last executing test programs: 16.325900637s ago: executing program 0 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x23, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="184aa50000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r5, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0xaeb, 0x4, 0x6f, 0x7, '<\r\x00', 0x400000, 0x1ff}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100ce4b857c0d52d7f20000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a0104000000000308000a40000000000900020073797a304b3af22e926692fa00000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000010c000280080001400000000014000180090001006c61737400000000040002800800034000000151f649667d14ffa6efdda52caff3ad6588fe05ef3660b177529be1d3d807b041d400000000", @ANYRES64=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x810}, 0x24050060) 16.258756618s ago: executing program 0 (id=1751): prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000280)=0x6027, 0x4) ppoll(&(0x7f0000000480)=[{r1, 0x2400}, {0xffffffffffffffff, 0x80}, {r0, 0x4021}, {0xffffffffffffffff, 0x2e}, {r0, 0xf}, {0xffffffffffffffff, 0x8210}, {0xffffffffffffffff, 0x43f2}, {r0, 0x4000}, {r0, 0x4010}, {0xffffffffffffffff, 0x8600}, {r1, 0x1342}, {r1, 0x3040}, {r1, 0x210}], 0xd, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x3860701b518628ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200008c4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = creat(0x0, 0xd931d3864d39dd58) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5402", @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES8=r3, @ANYRES16, @ANYRESOCT=r5, @ANYRES8=r2, @ANYRES16=r4], 0x69) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='writeback_pages_written\x00', r7, 0x0, 0x2}, 0x18) 16.239166288s ago: executing program 0 (id=1752): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x119441) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) socket(0x27, 0x80a, 0x9) listen(r3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x80000) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000200), 0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003200), 0x0, 0x0) pread64(r5, &(0x7f0000003900)=""/37, 0x25, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) 16.171199889s ago: executing program 0 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r5, 0x16, 0x1, 0x6, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r5, r6, 0x2f, 0x0, 0x0, @void, @value=r5, @void, @void, r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9a}, [@ldst={0x5, 0x0, 0x2, 0x0, 0x0, 0x50}]}, 0x0, 0x5, 0xd2, &(0x7f00000005c0)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x10}, 0x94) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x13) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000040)={0xffffffb7, 0x200401, 0x0, 0xc7cf, 0x3, "40000868245eb03100", 0x23fffd, 0x1fd}) (async) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000040)={0xffffffb7, 0x200401, 0x0, 0xc7cf, 0x3, "40000868245eb03100", 0x23fffd, 0x1fd}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x9) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x9) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9ab8281219b26fbd}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', r11, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r12, 0x2000, 0x0) syz_io_uring_setup(0x2f41, &(0x7f0000000180)={0x0, 0xdec5, 0x13080, 0x0, 0x2b8}, &(0x7f0000000080), &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15.570086501s ago: executing program 0 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1401000028000100043f0000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.469168273s ago: executing program 0 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15.439013443s ago: executing program 32 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.551495772s ago: executing program 1 (id=1909): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x0, 0x4, &(0x7f0000000080)='GPL\x00'}, 0x30) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) 3.469588253s ago: executing program 1 (id=1910): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) fchmod(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='ext4_ext_handle_unwritten_extents\x00', r1, 0x0, 0x5}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.534017781s ago: executing program 1 (id=1935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x2}, 0xc9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f00000013c0)) sendto$inet6(r8, 0x0, 0x0, 0x22040881, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x7, @loopback, 0xfffffff9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000410000000000000001000000", @ANYRES32, @ANYBLOB="020000000000d80200000000000000c01a78005b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000300"/28], 0x50) 1.874026294s ago: executing program 3 (id=1947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x2, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x9, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x60040000) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x66, 0x6, "b2c12b5b7e517aac261dc3b899c01155b29e0d935620dc0e3c49d56735a82bf73eedbf6e1c6c18fd765637031499dcd833d886e932273adb75b8aa337fd2d2f28997789c456c856d97e321db3daa94a192689fad3fa561f0892eb493b1d8976d4fbd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x90, 0x6, "ca5b3a60d3acc9b8edb889f6069797814b71e47548340126120a9eaa8b914a7e9d8a8f4ff391a147cd6d5d1d7442c5f1a519790267f8443b85e01a16a432f60542d38d1eb7119ab07a5997de16e8bf599114c2685948420f05c2c23f89eef00300e323717bb9369cda05b10037084a672c68aa3f9ddd4fd6cdefdab134483bf0fb816f4799a4c1104d6ae920"}, @NFTA_TABLE_USERDATA={0x92, 0x6, "5e3bce99b88897544c87f0cdb19c67a591b420ee055fbbd91a99c9f04d0e9fd86405f0c87083b6d94e093f38885b47633a5c00883efbbca9b6820cace5ccab153cfea12be63b230028aba9aac60b00e6b3cde8a6a2449a40e5befb5f801e2d23cfe7a0d5966799250a61a6a38b1fe8ab30087c2a844ea41fe864c62e39c5974f880d7bf28ca045c3285b53390788"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "84d913a65ea0d962010a6fbfcbd5ea82aa40ea7bb651c0d04364174b27eecdfc220561522fb6886362d80b57282dbb1079842b3acfab57b59683eb751a8829123de4e5ea06626f11c15d3b4b0a797d4736c5951f6b58a9135b9eeeec0b5922784135aaa89954c342af27b33bb87d6e5ffd67a8b24a69573bfa312e33caa98445d54e5454caf4cf7a2105b9e5f39b72358fdfc4279362b2b7acfebb72b5b72242bcacbfd4ae1c51cb4c443d1c5c3653677d03fb05c2fceaea8b6dd25d115ba1d5f91dae0d5b2b4d8569894cdc67bb1ca2d643dafff8231f1e8da92b7d5a1a0e085474e3e0"}]}, @NFT_MSG_DELCHAIN={0xf8, 0x5, 0xa, 0x606, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x14, 0xc, "455f4d10d7fce1c25806b9db39b9693e"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5fbe}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5ae5ef6d}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x63, 0x8, "9b4995497f2c7630123412e867a2cf6fbfe97d43926305dc8908ab9c883eddf0f54979473032e664f017fc43a24ce129b86ab09a9e027ab4ecf15a6d8dea1d1e643bd2abc55bd7a1b287175fedde6ec5b6f4366891a8e4c2147e01207f99d2"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x128, 0x8, 0xa, 0x304, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x91e0}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0xc60, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0xc40, 0x11, 0x0, 0x1, @dynset={{0xb}, @val={0xc30, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x20, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_DYNSET_EXPRESSIONS={0xbe0, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xb8c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xb7c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BITWISE_MASK={0x374, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "9d292cfe6f2f9dfb391f25318af6d1a26bf70cb9ff4a9184e91434cd75d133"}, @NFTA_DATA_VALUE={0x86, 0x1, "ee5f88e07bfe6dcc1bc49a86f2a17d13f34411a6fee0225d8c38d00ba7678618cc24ce47705ebfab5326f526033e73c126ed36808462bb152a707ad795007756754bfe749c1df980bd8d8dbf979a2f605a0c79e490583b13e03c647a70ac085c7b55bc6c456b27629c831037999d4e44941b785edc6ed161f186ea94ced6591a7154"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "e0cc76ab3708d02c7059ec7802a219e8dbac39bf2b387925652807b0b4229e2eb22fd9e9ec0422e0c50004fb0c653e0532fe59d3dca96d1b641a3b7846021865f4f890f2e79f22c46d1a5e7098ebd30f79eb64cfbdaed2f4a6f9325a19fdf0cacd9125bb55fded2b559529ae89efd40f5f670688e4de9f67453ae12a7219aceb2b6c96809d535da7795645d0726ccbacb6e8d724bda9d5aa2706a9606cd7a927cd46fec00e2b47d5f8924ceeb45dafb19e7088ee8bf6a4a37d23fea2d00196b33396040f9fd5fe8d9085bd53abedb0de86e9fa51c782237551a05cd0bd65c594f970c012f4500a53234a2bf3874c681d724c217d"}, @NFTA_DATA_VALUE={0xd1, 0x1, "1e6faeb9b569776dfa37d5398bbccc87301fa63a33162b490a90f3a64e7ac51c4848f6b93414f69372b669f7b7668bccedb97a5d4f79dcae846d655b6a27c3b64277c7a319ce24cf2886d24cd90b169d3960aad1f9ea075fef9dabe7e9b449562f933d0ebd060bda3ab94a409d317c877531c8e618b4645483c73968f0323dfb9409d1e67c0ce06b0f6e0efdabc3368daa3fea1d6cd2e1516fd5f45e794adef9dba88b88973b278d7dd89b141e20a89ba2c65aec9536b48ddd98ef6f86544edc23a42ac73dec1519e134f7e871"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_MASK={0x230, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x73, 0x1, "cb5b48b53341f7a06f0fecae0b393eeb177c180fdd7105f142028361ca714457751723e7653d6974935e9810278b5d3a866e08c51adbf6bcc44bb662c7da483296dc9bdbe9778bad94fed79d541ca1c513974fb6344114db83761ec9865aebcdf5bb8be3704cbfd498f0b8951fa03f"}, @NFTA_DATA_VALUE={0x81, 0x1, "275d8bb29a5bcbc4a3e7b5fa741552e90c0dce39fdea00f17e8aaade51fffdee5c6fa88892b9d63b30b5f5fb349661f69b4c4175d11965bd4dd5ab7cf19b5504ecadb12400d3945d8822afa4529e57c9ae9227b1571cba15826aa3a0c9e0f2c4b38dc8f1d8fb9ecda8fe9115107fd2f61455588b1e4af123c00fffcef3"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x85, 0x1, "fef9f048ff1af530e02c6f066adc4cf44b5c2f2bdf239d78db8998a135b71feeb77747d10f58a23bd62581c8642f0db1379677ea001ad2b281924f4b5fe857c639db26ac7c416bd213da654e9c5058c7714e5409e181751d808e70681a5124c79ee5227f77bb04584ef0fea95f76e38adf6013d81255346a17ff20943dbf9d3a8a"}]}, @NFTA_BITWISE_DATA={0x2c0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "5ccc8d9c76946af39d7507badd25d15886b76a16b903865734fce779434e9128ad8f6ead2bb1cf6c42ded352f269072d182a87addc506be98bd8390f45d43e606a645f67bde38815a309cbe1b46b53b9d9a20cc706fe79e917e884c7376be026fa0784b96126b7a8e459f4ba6cdde43d4219ce1ef06b80bf16f1474fa22cdbcd38"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "f818cf1148add0b1ea4ab236cec1275d73641b3bbad71ab5bd1f971d95ede9f15b22955e82cd8981c54977f2bb49f9f1ccb74f9eb44c0ab733d7cb24565410567ebab7f3dc2e79386418caafa7612d2f3021d2b3706966163de38725e096d0f5424436410407a9224d069685a361f0a9b7d28d627a4991"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x55, 0x1, "8f512607ca41a736db78813a03005e394ed5b9156e871b3e4d5fd5e502f6725be0dfb5306077134f86b88f06421e3232724edb020c650ad7b1dde41a304c5dcfcbee3f1ef5f08100e7e49947dbd639c89d"}, @NFTA_DATA_VALUE={0xba, 0x1, "08436064ef70e710704988f59ff8ff8cd0791a3064aedece63d56a7659f72dc5f31d6ed9b686dd1b149211ddae34b9dfbd9c5ea1c87eebbdc32680af7be8943248e31d2f067f923537e6a3559ff701559605b1024e4e81cf16581664f24a973652ab5e952fe6fda98a0a6b6875ac04b48d40776ccd65057dd0e1538f9ef8e5058e5d61f0e0e269556ca539e9bb282d9e303d463a5a64f1b6500669ea340a7a52a03500020ca8161cd7fcdcd85df0db597876b5a8fc20"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6e3c}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x2f4, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "79ca7630d120e6d5c85fa59ceac948f5cb7595524fa9f5b32c79f92d80b539f254c4b1a85d5b49b48295ad547e5b8295d4bcc29ffa9e83fa4ef3b599f20ed16d92b44986c245d28003632bd81a0942417e4d81d64a9c2891aa620c954cf62aa85edc1b0deccd80737cef5523d9646436a0c82a033e256266478399df5933a9eb259b63453fbc848fb1c8cb6152a3c8bd79de4a"}, @NFTA_DATA_VALUE={0xc6, 0x1, "e5ecb19cd7ebb701b0c7712141f059113e1416fb9504b8f11ace1a39a97f5c5e716c9ece89c40d2c81f037646ea351a9bb33db6da81155908eeeb9eb9422fe39e20e17e124e4e5c227b02a9d82930385b07a0d5f420bae85cf6dac77204c8e577649909464c0f2523dbcf8ed71d89dd1e4a68db5c0b62104127fd536ab7f4ef7b129aa480ef255e9fb2c62ea1f6a80d293cb897fa7bd0333fcfa8c21de954db5e0cffc293770f01df0fa10fecf8385f0c04e9679a83f32e4a504d03e524c159f3595"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x86, 0x1, "4a9991ea77b4f1a10950f80903805c60eee003938a5dcb0d68012ef8ade3eeca7d1fe91ff16dfa3e28cc3d8f8735acf79ff5c09c56b2b4d539b7286414882586206be3304373a318921b8a6df7e4469a91b85ccf8f3016a9490f4a8bf62d4c66a2abd922ab5dcccae1572c6432477308383cb8fc5ad6d6f02527157444d27f676feb"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_OP={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x11f4}, 0x1, 0x0, 0x0, 0x44000}, 0x804) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) r6 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {0xf, 0xfff1}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 1.825480825s ago: executing program 4 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c3a0840c9e164d8e468d4d45c66644e6f3d173376f10e073ac6911f427c1fc48c0aa82553795f115d378acd83fd", @ANYRESHEX=r6, @ANYBLOB=',k']) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r9 = socket$kcm(0xa, 0x1, 0x106) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r9, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x57) 1.795464605s ago: executing program 4 (id=1949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.748109656s ago: executing program 4 (id=1950): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='i2c_slave\x00', r0, 0x0, 0x101}, 0x18) getrandom(0x0, 0x0, 0x3) socket$inet6(0xa, 0x2, 0x0) gettid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000002001000001", @ANYRES32=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) fcntl$notify(r6, 0x402, 0x3) 1.746877016s ago: executing program 3 (id=1951): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x162, &(0x7f00000000c0)="$eJzs2z3r01AUB+ATW7Xq0lkcAi5ORZ0cFamgBhSlg04K1aWVgl2iU/CTuPrhBOnUQbiikVZLi/gSE/59nqUHftxyznBzuYE8u/RqNl0sXy4ermKQZdG/GXmssxjGqehFrQoA4CRZpxSfUkrpbBXn3kdKqe2OAICmOf8B4Pj88vy/0VJjAEBj3P8B4Pg8fvL0/q2iGD/K80HEx6qclJP6t87v3C3GV/NvhttVq7Kc9Db5tTrPf85Px/nv+fW9+Zm4crnOv2a3HxQ7+YWYNj8+AAAAHIVRvrH3fj8aHcrr6of3Azv3935c7P+3MQCA37B883b2fD5/8VrR8SKqTrTRweJzSukPlr/7UG+B+b1OTPFviywi/u5/2n4yAU3bbvq2OwEAAAAAAAAAAAAAAA5p9mukXtvjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF5fAgAA//+5fk3Q") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (fail_nth: 1) 1.614193979s ago: executing program 3 (id=1952): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x30b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {}, {0xa, 0xd}}}, 0x24}}, 0x404c080) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x2c}}, 0x0) 1.586252929s ago: executing program 1 (id=1954): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x162, &(0x7f00000000c0)="$eJzs2z3r01AUB+ATW7Xq0lkcAi5ORZ0cFamgBhSlg04K1aWVgl2iU/CTuPrhBOnUQbiikVZLi/gSE/59nqUHftxyznBzuYE8u/RqNl0sXy4ermKQZdG/GXmssxjGqehFrQoA4CRZpxSfUkrpbBXn3kdKqe2OAICmOf8B4Pj88vy/0VJjAEBj3P8B4Pg8fvL0/q2iGD/K80HEx6qclJP6t87v3C3GV/NvhttVq7Kc9Db5tTrPf85Px/nv+fW9+Zm4crnOv2a3HxQ7+YWYNj8+AAAAHIVRvrH3fj8aHcrr6of3Azv3935c7P+3MQCA37B883b2fD5/8VrR8SKqTrTRweJzSukPlr/7UG+B+b1OTPFviywi/u5/2n4yAU3bbvq2OwEAAAAAAAAAAAAAAA5p9mukXtvjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF5fAgAA//+5fk3Q") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r9) tkill(r9, 0x3c) ptrace$peeksig(0x4209, r9, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) fcntl$setlease(r8, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 1.487737681s ago: executing program 3 (id=1955): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x1000, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) kcmp(r1, r2, 0x0, r0, r0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24040000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000080)={r6}) 1.487330421s ago: executing program 3 (id=1956): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8040800, 0x0, 0x0, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="232aa06012f4d20a687e616b827aa80ebdc2cf6cd286c7d251b3a9301520b53832749bc4dc389c2ba4deabc8337887e87b05d8fe0b22048dab1791de9eba5b76dea63ca05b438d1abd23baba7985d4b668806d3fe14e10ee64f3c91b7ae2d7004b4875d8b529535294ab0c07f881766a41bbe53e157f614a0b06cc0d046ab7b6c0f53c3a7e34c9c814e7ee5e104ea33d5e19efb0f2b16df1d54da3f97c9dc7cdff8c181a5c17742176b8793d4bd3cb60") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, &(0x7f0000000880)="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"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x7, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000400000000008000f00fd000000", 0x24) 1.386636083s ago: executing program 5 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x1, 0x6, 0x0, 0x401, 0xffffffffffffffff, 0x28, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000b9ea070080000000000600000005b1030009000000180000007f0000000000000080000000183300000200000000000000000000001d9b0001000000009500000000"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x46, &(0x7f0000000380)=""/70, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xd, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r2, r0, r0, r0, r0, r0], &(0x7f0000000600)=[{0x3, 0x1, 0x2, 0x5}, {0x5, 0x1, 0x3, 0x4}, {0x0, 0x5, 0x8, 0x9}], 0x10, 0xdd9}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffff5f14, 0xc0f5, 0x4000000000, 0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000094, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120037d2dada48df6de3fbc893a150280785462e0cadef4a610aa153b9743eb3232ebde0af88", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000500)={0x0, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1.298339095s ago: executing program 5 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x40000000, 0x2000, 0x0, 0x0, r0, 0x0}]) 1.201334897s ago: executing program 5 (id=1960): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007c577e1700000000dace", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 1.05417871s ago: executing program 5 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.05362334s ago: executing program 2 (id=1962): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x0, 0xff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x18) ioperm(0x2, 0x7fb, 0x100) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.053028s ago: executing program 5 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000007c0)=""/89) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07cf590004000000080000000100000000924065", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) 962.553922ms ago: executing program 2 (id=1964): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x80c80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x8c, r9, 0x308, 0x1000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "bcc96cca57013363571371c4f094024b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f763ef49383e1a8b8575a6a98467a5b0"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "f61f1a4ee790c38d15821a6e7ac0fc36"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5344626fcae7aa7ebee1e4fa55736bed"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0d7c5b59313d798feb8b43e93f73f3bb"}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="88ff53e4dfbe6583496eb10fc9df25080003cdd657a597e762142057ce5b938f4291cbf20fce6a562751a50603d44aa495a30d349f0e165e8a123612a1cc06dad7d51bc96ccab9eed124ed4bccfb87694bebb1521d54f3e89398a1bf639e480f5bcd5dc13aa02639298fc748a550f7b0f2a9ce0090fe9cab95f86588a7cad94e74a19990bfab994f44", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x24000000) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x84804}, 0x801) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) 847.512554ms ago: executing program 4 (id=1965): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x30b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {}, {0xa, 0xd}}}, 0x24}}, 0x404c080) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wg1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x2c}}, 0x0) 686.285187ms ago: executing program 2 (id=1966): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000002fc0)=""/140, 0x8c}], 0x1, 0x80000001, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x18c2, &(0x7f0000000640)={0x0, 0x8000ec25, 0x8, 0x0, 0x40000334}, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @timestamp={0x2a, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7f}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 292.912594ms ago: executing program 1 (id=1967): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x10, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}) io_uring_enter(0xffffffffffffffff, 0x5380, 0xc2dc, 0x4f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5c6, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) pidfd_send_signal(0xffffffffffffffff, 0x12, &(0x7f0000000140)={0x12, 0x10001, 0x804}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000004c0)}, {0x0}, {&(0x7f00000007c0)="11a0e4fa2d80a3d5878f65d150e1fe2bf18d66ebbbf2b130629ffc4d46df9a65234a26b8fd9a5cda08490cccd81662735bc675b0363a5e0e86f705a808ca4c79d951927c8bb82b09724bf204f5015dd872eb37fb00e21101026576b3bb4e61852f3dbf03c6ef67798c12db9872af7d50df7a1e48f15be45098e3c5c24d7defed59ff3e955e81acdc570e8d72629295764de916b593bdd58e0d8a874db0f1fcf5c0bd735475dc094f8923a8e84488d85aaa8ec41201", 0xb5}, {&(0x7f0000000600)="f8acf6e21c9198aa15588f7452b48cc2ef3f393380c18194fe29f7903a3f1f97776b5dd3a97f8d67df", 0x29}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="68000000000000000a01000005000000b7c2a6cb16a9e3bb63630f82ff9ea8ae21592bb48e74a4d44ed22871b926f1cf08a7cc7f49cbfb52e33a79fe4d9c2a0f545c654ec8767ab4d338e5746fb92546c076bce0aa8ff8b792c2d2f50de6000000000088c7db99d2c68f728398caa9bebb1e18bb475ebd878d41dfa4130610e39a0687446f3924b59014f4d1b1443ad3e737fb12d74ca01a052597d796ba759399b30178c04c058f2c3738b7ede8c910030000000d260ae4a4e261804ff4064200000000"], 0x68}, 0x4064005) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) 292.181204ms ago: executing program 3 (id=1968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x81f691264fe78935, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30}, 0x94) process_vm_readv(0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000380)=""/211, 0xdd}, {&(0x7f0000000480)=""/139, 0x8b}], 0x5, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000800)=""/137, 0x89}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)}], 0x22, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000980)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) pipe(&(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x5000000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 287.054684ms ago: executing program 4 (id=1969): r0 = memfd_create(0x0, 0x7) (async, rerun: 64) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) (rerun: 64) splice(r1, 0x0, r0, 0x0, 0x4, 0x4) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @void}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$inet6(0xa, 0x4, 0x9) 281.784335ms ago: executing program 1 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) 222.691226ms ago: executing program 33 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) 178.201336ms ago: executing program 2 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) shutdown(r0, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e440, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getrlimit(0x5, &(0x7f0000000240)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 177.712646ms ago: executing program 4 (id=1973): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000f80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb00"/55}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x7, 0x50000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x50, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x0, 0x6, 0x37}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x10, 0x6, 0x10001) write$binfmt_misc(r4, &(0x7f0000000200), 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x1e8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a0e438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) 129.892437ms ago: executing program 2 (id=1974): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a140000001a0a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) 61.255219ms ago: executing program 5 (id=1975): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='i2c_slave\x00', r0, 0x0, 0x101}, 0x18) getrandom(0x0, 0x0, 0x3) socket$inet6(0xa, 0x2, 0x0) gettid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000002001000001", @ANYRES32=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(r5, 0x402, 0x3) 0s ago: executing program 2 (id=1976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) pause() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffff, 0x6, 0x8, 0x10a0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x4}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2af, 0x8000, 0x6, 0x8100, r4, 0x5, '\x00', 0x0, r5, 0x3, 0x2, 0x1, 0xf, @value=r6}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRES64=r0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000004000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ff000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0x1aa) r10 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000140)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.1282'. [ 114.540216][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1282'. [ 114.549512][ T7117] loop0: detected capacity change from 0 to 512 [ 114.571494][ T7117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.588057][ T7117] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.647027][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.674947][ T29] kauditd_printk_skb: 716 callbacks suppressed [ 114.674977][ T29] audit: type=1326 audit(1756916611.712:130857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.705059][ T29] audit: type=1326 audit(1756916611.712:130858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.729726][ T29] audit: type=1326 audit(1756916611.712:130859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.754401][ T29] audit: type=1326 audit(1756916611.712:130860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.778292][ T29] audit: type=1326 audit(1756916611.712:130861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.802945][ T29] audit: type=1326 audit(1756916611.712:130862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.826711][ T29] audit: type=1326 audit(1756916611.712:130863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.850329][ T29] audit: type=1326 audit(1756916611.712:130864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.874230][ T29] audit: type=1326 audit(1756916611.712:130865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 114.898223][ T29] audit: type=1326 audit(1756916611.712:130866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 115.198509][ T7129] loop2: detected capacity change from 0 to 512 [ 115.266202][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.308408][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.338182][ T7129] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.351082][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7133 comm=syz.1.1287 [ 115.365249][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7133 comm=syz.1.1287 [ 115.378264][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7133 comm=syz.1.1287 [ 115.390997][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7133 comm=syz.1.1287 [ 115.404981][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7133 comm=syz.1.1287 [ 115.522160][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.623415][ T7147] loop2: detected capacity change from 0 to 1024 [ 115.656860][ T7147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.688622][ T7147] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.744594][ T7147] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 115.761250][ T7147] EXT4-fs (loop2): Remounting filesystem read-only [ 115.761741][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 115.800722][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'. [ 115.810980][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.839813][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.874725][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.192437][ T7166] loop4: detected capacity change from 0 to 128 [ 116.205227][ T7166] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.228918][ T7166] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.245154][ T7166] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.287739][ T7168] lo speed is unknown, defaulting to 1000 [ 116.403349][ T7168] lo speed is unknown, defaulting to 1000 [ 116.890005][ T7178] loop4: detected capacity change from 0 to 512 [ 116.940102][ T7178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.954884][ T7178] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.990401][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.033116][ T7184] loop4: detected capacity change from 0 to 512 [ 117.062845][ T7184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.077042][ T7184] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1302: bad orphan inode 13 [ 117.096374][ T7184] ext4_test_bit(bit=12, block=18) = 1 [ 117.101819][ T7184] is_bad_inode(inode)=0 [ 117.106008][ T7184] NEXT_ORPHAN(inode)=2130706432 [ 117.110988][ T7184] max_ino=32 [ 117.114232][ T7184] i_nlink=1 [ 117.191520][ T7184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.273778][ T7188] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 117.282502][ T3379] IPVS: starting estimator thread 0... [ 117.326056][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.401192][ T7197] netlink: 'syz.3.1306': attribute type 6 has an invalid length. [ 117.412376][ T7195] Falling back ldisc for ttyS3. [ 117.412391][ T7193] IPVS: using max 2160 ests per chain, 108000 per kthread [ 117.459680][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 117.478169][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1307'. [ 117.496671][ T7200] process 'syz.4.1305' launched './file1' with NULL argv: empty string added [ 117.864262][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 117.873280][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1311'. [ 118.006666][ T7216] loop1: detected capacity change from 0 to 512 [ 118.260123][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.273648][ T7216] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.345245][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.350588][ T7224] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1315'. [ 118.369069][ T7224] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1315'. [ 118.484524][ T7225] lo speed is unknown, defaulting to 1000 [ 118.553256][ T7225] lo speed is unknown, defaulting to 1000 [ 118.748674][ T7233] loop0: detected capacity change from 0 to 512 [ 118.765134][ T7233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.807966][ T7236] loop3: detected capacity change from 0 to 128 [ 118.817577][ T7233] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1317: bad orphan inode 13 [ 118.840940][ T7233] ext4_test_bit(bit=12, block=18) = 1 [ 118.848569][ T7233] is_bad_inode(inode)=0 [ 118.852770][ T7233] NEXT_ORPHAN(inode)=2130706432 [ 118.857719][ T7233] max_ino=32 [ 118.860943][ T7233] i_nlink=1 [ 118.871908][ T7236] FAT-fs (loop3): Directory bread(block 32) failed [ 118.882335][ T7236] FAT-fs (loop3): Directory bread(block 33) failed [ 118.898234][ T7236] FAT-fs (loop3): Directory bread(block 34) failed [ 118.908685][ T7233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.927794][ T7236] FAT-fs (loop3): Directory bread(block 35) failed [ 118.943032][ T7236] FAT-fs (loop3): Directory bread(block 36) failed [ 118.952162][ T7236] FAT-fs (loop3): Directory bread(block 37) failed [ 118.959350][ T7236] FAT-fs (loop3): Directory bread(block 38) failed [ 118.967998][ T7236] FAT-fs (loop3): Directory bread(block 39) failed [ 118.974872][ T7236] FAT-fs (loop3): Directory bread(block 40) failed [ 118.987898][ T7236] FAT-fs (loop3): Directory bread(block 41) failed [ 118.996404][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.041305][ T7238] loop0: detected capacity change from 0 to 512 [ 119.071096][ T7238] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 119.081702][ T7238] System zones: 0-2, 18-18, 34-35 [ 119.093101][ T7238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.109916][ T7238] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.211259][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.223314][ T7249] loop4: detected capacity change from 0 to 128 [ 119.243559][ T7249] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.267295][ T7254] loop0: detected capacity change from 0 to 512 [ 119.274776][ T7254] EXT4-fs: dax option not supported [ 119.284392][ T7249] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.326237][ T7249] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.503038][ T7259] tipc: Enabled bearer , priority 0 [ 119.510213][ T7259] syzkaller0: entered promiscuous mode [ 119.515931][ T7259] syzkaller0: entered allmulticast mode [ 119.538196][ T7259] tipc: Resetting bearer [ 119.545592][ T7258] tipc: Resetting bearer [ 119.553611][ T7258] tipc: Disabling bearer [ 119.833875][ T7265] loop1: detected capacity change from 0 to 512 [ 119.997032][ T7265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.042954][ T7265] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.115346][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 120.115362][ T29] audit: type=1400 audit(1756916616.733:131223): avc: denied { write } for pid=7276 comm="syz.2.1333" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.175969][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 120.198130][ T7278] loop2: detected capacity change from 0 to 512 [ 120.258552][ T7283] loop0: detected capacity change from 0 to 128 [ 120.286743][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.297719][ T7281] loop3: detected capacity change from 0 to 2048 [ 120.317412][ T7278] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.333436][ T7283] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.371617][ T7281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.417801][ T7283] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.562295][ T7283] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.581407][ T7292] FAULT_INJECTION: forcing a failure. [ 120.581407][ T7292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.594994][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.3.1334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.595026][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.595043][ T7292] Call Trace: [ 120.595052][ T7292] [ 120.595062][ T7292] __dump_stack+0x1d/0x30 [ 120.595088][ T7292] dump_stack_lvl+0xe8/0x140 [ 120.595127][ T7292] dump_stack+0x15/0x1b [ 120.595143][ T7292] should_fail_ex+0x265/0x280 [ 120.595168][ T7292] should_fail+0xb/0x20 [ 120.595236][ T7292] should_fail_usercopy+0x1a/0x20 [ 120.595258][ T7292] _copy_to_user+0x20/0xa0 [ 120.595288][ T7292] simple_read_from_buffer+0xb5/0x130 [ 120.595347][ T7292] proc_fail_nth_read+0x10e/0x150 [ 120.595374][ T7292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.595432][ T7292] vfs_read+0x1a5/0x770 [ 120.595498][ T7292] ? __rcu_read_unlock+0x4f/0x70 [ 120.595523][ T7292] ? __fget_files+0x184/0x1c0 [ 120.595556][ T7292] ksys_read+0xda/0x1a0 [ 120.595654][ T7292] __x64_sys_read+0x40/0x50 [ 120.595682][ T7292] x64_sys_call+0x27bc/0x2ff0 [ 120.595713][ T7292] do_syscall_64+0xd2/0x200 [ 120.595793][ T7292] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 120.595823][ T7292] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.595933][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.595954][ T7292] RIP: 0033:0x7f965e13d5fc [ 120.595969][ T7292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.596005][ T7292] RSP: 002b:00007f965cb86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.596025][ T7292] RAX: ffffffffffffffda RBX: 00007f965e376090 RCX: 00007f965e13d5fc [ 120.596040][ T7292] RDX: 000000000000000f RSI: 00007f965cb860a0 RDI: 0000000000000009 [ 120.596056][ T7292] RBP: 00007f965cb86090 R08: 0000000000000000 R09: 0000000000000000 [ 120.596071][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.596086][ T7292] R13: 00007f965e376128 R14: 00007f965e376090 R15: 00007ffc1d221508 [ 120.596111][ T7292] [ 121.375637][ T7291] loop2: detected capacity change from 0 to 2048 [ 121.393686][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.443516][ T29] audit: type=1326 audit(1756916617.960:131224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.467569][ T29] audit: type=1326 audit(1756916617.960:131225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.491277][ T29] audit: type=1326 audit(1756916617.960:131226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.491791][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.517648][ T29] audit: type=1326 audit(1756916617.960:131227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.552960][ T29] audit: type=1326 audit(1756916617.960:131228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.576898][ T29] audit: type=1326 audit(1756916617.960:131229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.650287][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.775043][ T29] audit: type=1326 audit(1756916617.960:131230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.798601][ T29] audit: type=1326 audit(1756916617.960:131231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.824659][ T29] audit: type=1326 audit(1756916617.960:131232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.1.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962941ebe9 code=0x7ffc0000 [ 121.923030][ T7309] loop2: detected capacity change from 0 to 512 [ 121.940554][ T7309] EXT4-fs: quotafile must be on filesystem root [ 122.065890][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 122.075032][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 122.084434][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1341'. [ 122.264387][ T7320] loop2: detected capacity change from 0 to 512 [ 122.344463][ T7320] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.352694][ T7320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1343: bg 0: block 248: padding at end of block bitmap is not set [ 122.368503][ T7320] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1343: Failed to acquire dquot type 1 [ 122.381435][ T7320] EXT4-fs (loop2): 1 truncate cleaned up [ 122.389673][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.405022][ T7319] netlink: 'syz.2.1343': attribute type 13 has an invalid length. [ 122.650215][ T7328] FAULT_INJECTION: forcing a failure. [ 122.650215][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.666828][ T7328] CPU: 1 UID: 0 PID: 7328 Comm: syz.3.1346 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.666860][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.666873][ T7328] Call Trace: [ 122.666881][ T7328] [ 122.666889][ T7328] __dump_stack+0x1d/0x30 [ 122.666985][ T7328] dump_stack_lvl+0xe8/0x140 [ 122.667008][ T7328] dump_stack+0x15/0x1b [ 122.667023][ T7328] should_fail_ex+0x265/0x280 [ 122.667044][ T7328] should_fail+0xb/0x20 [ 122.667136][ T7328] should_fail_usercopy+0x1a/0x20 [ 122.667159][ T7328] _copy_from_iter+0xd2/0xe80 [ 122.667189][ T7328] ? alloc_pages_noprof+0xa9/0x130 [ 122.667293][ T7328] ? skb_page_frag_refill+0xc0/0x300 [ 122.667327][ T7328] kcm_sendmsg+0x9b2/0x1700 [ 122.667372][ T7328] ? __pfx_kcm_sendmsg+0x10/0x10 [ 122.667479][ T7328] __sock_sendmsg+0x142/0x180 [ 122.667561][ T7328] sock_write_iter+0x165/0x1b0 [ 122.667617][ T7328] ? __pfx_sock_write_iter+0x10/0x10 [ 122.667651][ T7328] vfs_write+0x527/0x960 [ 122.667686][ T7328] ksys_write+0xda/0x1a0 [ 122.667716][ T7328] __x64_sys_write+0x40/0x50 [ 122.667794][ T7328] x64_sys_call+0x27fe/0x2ff0 [ 122.667842][ T7328] do_syscall_64+0xd2/0x200 [ 122.667876][ T7328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.667907][ T7328] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.667940][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.667978][ T7328] RIP: 0033:0x7f965e13ebe9 [ 122.667994][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.668029][ T7328] RSP: 002b:00007f965cba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.668102][ T7328] RAX: ffffffffffffffda RBX: 00007f965e375fa0 RCX: 00007f965e13ebe9 [ 122.668114][ T7328] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000005 [ 122.668127][ T7328] RBP: 00007f965cba7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.668139][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.668228][ T7328] R13: 00007f965e376038 R14: 00007f965e375fa0 R15: 00007ffc1d221508 [ 122.668248][ T7328] [ 122.684945][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.903993][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.913180][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.924654][ T7320] syz.2.1343 (7320) used greatest stack depth: 9280 bytes left [ 122.933104][ T7334] loop3: detected capacity change from 0 to 512 [ 122.942270][ T7334] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.950973][ T7334] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1348: bad orphan inode 13 [ 122.961468][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.971600][ T7334] ext4_test_bit(bit=12, block=18) = 1 [ 122.977354][ T7334] is_bad_inode(inode)=0 [ 122.982454][ T7334] NEXT_ORPHAN(inode)=2130706432 [ 122.987355][ T7334] max_ino=32 [ 122.990979][ T7334] i_nlink=1 [ 122.994656][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.996617][ T7334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.055119][ T7340] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 123.065506][ T7341] loop2: detected capacity change from 0 to 128 [ 123.078591][ T7341] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.108236][ T7341] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.119767][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.146226][ T7341] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.231515][ T7351] tipc: Enabled bearer , priority 0 [ 123.244246][ T7355] loop2: detected capacity change from 0 to 512 [ 123.259369][ T7355] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 123.268941][ T7351] syzkaller0: entered promiscuous mode [ 123.270456][ T7355] EXT4-fs (loop2): 1 truncate cleaned up [ 123.276731][ T7351] syzkaller0: entered allmulticast mode [ 123.286623][ T7355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.300992][ T7353] selinux_netlink_send: 15 callbacks suppressed [ 123.301066][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7353 comm=syz.1.1353 [ 123.320759][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7353 comm=syz.1.1353 [ 123.334184][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7353 comm=syz.1.1353 [ 123.347910][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7353 comm=syz.1.1353 [ 123.360933][ T7353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7353 comm=syz.1.1353 [ 123.381264][ T7357] loop4: detected capacity change from 0 to 512 [ 123.388955][ T7351] tipc: Resetting bearer [ 123.417230][ T7348] tipc: Resetting bearer [ 123.424013][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.433953][ T7348] tipc: Disabling bearer [ 123.445461][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.464277][ T7357] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.498160][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.741387][ T7380] __nla_validate_parse: 6 callbacks suppressed [ 123.741406][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 123.779823][ T7380] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 123.809776][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.819280][ T7380] loop0: detected capacity change from 0 to 164 [ 123.827855][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.964578][ T7388] netlink: 'syz.3.1363': attribute type 6 has an invalid length. [ 124.091861][ T7400] tipc: Enabled bearer , priority 0 [ 124.100691][ T7403] loop3: detected capacity change from 0 to 512 [ 124.112608][ T7400] syzkaller0: entered promiscuous mode [ 124.118946][ T7400] syzkaller0: entered allmulticast mode [ 124.133656][ T7400] tipc: Resetting bearer [ 124.142993][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.157074][ T7403] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.179579][ T7399] tipc: Resetting bearer [ 124.249603][ T7399] tipc: Disabling bearer [ 124.255995][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.317107][ T7412] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1372'. [ 124.327135][ T7412] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1372'. [ 124.387956][ T7413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1371'. [ 124.399917][ T7413] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1371'. [ 124.664713][ T7425] netlink: 'syz.2.1376': attribute type 6 has an invalid length. [ 124.749355][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 124.759293][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1380'. [ 124.774095][ T7437] loop0: detected capacity change from 0 to 512 [ 124.782929][ T7437] EXT4-fs: quotafile must be on filesystem root [ 124.794009][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7438 comm=syz.4.1381 [ 124.807664][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=7438 comm=syz.4.1381 [ 124.814948][ T7440] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 124.820674][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7438 comm=syz.4.1381 [ 124.820711][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7438 comm=syz.4.1381 [ 124.820736][ T7438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7438 comm=syz.4.1381 [ 124.890285][ T7441] bridge0: entered allmulticast mode [ 124.911090][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1374'. [ 124.920179][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1374'. [ 124.929514][ T7424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1374'. [ 125.077339][ T7440] bond0: entered promiscuous mode [ 125.083584][ T7440] bond0: entered allmulticast mode [ 125.091295][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.132249][ T7440] bond0 (unregistering): Released all slaves [ 125.246026][ T7456] loop2: detected capacity change from 0 to 512 [ 125.254887][ T7456] EXT4-fs: dax option not supported [ 125.623320][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.640517][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.931877][ T7467] netlink: 'syz.4.1389': attribute type 6 has an invalid length. [ 126.115905][ T7482] loop4: detected capacity change from 0 to 512 [ 126.158698][ T7482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.173473][ T7482] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.251258][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.265552][ T7487] loop0: detected capacity change from 0 to 128 [ 126.272527][ T7489] tipc: Enabled bearer , priority 0 [ 126.282178][ T7487] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.298613][ T7489] syzkaller0: entered promiscuous mode [ 126.304126][ T7489] syzkaller0: entered allmulticast mode [ 126.310432][ T7487] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.323218][ T7489] tipc: Resetting bearer [ 126.331530][ T7488] tipc: Resetting bearer [ 126.337928][ T7487] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.349645][ T7488] tipc: Disabling bearer [ 126.388696][ T7496] netlink: 'syz.1.1400': attribute type 6 has an invalid length. [ 126.412854][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 126.412872][ T29] audit: type=1326 audit(1756916622.538:131583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.445093][ T29] audit: type=1326 audit(1756916622.538:131584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.512362][ T7512] SELinux: failed to load policy [ 126.518494][ T29] audit: type=1326 audit(1756916622.603:131585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.543351][ T29] audit: type=1326 audit(1756916622.603:131586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.567478][ T29] audit: type=1326 audit(1756916622.603:131587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.592573][ T29] audit: type=1326 audit(1756916622.603:131588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.616652][ T29] audit: type=1326 audit(1756916622.603:131589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.641094][ T29] audit: type=1326 audit(1756916622.603:131590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.665758][ T29] audit: type=1326 audit(1756916622.603:131591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.689421][ T29] audit: type=1326 audit(1756916622.603:131592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 126.758529][ T7520] loop4: detected capacity change from 0 to 128 [ 126.849750][ T7527] program syz.2.1412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.223856][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.233765][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.360298][ T7533] netlink: 'syz.3.1414': attribute type 6 has an invalid length. [ 127.407683][ T7539] tipc: Enabled bearer , priority 0 [ 127.419278][ T7539] syzkaller0: entered promiscuous mode [ 127.425598][ T7539] syzkaller0: entered allmulticast mode [ 127.451120][ T7539] tipc: Resetting bearer [ 127.464378][ T7538] tipc: Resetting bearer [ 127.474786][ T7538] tipc: Disabling bearer [ 127.576537][ T7551] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 127.659260][ T7559] vlan1: entered allmulticast mode [ 127.720691][ T7562] netlink: 'syz.4.1426': attribute type 6 has an invalid length. [ 127.916001][ T7580] tipc: Enabled bearer , priority 0 [ 127.923165][ T7580] syzkaller0: entered promiscuous mode [ 127.928874][ T7580] syzkaller0: entered allmulticast mode [ 127.934018][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 127.941161][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.950866][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 127.957484][ T7580] tipc: Resetting bearer [ 127.964218][ T7578] tipc: Resetting bearer [ 127.977117][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 127.983737][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.991417][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.002746][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 128.009392][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.017694][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.028970][ T7578] tipc: Disabling bearer [ 128.035864][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 128.042533][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.050769][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.070488][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 128.077239][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.086261][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.096059][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(16) [ 128.102897][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.111456][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.127485][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 128.134237][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.142659][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.153927][ T7572] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(20) [ 128.160583][ T7572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.168177][ T7572] vhci_hcd vhci_hcd.0: Device attached [ 128.197894][ T7572] vhci_hcd vhci_hcd.0: port 0 already used [ 128.210087][ T7601] vlan1: entered allmulticast mode [ 128.218368][ T7604] loop2: detected capacity change from 0 to 512 [ 128.226589][ T7585] vhci_hcd: connection closed [ 128.226762][ T7597] vhci_hcd: connection closed [ 128.226840][ T1017] vhci_hcd: stop threads [ 128.231672][ T7577] vhci_hcd: connection closed [ 128.236525][ T1017] vhci_hcd: release socket [ 128.236541][ T1017] vhci_hcd: disconnect device [ 128.241026][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 128.247402][ T7583] vhci_hcd: connection closed [ 128.250951][ T7591] vhci_hcd: connection closed [ 128.262838][ T7589] vhci_hcd: connection closed [ 128.262977][ T7587] vhci_hcd: connection closed [ 128.280090][ T1017] vhci_hcd: stop threads [ 128.280209][ T7594] vhci_hcd: connection closed [ 128.284809][ T1017] vhci_hcd: release socket [ 128.284829][ T1017] vhci_hcd: disconnect device [ 128.289660][ T7579] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 128.300386][ T7604] EXT4-fs: Ignoring removed bh option [ 128.315613][ T7604] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.318686][ T1017] vhci_hcd: stop threads [ 128.327068][ T1017] vhci_hcd: release socket [ 128.331593][ T1017] vhci_hcd: disconnect device [ 128.334227][ T7604] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 128.346427][ T1017] vhci_hcd: stop threads [ 128.346440][ T1017] vhci_hcd: release socket [ 128.346525][ T1017] vhci_hcd: disconnect device [ 128.347599][ T1017] vhci_hcd: stop threads [ 128.351414][ T7606] netlink: 'syz.4.1436': attribute type 12 has an invalid length. [ 128.356650][ T1017] vhci_hcd: release socket [ 128.360786][ T7606] netlink: 'syz.4.1436': attribute type 29 has an invalid length. [ 128.366562][ T1017] vhci_hcd: disconnect device [ 128.394221][ T1017] vhci_hcd: stop threads [ 128.399191][ T7604] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.399414][ T7604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.399752][ T7604] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1435: Failed to acquire dquot type 1 [ 128.400377][ T7604] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1435: Invalid block bitmap block 0 in block_group 0 [ 128.408026][ T1017] vhci_hcd: release socket [ 128.408048][ T1017] vhci_hcd: disconnect device [ 128.415687][ T1017] vhci_hcd: stop threads [ 128.456611][ T1017] vhci_hcd: release socket [ 128.461148][ T1017] vhci_hcd: disconnect device [ 128.466292][ T1017] vhci_hcd: stop threads [ 128.470615][ T1017] vhci_hcd: release socket [ 128.476474][ T1017] vhci_hcd: disconnect device [ 128.481444][ T7604] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1435: Invalid block bitmap block 0 in block_group 0 [ 128.496146][ T7604] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1435: Invalid block bitmap block 0 in block_group 0 [ 128.511684][ T7604] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1435: Failed to acquire dquot type 1 [ 128.528031][ T7604] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1435: Failed to acquire dquot type 1 [ 128.541163][ T7604] EXT4-fs (loop2): 1 orphan inode deleted [ 128.550643][ T7613] loop4: detected capacity change from 0 to 128 [ 128.559224][ T7604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.586028][ T7613] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.670233][ T7613] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.682756][ T7613] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.703725][ T7624] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1435: deleted inode referenced: 12 [ 128.755334][ T7628] loop3: detected capacity change from 0 to 128 [ 128.780494][ T7628] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.845805][ T7628] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.868478][ T7628] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.052219][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.062422][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.118751][ T7604] syz.2.1435 (7604) used greatest stack depth: 9072 bytes left [ 129.120077][ T7644] loop3: detected capacity change from 0 to 512 [ 129.133502][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.208219][ T7644] EXT4-fs (loop3): too many log groups per flexible block group [ 129.218360][ T7644] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 129.246074][ T7644] EXT4-fs (loop3): mount failed [ 129.246408][ T7650] loop2: detected capacity change from 0 to 2048 [ 129.259868][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.274248][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.362165][ T7650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.542637][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.636107][ T7666] __nla_validate_parse: 18 callbacks suppressed [ 129.636124][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 129.652626][ T7666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1454'. [ 129.674620][ T7669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1455'. [ 129.729146][ T7675] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1457'. [ 129.760609][ T7675] loop1: detected capacity change from 0 to 512 [ 129.764402][ T7671] netlink: 'syz.4.1456': attribute type 6 has an invalid length. [ 129.784833][ T7675] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.794298][ T7675] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.814817][ T7675] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1457: corrupted inode contents [ 129.828424][ T7675] EXT4-fs (loop1): Remounting filesystem read-only [ 129.835280][ T7675] EXT4-fs (loop1): 1 truncate cleaned up [ 129.841607][ T7682] random: crng reseeded on system resumption [ 129.851770][ T1017] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.862410][ T1017] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.875203][ T1017] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 129.897236][ T7675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.995889][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.043137][ T7695] tipc: Enabled bearer , priority 0 [ 130.059406][ T7695] syzkaller0: entered promiscuous mode [ 130.065611][ T7695] syzkaller0: entered allmulticast mode [ 130.074301][ T7693] loop1: detected capacity change from 0 to 512 [ 130.095616][ T7697] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1464'. [ 130.106056][ T7697] hsr_slave_0: left promiscuous mode [ 130.116326][ T7697] hsr_slave_1: left promiscuous mode [ 130.129039][ T7695] tipc: Resetting bearer [ 130.139285][ T7691] tipc: Resetting bearer [ 130.163629][ T7691] tipc: Disabling bearer [ 130.190268][ T7693] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1462: bg 0: block 248: padding at end of block bitmap is not set [ 130.215731][ T7693] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1462: Failed to acquire dquot type 1 [ 130.271566][ T7693] EXT4-fs (loop1): 1 truncate cleaned up [ 130.279143][ T7693] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.398400][ T7717] netlink: 'syz.3.1469': attribute type 6 has an invalid length. [ 130.440889][ T7722] lo speed is unknown, defaulting to 1000 [ 130.535666][ T7722] lo speed is unknown, defaulting to 1000 [ 130.644796][ T7735] loop3: detected capacity change from 0 to 128 [ 130.656295][ T7735] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.764716][ T7741] smc: net device bond0 applied user defined pnetid SYZ0 [ 130.772391][ T7741] smc: net device bond0 erased user defined pnetid SYZ0 [ 130.801817][ T7743] loop1: detected capacity change from 0 to 128 [ 130.814001][ T7738] random: crng reseeded on system resumption [ 130.827828][ T7743] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.916739][ T1035] Process accounting resumed [ 131.099640][ T7773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 131.106215][ T7773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.114757][ T7773] vhci_hcd vhci_hcd.0: Device attached [ 131.148348][ T7774] vhci_hcd: connection closed [ 131.149642][ T2250] vhci_hcd: stop threads [ 131.158677][ T2250] vhci_hcd: release socket [ 131.165269][ T2250] vhci_hcd: disconnect device [ 131.220052][ T7789] FAULT_INJECTION: forcing a failure. [ 131.220052][ T7789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.233765][ T7789] CPU: 0 UID: 0 PID: 7789 Comm: syz.0.1496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.233803][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.233815][ T7789] Call Trace: [ 131.233821][ T7789] [ 131.233829][ T7789] __dump_stack+0x1d/0x30 [ 131.233849][ T7789] dump_stack_lvl+0xe8/0x140 [ 131.233869][ T7789] dump_stack+0x15/0x1b [ 131.233894][ T7789] should_fail_ex+0x265/0x280 [ 131.233924][ T7789] should_fail_alloc_page+0xf2/0x100 [ 131.233953][ T7789] __alloc_frozen_pages_noprof+0xff/0x360 [ 131.234028][ T7789] alloc_pages_mpol+0xb3/0x250 [ 131.234059][ T7789] vma_alloc_folio_noprof+0x1aa/0x300 [ 131.234104][ T7789] handle_mm_fault+0xec2/0x2c20 [ 131.234127][ T7789] ? __rcu_read_unlock+0x4f/0x70 [ 131.234155][ T7789] do_user_addr_fault+0x3fe/0x1090 [ 131.234227][ T7789] exc_page_fault+0x62/0xa0 [ 131.234250][ T7789] asm_exc_page_fault+0x26/0x30 [ 131.234269][ T7789] RIP: 0010:filldir64+0x1fc/0x420 [ 131.234299][ T7789] Code: 39 f5 0f 82 ab 01 00 00 4c 39 e5 0f 87 a2 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 49 89 46 08 48 8b 6c 24 10 48 8b 44 24 38 <48> 89 45 00 48 8b 04 24 66 89 45 10 4c 8b 64 24 20 80 e3 0f 88 5d [ 131.234331][ T7789] RSP: 0018:ffffc90012a5bca8 EFLAGS: 00050287 [ 131.234346][ T7789] RAX: 000000000000510e RBX: 0000000000000008 RCX: ffff88810a17b180 [ 131.234358][ T7789] RDX: 0000000000000000 RSI: 0000200000002fe8 RDI: 0000200000003018 [ 131.234370][ T7789] RBP: 0000200000003000 R08: 0001c90012a5bea7 R09: 0000000000000000 [ 131.234382][ T7789] R10: 0000000000000406 R11: ffffffff819660b0 R12: 00007ffffffff000 [ 131.234394][ T7789] R13: 0000000000000003 R14: 0000200000002fe8 R15: ffffc90012a5bddd [ 131.234407][ T7789] ? __pfx_filldir64+0x10/0x10 [ 131.234499][ T7789] ? filldir64+0x1d1/0x420 [ 131.234519][ T7789] ? __pfx_filldir64+0x10/0x10 [ 131.234537][ T7789] proc_fill_cache+0xec/0x240 [ 131.234555][ T7789] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 131.234594][ T7789] proc_readfd_common+0x28b/0x3c0 [ 131.234699][ T7789] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 131.234732][ T7789] proc_fdinfo_iterate+0x24/0x30 [ 131.234770][ T7789] iterate_dir+0x111/0x330 [ 131.234788][ T7789] ? mutex_lock+0xd/0x30 [ 131.234866][ T7789] __se_sys_getdents64+0x88/0x1b0 [ 131.234932][ T7789] ? __pfx_filldir64+0x10/0x10 [ 131.234953][ T7789] __x64_sys_getdents64+0x43/0x50 [ 131.234973][ T7789] x64_sys_call+0x2d9f/0x2ff0 [ 131.234994][ T7789] do_syscall_64+0xd2/0x200 [ 131.235041][ T7789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.235122][ T7789] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.235147][ T7789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.235246][ T7789] RIP: 0033:0x7f410c74ebe9 [ 131.235260][ T7789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.235277][ T7789] RSP: 002b:00007f410b1b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.235295][ T7789] RAX: ffffffffffffffda RBX: 00007f410c985fa0 RCX: 00007f410c74ebe9 [ 131.235307][ T7789] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000003 [ 131.235318][ T7789] RBP: 00007f410b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.235329][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.235341][ T7789] R13: 00007f410c986038 R14: 00007f410c985fa0 R15: 00007ffd389e88e8 [ 131.235395][ T7789] [ 132.010072][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 132.010090][ T29] audit: type=1400 audit(1756916627.717:132721): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.042002][ T29] audit: type=1400 audit(1756916627.726:132722): avc: denied { read write } for pid=7804 comm="syz.1.1504" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.067316][ T29] audit: type=1400 audit(1756916627.726:132723): avc: denied { mounton } for pid=7804 comm="syz.1.1504" path="/278/file1" dev="tmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 132.087527][ T7809] lo speed is unknown, defaulting to 1000 [ 132.090412][ T29] audit: type=1400 audit(1756916627.726:132724): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.122128][ T29] audit: type=1400 audit(1756916627.744:132725): avc: denied { prog_load } for pid=7806 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.136214][ T7809] lo speed is unknown, defaulting to 1000 [ 132.142368][ T29] audit: type=1400 audit(1756916627.744:132726): avc: denied { map_create } for pid=7806 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.166696][ T29] audit: type=1400 audit(1756916627.744:132727): avc: denied { prog_load } for pid=7806 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.186907][ T29] audit: type=1400 audit(1756916627.744:132728): avc: denied { prog_load } for pid=7806 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.206412][ T29] audit: type=1400 audit(1756916627.744:132729): avc: denied { create } for pid=7806 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.228006][ T29] audit: type=1400 audit(1756916627.744:132730): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.389006][ T7834] selinux_netlink_send: 5 callbacks suppressed [ 132.389023][ T7834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7834 comm=syz.1.1514 [ 132.613597][ T7845] lo speed is unknown, defaulting to 1000 [ 132.649375][ T7845] lo speed is unknown, defaulting to 1000 [ 133.363330][ T7869] lo speed is unknown, defaulting to 1000 [ 133.396229][ T7869] lo speed is unknown, defaulting to 1000 [ 133.613089][ T7879] lo speed is unknown, defaulting to 1000 [ 133.646957][ T7879] lo speed is unknown, defaulting to 1000 [ 133.738366][ T36] usb 1-1: enqueue for inactive port 0 [ 133.744676][ T36] usb 1-1: enqueue for inactive port 0 [ 133.827104][ T36] vhci_hcd: vhci_device speed not set [ 133.853088][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1543'. [ 133.900840][ T7903] lo speed is unknown, defaulting to 1000 [ 133.936412][ T7903] lo speed is unknown, defaulting to 1000 [ 134.264305][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 134.365275][ T7928] lo speed is unknown, defaulting to 1000 [ 134.417795][ T7928] lo speed is unknown, defaulting to 1000 [ 134.449368][ T7943] FAULT_INJECTION: forcing a failure. [ 134.449368][ T7943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.462756][ T7943] CPU: 1 UID: 0 PID: 7943 Comm: syz.4.1561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.462790][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.462807][ T7943] Call Trace: [ 134.462816][ T7943] [ 134.462833][ T7943] __dump_stack+0x1d/0x30 [ 134.462855][ T7943] dump_stack_lvl+0xe8/0x140 [ 134.462873][ T7943] dump_stack+0x15/0x1b [ 134.462945][ T7943] should_fail_ex+0x265/0x280 [ 134.462965][ T7943] should_fail+0xb/0x20 [ 134.462981][ T7943] should_fail_usercopy+0x1a/0x20 [ 134.463041][ T7943] _copy_from_iter+0xd2/0xe80 [ 134.463069][ T7943] ? __build_skb_around+0x1a0/0x200 [ 134.463093][ T7943] ? __alloc_skb+0x223/0x320 [ 134.463113][ T7943] netlink_sendmsg+0x471/0x6b0 [ 134.463137][ T7943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.463215][ T7943] __sock_sendmsg+0x142/0x180 [ 134.463250][ T7943] ____sys_sendmsg+0x31e/0x4e0 [ 134.463327][ T7943] ___sys_sendmsg+0x17b/0x1d0 [ 134.463438][ T7943] __x64_sys_sendmsg+0xd4/0x160 [ 134.463471][ T7943] x64_sys_call+0x191e/0x2ff0 [ 134.463498][ T7943] do_syscall_64+0xd2/0x200 [ 134.463557][ T7943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.463580][ T7943] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.463607][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.463645][ T7943] RIP: 0033:0x7f2ee5efebe9 [ 134.463664][ T7943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.463691][ T7943] RSP: 002b:00007f2ee495f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.463710][ T7943] RAX: ffffffffffffffda RBX: 00007f2ee6135fa0 RCX: 00007f2ee5efebe9 [ 134.463724][ T7943] RDX: 0000000020004004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.463739][ T7943] RBP: 00007f2ee495f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.463754][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.463770][ T7943] R13: 00007f2ee6136038 R14: 00007f2ee6135fa0 R15: 00007fffcf161fd8 [ 134.463847][ T7943] [ 134.955840][ T7968] lo speed is unknown, defaulting to 1000 [ 134.997896][ T7968] lo speed is unknown, defaulting to 1000 [ 135.180344][ T7978] lo speed is unknown, defaulting to 1000 [ 135.219760][ T7978] lo speed is unknown, defaulting to 1000 [ 135.669898][ T7991] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1579'. [ 135.681507][ T7991] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1579'. [ 135.944279][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 135.954140][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 135.963258][ T7997] netlink: 'syz.4.1582': attribute type 6 has an invalid length. [ 135.977180][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 135.986664][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 136.026792][ T8005] lo speed is unknown, defaulting to 1000 [ 136.072360][ T8005] lo speed is unknown, defaulting to 1000 [ 136.143328][ T8020] netlink: 'syz.0.1591': attribute type 6 has an invalid length. [ 136.171005][ T8022] netlink: 'syz.0.1592': attribute type 21 has an invalid length. [ 136.254753][ T8030] loop0: detected capacity change from 0 to 512 [ 136.277476][ T8030] ext2: Unknown parameter 'dont_hash' [ 136.344592][ T8030] loop0: detected capacity change from 0 to 8192 [ 136.352500][ T8030] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 136.621338][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1602'. [ 136.749154][ T8050] lo speed is unknown, defaulting to 1000 [ 136.789933][ T8050] lo speed is unknown, defaulting to 1000 [ 136.854603][ T8056] syz_tun: entered allmulticast mode [ 136.861848][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 136.872492][ T8056] syz_tun (unregistering): left allmulticast mode [ 136.885585][ T8058] loop1: detected capacity change from 0 to 128 [ 136.902904][ T8058] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.952155][ T8056] netlink: 'syz.2.1604': attribute type 8 has an invalid length. [ 137.023280][ T8066] loop9: detected capacity change from 0 to 7 [ 137.029536][ T8064] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1606'. [ 137.039211][ T8066] buffer_io_error: 11914 callbacks suppressed [ 137.039230][ T8066] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.056198][ T8066] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.064512][ T8066] loop9: unable to read partition table [ 137.076019][ T8064] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1606'. [ 137.142335][ T8066] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 137.142335][ T8066] ) failed (rc=-5) [ 137.458123][ T29] kauditd_printk_skb: 1358 callbacks suppressed [ 137.458138][ T29] audit: type=1326 audit(1756916632.738:134087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.489224][ T29] audit: type=1326 audit(1756916632.738:134088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.517351][ T29] audit: type=1326 audit(1756916632.793:134089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.541872][ T29] audit: type=1326 audit(1756916632.793:134090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.567188][ T29] audit: type=1326 audit(1756916632.793:134091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.592866][ T29] audit: type=1326 audit(1756916632.793:134092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.618336][ T29] audit: type=1326 audit(1756916632.793:134093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.643178][ T29] audit: type=1326 audit(1756916632.793:134094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.667885][ T29] audit: type=1326 audit(1756916632.793:134095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.691695][ T29] audit: type=1326 audit(1756916632.793:134096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 137.913816][ T8088] netlink: 'syz.2.1615': attribute type 6 has an invalid length. [ 138.255415][ T8107] sd 0:0:1:0: device reset [ 138.267545][ T8107] loop2: detected capacity change from 0 to 512 [ 138.282002][ T8107] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.315234][ T8114] loop2: detected capacity change from 0 to 512 [ 138.347407][ T8114] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.362061][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.369641][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.380782][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.388736][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.396296][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.403886][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.413507][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.421121][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.428605][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.436125][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 138.474810][ T8118] lo speed is unknown, defaulting to 1000 [ 138.517604][ T8118] lo speed is unknown, defaulting to 1000 [ 138.554792][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.660994][ T8127] loop2: detected capacity change from 0 to 2048 [ 138.747356][ T8127] loop2: unable to read partition table [ 138.753164][ T8127] loop2: partition table beyond EOD, truncated [ 138.759519][ T8127] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 139.068689][ T8142] loop2: detected capacity change from 0 to 1024 [ 139.117293][ T8143] loop4: detected capacity change from 0 to 512 [ 139.204087][ T8143] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.288728][ T8155] loop1: detected capacity change from 0 to 512 [ 139.323216][ T8155] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.346111][ T8155] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1636: bad orphan inode 13 [ 139.374097][ T8155] ext4_test_bit(bit=12, block=18) = 1 [ 139.379528][ T8155] is_bad_inode(inode)=0 [ 139.384559][ T8155] NEXT_ORPHAN(inode)=2130706432 [ 139.389506][ T8155] max_ino=32 [ 139.392893][ T8155] i_nlink=1 [ 139.707732][ T8186] lo speed is unknown, defaulting to 1000 [ 139.749859][ T8186] lo speed is unknown, defaulting to 1000 [ 139.773560][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.784430][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.805151][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.813645][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.288394][ T8194] loop0: detected capacity change from 0 to 512 [ 140.316218][ T8194] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 140.324342][ T8194] EXT4-fs (loop0): orphan cleanup on readonly fs [ 140.333328][ T8194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1648: corrupted inode contents [ 140.345990][ T8194] EXT4-fs (loop0): Remounting filesystem read-only [ 140.353528][ T8194] EXT4-fs (loop0): 1 truncate cleaned up [ 140.369178][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.379894][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.394251][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.422643][ T8200] loop2: detected capacity change from 0 to 512 [ 140.430815][ T8200] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.454498][ T8200] EXT4-fs (loop2): 1 truncate cleaned up [ 140.473498][ T8205] vhci_hcd: invalid port number 255 [ 140.478893][ T8205] vhci_hcd: default hub control req: 0400 v02ff i00ff l0 [ 140.520717][ T8208] program syz.0.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.586157][ T8213] lo speed is unknown, defaulting to 1000 [ 140.626964][ T8213] lo speed is unknown, defaulting to 1000 [ 140.637980][ T8215] loop0: detected capacity change from 0 to 512 [ 140.671143][ T8215] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.711019][ T8215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84fc018, mo2=0002] [ 140.720758][ T8215] System zones: 0-2, 18-18, 34-34 [ 140.727855][ T8215] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.752535][ T8213] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 140.764422][ T8213] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 141.301793][ T8237] lo speed is unknown, defaulting to 1000 [ 141.347798][ T8237] lo speed is unknown, defaulting to 1000 [ 141.848223][ T8245] 9pnet_fd: Insufficient options for proto=fd [ 141.968441][ T8258] __nla_validate_parse: 3 callbacks suppressed [ 141.968458][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 142.088394][ T8266] loop3: detected capacity change from 0 to 128 [ 142.097951][ T8266] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.196711][ T8269] loop3: detected capacity change from 0 to 512 [ 142.213773][ T8269] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.328909][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8275 comm=syz.3.1674 [ 142.343427][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8275 comm=syz.3.1674 [ 142.356156][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=8275 comm=syz.3.1674 [ 142.368987][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8275 comm=syz.3.1674 [ 142.383656][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8275 comm=syz.3.1674 [ 142.754377][ T8297] lo speed is unknown, defaulting to 1000 [ 142.792963][ T8297] lo speed is unknown, defaulting to 1000 [ 142.953372][ T8302] loop4: detected capacity change from 0 to 128 [ 143.238926][ T8302] EXT4-fs mount: 28 callbacks suppressed [ 143.238945][ T8302] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.263151][ T8307] loop0: detected capacity change from 0 to 512 [ 143.276919][ T8307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.284647][ T8302] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.290434][ T8307] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.350995][ T8302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.366535][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.402008][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 143.402025][ T29] audit: type=1400 audit(1756916638.220:134550): avc: denied { create } for pid=8311 comm="syz.2.1685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.489715][ T29] audit: type=1400 audit(1756916638.229:134551): avc: denied { write } for pid=8311 comm="syz.2.1685" name="file0" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.513429][ T29] audit: type=1400 audit(1756916638.229:134552): avc: denied { open } for pid=8311 comm="syz.2.1685" path="/357/file0" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.537187][ T29] audit: type=1400 audit(1756916638.266:134553): avc: denied { ioctl } for pid=8311 comm="syz.2.1685" path="/357/file0" dev="tmpfs" ino=1912 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.562188][ T29] audit: type=1400 audit(1756916638.266:134554): avc: denied { create } for pid=8311 comm="syz.2.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.583094][ T29] audit: type=1400 audit(1756916638.266:134555): avc: denied { connect } for pid=8311 comm="syz.2.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.603404][ T29] audit: type=1400 audit(1756916638.276:134556): avc: denied { ioctl } for pid=8311 comm="syz.2.1685" path="socket:[22702]" dev="sockfs" ino=22702 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.629444][ T29] audit: type=1400 audit(1756916638.285:134557): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.653264][ T29] audit: type=1326 audit(1756916638.285:134558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 143.677058][ T29] audit: type=1326 audit(1756916638.285:134559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8313 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f410c74ebe9 code=0x7ffc0000 [ 143.777173][ T8327] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1690'. [ 143.795662][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 143.803418][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1690'. [ 143.821937][ T8327] loop1: detected capacity change from 0 to 512 [ 143.839263][ T8327] EXT4-fs (loop1): too many log groups per flexible block group [ 143.847239][ T8327] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 143.862683][ T8327] EXT4-fs (loop1): mount failed [ 144.091745][ T8342] loop3: detected capacity change from 0 to 1024 [ 144.108895][ T8342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.228668][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.254094][ T8347] loop3: detected capacity change from 0 to 512 [ 144.262599][ T8347] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.271517][ T8347] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1695: bad orphan inode 13 [ 144.282059][ T8347] ext4_test_bit(bit=12, block=18) = 1 [ 144.287602][ T8347] is_bad_inode(inode)=0 [ 144.291950][ T8347] NEXT_ORPHAN(inode)=2130706432 [ 144.296994][ T8347] max_ino=32 [ 144.300208][ T8347] i_nlink=1 [ 144.303824][ T8347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.327986][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.364608][ T8352] loop3: detected capacity change from 0 to 128 [ 144.373538][ T8352] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.387795][ T8352] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.400686][ T8352] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.550945][ T8355] lo speed is unknown, defaulting to 1000 [ 144.588361][ T8355] lo speed is unknown, defaulting to 1000 [ 144.704169][ T8366] loop3: detected capacity change from 0 to 512 [ 144.729078][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.732531][ T8365] pim6reg1: entered promiscuous mode [ 144.743409][ T8366] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.791842][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.884718][ T8379] loop0: detected capacity change from 0 to 512 [ 144.902192][ T8379] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.913802][ T8384] loop3: detected capacity change from 0 to 128 [ 144.922707][ T8375] SELinux: failed to load policy [ 144.945497][ T8381] netlink: 'gtp': attribute type 5 has an invalid length. [ 144.954398][ T8379] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1706: bad orphan inode 13 [ 144.954608][ T8379] ext4_test_bit(bit=12, block=18) = 1 [ 144.965335][ T8384] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.983301][ T8379] is_bad_inode(inode)=0 [ 144.983332][ T8379] NEXT_ORPHAN(inode)=2130706432 [ 144.983422][ T8379] max_ino=32 [ 144.983431][ T8379] i_nlink=1 [ 144.983777][ T8384] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.997830][ T8384] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.998437][ T8379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.025710][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.094670][ T8393] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 145.212035][ T8399] lo speed is unknown, defaulting to 1000 [ 145.261135][ T8399] lo speed is unknown, defaulting to 1000 [ 145.332701][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 145.386022][ T8414] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 145.403276][ T8414] bond2: entered promiscuous mode [ 145.409482][ T8414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.420368][ T8414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1718'. [ 145.433898][ T8414] batadv1: entered promiscuous mode [ 145.434039][ T8423] loop4: detected capacity change from 0 to 512 [ 145.439149][ T8414] batadv1: entered allmulticast mode [ 145.453212][ T8423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.453770][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.468510][ T8414] bond2: (slave batadv1): making interface the new active one [ 145.477003][ T8423] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1721: bad orphan inode 13 [ 145.489870][ T8414] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 145.498964][ T8423] ext4_test_bit(bit=12, block=18) = 1 [ 145.504502][ T8423] is_bad_inode(inode)=0 [ 145.504778][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1718'. [ 145.508730][ T8423] NEXT_ORPHAN(inode)=2130706432 [ 145.508742][ T8423] max_ino=32 [ 145.526659][ T8423] i_nlink=1 [ 145.539660][ T8423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.570656][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.582510][ T8427] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1722'. [ 145.619005][ T8427] loop0: detected capacity change from 0 to 2048 [ 145.636781][ T8427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.672247][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.759514][ T8446] loop4: detected capacity change from 0 to 512 [ 145.767232][ T8446] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.793739][ T8446] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 145.809726][ T8450] loop1: detected capacity change from 0 to 512 [ 145.816525][ T8450] msdos: Bad value for 'uid' [ 145.821297][ T8450] msdos: Bad value for 'uid' [ 145.828821][ T8446] EXT4-fs (loop4): 1 truncate cleaned up [ 145.843103][ T8446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.857945][ T8442] lo speed is unknown, defaulting to 1000 [ 145.873507][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.903814][ T8442] lo speed is unknown, defaulting to 1000 [ 145.963204][ T8457] FAULT_INJECTION: forcing a failure. [ 145.963204][ T8457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.977419][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: syz.1.1733 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.977505][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.977520][ T8457] Call Trace: [ 145.977527][ T8457] [ 145.977536][ T8457] __dump_stack+0x1d/0x30 [ 145.977551][ T8459] loop4: detected capacity change from 0 to 512 [ 145.977563][ T8457] dump_stack_lvl+0xe8/0x140 [ 145.977638][ T8457] dump_stack+0x15/0x1b [ 145.977663][ T8457] should_fail_ex+0x265/0x280 [ 145.977694][ T8457] should_fail+0xb/0x20 [ 145.977766][ T8457] should_fail_usercopy+0x1a/0x20 [ 145.977798][ T8457] strncpy_from_user+0x25/0x230 [ 145.977837][ T8457] ? kmem_cache_alloc_noprof+0x186/0x310 [ 145.977964][ T8457] ? getname_flags+0x80/0x3b0 [ 145.978003][ T8457] getname_flags+0xae/0x3b0 [ 145.978040][ T8457] do_sys_openat2+0x60/0x110 [ 145.978160][ T8457] __x64_sys_openat+0xf2/0x120 [ 145.978261][ T8457] x64_sys_call+0x2e9c/0x2ff0 [ 145.978290][ T8457] do_syscall_64+0xd2/0x200 [ 145.978329][ T8457] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.978404][ T8457] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.978441][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.978470][ T8457] RIP: 0033:0x7f962941ebe9 [ 145.978494][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.978520][ T8457] RSP: 002b:00007f9627e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.978544][ T8457] RAX: ffffffffffffffda RBX: 00007f9629655fa0 RCX: 00007f962941ebe9 [ 145.978560][ T8457] RDX: 0000000000145b43 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 145.978578][ T8457] RBP: 00007f9627e87090 R08: 0000000000000000 R09: 0000000000000000 [ 145.978594][ T8457] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 145.978609][ T8457] R13: 00007f9629656038 R14: 00007f9629655fa0 R15: 00007ffd0ce37998 [ 145.978664][ T8457] [ 146.194398][ T8468] loop1: detected capacity change from 0 to 1024 [ 146.201829][ T8459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.214696][ T8459] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.247360][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.274091][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.322199][ T8482] loop0: detected capacity change from 0 to 512 [ 146.330910][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 146.341131][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.351169][ T8480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1743'. [ 146.351200][ T8482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.382481][ T8482] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 146.392333][ T8482] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.405446][ T8482] EXT4-fs (loop0): 1 truncate cleaned up [ 146.416876][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.429451][ T8482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.449434][ T8489] loop4: detected capacity change from 0 to 1024 [ 146.456686][ T8493] loop3: detected capacity change from 0 to 256 [ 146.468223][ T8489] loop4: detected capacity change from 0 to 256 [ 146.475078][ T8489] vfat: Unknown parameter 'rodDr' [ 146.490403][ T8493] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.528710][ T8489] infiniband syz!: set down [ 146.533266][ T8489] infiniband syz!: added team_slave_0 [ 146.539561][ T8493] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.556910][ T8501] loop2: detected capacity change from 0 to 512 [ 146.569131][ T8489] RDS/IB: syz!: added [ 146.569384][ T8501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.577035][ T8489] smc: adding ib device syz! with port count 1 [ 146.589269][ T8489] smc: ib device syz! port 1 has pnetid [ 146.595663][ T8501] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1749: bad orphan inode 13 [ 146.605895][ T8510] loop1: detected capacity change from 0 to 512 [ 146.623373][ T8510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.643056][ T8510] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.795369][ T8501] ext4_test_bit(bit=12, block=18) = 1 [ 146.800797][ T8501] is_bad_inode(inode)=0 [ 146.805109][ T8501] NEXT_ORPHAN(inode)=2130706432 [ 146.810060][ T8501] max_ino=32 [ 146.813504][ T8501] i_nlink=1 [ 146.818555][ T8501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.839504][ T8520] loop0: detected capacity change from 0 to 512 [ 146.849931][ T8520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.857244][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.878923][ T8520] EXT4-fs: Ignoring removed i_version option [ 146.898118][ T8520] EXT4-fs (loop0): 1 orphan inode deleted [ 146.904215][ T8524] loop2: detected capacity change from 0 to 2048 [ 146.904655][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.911788][ T8520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.950685][ T8524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.976471][ T8531] loop1: detected capacity change from 0 to 512 [ 147.000975][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.019841][ T8531] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.028272][ T8531] EXT4-fs error (device loop1): ext4_quota_enable:7128: comm syz.1.1758: inode #218103808: comm syz.1.1758: iget: illegal inode # [ 147.051501][ T8531] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.1758: Bad quota inode: 218103808, type: 2 [ 147.067125][ T8531] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 147.088412][ T8540] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.089249][ T8531] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 147.104171][ T8531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.217719][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.228440][ T3309] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 147.267752][ T8543] bond0: (slave syz_tun): Releasing backup interface [ 147.327784][ T8543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.564768][ T8549] lo speed is unknown, defaulting to 1000 [ 147.601059][ T12] veth0_to_hsr: left allmulticast mode [ 147.606742][ T12] veth0_to_hsr: left promiscuous mode [ 147.612282][ T12] bridge0: port 3(veth0_to_hsr) entered disabled state [ 147.634842][ T12] bridge_slave_1: left allmulticast mode [ 147.640670][ T12] bridge_slave_1: left promiscuous mode [ 147.646524][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.657546][ T12] bridge_slave_0: left promiscuous mode [ 147.663602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.750446][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.769493][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.778634][ T12] bond0 (unregistering): Released all slaves [ 147.792700][ T12] bond1 (unregistering): Released all slaves [ 147.822192][ T8562] loop3: detected capacity change from 0 to 512 [ 147.831521][ T8562] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.833142][ T12] bond2 (unregistering): (slave batadv1): Releasing active interface [ 147.839548][ T8562] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1767: bad orphan inode 13 [ 147.866755][ T8562] ext4_test_bit(bit=12, block=18) = 1 [ 147.872190][ T8562] is_bad_inode(inode)=0 [ 147.876451][ T8562] NEXT_ORPHAN(inode)=2130706432 [ 147.881361][ T8562] max_ino=32 [ 147.884711][ T8562] i_nlink=1 [ 147.891964][ T12] bond2 (unregistering): Released all slaves [ 147.922372][ T8562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.935172][ T8549] lo speed is unknown, defaulting to 1000 [ 147.967182][ T12] tipc: Left network mode [ 148.008723][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.027662][ T8569] loop1: detected capacity change from 0 to 512 [ 148.110030][ T8572] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 148.127126][ T8549] chnl_net:caif_netlink_parms(): no params data found [ 148.145448][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.172187][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.183418][ T8572] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 148.184177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.199650][ T8569] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.270308][ T8583] __nla_validate_parse: 2 callbacks suppressed [ 148.270323][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1773'. [ 148.307674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.335475][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.345632][ T12] team0 (unregistering): Port device C removed [ 148.383232][ T8587] FAULT_INJECTION: forcing a failure. [ 148.383232][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 148.397380][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.1.1774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.397516][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.397529][ T8587] Call Trace: [ 148.397536][ T8587] [ 148.397543][ T8587] __dump_stack+0x1d/0x30 [ 148.397642][ T8587] dump_stack_lvl+0xe8/0x140 [ 148.397660][ T8587] dump_stack+0x15/0x1b [ 148.397681][ T8587] should_fail_ex+0x265/0x280 [ 148.397708][ T8587] should_failslab+0x8c/0xb0 [ 148.397736][ T8587] kmem_cache_alloc_noprof+0x50/0x310 [ 148.397805][ T8587] ? skb_clone+0x151/0x1f0 [ 148.397833][ T8587] skb_clone+0x151/0x1f0 [ 148.397898][ T8587] __netlink_deliver_tap+0x2c9/0x500 [ 148.397933][ T8587] netlink_unicast+0x66b/0x690 [ 148.397960][ T8587] netlink_sendmsg+0x58b/0x6b0 [ 148.397990][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.398034][ T8587] __sock_sendmsg+0x142/0x180 [ 148.398068][ T8587] __sys_sendto+0x268/0x330 [ 148.398140][ T8587] __x64_sys_sendto+0x76/0x90 [ 148.398161][ T8587] x64_sys_call+0x2d05/0x2ff0 [ 148.398182][ T8587] do_syscall_64+0xd2/0x200 [ 148.398217][ T8587] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.398241][ T8587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.398346][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.398370][ T8587] RIP: 0033:0x7f962941ebe9 [ 148.398419][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.398444][ T8587] RSP: 002b:00007f9627e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 148.398464][ T8587] RAX: ffffffffffffffda RBX: 00007f9629655fa0 RCX: 00007f962941ebe9 [ 148.398480][ T8587] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 148.398516][ T8587] RBP: 00007f9627e87090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 148.398536][ T8587] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 148.398551][ T8587] R13: 00007f9629656038 R14: 00007f9629655fa0 R15: 00007ffd0ce37998 [ 148.398575][ T8587] [ 148.398594][ T8587] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1774'. [ 148.564532][ T8595] loop4: detected capacity change from 0 to 128 [ 148.667130][ T8595] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.685330][ T8599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1777'. [ 148.695781][ T8595] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.716587][ T1035] lo speed is unknown, defaulting to 1000 [ 148.722582][ T1035] infiniband syz0: ib_query_port failed (-19) [ 148.729326][ T8595] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.779177][ T8599] loop2: detected capacity change from 0 to 512 [ 148.815262][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.822563][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.834165][ T8549] bridge_slave_0: entered allmulticast mode [ 148.840975][ T8549] bridge_slave_0: entered promiscuous mode [ 148.843492][ T8611] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1781'. [ 148.849899][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.863201][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.870640][ T8549] bridge_slave_1: entered allmulticast mode [ 148.878632][ T8549] bridge_slave_1: entered promiscuous mode [ 148.885526][ T8599] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.888106][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 148.893772][ T8599] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.912185][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 148.912203][ T29] audit: type=1326 audit(1756916899.311:135078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965e13ebe9 code=0x7ffc0000 [ 148.919003][ T8609] loop3: detected capacity change from 0 to 512 [ 148.944629][ T29] audit: type=1326 audit(1756916899.311:135079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f965e13ebe9 code=0x7ffc0000 [ 148.958352][ T8599] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1777: corrupted inode contents [ 148.973522][ T29] audit: type=1326 audit(1756916899.311:135080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f965e13ec23 code=0x7ffc0000 [ 148.973561][ T29] audit: type=1326 audit(1756916899.311:135081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f965e13d69f code=0x7ffc0000 [ 148.973669][ T29] audit: type=1326 audit(1756916899.311:135082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f965e13ec77 code=0x7ffc0000 [ 148.973702][ T29] audit: type=1326 audit(1756916899.321:135083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f965e13d550 code=0x7ffc0000 [ 148.973758][ T29] audit: type=1326 audit(1756916899.321:135084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f965e13e7eb code=0x7ffc0000 [ 148.985186][ T29] audit: type=1326 audit(1756916899.348:135085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f965e13d84a code=0x7ffc0000 [ 149.011527][ T8599] EXT4-fs (loop2): Remounting filesystem read-only [ 149.034066][ T29] audit: type=1326 audit(1756916899.348:135086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f965e13d84a code=0x7ffc0000 [ 149.034105][ T29] audit: type=1326 audit(1756916899.348:135087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8607 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f965e13d457 code=0x7ffc0000 [ 149.034975][ T8609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.035291][ T8609] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1779: bad orphan inode 13 [ 149.037710][ T8609] ext4_test_bit(bit=12, block=18) = 1 [ 149.059478][ T8599] EXT4-fs (loop2): 1 truncate cleaned up [ 149.083783][ T8609] is_bad_inode(inode)=0 [ 149.083799][ T8609] NEXT_ORPHAN(inode)=2130706432 [ 149.083809][ T8609] max_ino=32 [ 149.083871][ T8609] i_nlink=1 [ 149.084606][ T2250] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.110761][ T8611] 0{X: renamed from gretap0 [ 149.136609][ T2250] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.136879][ T2250] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 149.137561][ T8599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.144863][ T8609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.304293][ T8611] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 149.330549][ T8610] IPVS: Error joining to the multicast group [ 149.338527][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.352105][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.363976][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.374266][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.399894][ T8549] team0: Port device team_slave_0 added [ 149.410501][ T8549] team0: Port device team_slave_1 added [ 149.432879][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.440021][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.467653][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.479665][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.486750][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.514438][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.560144][ T12] IPVS: stop unused estimator thread 0... [ 149.601871][ T8549] hsr_slave_0: entered promiscuous mode [ 149.609290][ T8549] hsr_slave_1: entered promiscuous mode [ 149.782827][ T8549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.800742][ T8549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.811410][ T8549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.821418][ T8549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.864817][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.898668][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.912411][ T8634] program syz.3.1787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.925231][ T8634] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 149.958893][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.966063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.979838][ T2250] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.986996][ T2250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.070159][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.209501][ T8549] veth0_vlan: entered promiscuous mode [ 150.226414][ T8549] veth1_vlan: entered promiscuous mode [ 150.247288][ T8549] veth0_macvtap: entered promiscuous mode [ 150.256234][ T8549] veth1_macvtap: entered promiscuous mode [ 150.259510][ T8661] loop4: detected capacity change from 0 to 512 [ 150.274733][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.288216][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.298808][ T8661] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1789: bg 0: block 248: padding at end of block bitmap is not set [ 150.315593][ T1017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.329884][ T8661] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1789: Failed to acquire dquot type 1 [ 150.344466][ T1017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.360160][ T8661] EXT4-fs (loop4): 1 truncate cleaned up [ 150.367769][ T8661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.372116][ T1017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.407583][ T8661] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.425426][ T1017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.438652][ T8668] loop2: detected capacity change from 0 to 1024 [ 150.487143][ T8668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.502499][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.560463][ T8674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1793'. [ 150.582675][ T8668] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1791: Allocating blocks 385-513 which overlap fs metadata [ 150.609971][ T8674] loop3: detected capacity change from 0 to 512 [ 150.636475][ T8666] EXT4-fs (loop2): pa ffff888106e55850: logic 16, phys. 129, len 24 [ 150.644642][ T8666] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 150.675501][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.686187][ T8674] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.695337][ T8680] loop4: detected capacity change from 0 to 512 [ 150.709378][ T8674] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.730581][ T8680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.739348][ T8680] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1792: bad orphan inode 13 [ 150.765983][ T8674] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1793: corrupted inode contents [ 150.784826][ T8683] program syz.2.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.803159][ T8680] ext4_test_bit(bit=12, block=18) = 1 [ 150.808708][ T8680] is_bad_inode(inode)=0 [ 150.812888][ T8680] NEXT_ORPHAN(inode)=2130706432 [ 150.817870][ T8680] max_ino=32 [ 150.821079][ T8680] i_nlink=1 [ 150.838130][ T8674] EXT4-fs (loop3): Remounting filesystem read-only [ 150.843803][ T8680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.865455][ T8674] EXT4-fs (loop3): 1 truncate cleaned up [ 150.891300][ T1017] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.901986][ T1017] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.913145][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.936827][ T1017] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 150.957603][ T8674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.081439][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.374870][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 151.446400][ T8707] 9pnet: Could not find request transport: r000003 ./file0 [ 151.517523][ T8716] loop2: detected capacity change from 0 to 512 [ 151.526890][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 151.600816][ T8728] loop4: detected capacity change from 0 to 512 [ 151.614084][ T8728] EXT4-fs (loop4): orphan cleanup on readonly fs [ 151.621453][ T8728] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1808: bad orphan inode 13 [ 151.653596][ T8728] ext4_test_bit(bit=12, block=18) = 1 [ 151.659095][ T8728] is_bad_inode(inode)=0 [ 151.663274][ T8728] NEXT_ORPHAN(inode)=2130706432 [ 151.665313][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 151.668156][ T8728] max_ino=32 [ 151.668166][ T8728] i_nlink=1 [ 151.686285][ T8728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.715654][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.750242][ T8742] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1814'. [ 151.767567][ T8743] loop1: detected capacity change from 0 to 1024 [ 151.774337][ T8743] EXT4-fs: Ignoring removed orlov option [ 151.794579][ T8743] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 151.841518][ T8743] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.880233][ T8743] EXT4-fs (loop1): invalid journal inode [ 151.890985][ T8743] EXT4-fs (loop1): can't get journal size [ 151.906407][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.193362][ T8764] loop5: detected capacity change from 0 to 512 [ 152.207257][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.214934][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.228829][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.236349][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.523804][ T8769] lo speed is unknown, defaulting to 1000 [ 152.569794][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.582837][ T8778] loop2: detected capacity change from 0 to 512 [ 152.656354][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.671670][ T8778] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.717678][ T8787] loop3: detected capacity change from 0 to 128 [ 152.726264][ T8787] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.738871][ T8787] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.751809][ T8787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.763040][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.821159][ T8795] loop3: detected capacity change from 0 to 512 [ 152.830092][ T8795] EXT4-fs (loop3): orphan cleanup on readonly fs [ 152.836958][ T8795] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1829: bad orphan inode 13 [ 152.850082][ T8795] ext4_test_bit(bit=12, block=18) = 1 [ 152.855633][ T8795] is_bad_inode(inode)=0 [ 152.859873][ T8795] NEXT_ORPHAN(inode)=2130706432 [ 152.864885][ T8795] max_ino=32 [ 152.868118][ T8795] i_nlink=1 [ 153.131942][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.140973][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.445621][ T8816] netlink: 'syz.3.1835': attribute type 3 has an invalid length. [ 153.453739][ T8816] netlink: 'syz.3.1835': attribute type 3 has an invalid length. [ 153.610393][ T8820] loop1: detected capacity change from 0 to 512 [ 153.633089][ T8820] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.641735][ T8820] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.650751][ T8820] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1838: corrupted inode contents [ 153.664605][ T8820] EXT4-fs (loop1): Remounting filesystem read-only [ 153.670049][ T8824] loop4: detected capacity change from 0 to 128 [ 153.671345][ T8820] EXT4-fs (loop1): 1 truncate cleaned up [ 153.680563][ T8824] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.694609][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.706497][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 153.718355][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 153.736351][ T8827] random: crng reseeded on system resumption [ 153.981252][ T8837] lo speed is unknown, defaulting to 1000 [ 154.360326][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 154.360343][ T29] audit: type=1400 audit(1756916904.342:135845): avc: denied { mount } for pid=8851 comm="syz.2.1848" name="/" dev="ramfs" ino=24572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 154.542811][ T29] audit: type=1400 audit(1756916904.508:135846): avc: denied { setopt } for pid=8856 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.712823][ T29] audit: type=1400 audit(1756916904.665:135847): avc: denied { read } for pid=8858 comm="syz.2.1851" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.738318][ T29] audit: type=1400 audit(1756916904.665:135848): avc: denied { open } for pid=8858 comm="syz.2.1851" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.769830][ T29] audit: type=1400 audit(1756916904.720:135849): avc: denied { create } for pid=8862 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.791328][ T29] audit: type=1400 audit(1756916904.720:135850): avc: denied { connect } for pid=8862 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.811397][ T29] audit: type=1400 audit(1756916904.720:135851): avc: denied { create } for pid=8862 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.831814][ T29] audit: type=1400 audit(1756916904.720:135852): avc: denied { write } for pid=8862 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 154.851400][ T29] audit: type=1400 audit(1756916904.720:135853): avc: denied { module_request } for pid=8862 comm="syz.4.1852" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.912637][ T8873] loop5: detected capacity change from 0 to 512 [ 154.931358][ T8873] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 154.940690][ T8873] EXT4-fs (loop5): invalid journal inode [ 154.961111][ T8873] EXT4-fs (loop5): can't get journal size [ 154.979495][ T8873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 154.981751][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.993819][ T8873] System zones: 1-12, 13-13 [ 154.999224][ T29] audit: type=1400 audit(1756916904.914:135854): avc: denied { read write } for pid=8858 comm="syz.2.1851" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.038113][ T8873] EXT4-fs (loop5): 1 truncate cleaned up [ 155.045829][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.073942][ T8883] __nla_validate_parse: 5 callbacks suppressed [ 155.073959][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 155.198430][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 155.271047][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 155.310098][ T8907] vlan1: entered promiscuous mode [ 155.315197][ T8907] ip6gretap0: entered promiscuous mode [ 155.336686][ T8899] syzkaller0: entered allmulticast mode [ 155.344508][ T8899] syzkaller0 (unregistering): left allmulticast mode [ 155.496991][ T8921] loop1: detected capacity change from 0 to 8192 [ 155.658550][ T8937] loop1: detected capacity change from 0 to 512 [ 155.764582][ T8937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.776841][ T8969] loop4: detected capacity change from 0 to 1024 [ 155.843735][ T8937] EXT4-fs (loop1): 1 truncate cleaned up [ 155.980294][ T8969] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.579301][ T8975] lo speed is unknown, defaulting to 1000 [ 156.673035][ T2250] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 156.689206][ T2250] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 156.701705][ T2250] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.701705][ T2250] [ 156.727834][ T8996] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1868'. [ 156.748121][ T8996] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1868'. [ 156.795252][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 156.929808][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9006 comm=syz.2.1870 [ 156.942686][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=9006 comm=syz.2.1870 [ 156.956191][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9006 comm=syz.2.1870 [ 156.968869][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=9006 comm=syz.2.1870 [ 156.981689][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9006 comm=syz.2.1870 [ 157.082298][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 157.392261][ T9032] loop3: detected capacity change from 0 to 8192 [ 157.413640][ T9032] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.683958][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.692529][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.739043][ T9044] atomic_op ffff888103593928 conn xmit_atomic 0000000000000000 [ 157.785774][ T9049] loop1: detected capacity change from 0 to 256 [ 157.865468][ T9059] loop1: detected capacity change from 0 to 512 [ 157.873065][ T9059] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.873152][ T9055] lo speed is unknown, defaulting to 1000 [ 157.886911][ T9059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.920390][ T9059] EXT4-fs (loop1): 1 truncate cleaned up [ 157.928395][ T9064] FAULT_INJECTION: forcing a failure. [ 157.928395][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 157.941850][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.2.1892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.941886][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.941903][ T9064] Call Trace: [ 157.941912][ T9064] [ 157.941921][ T9064] __dump_stack+0x1d/0x30 [ 157.941948][ T9064] dump_stack_lvl+0xe8/0x140 [ 157.942041][ T9064] dump_stack+0x15/0x1b [ 157.942058][ T9064] should_fail_ex+0x265/0x280 [ 157.942125][ T9064] should_failslab+0x8c/0xb0 [ 157.942218][ T9064] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 157.942322][ T9064] ? parse_opts+0xb0/0x2d0 [ 157.942356][ T9064] kstrdup+0x3e/0xd0 [ 157.942385][ T9064] parse_opts+0xb0/0x2d0 [ 157.942422][ T9064] ? __rcu_read_unlock+0x4f/0x70 [ 157.942508][ T9064] p9_fd_create_tcp+0x6a/0x420 [ 157.942601][ T9064] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 157.942673][ T9064] ? match_strdup+0x37/0x40 [ 157.942705][ T9064] ? p9_client_create+0x55d/0xbc0 [ 157.942779][ T9064] ? kfree+0xd9/0x320 [ 157.942802][ T9064] ? strsep+0x1d/0x100 [ 157.942882][ T9064] p9_client_create+0x60b/0xbc0 [ 157.942911][ T9064] v9fs_session_init+0xf7/0xde0 [ 157.942933][ T9064] ? avc_has_perm_noaudit+0x1b1/0x200 [ 157.943019][ T9064] ? should_fail_ex+0xdb/0x280 [ 157.943089][ T9064] ? v9fs_mount+0x51/0x5c0 [ 157.943118][ T9064] ? should_failslab+0x8c/0xb0 [ 157.943141][ T9064] ? __kmalloc_cache_noprof+0x189/0x320 [ 157.943236][ T9064] v9fs_mount+0x67/0x5c0 [ 157.943260][ T9064] ? selinux_capable+0x31/0x40 [ 157.943324][ T9064] ? __pfx_v9fs_mount+0x10/0x10 [ 157.943425][ T9064] legacy_get_tree+0x78/0xd0 [ 157.943447][ T9064] vfs_get_tree+0x57/0x1d0 [ 157.943534][ T9064] do_new_mount+0x207/0x5e0 [ 157.943562][ T9064] ? security_capable+0x83/0x90 [ 157.943654][ T9064] path_mount+0x4a4/0xb20 [ 157.943706][ T9064] ? user_path_at+0x109/0x130 [ 157.943738][ T9064] __se_sys_mount+0x28f/0x2e0 [ 157.943759][ T9064] ? fput+0x8f/0xc0 [ 157.943827][ T9064] __x64_sys_mount+0x67/0x80 [ 157.943858][ T9064] x64_sys_call+0x2b4d/0x2ff0 [ 157.943883][ T9064] do_syscall_64+0xd2/0x200 [ 157.943918][ T9064] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.943983][ T9064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 157.944056][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.944083][ T9064] RIP: 0033:0x7f8593d2ebe9 [ 157.944101][ T9064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.944159][ T9064] RSP: 002b:00007f859278f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.944183][ T9064] RAX: ffffffffffffffda RBX: 00007f8593f65fa0 RCX: 00007f8593d2ebe9 [ 157.944199][ T9064] RDX: 00002000000002c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 157.944214][ T9064] RBP: 00007f859278f090 R08: 00002000000003c0 R09: 0000000000000000 [ 157.944230][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.944244][ T9064] R13: 00007f8593f66038 R14: 00007f8593f65fa0 R15: 00007ffd32c044c8 [ 157.944262][ T9064] [ 158.377282][ T9071] : renamed from bond0 (while UP) [ 158.383739][ T9072] loop2: detected capacity change from 0 to 128 [ 158.413100][ T9072] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.583185][ T9083] netlink: 'syz.3.1897': attribute type 6 has an invalid length. [ 158.751212][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 158.839656][ T9100] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1904'. [ 158.853896][ T9100] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1904'. [ 159.230122][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.243717][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.439033][ T9132] 9pnet_fd: Insufficient options for proto=fd [ 159.529132][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.538834][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.854286][ T29] kauditd_printk_skb: 3632 callbacks suppressed [ 159.854304][ T29] audit: type=1400 audit(1756916909.409:139485): avc: denied { write } for pid=9161 comm="syz.3.1925" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.913726][ T29] audit: type=1400 audit(1756916909.464:139486): avc: denied { bind } for pid=9163 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.940776][ T9164] loop2: detected capacity change from 0 to 512 [ 159.950255][ T9164] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1926: invalid block [ 159.962833][ T9164] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1926: invalid indirect mapped block 4294967295 (level 1) [ 159.980380][ T9164] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1926: invalid indirect mapped block 4294967295 (level 1) [ 159.995372][ T9164] EXT4-fs (loop2): 2 truncates cleaned up [ 160.037457][ T9173] loop3: detected capacity change from 0 to 128 [ 160.045800][ T9173] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.059371][ T29] audit: type=1400 audit(1756916909.603:139487): avc: denied { bind } for pid=9172 comm="syz.3.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.088703][ T9176] loop2: detected capacity change from 0 to 128 [ 160.107452][ T29] audit: type=1400 audit(1756916909.640:139488): avc: denied { map } for pid=9172 comm="syz.3.1930" path="/411/mnt/memory.events.local" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 160.139525][ T29] audit: type=1326 audit(1756916909.677:139489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.164084][ T29] audit: type=1326 audit(1756916909.677:139490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.188133][ T29] audit: type=1326 audit(1756916909.704:139491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.212776][ T29] audit: type=1326 audit(1756916909.704:139492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.236885][ T29] audit: type=1326 audit(1756916909.704:139493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.260632][ T29] audit: type=1326 audit(1756916909.704:139494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9177 comm="syz.4.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee5efebe9 code=0x7ffc0000 [ 160.318263][ T9183] loop1: detected capacity change from 0 to 256 [ 160.332252][ T9183] FAT-fs (loop1): Directory bread(block 1285) failed [ 160.341667][ T9183] FAT-fs (loop1): Directory bread(block 1285) failed [ 160.349808][ T9183] FAT-fs (loop1): Directory bread(block 1285) failed [ 160.350191][ T9188] serio: Serial port ptm0 [ 160.358407][ T9183] FAT-fs (loop1): Directory bread(block 1285) failed [ 160.515379][ T9195] __nla_validate_parse: 4 callbacks suppressed [ 160.515400][ T9195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1935'. [ 160.573384][ T9200] loop3: detected capacity change from 0 to 1024 [ 160.623015][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 160.633437][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1938'. [ 160.730665][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 160.926296][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9231 comm=syz.3.1947 [ 160.939034][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=9231 comm=syz.3.1947 [ 160.951768][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=9231 comm=syz.3.1947 [ 160.965874][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=9231 comm=syz.3.1947 [ 160.978750][ T9231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9231 comm=syz.3.1947 [ 161.013482][ T9235] 9pnet_fd: Insufficient options for proto=fd [ 161.089054][ T9241] loop3: detected capacity change from 0 to 128 [ 161.182460][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 161.266680][ T9254] loop1: detected capacity change from 0 to 128 [ 161.644823][ T9269] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.744707][ T9274] netlink: 'syz.5.1961': attribute type 3 has an invalid length. [ 161.881109][ T9281] netlink: 'syz.2.1964': attribute type 3 has an invalid length. [ 161.919206][ T9278] loop5: detected capacity change from 0 to 512 [ 161.927072][ T9278] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.943476][ T9278] EXT4-fs (loop5): 1 truncate cleaned up [ 161.951057][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 162.008589][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 162.021160][ T9281] futex_wake_op: syz.2.1964 tries to shift op by -1; fix this program [ 162.060971][ T9281] pim6reg: entered allmulticast mode [ 162.557619][ T8964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.568091][ T8964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.627951][ T8964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.638548][ T8964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.661242][ T9313] loop4: detected capacity change from 0 to 512 [ 162.693629][ T9313] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.724047][ T8964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.734783][ T8964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.742028][ T9313] EXT4-fs (loop4): 1 truncate cleaned up [ 162.770795][ T9313] program syz.4.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.809795][ T8964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.820820][ T8964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.859970][ T9334] loop9: detected capacity change from 0 to 7 [ 162.868318][ T9334] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.878084][ T9334] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.886064][ T9334] loop9: unable to read partition table [ 162.893399][ T9334] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.893399][ T9334] ) failed (rc=-5) [ 162.910077][ T3033] BUG: kernel NULL pointer dereference, address: 00000000000000e8