T21564] [ 545.466466][T21564] dump_stack_lvl+0xf2/0x150 [ 545.471190][T21564] dump_stack+0x15/0x1a [ 545.475539][T21564] should_fail_ex+0x223/0x230 [ 545.480468][T21564] should_failslab+0x8f/0xb0 [ 545.485186][T21564] kmem_cache_alloc_noprof+0x52/0x320 [ 545.490602][T21564] ? skb_clone+0x154/0x1f0 [ 545.495113][T21564] skb_clone+0x154/0x1f0 [ 545.499394][T21564] __netlink_deliver_tap+0x2bd/0x4f0 [ 545.504869][T21564] netlink_unicast+0x64a/0x670 [ 545.509753][T21564] netlink_sendmsg+0x5cc/0x6e0 [ 545.514594][T21564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.519904][T21564] __sock_sendmsg+0x140/0x180 [ 545.524629][T21564] ____sys_sendmsg+0x312/0x410 [ 545.529441][T21564] __sys_sendmsg+0x19d/0x230 [ 545.534072][T21564] __x64_sys_sendmsg+0x46/0x50 [ 545.538979][T21564] x64_sys_call+0x2734/0x2dc0 [ 545.543701][T21564] do_syscall_64+0xc9/0x1c0 [ 545.548278][T21564] ? clear_bhb_loop+0x55/0xb0 [ 545.553055][T21564] ? clear_bhb_loop+0x55/0xb0 [ 545.557891][T21564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.563824][T21564] RIP: 0033:0x7f574d305d29 [ 545.568336][T21564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.588035][T21564] RSP: 002b:00007f574b977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.596475][T21564] RAX: ffffffffffffffda RBX: 00007f574d4f5fa0 RCX: 00007f574d305d29 [ 545.604467][T21564] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 545.612476][T21564] RBP: 00007f574b977090 R08: 0000000000000000 R09: 0000000000000000 [ 545.620469][T21564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.628466][T21564] R13: 0000000000000000 R14: 00007f574d4f5fa0 R15: 00007fff41371b58 [ 545.636456][T21564] [ 545.660603][T21568] ALSA: seq fatal error: cannot create timer (-19) [ 545.675844][T21564] hsr_slave_0 (unregistering): left promiscuous mode [ 546.174323][T21587] xt_hashlimit: max too large, truncated to 1048576 [ 546.181859][T21587] Cannot find set identified by id 0 to match [ 546.212689][T21591] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 546.219237][T21591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.226631][T21592] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 546.233177][T21592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.240644][T21591] vhci_hcd vhci_hcd.0: Device attached [ 546.240653][T21592] vhci_hcd vhci_hcd.0: Device attached [ 546.253092][T21593] vhci_hcd: connection closed [ 546.253552][T21594] vhci_hcd: connection closed [ 546.258837][ T53] vhci_hcd: stop threads [ 546.267918][ T53] vhci_hcd: release socket [ 546.272345][ T53] vhci_hcd: disconnect device [ 546.278324][ T53] vhci_hcd: stop threads [ 546.282592][ T53] vhci_hcd: release socket [ 546.287109][ T53] vhci_hcd: disconnect device [ 546.406592][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6650'. [ 546.630125][T21618] siw: device registration error -23 [ 547.107192][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6658'. [ 548.071812][T21646] loop1: detected capacity change from 0 to 512 [ 548.163724][T21646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.179929][T21646] EXT4-fs (loop1): 1 truncate cleaned up [ 548.186919][T21646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.256634][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6675'. [ 548.396787][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6673'. [ 548.429608][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 548.429629][ T29] audit: type=1400 audit(1736126911.680:526924): avc: denied { create } for pid=21665 comm="syz.6.6675" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 548.436615][ T29] audit: type=1400 audit(1736126911.680:526925): avc: denied { associate } for pid=21665 comm="syz.6.6675" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 548.528755][ T29] audit: type=1400 audit(1736126911.720:526926): avc: denied { read write open } for pid=21665 comm="syz.6.6675" path="/57/file1" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 548.732809][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.813323][ T29] audit: type=1400 audit(1736126912.100:526927): avc: denied { unlink } for pid=20761 comm="syz-executor" name="file1" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 548.874169][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6677'. [ 549.015994][T21679] smc: net device bond0 applied user defined pnetid SYZ0 [ 549.034827][T21679] smc: net device bond0 erased user defined pnetid SYZ0 [ 549.048980][T21679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.057763][T21679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.080761][T21684] loop1: detected capacity change from 0 to 164 [ 549.097456][T21684] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 549.211167][T21697] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6684'. [ 549.344464][T21703] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6686'. [ 550.043158][T21731] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6697'. [ 550.067592][T21733] tipc: Started in network mode [ 550.072593][T21733] tipc: Node identity ac14140f, cluster identity 4711 [ 550.087151][T21733] tipc: New replicast peer: 10.1.1.2 [ 550.092583][T21733] tipc: Enabled bearer , priority 10 [ 550.570292][ T29] audit: type=1400 audit(1736126913.880:526928): avc: denied { getopt } for pid=21767 comm="syz.6.6708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 550.709375][ T29] audit: type=1326 audit(1736126914.020:526929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 550.734001][ T29] audit: type=1326 audit(1736126914.040:526930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 550.757644][ T29] audit: type=1326 audit(1736126914.040:526931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 550.781393][ T29] audit: type=1326 audit(1736126914.040:526932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 550.805321][ T29] audit: type=1326 audit(1736126914.040:526933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21777 comm="syz.4.6713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 550.831471][T21782] 9pnet_fd: Insufficient options for proto=fd [ 550.838372][T21782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21782 comm=syz.2.6715 [ 550.851012][T21782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21782 comm=syz.2.6715 [ 550.865627][T21782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6715'. [ 550.874685][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6715'. [ 550.911291][T21782] ipt_ECN: cannot use operation on non-tcp rule [ 550.918039][T21782] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 550.932438][T21782] FAULT_INJECTION: forcing a failure. [ 550.932438][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 550.945234][T21782] CPU: 1 UID: 0 PID: 21782 Comm: syz.2.6715 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 550.957511][T21782] Tainted: [W]=WARN [ 550.961335][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 550.971477][T21782] Call Trace: [ 550.974838][T21782] [ 550.977789][T21782] dump_stack_lvl+0xf2/0x150 [ 550.982423][T21782] dump_stack+0x15/0x1a [ 550.986622][T21782] should_fail_ex+0x223/0x230 [ 550.991331][T21782] should_failslab+0x8f/0xb0 [ 550.996063][T21782] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 551.002423][T21782] ? sidtab_sid2str_get+0xb8/0x140 [ 551.007553][T21782] kmemdup_noprof+0x2a/0x60 [ 551.012080][T21782] sidtab_sid2str_get+0xb8/0x140 [ 551.017037][T21782] security_sid_to_context_core+0x1eb/0x2f0 [ 551.023057][T21782] security_sid_to_context+0x27/0x30 [ 551.028426][T21782] selinux_lsmprop_to_secctx+0x2c/0x40 [ 551.033969][T21782] security_lsmprop_to_secctx+0x4a/0x90 [ 551.039588][T21782] audit_log_task_context+0x93/0x1c0 [ 551.044969][T21782] audit_log_task+0xf9/0x1c0 [ 551.049586][T21782] audit_seccomp+0x68/0x130 [ 551.054101][T21782] __seccomp_filter+0x6fa/0x1180 [ 551.059113][T21782] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.064840][T21782] ? vfs_write+0x596/0x920 [ 551.069272][T21782] ? __schedule+0x6fa/0x930 [ 551.073885][T21782] __secure_computing+0x9f/0x1c0 [ 551.078885][T21782] syscall_trace_enter+0xd1/0x1f0 [ 551.084090][T21782] do_syscall_64+0xaa/0x1c0 [ 551.088640][T21782] ? clear_bhb_loop+0x55/0xb0 [ 551.093326][T21782] ? clear_bhb_loop+0x55/0xb0 [ 551.098030][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.104003][T21782] RIP: 0033:0x7febf2fa5d29 [ 551.108426][T21782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.128056][T21782] RSP: 002b:00007febf1611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 551.136506][T21782] RAX: ffffffffffffffda RBX: 00007febf3195fa0 RCX: 00007febf2fa5d29 [ 551.144559][T21782] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000900 [ 551.152543][T21782] RBP: 00007febf1611090 R08: 0000000000000000 R09: 0000000000000000 [ 551.160518][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.168556][T21782] R13: 0000000000000000 R14: 00007febf3195fa0 R15: 00007fff98c6dca8 [ 551.176605][T21782] [ 551.182709][T20287] tipc: Node number set to 2886997007 [ 551.973221][T21815] batadv1: entered promiscuous mode [ 551.993501][T21815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 552.009475][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6729'. [ 552.065657][T21820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.074460][T21820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.083631][T21820] tipc: Started in network mode [ 552.088704][T21820] tipc: Node identity 7a4b2e8de17b, cluster identity 4711 [ 552.095919][T21820] tipc: Enabled bearer , priority 0 [ 552.127320][T21814] tipc: Resetting bearer [ 552.140033][T21814] tipc: Disabling bearer [ 552.860576][T21865] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6747'. [ 553.045776][T21873] loop1: detected capacity change from 0 to 512 [ 553.076173][T21873] EXT4-fs: Ignoring removed orlov option [ 553.131685][T21873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.193937][T21873] EXT4-fs (loop1): orphan cleanup on readonly fs [ 553.232681][T21873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6750: bg 0: block 248: padding at end of block bitmap is not set [ 553.266735][T21873] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6750: Failed to acquire dquot type 1 [ 553.336479][T21873] EXT4-fs (loop1): 1 truncate cleaned up [ 553.377812][T21873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 553.466834][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.042957][T21911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6762'. [ 554.232347][T21917] syz.5.6764[21917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.232481][T21917] syz.5.6764[21917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.247647][T21917] syz.5.6764[21917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.316856][T21917] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6764'. [ 554.498760][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 554.498784][ T29] audit: type=1326 audit(1736126917.810:527091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21929 comm="syz.5.6770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x0 [ 554.555403][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6772'. [ 555.693801][T21961] ALSA: seq fatal error: cannot create timer (-19) [ 556.280547][T21976] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6783'. [ 556.290749][ T29] audit: type=1326 audit(1736126919.600:527092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.314608][ T29] audit: type=1326 audit(1736126919.600:527093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.338988][ T29] audit: type=1326 audit(1736126919.650:527094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.362809][ T29] audit: type=1326 audit(1736126919.650:527095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.386631][ T29] audit: type=1326 audit(1736126919.650:527096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.411479][ T29] audit: type=1326 audit(1736126919.720:527097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.435322][ T29] audit: type=1326 audit(1736126919.720:527098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.459128][ T29] audit: type=1326 audit(1736126919.720:527099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.482966][ T29] audit: type=1326 audit(1736126919.720:527100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.6.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 556.740080][T21993] loop1: detected capacity change from 0 to 512 [ 556.787747][T21993] EXT4-fs: Ignoring removed orlov option [ 556.805641][T21993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.827280][T21997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6794'. [ 556.838162][T21993] EXT4-fs (loop1): orphan cleanup on readonly fs [ 556.871575][T21993] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6790: bg 0: block 248: padding at end of block bitmap is not set [ 556.888695][T21993] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6790: Failed to acquire dquot type 1 [ 556.903668][T21993] EXT4-fs (loop1): 1 truncate cleaned up [ 556.910108][T21993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 557.027031][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.510646][T22017] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6798'. [ 558.109751][T22041] loop1: detected capacity change from 0 to 512 [ 558.145087][T22041] EXT4-fs: Ignoring removed orlov option [ 558.151300][T22041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.162179][T22041] EXT4-fs (loop1): orphan cleanup on readonly fs [ 558.169267][T22041] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6805: bg 0: block 248: padding at end of block bitmap is not set [ 558.389825][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6806'. [ 558.411266][T22041] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6805: Failed to acquire dquot type 1 [ 558.424701][T22041] EXT4-fs (loop1): 1 truncate cleaned up [ 558.443847][T22041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 558.489440][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.525335][T22056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6808'. [ 558.591646][T22062] FAULT_INJECTION: forcing a failure. [ 558.591646][T22062] name failslab, interval 1, probability 0, space 0, times 0 [ 558.604405][T22062] CPU: 0 UID: 0 PID: 22062 Comm: syz.1.6811 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 558.616804][T22062] Tainted: [W]=WARN [ 558.620636][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 558.630742][T22062] Call Trace: [ 558.634033][T22062] [ 558.636974][T22062] dump_stack_lvl+0xf2/0x150 [ 558.641604][T22062] dump_stack+0x15/0x1a [ 558.645819][T22062] should_fail_ex+0x223/0x230 [ 558.650597][T22062] should_failslab+0x8f/0xb0 [ 558.655226][T22062] __kmalloc_node_noprof+0xad/0x410 [ 558.660460][T22062] ? __list_del_entry_valid_or_report+0x5f/0xf0 [ 558.666738][T22062] ? __kvmalloc_node_noprof+0x72/0x170 [ 558.672264][T22062] __kvmalloc_node_noprof+0x72/0x170 [ 558.677693][T22062] bpf_test_run_xdp_live+0xf7/0x1040 [ 558.683017][T22062] ? __pfx_autoremove_wake_function+0x10/0x10 [ 558.689126][T22062] ? 0xffffffffa0004000 [ 558.693302][T22062] ? synchronize_rcu+0x46/0x320 [ 558.698222][T22062] ? 0xffffffffa0004000 [ 558.702389][T22062] ? bpf_dispatcher_change_prog+0x747/0x840 [ 558.708323][T22062] ? 0xffffffffa0004000 [ 558.712569][T22062] ? 0xffffffffa0001ac8 [ 558.716751][T22062] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 558.722698][T22062] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 558.728077][T22062] ? __rcu_read_unlock+0x4e/0x70 [ 558.733089][T22062] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 558.738970][T22062] bpf_prog_test_run+0x20f/0x3a0 [ 558.743993][T22062] __sys_bpf+0x400/0x7a0 [ 558.748254][T22062] __x64_sys_bpf+0x43/0x50 [ 558.752735][T22062] x64_sys_call+0x2914/0x2dc0 [ 558.757420][T22062] do_syscall_64+0xc9/0x1c0 [ 558.761950][T22062] ? clear_bhb_loop+0x55/0xb0 [ 558.766635][T22062] ? clear_bhb_loop+0x55/0xb0 [ 558.771343][T22062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.777310][T22062] RIP: 0033:0x7ff98c605d29 [ 558.781761][T22062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.801438][T22062] RSP: 002b:00007ff98ac77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.809907][T22062] RAX: ffffffffffffffda RBX: 00007ff98c7f5fa0 RCX: 00007ff98c605d29 [ 558.817878][T22062] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 558.826026][T22062] RBP: 00007ff98ac77090 R08: 0000000000000000 R09: 0000000000000000 [ 558.834016][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.842062][T22062] R13: 0000000000000000 R14: 00007ff98c7f5fa0 R15: 00007ffd37204ef8 [ 558.850056][T22062] [ 558.945446][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 558.953002][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 558.960457][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 558.968099][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 558.975655][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 558.983139][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 558.990594][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 558.998054][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.005502][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 559.012950][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.020491][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.028081][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.035687][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.043516][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 559.051177][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.058624][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.066136][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 559.073671][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.081287][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.088808][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.096457][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.103942][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.111370][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.119015][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126517][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126549][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126571][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126602][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126624][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126649][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126708][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126733][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126892][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126936][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.126963][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 559.138533][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz0] on syz0 [ 559.139263][T22087] loop1: detected capacity change from 0 to 164 [ 559.586160][T22108] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6828'. [ 559.622756][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 559.622771][ T29] audit: type=1326 audit(1736126922.930:527165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.653624][ T29] audit: type=1326 audit(1736126922.940:527166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.677374][ T29] audit: type=1326 audit(1736126922.940:527167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.701196][ T29] audit: type=1326 audit(1736126922.940:527168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.724982][ T29] audit: type=1326 audit(1736126922.940:527169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.748683][ T29] audit: type=1326 audit(1736126922.940:527170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.772487][ T29] audit: type=1326 audit(1736126922.970:527171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.797418][ T29] audit: type=1326 audit(1736126923.040:527172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.821162][ T29] audit: type=1326 audit(1736126923.040:527173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.845057][ T29] audit: type=1326 audit(1736126923.040:527174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22113 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 559.874962][T22114] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6831'. [ 559.884002][T22114] netlink: 7 bytes leftover after parsing attributes in process `syz.6.6831'. [ 560.003198][T22130] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6834'. [ 560.129345][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6847'. [ 560.198364][T22155] FAULT_INJECTION: forcing a failure. [ 560.198364][T22155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.211522][T22155] CPU: 1 UID: 0 PID: 22155 Comm: syz.5.6850 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 560.223934][T22155] Tainted: [W]=WARN [ 560.227818][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 560.237893][T22155] Call Trace: [ 560.241180][T22155] [ 560.244112][T22155] dump_stack_lvl+0xf2/0x150 [ 560.248730][T22155] dump_stack+0x15/0x1a [ 560.252932][T22155] should_fail_ex+0x223/0x230 [ 560.257652][T22155] should_fail+0xb/0x10 [ 560.261845][T22155] should_fail_usercopy+0x1a/0x20 [ 560.266879][T22155] _copy_from_iter+0xd5/0xd00 [ 560.271621][T22155] ? should_fail_ex+0xd7/0x230 [ 560.276427][T22155] ? should_failslab+0x8f/0xb0 [ 560.281354][T22155] ? __virt_addr_valid+0x1ed/0x250 [ 560.286607][T22155] ? __check_object_size+0x364/0x520 [ 560.291951][T22155] qrtr_tun_write_iter+0xae/0x130 [ 560.296983][T22155] aio_write+0x2f7/0x420 [ 560.301255][T22155] io_submit_one+0xb0c/0x1230 [ 560.306094][T22155] __se_sys_io_submit+0xf5/0x280 [ 560.311052][T22155] __x64_sys_io_submit+0x43/0x50 [ 560.316078][T22155] x64_sys_call+0x2c20/0x2dc0 [ 560.320772][T22155] do_syscall_64+0xc9/0x1c0 [ 560.325286][T22155] ? clear_bhb_loop+0x55/0xb0 [ 560.330053][T22155] ? clear_bhb_loop+0x55/0xb0 [ 560.334737][T22155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.340697][T22155] RIP: 0033:0x7f574d305d29 [ 560.345144][T22155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.364785][T22155] RSP: 002b:00007f574b977038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 560.373204][T22155] RAX: ffffffffffffffda RBX: 00007f574d4f5fa0 RCX: 00007f574d305d29 [ 560.381200][T22155] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 00007f574e030000 [ 560.389187][T22155] RBP: 00007f574b977090 R08: 0000000000000000 R09: 0000000000000000 [ 560.397257][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.405243][T22155] R13: 0000000000000000 R14: 00007f574d4f5fa0 R15: 00007fff41371b58 [ 560.413225][T22155] [ 560.739223][T22191] FAULT_INJECTION: forcing a failure. [ 560.739223][T22191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.752400][T22191] CPU: 1 UID: 0 PID: 22191 Comm: syz.2.6863 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 560.764665][T22191] Tainted: [W]=WARN [ 560.768464][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 560.778520][T22191] Call Trace: [ 560.781798][T22191] [ 560.784791][T22191] dump_stack_lvl+0xf2/0x150 [ 560.789430][T22191] dump_stack+0x15/0x1a [ 560.793604][T22191] should_fail_ex+0x223/0x230 [ 560.798434][T22191] should_fail+0xb/0x10 [ 560.802660][T22191] should_fail_usercopy+0x1a/0x20 [ 560.807855][T22191] _copy_from_user+0x1e/0xb0 [ 560.812490][T22191] copy_msghdr_from_user+0x54/0x2a0 [ 560.817714][T22191] ? __fget_files+0x17c/0x1c0 [ 560.822501][T22191] __sys_sendmsg+0x13e/0x230 [ 560.827125][T22191] __x64_sys_sendmsg+0x46/0x50 [ 560.831904][T22191] x64_sys_call+0x2734/0x2dc0 [ 560.836591][T22191] do_syscall_64+0xc9/0x1c0 [ 560.841177][T22191] ? clear_bhb_loop+0x55/0xb0 [ 560.845866][T22191] ? clear_bhb_loop+0x55/0xb0 [ 560.850616][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.856684][T22191] RIP: 0033:0x7febf2fa5d29 [ 560.861104][T22191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.880767][T22191] RSP: 002b:00007febf1611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.889194][T22191] RAX: ffffffffffffffda RBX: 00007febf3195fa0 RCX: 00007febf2fa5d29 [ 560.897168][T22191] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 560.905144][T22191] RBP: 00007febf1611090 R08: 0000000000000000 R09: 0000000000000000 [ 560.913162][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.921155][T22191] R13: 0000000000000000 R14: 00007febf3195fa0 R15: 00007fff98c6dca8 [ 560.929145][T22191] [ 561.077775][T22204] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6866'. [ 561.116335][T22209] loop1: detected capacity change from 0 to 512 [ 561.123094][T22209] EXT4-fs: Ignoring removed orlov option [ 561.141762][T22209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 561.158398][T22209] EXT4-fs (loop1): orphan cleanup on readonly fs [ 561.171883][T22209] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6869: bg 0: block 248: padding at end of block bitmap is not set [ 561.193033][T22209] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6869: Failed to acquire dquot type 1 [ 561.250710][T22209] EXT4-fs (loop1): 1 truncate cleaned up [ 561.269376][T22209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.336555][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.515523][T22226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6875'. [ 562.409938][T22279] batadv1: entered promiscuous mode [ 562.444940][T22279] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 562.536329][T22283] __nla_validate_parse: 6 callbacks suppressed [ 562.536435][T22283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6895'. [ 562.554544][T22283] loop1: detected capacity change from 0 to 128 [ 562.554568][T22285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.575267][T22285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.895393][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6905'. [ 563.014606][T22326] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6912'. [ 563.169861][T22333] syz.6.6914[22333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.170110][T22333] syz.6.6914[22333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.202590][T22333] syz.6.6914[22333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.867915][T22354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6923'. [ 564.935936][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 564.935953][ T29] audit: type=1326 audit(1736126928.210:527413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 564.965984][ T29] audit: type=1326 audit(1736126928.210:527414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 564.989676][ T29] audit: type=1326 audit(1736126928.210:527415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.013402][ T29] audit: type=1326 audit(1736126928.210:527416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.037124][ T29] audit: type=1326 audit(1736126928.210:527417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.060952][ T29] audit: type=1326 audit(1736126928.210:527418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.084637][ T29] audit: type=1326 audit(1736126928.210:527419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.108457][ T29] audit: type=1326 audit(1736126928.210:527420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.132202][ T29] audit: type=1326 audit(1736126928.210:527421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.155970][ T29] audit: type=1326 audit(1736126928.210:527422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22370 comm="syz.2.6928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf2fa5d29 code=0x7ffc0000 [ 565.428643][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6934'. [ 565.711093][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6936'. [ 565.940070][T22404] loop1: detected capacity change from 0 to 512 [ 566.128557][T22411] FAULT_INJECTION: forcing a failure. [ 566.128557][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 566.141467][T22411] CPU: 1 UID: 0 PID: 22411 Comm: syz.2.6942 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 566.153792][T22411] Tainted: [W]=WARN [ 566.157597][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 566.167668][T22411] Call Trace: [ 566.170952][T22411] [ 566.173890][T22411] dump_stack_lvl+0xf2/0x150 [ 566.178589][T22411] dump_stack+0x15/0x1a [ 566.182813][T22411] should_fail_ex+0x223/0x230 [ 566.187596][T22411] should_failslab+0x8f/0xb0 [ 566.192230][T22411] __kmalloc_noprof+0xab/0x3f0 [ 566.197081][T22411] ? ___neigh_create+0x4cf/0x12a0 [ 566.202122][T22411] ___neigh_create+0x4cf/0x12a0 [ 566.207009][T22411] ? ipt_do_table+0x9f7/0xab0 [ 566.211827][T22411] ? ipt_do_table+0x16f/0xab0 [ 566.216577][T22411] ? netlbl_enabled+0x25/0x40 [ 566.221345][T22411] __neigh_create+0x54/0x70 [ 566.225913][T22411] ip_neigh_gw4+0x135/0x170 [ 566.230468][T22411] ip_finish_output2+0x82e/0x890 [ 566.235488][T22411] ? skb_gso_transport_seglen+0x194/0x240 [ 566.241310][T22411] ip_finish_output+0x11a/0x2a0 [ 566.246259][T22411] ip_output+0xab/0x170 [ 566.250424][T22411] ? __pfx_ip_finish_output+0x10/0x10 [ 566.255851][T22411] ? __pfx_ip_output+0x10/0x10 [ 566.260637][T22411] ip_send_skb+0x116/0x140 [ 566.265081][T22411] udp_send_skb+0x6a6/0x9f0 [ 566.269683][T22411] udp_sendmsg+0x485/0x12f0 [ 566.274222][T22411] ? terminate_walk+0x260/0x280 [ 566.279143][T22411] ? __rcu_read_unlock+0x4e/0x70 [ 566.284135][T22411] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 566.289697][T22411] ? avc_has_perm+0xd4/0x160 [ 566.294373][T22411] ? __pfx_udp_sendmsg+0x10/0x10 [ 566.299401][T22411] inet_sendmsg+0xaf/0xd0 [ 566.303775][T22411] __sock_sendmsg+0x102/0x180 [ 566.308477][T22411] __sys_sendto+0x1a8/0x230 [ 566.313011][T22411] __x64_sys_sendto+0x78/0x90 [ 566.317788][T22411] x64_sys_call+0x29fa/0x2dc0 [ 566.322567][T22411] do_syscall_64+0xc9/0x1c0 [ 566.327131][T22411] ? clear_bhb_loop+0x55/0xb0 [ 566.331886][T22411] ? clear_bhb_loop+0x55/0xb0 [ 566.336592][T22411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.342596][T22411] RIP: 0033:0x7febf2fa5d29 [ 566.347061][T22411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.367190][T22411] RSP: 002b:00007febf1611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 566.375689][T22411] RAX: ffffffffffffffda RBX: 00007febf3195fa0 RCX: 00007febf2fa5d29 [ 566.383735][T22411] RDX: 000000000000ffe3 RSI: 00000000200000c0 RDI: 0000000000000005 [ 566.391713][T22411] RBP: 00007febf1611090 R08: 0000000000000000 R09: 0000000000000000 [ 566.399775][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.407775][T22411] R13: 0000000000000000 R14: 00007febf3195fa0 R15: 00007fff98c6dca8 [ 566.415770][T22411] [ 566.424528][T22407] bridge0: port 3(vlan2) entered blocking state [ 566.430830][T22407] bridge0: port 3(vlan2) entered disabled state [ 566.451444][T22407] vlan2: entered allmulticast mode [ 566.563330][T22407] vlan2: left allmulticast mode [ 566.696974][T22404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.740332][T22404] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.819175][T22419] batadv1: entered promiscuous mode [ 566.840096][T22419] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 566.860953][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.882370][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6947'. [ 566.985967][T22425] tipc: Enabled bearer , priority 0 [ 567.177244][T22434] loop1: detected capacity change from 0 to 512 [ 567.211728][T22434] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 567.779380][T22434] EXT4-fs (loop1): 1 truncate cleaned up [ 567.785716][T22434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.800414][ T11] tipc: Resetting bearer [ 567.819177][T22418] tipc: Resetting bearer [ 567.842155][T22418] tipc: Disabling bearer [ 567.868775][T22430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6948'. [ 567.985593][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6951'. [ 568.399476][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6955'. [ 568.761330][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.658613][T22483] ALSA: seq fatal error: cannot create timer (-19) [ 570.090153][T22501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6971'. [ 570.390529][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6976'. [ 570.607964][T22518] ALSA: seq fatal error: cannot create timer (-19) [ 570.649577][T22529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6982'. [ 570.721571][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 570.721587][ T29] audit: type=1326 audit(1736126934.030:527501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.751542][ T29] audit: type=1326 audit(1736126934.030:527502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.775384][ T29] audit: type=1326 audit(1736126934.030:527503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.799058][ T29] audit: type=1326 audit(1736126934.030:527504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.822837][ T29] audit: type=1326 audit(1736126934.030:527505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.846538][ T29] audit: type=1326 audit(1736126934.030:527506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.870539][ T29] audit: type=1326 audit(1736126934.030:527507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.894224][ T29] audit: type=1326 audit(1736126934.030:527508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.917974][ T29] audit: type=1326 audit(1736126934.030:527509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 570.941674][ T29] audit: type=1326 audit(1736126934.030:527510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22524 comm="syz.5.6978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574d305d29 code=0x7ffc0000 [ 573.135521][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6995'. [ 574.401549][T22595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7000'. [ 574.415879][T22595] loop1: detected capacity change from 0 to 128 [ 574.658782][T22603] ALSA: seq fatal error: cannot create timer (-19) [ 575.100249][T22610] batadv1: entered promiscuous mode [ 575.106468][T22610] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 576.112223][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 576.118417][ T29] audit: type=1326 audit(1736126938.460:527562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.142303][ T29] audit: type=1326 audit(1736126938.460:527563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.166043][ T29] audit: type=1326 audit(1736126938.460:527564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.168015][ T1808] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 576.189821][ T29] audit: type=1326 audit(1736126938.460:527565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.199460][ T1808] batman_adv: batadv1: adding TT local entry 01:00:5e:00:00:01 to non-existent VLAN -1 [ 576.223371][ T29] audit: type=1326 audit(1736126938.460:527566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.256740][ T29] audit: type=1326 audit(1736126938.470:527567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.280514][ T29] audit: type=1326 audit(1736126938.470:527568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.304210][ T29] audit: type=1326 audit(1736126938.470:527569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.328366][ T29] audit: type=1326 audit(1736126938.470:527570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 576.352128][ T29] audit: type=1326 audit(1736126938.470:527571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22613 comm="syz.1.7005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff98c605d29 code=0x7ffc0000 [ 577.290010][T22644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7008'. [ 577.517823][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7013'. [ 578.239057][T22659] FAULT_INJECTION: forcing a failure. [ 578.239057][T22659] name failslab, interval 1, probability 0, space 0, times 0 [ 578.251850][T22659] CPU: 0 UID: 0 PID: 22659 Comm: syz.2.7015 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 578.264113][T22659] Tainted: [W]=WARN [ 578.267974][T22659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 578.278040][T22659] Call Trace: [ 578.281326][T22659] [ 578.284267][T22659] dump_stack_lvl+0xf2/0x150 [ 578.288926][T22659] dump_stack+0x15/0x1a [ 578.293193][T22659] should_fail_ex+0x223/0x230 [ 578.297881][T22659] ? sg_read+0x5ce/0xc70 [ 578.302141][T22659] should_failslab+0x8f/0xb0 [ 578.306814][T22659] __kmalloc_cache_noprof+0x4e/0x320 [ 578.312127][T22659] sg_read+0x5ce/0xc70 [ 578.316225][T22659] ? __pfx_sg_read+0x10/0x10 [ 578.320828][T22659] vfs_read+0x1a2/0x700 [ 578.325140][T22659] ? __rcu_read_unlock+0x4e/0x70 [ 578.330271][T22659] ? __fget_files+0x17c/0x1c0 [ 578.334975][T22659] ksys_read+0xe8/0x1b0 [ 578.339158][T22659] __x64_sys_read+0x42/0x50 [ 578.343688][T22659] x64_sys_call+0x2874/0x2dc0 [ 578.348462][T22659] do_syscall_64+0xc9/0x1c0 [ 578.352975][T22659] ? clear_bhb_loop+0x55/0xb0 [ 578.357675][T22659] ? clear_bhb_loop+0x55/0xb0 [ 578.362365][T22659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.368414][T22659] RIP: 0033:0x7febf2fa5d29 [ 578.372847][T22659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.392482][T22659] RSP: 002b:00007febf1611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.400970][T22659] RAX: ffffffffffffffda RBX: 00007febf3195fa0 RCX: 00007febf2fa5d29 [ 578.408981][T22659] RDX: 00000000ffffffbf RSI: 0000000000000000 RDI: 0000000000000007 [ 578.416976][T22659] RBP: 00007febf1611090 R08: 0000000000000000 R09: 0000000000000000 [ 578.425101][T22659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.433098][T22659] R13: 0000000000000000 R14: 00007febf3195fa0 R15: 00007fff98c6dca8 [ 578.441150][T22659] [ 580.636532][T22675] ALSA: seq fatal error: cannot create timer (-19) [ 581.059029][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7024'. [ 581.132801][T22698] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 581.141331][T22698] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 581.149916][T22698] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 581.204589][T22700] loop1: detected capacity change from 0 to 512 [ 581.220761][T22700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 581.248756][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7031'. [ 581.270245][T22700] EXT4-fs (loop1): 1 truncate cleaned up [ 581.278081][T22700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.292995][T22707] : renamed from bond0 (while UP) [ 581.311728][T22700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7026'. [ 581.433489][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 581.433508][ T29] audit: type=1326 audit(1736126944.690:527620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.463335][ T29] audit: type=1326 audit(1736126944.690:527621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.487138][ T29] audit: type=1326 audit(1736126944.690:527622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.511004][ T29] audit: type=1326 audit(1736126944.690:527623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.534776][ T29] audit: type=1326 audit(1736126944.690:527624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.558454][ T29] audit: type=1326 audit(1736126944.690:527625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.582174][ T29] audit: type=1326 audit(1736126944.690:527626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.605958][ T29] audit: type=1326 audit(1736126944.690:527627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.629784][ T29] audit: type=1326 audit(1736126944.690:527628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.653708][ T29] audit: type=1326 audit(1736126944.690:527629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22710 comm="syz.6.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2a9c5d29 code=0x7ffc0000 [ 581.968175][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7033'. [ 582.391017][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.647502][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7037'. [ 582.855630][T22738] loop1: detected capacity change from 0 to 512 [ 582.862937][T22738] EXT4-fs: Ignoring removed orlov option [ 582.875376][T22738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 582.906992][T22738] EXT4-fs (loop1): orphan cleanup on readonly fs [ 582.915233][T22738] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7034: bg 0: block 248: padding at end of block bitmap is not set [ 582.931486][T22738] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.7034: Failed to acquire dquot type 1 [ 582.944427][T22738] EXT4-fs (loop1): 1 truncate cleaned up [ 582.965196][T22741] ALSA: seq fatal error: cannot create timer (-19) [ 583.125660][T22738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 583.169809][T19466] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.373801][T22749] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.474815][T22749] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.587048][T22753] loop1: detected capacity change from 0 to 8192 [ 583.593754][T22753] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 583.618228][T22749] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.655381][T22749] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.768766][T22749] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.781945][T22749] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.793819][T22749] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.806969][T22749] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.250544][T22761] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 584.259190][T22761] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 586.507106][T22828] FAULT_INJECTION: forcing a failure. [ 586.507106][T22828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.520242][T22828] CPU: 1 UID: 0 PID: 22828 Comm: syz.6.7071 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 586.532506][T22828] Tainted: [W]=WARN [ 586.536328][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.546436][T22828] Call Trace: [ 586.549729][T22828] [ 586.552675][T22828] dump_stack_lvl+0xf2/0x150 [ 586.557308][T22828] dump_stack+0x15/0x1a [ 586.561562][T22828] should_fail_ex+0x223/0x230 [ 586.566254][T22828] should_fail+0xb/0x10 [ 586.570432][T22828] should_fail_usercopy+0x1a/0x20 [ 586.575473][T22828] _copy_from_user+0x1e/0xb0 [ 586.580183][T22828] move_addr_to_kernel+0x82/0x120 [ 586.585259][T22828] __sys_bind+0x9e/0x190 [ 586.589564][T22828] __x64_sys_bind+0x41/0x50 [ 586.594136][T22828] x64_sys_call+0x20ab/0x2dc0 [ 586.598827][T22828] do_syscall_64+0xc9/0x1c0 [ 586.603471][T22828] ? clear_bhb_loop+0x55/0xb0 [ 586.608158][T22828] ? clear_bhb_loop+0x55/0xb0 [ 586.612842][T22828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.618785][T22828] RIP: 0033:0x7f9e2a9c5d29 [ 586.623267][T22828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.642935][T22828] RSP: 002b:00007f9e29031038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 586.651390][T22828] RAX: ffffffffffffffda RBX: 00007f9e2abb5fa0 RCX: 00007f9e2a9c5d29 [ 586.659421][T22828] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 586.667395][T22828] RBP: 00007f9e29031090 R08: 0000000000000000 R09: 0000000000000000 [ 586.675404][T22828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.683382][T22828] R13: 0000000000000000 R14: 00007f9e2abb5fa0 R15: 00007fff2c17dd08 [ 586.691374][T22828] [ 586.710816][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 586.710834][ T29] audit: type=1326 audit(1736126950.020:527725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.740963][ T29] audit: type=1326 audit(1736126950.020:527726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.764815][ T29] audit: type=1326 audit(1736126950.020:527727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.788715][ T29] audit: type=1326 audit(1736126950.020:527728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.812568][ T29] audit: type=1326 audit(1736126950.020:527729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.836443][ T29] audit: type=1326 audit(1736126950.020:527730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.860152][ T29] audit: type=1326 audit(1736126950.020:527731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.883978][ T29] audit: type=1326 audit(1736126950.020:527732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.907697][ T29] audit: type=1326 audit(1736126950.020:527733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 586.931375][ T29] audit: type=1326 audit(1736126950.020:527734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22831 comm="syz.4.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f78f85e5d29 code=0x7ffc0000 [ 587.025386][T22846] __nla_validate_parse: 5 callbacks suppressed [ 587.025418][T22846] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7078'. [ 587.328069][T22864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7082'. [ 588.146609][T22882] syz.5.7092[22882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.146692][T22882] syz.5.7092[22882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.188273][T22882] syz.5.7092[22882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.485063][T22898] blktrace: Concurrent blktraces are not allowed on sg0 [ 589.110100][T22911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7103'. [ 589.217443][T22910] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.282226][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7102'. [ 589.306505][T22915] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7104'. [ 589.350804][T22920] ================================================================== [ 589.358935][T22920] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 589.365727][T22920] [ 589.368054][T22920] write to 0xffff8881047d7ab8 of 8 bytes by task 22919 on cpu 0: [ 589.375778][T22920] vms_clear_ptes+0x1a7/0x300 [ 589.380470][T22920] __mmap_region+0x4fb/0x1400 [ 589.385160][T22920] mmap_region+0x164/0x1e0 [ 589.389600][T22920] do_mmap+0x732/0xbb0 [ 589.393686][T22920] vm_mmap_pgoff+0x133/0x290 [ 589.398307][T22920] ksys_mmap_pgoff+0x2de/0x330 [ 589.403122][T22920] x64_sys_call+0x1940/0x2dc0 [ 589.407814][T22920] do_syscall_64+0xc9/0x1c0 [ 589.412323][T22920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.418241][T22920] [ 589.420566][T22920] read to 0xffff8881047d7ab8 of 8 bytes by task 22920 on cpu 1: [ 589.428202][T22920] getrusage+0xa24/0xb80 [ 589.432458][T22920] io_sq_thread+0x5ea/0x10b0 [ 589.437065][T22920] ret_from_fork+0x4b/0x60 [ 589.441517][T22920] ret_from_fork_asm+0x1a/0x30 [ 589.446293][T22920] [ 589.448633][T22920] value changed: 0x00000000000014c5 -> 0x0000000000001697 [ 589.455758][T22920] [ 589.458099][T22920] Reported by Kernel Concurrency Sanitizer on: [ 589.464249][T22920] CPU: 1 UID: 0 PID: 22920 Comm: iou-sqp-22919 Tainted: G W 6.13.0-rc5-syzkaller-00198-g9244696b34f2 #0 [ 589.476759][T22920] Tainted: [W]=WARN [ 589.480560][T22920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.490622][T22920] ==================================================================