last executing test programs: 2m59.594243878s ago: executing program 0 (id=3391): syz_open_dev$rtc(&(0x7f0000000000), 0x100000001, 0x185203) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000100)=@md0, 0x0, &(0x7f0000000380)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) gettid() r5 = socket$netlink(0x10, 0x3, 0x14) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xc0000001) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x14004010) 2m59.542465129s ago: executing program 0 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (fail_nth: 4) 2m59.236311623s ago: executing program 0 (id=3396): r0 = syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4, 0x400c67a, 0x67, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2m59.182627704s ago: executing program 0 (id=3400): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000003700)="$eJzs209sFNUfAPDvbHdpCz9+9McPURB1EY2NxhYKCgcvGE08YGLEgx6bthCkUENrIoRISQweDYl349GrB6/qzXgy8YpHE0NCDBfA05rZnWn3b2nLtgvs55Ns+97sm3nvu/Pe7Nt5uwH0rXL6J4n4T0TciIgdtWxjgXLt393bl6fu3b48FYuVysm/k2q5O2k+k++3LcuMFiIKXyRNB6yZv3jp7OTs7MyFLD++cO6T8fmLl149c27y9MzpmfMTx44dOXzo6OsTr609qDb1pXHd2fv53L4973x0/d2pYr59KPtfH0e3lKPcrilVL3a7sh7bXpdOij1sCGsyEBHp6SpVx/+OGAgnD/pFpVKpDHZ+erHS7GrLFuCRlUSvWwD0Rv5Gn37+zR+bNPV4KNw6XvsAlMZ9N3vUnilGIStTavp8m1vsQv1DEfHh4j/fpI/YoPsQAAD1fjqezwQb5n+XD0TE7rpy/83WUEYi4n8RsTMi/h8RuyLiiazskxHxVNPxyxFRWaH+clO+df5TuPmgMa4knf+9ka1tNc7/8tlfjAxkue0R+YR55mD2moxGafDUmdmZQ/UHTRrXoH5+6/evOtVfrpv/pY+0/nwumLXjZrHpBt305MLkAweeuTUasbfYHH9STAOorQQMV//uiYi9azjuSF36zMvf7VvKlBrLtY+/ZdWsUt2ypWlrF5YqKt9GvFQ7/4vRcP6X25CsvD45PhSzMwfH015wsG0dv/527b1O9d/3/P/wZ/Mubx/98eSDhr3k1tWIrXX9P/L12+X4R5KIZGm9dn7tdVz748uOn2lW1/+vNOyT9v8tyQfVdN4lPptcWLhwKGJLcqJ1+8Tyvnk+L5/GP3qg/fjfme2TvhJPR0TaiZ+JiGcj4rms7fsj4vmIOLBC/L+8+cLH649/Y6XxT7e9/jWc/+X1+vkTeeLiahMDZ/ffuNfh4rG683+kmhrNtrS//iUNF43VNrALLyEAAAA89ApR/e5/YWwpXSiMjdXuAe2KrYXZufmFV07NfXp+uvYbgZEoFfI7XbX7waUkv/85UpefaMofzu4bfz0wXM2PTc3NTvc6eOhz26pjPmkZ/6m/BnrdOmDD+ckP9K+2479uOW339U1sDLCpvP9D/6ob/51+07LomzLweGr//l/a9HYAm6/d+L+yjn2AR0vFWIa+ZvxD/yrG+0vpworlgMeNcQ19afW/4l9PojLY/qmhaC0cQxvTjOE2dfUkkc6selL78Hr2yr/+1bFMFO53nGJDHxuM1jID0ZNzcXp31zt/JfuufLeb+v3K4zSfrm/AC7W51yEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN8m8AAAD//2+z1xU=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) rmdir(&(0x7f0000000200)='./bus\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1d, 0x2, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 2m58.851805519s ago: executing program 0 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="8d5c6f1e96877b9075e56964fb863d3fc2a0f2d6b9dfddd47d834117a02c44ec34fa1e155981b7221160f80d322dd463dc9fa0d380e62f2b4a187dfff832800ae30ff5e3cd200fdfade2cddf64b2e91d84f6a03564", @ANYRESHEX, @ANYBLOB=',debug=0x0010000000000001,k']) 2m58.603657723s ago: executing program 0 (id=3409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xc7R\xf4\xda\x9e\x86\xc9*K\xf3>\xad\x16\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E\xc5\x8a\x90f\xa7\xe7\n\x9f\xcc\"\xcb\x93\xefKc-\xdb\xd6[\x06\x15\x86A\xda\xc23\xf6\xabDA\x90\xf973\xf4\\t3Q3\xee\xe1\x0f\x9e:\xeb\xff\x87\xa8=\xac\xb4\xefk\xff\xae\xea\x91\xb1\x18\xbe>8<\xf4\x83\x87\x88D\xeb&=1\x8cL\xf7\xb6\xd1\x9e\xd3zJZN:\'\xf7C~1\xb7\xe4E\xc4\x96\xf7\xd2\xbfT\xa9u#\"^\xc9;\x81\xa8\x80q\xf2\x19\xee -@\xcf+\x8f=\xb7D\xe8\'^p\xba[_<\xd6\x8e]\xde\x11\xc8\x95\xb3\xcc\x9b.8W\x86\xc6\x02\xd7[E-;\xafk|jjX\xca\xd7\xdc\xe6\xd1\xcf!\x05}^\xfa\x9e\x94\xeb\xc5\xcb\x9a\x01B\xd9\xbf7\x83\xbf\xa2*\xd5`\xc47\xf0\xc6T\x05\x9f\x82\x96N') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) lstat(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18a) 2m58.603274463s ago: executing program 32 (id=3409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xc7R\xf4\xda\x9e\x86\xc9*K\xf3>\xad\x16\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E\xc5\x8a\x90f\xa7\xe7\n\x9f\xcc\"\xcb\x93\xefKc-\xdb\xd6[\x06\x15\x86A\xda\xc23\xf6\xabDA\x90\xf973\xf4\\t3Q3\xee\xe1\x0f\x9e:\xeb\xff\x87\xa8=\xac\xb4\xefk\xff\xae\xea\x91\xb1\x18\xbe>8<\xf4\x83\x87\x88D\xeb&=1\x8cL\xf7\xb6\xd1\x9e\xd3zJZN:\'\xf7C~1\xb7\xe4E\xc4\x96\xf7\xd2\xbfT\xa9u#\"^\xc9;\x81\xa8\x80q\xf2\x19\xee -@\xcf+\x8f=\xb7D\xe8\'^p\xba[_<\xd6\x8e]\xde\x11\xc8\x95\xb3\xcc\x9b.8W\x86\xc6\x02\xd7[E-;\xafk|jjX\xca\xd7\xdc\xe6\xd1\xcf!\x05}^\xfa\x9e\x94\xeb\xc5\xcb\x9a\x01B\xd9\xbf7\x83\xbf\xa2*\xd5`\xc47\xf0\xc6T\x05\x9f\x82\x96N') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) lstat(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18a) 1m43.868670661s ago: executing program 3 (id=4693): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m43.747227723s ago: executing program 3 (id=4695): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000000), 0xd, 0x61c, &(0x7f0000000d80)="$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") 1m43.642687705s ago: executing program 3 (id=4696): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1m43.418416288s ago: executing program 3 (id=4705): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800040, &(0x7f0000000200)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0x3, 0x589, &(0x7f0000001d80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x28, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0xd, 0x2, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x20040000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) io_setup(0x3, &(0x7f00000002c0)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$kcm(0x10, 0x2, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="8d", 0x1}], 0x1, 0x7c00, 0x0, 0x3) 1m43.144145602s ago: executing program 3 (id=4714): epoll_create1(0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) r1 = signalfd4(r0, &(0x7f0000000040)={[0x10]}, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r6, 0x53, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x3, r2, 0x0, 0x0, 0xfffffffffffffffd}]) shutdown(r5, 0x0) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000010000000000000001000100184000000000000000000000000000008520000003000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400e72e045c49d4e000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183900000300000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000000600000018450000fdffffff000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x96a, 0x9d, &(0x7f0000000840)=""/157, 0x40f00, 0x44, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x2e586, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) 1m42.878822876s ago: executing program 3 (id=4722): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x2c}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001780)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x260, 0x98, 0x130, 0x130, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x10}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @rand_addr=0x1, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0xaa}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x10, 0x9, 0xb, {0xffffffffffff5b34}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1d0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xc7, 0x6, "13ede4b272e06a118b81bdbc2c81828f14673db83cd657c3be91e3b524671d25975404ea1d9112adea7bf01ae20e6065aba9fd2a80e3ad58a1f23f06f2e7ab6e53ba99b3163e9173da80fdce7d47cd42c14ab61d72bf6fe39622332c727a7224375c683722dc91ef3faf4ed29e4c5516379688dbac4be1d49fe39a5599c4511318ddbd9c17f1df0a20c59b0a418a4be92cf5f1748046123e96e377d89f6b9c1918a84e799a32ec43e0a2003e3fbfb3af9a39b8950ac6144c046a75219e71d736e07583"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x30, 0x6, "547631932cd74f8bac740b81e0bf621a8fb688ed5f8192243c2d35d3630dfa60997b8bca9df7abca9bf43a70"}, @NFTA_TABLE_USERDATA={0x8, 0x6, "ca51ad63"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x39, 0x6, "571c98cd647604b0838de7222a999da876d4ae89bb8eef73be56c46552f494ba270a186386225dea64e626b69ca6c074c3945dae90"}, @NFTA_TABLE_USERDATA={0x43, 0x6, "ace2fe58de7951cdf13fac7d34c1c647f5efa10dd143f0aa4a38e5128529b5870bb36f527f789c8c6c39f06f4e2053e2d3076b9e80fb6b0844fc73613b4b52"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x218}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m42.837380827s ago: executing program 33 (id=4722): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x2c}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001780)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x260, 0x98, 0x130, 0x130, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x10}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @rand_addr=0x1, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0xaa}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x10, 0x9, 0xb, {0xffffffffffff5b34}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1d0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0xc7, 0x6, "13ede4b272e06a118b81bdbc2c81828f14673db83cd657c3be91e3b524671d25975404ea1d9112adea7bf01ae20e6065aba9fd2a80e3ad58a1f23f06f2e7ab6e53ba99b3163e9173da80fdce7d47cd42c14ab61d72bf6fe39622332c727a7224375c683722dc91ef3faf4ed29e4c5516379688dbac4be1d49fe39a5599c4511318ddbd9c17f1df0a20c59b0a418a4be92cf5f1748046123e96e377d89f6b9c1918a84e799a32ec43e0a2003e3fbfb3af9a39b8950ac6144c046a75219e71d736e07583"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x30, 0x6, "547631932cd74f8bac740b81e0bf621a8fb688ed5f8192243c2d35d3630dfa60997b8bca9df7abca9bf43a70"}, @NFTA_TABLE_USERDATA={0x8, 0x6, "ca51ad63"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x39, 0x6, "571c98cd647604b0838de7222a999da876d4ae89bb8eef73be56c46552f494ba270a186386225dea64e626b69ca6c074c3945dae90"}, @NFTA_TABLE_USERDATA={0x43, 0x6, "ace2fe58de7951cdf13fac7d34c1c647f5efa10dd143f0aa4a38e5128529b5870bb36f527f789c8c6c39f06f4e2053e2d3076b9e80fb6b0844fc73613b4b52"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x218}}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.914925625s ago: executing program 5 (id=6339): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x86442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWSET={0x74, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x3e, 0xd, 0x1, 0x0, "22edd58c66120b876a5049e61a43a12817662a9dd57f0e2da00f5c5d13756a4a1531fde3fbb37f3b6e2a2c5824703c06cae0789456446ab7bd54"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x9c}}, 0x0) 2.879577046s ago: executing program 5 (id=6340): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x98ab33064aa31597, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0xb) 2.795404827s ago: executing program 5 (id=6342): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x9, 0x10000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) 1.888963731s ago: executing program 5 (id=6351): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWSET={0x74, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x3e, 0xd, 0x1, 0x0, "22edd58c66120b876a5049e61a43a12817662a9dd57f0e2da00f5c5d13756a4a1531fde3fbb37f3b6e2a2c5824703c06cae0789456446ab7bd54"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x9c}}, 0x0) 1.465784008s ago: executing program 2 (id=6356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) 1.434244048s ago: executing program 5 (id=6358): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000040)={0x0, 0x79af, 0x400, 0x8000, 0x8f}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4, 0x400c67a, 0x67, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='adfs\x00', 0x285e002, &(0x7f0000000380)='syz') keyctl$clear(0x7, r6) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) writev(r7, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)='g', 0x1}], 0x2) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r8, 0x0, 0xd6, 0x7, &(0x7f0000000780)="e4510d62f2c9984e7cb60b93125ef9dada63db964fb525676aa4c823ebfec54ddc7ea606320caf10897f77702536c2948f32623d9dae9d7cf84f7ce5d1c731656f89a23081964a389d4c74d699b56237d7ac33766dc62488b49d78355db1a8612890b5824b85af1e29c60deab23ae9e76c259830a9c0d285b46286949da4211017b599af9e45954a0c16bb4057f3422132e9bf4e83eef4ef9f602d7afde6b70a6f18945b0cdc9fd914cd5f3a32c6baadbcf601792b49962839d25da47df08599f0024a3fcfd394a843a6a3116e35027d7db125d3c3f8", &(0x7f0000000440)=""/7, 0xf, 0x0, 0x37, 0x77, &(0x7f0000000480)="1df6cbad96a31fec71d17b6446898a5fea038fbae0825b6f3c86af28f6633191bc443c24db5bb27ac01468607c1c388811148825a4bfc2", &(0x7f0000000980)="dc67cb31d68a2c475e60807163d707fa5fa640879d455b1ea4ce817983efcdf7c12b05eac0ffb80e3b0f89de0e3e8099ffdca164c580fe671d3cbae3719829777cf1aab0f6647d0b56366c095a1cc7d792a9ae116935ba9e8e5f9b32fbfd198ffff9eb7f89fab70f150d3fe23b10b7ee12e710b4c7dd9e", 0x1, 0x0, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x4000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") 1.433545498s ago: executing program 2 (id=6359): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xb1de0244d95b7ddf) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.381617149s ago: executing program 2 (id=6360): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x98ab33064aa31597, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0xb) 1.380814889s ago: executing program 2 (id=6361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x9, 0x10000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) 944.260396ms ago: executing program 6 (id=6369): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 899.660107ms ago: executing program 6 (id=6370): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xb1de0244d95b7ddf) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 847.978067ms ago: executing program 6 (id=6371): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x98ab33064aa31597, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0xb) 847.458517ms ago: executing program 4 (id=6372): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 823.295768ms ago: executing program 1 (id=6373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xc7R\xf4\xda\x9e\x86\xc9*K\xf3>\xad\x16\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E\xc5\x8a\x90f\xa7\xe7\n\x9f\xcc\"\xcb\x93\xefKc-\xdb\xd6[\x06\x15\x86A\xda\xc23\xf6\xabDA\x90\xf973\xf4\\t3Q3\xee\xe1\x0f\x9e:\xeb\xff\x87\xa8=\xac\xb4\xefk\xff\xae\xea\x91\xb1\x18\xbe>8<\xf4\x83\x87\x88D\xeb&=1\x8cL\xf7\xb6\xd1\x9e\xd3zJZN:\'\xf7C~1\xb7\xe4E\xc4\x96\xf7\xd2\xbfT\xa9u#\"^\xc9;\x81\xa8\x80q\xf2\x19\xee -@\xcf+\x8f=\xb7D\xe8\'^p\xba[_<\xd6\x8e]\xde\x11\xc8\x95\xb3\xcc\x9b.8W\x86\xc6\x02\xd7[E-;\xafk|jjX\xca\xd7\xdc\xe6\xd1\xcf!\x05}^\xfa\x9e\x94\xeb\xc5\xcb\x9a\x01B\xd9\xbf7\x83\xbf\xa2*\xd5`\xc47\xf0\xc6T\x05\x9f\x82\x96N') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) lstat(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18a) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6}}, {{@in=@dev}, 0x0, @in=@local}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', '\x00\x00\x00\x00\x00\b\x00'}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/181, 0xb5}, &(0x7f00000003c0)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r3) getsockname$l2tp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) 798.340358ms ago: executing program 4 (id=6374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1a}]}}]}, 0x44}}, 0x8850) r4 = semget(0x2, 0x5, 0x6b4) semop(r4, &(0x7f0000000340)=[{0x4, 0xfffa, 0x1000}, {0x3, 0xffb3, 0x1800}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffcf03000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf410}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x1, 0x1, 0x4, 0x9]) semtimedop(r4, &(0x7f00000000c0)=[{0x2, 0x2, 0x1800}, {0x2, 0x6, 0x1800}, {0x3, 0x4, 0x1000}], 0x3, &(0x7f0000000100)={0x77359400}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0x64}}, 0x0) 445.106484ms ago: executing program 2 (id=6383): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xa}, 0x2, 0xe3b, 0x2, 0x0, 0x2, 0x240, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = msgget$private(0x0, 0x790) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x8000000000000032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540f, 0x300000000000000) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x5) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f00000001c0)=[r3, r3, r3]) fallocate(0xffffffffffffffff, 0x4f, 0x8000000000000001, 0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x59) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x12) 443.059344ms ago: executing program 1 (id=6384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) setfsgid(0xee00) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x144040) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000004c0)=""/201) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe7}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3, 0x3}}}}]}]}, 0x50}}, 0x4044010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000a8011a80a40102803c0001"], 0x1c8}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r4, &(0x7f0000000200)='personality\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24004820) io_setup(0x2, &(0x7f0000000040)) 395.525344ms ago: executing program 6 (id=6385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x9, 0x10000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) 330.218815ms ago: executing program 4 (id=6386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r5, r5, 0x0, 0x40000f63c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 162.137708ms ago: executing program 1 (id=6387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) 83.530539ms ago: executing program 1 (id=6388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x40, 0x4}}, './file1\x00'}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000100001000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32=r0, @ANYBLOB="000000008000"/28, @ANYRES32=r3, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/36, &(0x7f00000002c0)=0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) socket$nl_generic(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, 0x0) setfsgid(0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 1 (id=6389): r0 = geteuid() r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_lt={'uid<', r0}}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x8, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="0000000000001000b7030000000300008500cb3291cd93fd2bf5c47d250f797f4e969d8873d711dba9c85fe01ede2759cddd9ca74e178bdf625f3de87471176f97fb891aba089a1ec1fe5a42e61c58175d71b419"], &(0x7f0000000780)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) read(r6, &(0x7f0000000200)=""/209, 0x128) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000000040)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000800), 0x62, 0x12141, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$tipc(r7, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e32546", 0x5d, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'nicvf0\x00'}) tkill(r5, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) syz_clone3(0x0, 0x0) kernel console output (not intermixed with test programs): known, defaulting to 1000 [ 392.305995][T19999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.315033][T19999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.364375][T19999] loop2: detected capacity change from 0 to 8192 [ 392.613602][T20014] ipt_ECN: cannot use operation on non-tcp rule [ 392.883402][T20016] lo speed is unknown, defaulting to 1000 [ 393.348901][T20019] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 393.435262][T20023] loop1: detected capacity change from 0 to 164 [ 393.532354][T20027] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 393.569725][T20030] __nla_validate_parse: 3 callbacks suppressed [ 393.569743][T20030] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5601'. [ 393.993163][T20049] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 394.017631][T20050] wireguard0: entered promiscuous mode [ 394.023288][T20050] wireguard0: entered allmulticast mode [ 394.024264][T20053] loop5: detected capacity change from 0 to 512 [ 394.044794][T20053] journal_path: Non-blockdev passed as './bus' [ 394.051167][T20053] EXT4-fs: error: could not find journal device path [ 394.058421][T20055] loop1: detected capacity change from 0 to 164 [ 394.168476][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'. [ 394.198696][T20064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5613'. [ 394.220940][T20064] loop1: detected capacity change from 0 to 256 [ 394.241227][T20069] wireguard0: entered promiscuous mode [ 394.246744][T20069] wireguard0: entered allmulticast mode [ 394.442448][T20088] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5621'. [ 394.757485][T20094] loop6: detected capacity change from 0 to 512 [ 394.764307][T20094] journal_path: Non-blockdev passed as './bus' [ 394.770512][T20094] EXT4-fs: error: could not find journal device path [ 394.875084][T20105] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5630'. [ 394.885897][T20105] 0ªX¹¦D: renamed from gretap0 (while UP) [ 394.894194][T20105] 0ªX¹¦D: entered allmulticast mode [ 394.902480][T20105] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 394.923330][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5630'. [ 395.062657][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5634'. [ 395.076349][T20125] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5635'. [ 395.089253][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5634'. [ 395.413235][T20124] lo speed is unknown, defaulting to 1000 [ 395.491819][T20136] loop5: detected capacity change from 0 to 1024 [ 395.509626][T20136] ext4: Unknown parameter 'func' [ 395.569368][T20138] lo speed is unknown, defaulting to 1000 [ 395.611689][T20149] loop4: detected capacity change from 0 to 512 [ 395.618381][T20149] journal_path: Non-blockdev passed as './bus' [ 395.624646][T20149] EXT4-fs: error: could not find journal device path [ 395.780424][T20169] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5650'. [ 395.942439][T20176] loop6: detected capacity change from 0 to 164 [ 396.044704][T20187] loop6: detected capacity change from 0 to 164 [ 396.114486][T20192] loop2: detected capacity change from 0 to 512 [ 396.125614][T20192] journal_path: Non-blockdev passed as './bus' [ 396.132129][T20192] EXT4-fs: error: could not find journal device path [ 396.162624][T20191] loop6: detected capacity change from 0 to 1024 [ 396.193118][T20191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.240794][T20191] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.316434][T20213] loop1: detected capacity change from 0 to 164 [ 396.323493][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.326900][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 396.326915][ T29] audit: type=1326 audit(1752826469.385:16281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.363022][ T29] audit: type=1326 audit(1752826469.385:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.386657][ T29] audit: type=1326 audit(1752826469.385:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.410204][ T29] audit: type=1326 audit(1752826469.385:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.433917][ T29] audit: type=1326 audit(1752826469.385:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.433950][ T29] audit: type=1326 audit(1752826469.385:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.481926][ T29] audit: type=1326 audit(1752826469.385:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.505687][ T29] audit: type=1326 audit(1752826469.385:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.529613][ T29] audit: type=1326 audit(1752826469.385:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.553316][ T29] audit: type=1326 audit(1752826469.385:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.2.5669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 396.640819][T20229] loop4: detected capacity change from 0 to 512 [ 396.663859][T20229] journal_path: Non-blockdev passed as './bus' [ 396.670251][T20229] EXT4-fs: error: could not find journal device path [ 397.228973][T20232] loop6: detected capacity change from 0 to 512 [ 397.256476][T20232] journal_path: Non-blockdev passed as './bus' [ 397.262705][T20232] EXT4-fs: error: could not find journal device path [ 397.417988][T20251] wireguard1: entered promiscuous mode [ 397.423531][T20251] wireguard1: entered allmulticast mode [ 397.452616][ T3374] hid-generic 0001:0001:0004.0012: unknown main item tag 0x0 [ 397.460205][ T3374] hid-generic 0001:0001:0004.0012: unknown main item tag 0x0 [ 397.467641][ T3374] hid-generic 0001:0001:0004.0012: unknown main item tag 0x0 [ 397.569197][ T3374] hid-generic 0001:0001:0004.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 397.611539][T20271] loop5: detected capacity change from 0 to 1024 [ 397.618578][T20271] EXT4-fs: Ignoring removed orlov option [ 397.624296][T20271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.640278][T20271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.644393][T20266] lo speed is unknown, defaulting to 1000 [ 397.677200][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.782550][T20279] loop4: detected capacity change from 0 to 512 [ 397.791069][T20279] journal_path: Non-blockdev passed as './bus' [ 397.797340][T20279] EXT4-fs: error: could not find journal device path [ 397.835495][T20289] loop5: detected capacity change from 0 to 512 [ 397.849061][T20289] journal_path: Non-blockdev passed as './bus' [ 397.855266][T20289] EXT4-fs: error: could not find journal device path [ 397.889746][T20292] wireguard2: entered promiscuous mode [ 397.895332][T20292] wireguard2: entered allmulticast mode [ 398.270150][T20314] lo speed is unknown, defaulting to 1000 [ 398.397920][T20295] lo speed is unknown, defaulting to 1000 [ 398.476922][T20333] loop1: detected capacity change from 0 to 164 [ 398.595872][T20340] loop6: detected capacity change from 0 to 256 [ 398.724362][T20355] __nla_validate_parse: 6 callbacks suppressed [ 398.724415][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5723'. [ 398.832927][T20356] lo speed is unknown, defaulting to 1000 [ 398.967496][T20382] loop5: detected capacity change from 0 to 512 [ 398.974919][T20382] journal_path: Non-blockdev passed as './bus' [ 398.981145][T20382] EXT4-fs: error: could not find journal device path [ 398.996560][T20384] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.006455][T20384] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.071157][T20384] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.081029][T20384] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.123214][T20388] loop4: detected capacity change from 0 to 1024 [ 399.142294][T20388] EXT4-fs: Ignoring removed orlov option [ 399.148089][T20388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.176720][T20384] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.186566][T20384] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.222292][T20384] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.232181][T20384] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.247010][T20388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.300782][T20384] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.309221][T20384] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.321118][T20384] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.329549][T20384] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.340645][T20384] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.348985][T20384] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.360608][T20384] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.368957][T20384] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.400436][T20393] loop6: detected capacity change from 0 to 1024 [ 399.407409][T20393] EXT4-fs: Ignoring removed orlov option [ 399.413213][T20393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.439463][T20393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.458411][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.473672][T20399] loop2: detected capacity change from 0 to 512 [ 399.498287][T20399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.513783][T20399] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.5739: invalid block [ 399.514746][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.558087][T20399] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5739: invalid indirect mapped block 4294967295 (level 1) [ 399.602609][T20399] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5739: invalid indirect mapped block 4294967295 (level 1) [ 399.653238][T20399] EXT4-fs (loop2): 2 truncates cleaned up [ 399.679438][T20406] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5742'. [ 399.689304][T20399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.727218][T20399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.795318][T20421] loop5: detected capacity change from 0 to 128 [ 399.806839][T20421] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.831979][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5739'. [ 399.846478][T20421] ext4 filesystem being mounted at /478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.908663][T20419] wireguard0: entered promiscuous mode [ 399.914209][T20419] wireguard0: entered allmulticast mode [ 399.948918][T20427] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.969264][T13664] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 400.039579][T20427] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.092808][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5754'. [ 400.092882][T20427] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.113822][T20442] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5754'. [ 400.150570][T20427] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.162545][T20442] loop5: detected capacity change from 0 to 256 [ 400.195727][T20427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.207247][T20427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.219029][T20427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.230525][T20427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.442243][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5759'. [ 400.673867][T20474] ipt_ECN: cannot use operation on non-tcp rule [ 400.935022][T20478] lo speed is unknown, defaulting to 1000 [ 401.256953][T20491] loop4: detected capacity change from 0 to 164 [ 401.305711][T20489] lo speed is unknown, defaulting to 1000 [ 401.332028][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 401.332045][ T29] audit: type=1326 audit(1752826474.395:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.362001][ T29] audit: type=1326 audit(1752826474.395:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc8c211265 code=0x7ffc0000 [ 401.385621][ T29] audit: type=1326 audit(1752826474.395:16487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.2.5769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.413362][ T29] audit: type=1326 audit(1752826474.475:16488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.437094][ T29] audit: type=1326 audit(1752826474.475:16489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.464983][T20508] loop5: detected capacity change from 0 to 1024 [ 401.476466][ T29] audit: type=1326 audit(1752826474.535:16490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.500121][ T29] audit: type=1326 audit(1752826474.535:16491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.523855][ T29] audit: type=1326 audit(1752826474.535:16492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.547709][ T29] audit: type=1326 audit(1752826474.535:16493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.571218][ T29] audit: type=1326 audit(1752826474.535:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20505 comm="syz.2.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8c1de9a9 code=0x7ffc0000 [ 401.616243][T20508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.632710][T20508] pim6reg: entered allmulticast mode [ 401.639003][T20508] pim6reg: left allmulticast mode [ 401.893363][T20518] lo speed is unknown, defaulting to 1000 [ 401.958345][T20518] chnl_net:caif_netlink_parms(): no params data found [ 402.001415][T20518] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.008625][T20518] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.015914][T20518] bridge_slave_0: entered allmulticast mode [ 402.023685][T20518] bridge_slave_0: entered promiscuous mode [ 402.030831][T20518] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.038042][T20518] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.045297][T20518] bridge_slave_1: entered allmulticast mode [ 402.051854][T20518] bridge_slave_1: entered promiscuous mode [ 402.069053][T20518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.079605][T20518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.100006][T20518] team0: Port device team_slave_0 added [ 402.106665][T20518] team0: Port device team_slave_1 added [ 402.121600][T20518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.128677][T20518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.154664][T20518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.165949][T20518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.173111][T20518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.199172][T20518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.230467][T20518] hsr_slave_0: entered promiscuous mode [ 402.236758][T20518] hsr_slave_1: entered promiscuous mode [ 402.237428][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.292278][T20546] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.350108][T20546] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.373447][T20518] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.400498][T20546] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.436456][T20550] lo speed is unknown, defaulting to 1000 [ 402.446615][T20518] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.462944][T20546] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.489720][T20518] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.546467][T20546] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.558064][T20546] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.559757][T20559] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5787'. [ 402.570051][T20546] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.586829][T20546] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.636827][T20518] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.701530][T20564] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 402.789667][T20570] loop4: detected capacity change from 0 to 164 [ 402.870576][T20578] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 402.947656][T20588] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.957756][T20588] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.002720][T20586] lo speed is unknown, defaulting to 1000 [ 403.041717][T20588] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.051678][T20588] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.089789][T20588] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.099720][T20588] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.101831][T20602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5799'. [ 403.160217][T20588] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.170147][T20588] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.194626][T20609] netlink: 'syz.6.5801': attribute type 10 has an invalid length. [ 403.203161][T20609] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.210406][T20609] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.250675][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5801'. [ 403.266010][T20609] bridge_slave_1: left allmulticast mode [ 403.271772][T20609] bridge_slave_1: left promiscuous mode [ 403.277545][T20609] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.286518][T20609] bridge_slave_0: left allmulticast mode [ 403.292287][T20609] bridge_slave_0: left promiscuous mode [ 403.298178][T20609] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.320419][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.328974][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.368288][T20615] loop4: detected capacity change from 0 to 8192 [ 403.417992][T20619] loop6: detected capacity change from 0 to 164 [ 403.470716][T20622] FAULT_INJECTION: forcing a failure. [ 403.470716][T20622] name failslab, interval 1, probability 0, space 0, times 0 [ 403.483465][T20622] CPU: 0 UID: 0 PID: 20622 Comm: syz.6.5806 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 403.483552][T20622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.483568][T20622] Call Trace: [ 403.483576][T20622] [ 403.483585][T20622] __dump_stack+0x1d/0x30 [ 403.483607][T20622] dump_stack_lvl+0xe8/0x140 [ 403.483627][T20622] dump_stack+0x15/0x1b [ 403.483674][T20622] should_fail_ex+0x265/0x280 [ 403.483711][T20622] should_failslab+0x8c/0xb0 [ 403.483737][T20622] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 403.483844][T20622] ? simple_xattr_set+0xa3/0x2b0 [ 403.483869][T20622] kstrdup+0x3e/0xd0 [ 403.483891][T20622] simple_xattr_set+0xa3/0x2b0 [ 403.483972][T20622] ? strlen+0x19/0x40 [ 403.484034][T20622] shmem_xattr_handler_set+0x12b/0x220 [ 403.484059][T20622] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 403.484084][T20622] __vfs_setxattr+0x2e6/0x310 [ 403.484124][T20622] __vfs_setxattr_noperm+0xe8/0x410 [ 403.484183][T20622] __vfs_setxattr_locked+0x1af/0x1d0 [ 403.484224][T20622] vfs_setxattr+0x132/0x270 [ 403.484262][T20622] file_setxattr+0x139/0x1b0 [ 403.484348][T20622] path_setxattrat+0x290/0x310 [ 403.484388][T20622] __x64_sys_fsetxattr+0x6b/0x80 [ 403.484412][T20622] x64_sys_call+0x2f7c/0x2fb0 [ 403.484438][T20622] do_syscall_64+0xd2/0x200 [ 403.484529][T20622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 403.484559][T20622] ? clear_bhb_loop+0x40/0x90 [ 403.484581][T20622] ? clear_bhb_loop+0x40/0x90 [ 403.484667][T20622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.484689][T20622] RIP: 0033:0x7fa89630e9a9 [ 403.484704][T20622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.484723][T20622] RSP: 002b:00007fa89496f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 403.484742][T20622] RAX: ffffffffffffffda RBX: 00007fa896535fa0 RCX: 00007fa89630e9a9 [ 403.484757][T20622] RDX: 0000200000000380 RSI: 0000200000000280 RDI: 0000000000000005 [ 403.484785][T20622] RBP: 00007fa89496f090 R08: 0000000000000000 R09: 0000000000000000 [ 403.484886][T20622] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 403.484898][T20622] R13: 0000000000000000 R14: 00007fa896535fa0 R15: 00007ffcb4dec448 [ 403.484992][T20622] [ 403.795493][T20588] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.803777][T20588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.815527][T20588] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.816687][T20629] loop6: detected capacity change from 0 to 1024 [ 403.823845][T20588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.841770][T20588] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.850017][T20588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.861139][T20588] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.869425][T20588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.891442][T20629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.917200][T20629] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.942932][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.955230][T20636] loop2: detected capacity change from 0 to 512 [ 403.963160][T20636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.974389][T20636] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.5810: invalid block [ 403.988418][T20636] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5810: invalid indirect mapped block 4294967295 (level 1) [ 404.004017][T20636] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5810: invalid indirect mapped block 4294967295 (level 1) [ 404.019969][T20636] EXT4-fs (loop2): 2 truncates cleaned up [ 404.026728][T20636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.056587][T20636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.099620][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5810'. [ 404.245778][T20651] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 404.338832][T20653] loop5: detected capacity change from 0 to 512 [ 404.362894][T20653] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.5818: casefold flag without casefold feature [ 404.389043][T20653] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5818: couldn't read orphan inode 15 (err -117) [ 404.413682][T20653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.482943][T20645] lo speed is unknown, defaulting to 1000 [ 404.612713][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5820'. [ 404.895985][T20653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.919898][T20518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.976412][T20518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.005739][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.034615][T20518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.057528][T20518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.082850][T20677] loop5: detected capacity change from 0 to 1024 [ 405.106225][T20677] EXT4-fs: Ignoring removed orlov option [ 405.112011][T20677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.122147][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5823'. [ 405.146908][T20686] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5823'. [ 405.159589][T20686] loop6: detected capacity change from 0 to 256 [ 405.167521][T20677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.182144][T17620] bridge_slave_1: left allmulticast mode [ 405.187901][T17620] bridge_slave_1: left promiscuous mode [ 405.188196][T20687] loop2: detected capacity change from 0 to 1024 [ 405.193638][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.208986][T17620] bridge_slave_0: left allmulticast mode [ 405.214745][T17620] bridge_slave_0: left promiscuous mode [ 405.220532][T17620] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.230774][T20687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.243456][T20687] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.301075][T12084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.313836][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.349709][T20518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.361659][T20518] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.371015][T17595] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.378128][T17595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.393261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.400378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.415463][T20698] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 405.483072][T17620] hsr_slave_0: left promiscuous mode [ 405.492709][T17620] hsr_slave_1: left promiscuous mode [ 405.502843][T17620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.510355][T17620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.518085][T17620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.525529][T17620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.536728][T17620] veth1_macvtap: left promiscuous mode [ 405.542759][T17620] veth0_macvtap: left promiscuous mode [ 405.548500][T17620] veth1_vlan: left promiscuous mode [ 405.556960][T17620] veth0_vlan: left promiscuous mode [ 405.710361][T17620] team0 (unregistering): Port device team_slave_1 removed [ 405.720139][T17620] team0 (unregistering): Port device team_slave_0 removed [ 405.728496][T17595] smc: removing ib device syz! [ 405.780625][T20704] lo speed is unknown, defaulting to 1000 [ 405.870939][T20518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.957574][T20717] loop6: detected capacity change from 0 to 1024 [ 405.958880][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5832'. [ 405.973019][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5832'. [ 405.977946][T20717] ext4: Unknown parameter 'func' [ 406.028789][T20518] veth0_vlan: entered promiscuous mode [ 406.051872][T20518] veth1_vlan: entered promiscuous mode [ 406.089934][T20724] wireguard0: entered promiscuous mode [ 406.095450][T20724] wireguard0: entered allmulticast mode [ 406.105445][T20518] veth0_macvtap: entered promiscuous mode [ 406.123134][T20518] veth1_macvtap: entered promiscuous mode [ 406.134076][T20518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.149316][T20518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.180402][T20518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.189203][T20518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.197914][T20518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.206690][T20518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.410206][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 406.410265][ T29] audit: type=1326 audit(1752826479.475:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa59e2d5967 code=0x7ffc0000 [ 406.461073][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5837'. [ 406.521555][ T29] audit: type=1326 audit(1752826479.505:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa59e27ab89 code=0x7ffc0000 [ 406.545227][ T29] audit: type=1326 audit(1752826479.505:16673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa59e2d5967 code=0x7ffc0000 [ 406.568859][ T29] audit: type=1326 audit(1752826479.505:16674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa59e27ab89 code=0x7ffc0000 [ 406.592438][ T29] audit: type=1326 audit(1752826479.505:16675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 406.616032][ T29] audit: type=1326 audit(1752826479.505:16676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 406.639695][ T29] audit: type=1326 audit(1752826479.515:16677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 406.663364][ T29] audit: type=1326 audit(1752826479.515:16678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 406.687062][ T29] audit: type=1326 audit(1752826479.515:16679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20739 comm="syz.5.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 406.780534][T20749] wireguard1: entered promiscuous mode [ 406.786124][T20749] wireguard1: entered allmulticast mode [ 406.801118][T20757] loop5: detected capacity change from 0 to 512 [ 406.815879][T20757] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.5840: casefold flag without casefold feature [ 406.850148][T20742] wireguard0: entered promiscuous mode [ 406.851886][T20757] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5840: couldn't read orphan inode 15 (err -117) [ 406.855683][T20742] wireguard0: entered allmulticast mode [ 406.881573][T20757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.951408][ T29] audit: type=1326 audit(1752826480.015:16680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.4.5844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef6ae45967 code=0x7ffc0000 [ 407.067243][ T36] hid-generic 0001:0001:0004.0013: unknown main item tag 0x0 [ 407.074811][ T36] hid-generic 0001:0001:0004.0013: unknown main item tag 0x0 [ 407.082317][ T36] hid-generic 0001:0001:0004.0013: unknown main item tag 0x0 [ 407.097455][T20781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.106152][T20781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.116607][ T36] hid-generic 0001:0001:0004.0013: hidraw0: HID v0.00 Device [syz0] on syz1 [ 407.147351][T20785] loop6: detected capacity change from 0 to 512 [ 407.164238][T20785] journal_path: Non-blockdev passed as './bus' [ 407.164818][T20781] loop2: detected capacity change from 0 to 8192 [ 407.170518][T20785] EXT4-fs: error: could not find journal device path [ 407.356601][T20757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.450968][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.475985][T20803] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5852'. [ 407.533914][T20795] lo speed is unknown, defaulting to 1000 [ 407.724357][T20814] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 408.014001][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 408.126110][T20831] loop5: detected capacity change from 0 to 512 [ 408.136575][T20832] wireguard0: entered promiscuous mode [ 408.142172][T20832] wireguard0: entered allmulticast mode [ 408.156551][T20831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.213977][T20831] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.5864: invalid block [ 408.234055][T20831] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5864: invalid indirect mapped block 4294967295 (level 1) [ 408.263129][T20831] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5864: invalid indirect mapped block 4294967295 (level 1) [ 408.295397][T20831] EXT4-fs (loop5): 2 truncates cleaned up [ 408.303158][T20831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.337601][T20831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.394079][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5864'. [ 408.475905][T20849] netlink: 'syz.5.5870': attribute type 10 has an invalid length. [ 408.513401][T20849] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.520666][T20849] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.565651][T20852] bridge_slave_1: left allmulticast mode [ 408.571655][T20852] bridge_slave_1: left promiscuous mode [ 408.577459][T20852] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.586835][T20852] bridge_slave_0: left allmulticast mode [ 408.592663][T20852] bridge_slave_0: left promiscuous mode [ 408.598370][T20852] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.686528][T20840] lo speed is unknown, defaulting to 1000 [ 408.900881][T20871] loop1: detected capacity change from 0 to 1024 [ 408.907613][T20871] ext4: Unknown parameter 'func' [ 408.962515][T20873] loop4: detected capacity change from 0 to 512 [ 408.984164][T20873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.004994][T20873] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.5880: invalid block [ 409.033124][T20873] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5880: invalid indirect mapped block 4294967295 (level 1) [ 409.061344][T20873] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5880: invalid indirect mapped block 4294967295 (level 1) [ 409.090138][T20873] EXT4-fs (loop4): 2 truncates cleaned up [ 409.102803][T20873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.124339][T20873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.160241][T20873] __nla_validate_parse: 2 callbacks suppressed [ 409.160258][T20873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5880'. [ 409.163903][T20881] loop5: detected capacity change from 0 to 1024 [ 409.184272][T20883] netlink: 'syz.1.5883': attribute type 10 has an invalid length. [ 409.192585][T20881] EXT4-fs: Ignoring removed orlov option [ 409.198468][T20881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.205461][T20883] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.212673][T20883] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.222629][T20881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.235680][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5883'. [ 409.238496][T20883] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.251786][T20883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.259270][T20883] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.266329][T20883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.287512][T20883] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 409.296642][T20886] bridge_slave_1: left allmulticast mode [ 409.302359][T20886] bridge_slave_1: left promiscuous mode [ 409.308113][T20886] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.320473][T20888] loop4: detected capacity change from 0 to 1024 [ 409.327600][T20888] EXT4-fs: Ignoring removed orlov option [ 409.333415][T20888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 409.340875][T20886] bridge_slave_0: left allmulticast mode [ 409.346689][T20886] bridge_slave_0: left promiscuous mode [ 409.352377][T20886] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.362656][T20886] bond0: (slave bridge0): Releasing backup interface [ 409.372410][T20888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.397640][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.408164][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.486212][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5887'. [ 409.572107][T20907] loop5: detected capacity change from 0 to 1024 [ 409.581755][T20907] ext4: Unknown parameter 'func' [ 409.619161][T20914] loop4: detected capacity change from 0 to 512 [ 409.636047][T20914] journal_path: Non-blockdev passed as './bus' [ 409.642391][T20914] EXT4-fs: error: could not find journal device path [ 409.663033][T20915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5894'. [ 409.706007][T20915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.741982][T20915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.782543][T20915] bond0 (unregistering): Released all slaves [ 409.974558][T20929] lo speed is unknown, defaulting to 1000 [ 410.088555][T20935] loop5: detected capacity change from 0 to 1024 [ 410.095461][T20935] EXT4-fs: Ignoring removed orlov option [ 410.101400][T20935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.121040][T20935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.325751][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.360954][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'. [ 410.404274][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 410.413283][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5905'. [ 410.465671][T20958] loop5: detected capacity change from 0 to 1024 [ 410.478520][T20958] ext4: Unknown parameter 'func' [ 410.491937][T20959] wireguard1: entered promiscuous mode [ 410.497462][T20959] wireguard1: entered allmulticast mode [ 410.510520][T20960] loop4: detected capacity change from 0 to 512 [ 410.520472][T20960] journal_path: Non-blockdev passed as './bus' [ 410.526672][T20960] EXT4-fs: error: could not find journal device path [ 410.722173][T20966] lo speed is unknown, defaulting to 1000 [ 410.733102][T20979] loop5: detected capacity change from 0 to 164 [ 410.751928][T20980] loop2: detected capacity change from 0 to 1024 [ 410.781574][T20980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.809593][T20980] pim6reg: entered allmulticast mode [ 410.841659][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5915'. [ 410.852009][T20980] pim6reg: left allmulticast mode [ 410.891835][T20991] ipt_ECN: cannot use operation on non-tcp rule [ 411.107753][T20995] lo speed is unknown, defaulting to 1000 [ 411.458081][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 411.458097][ T29] audit: type=1326 audit(1752826484.505:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.488121][ T29] audit: type=1326 audit(1752826484.515:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.511804][ T29] audit: type=1326 audit(1752826484.515:17016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.535471][ T29] audit: type=1326 audit(1752826484.515:17017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.559062][ T29] audit: type=1326 audit(1752826484.515:17018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.582709][ T29] audit: type=1326 audit(1752826484.515:17019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.606229][ T29] audit: type=1326 audit(1752826484.515:17020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.629911][ T29] audit: type=1326 audit(1752826484.515:17021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.653533][ T29] audit: type=1326 audit(1752826484.515:17022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.677106][ T29] audit: type=1326 audit(1752826484.515:17023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21004 comm="syz.4.5921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 411.803879][T20989] wireguard0: entered promiscuous mode [ 411.809440][T20989] wireguard0: entered allmulticast mode [ 411.849633][T12084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.890217][T20994] loop1: detected capacity change from 0 to 512 [ 411.908466][T20994] journal_path: Non-blockdev passed as './bus' [ 411.914686][T20994] EXT4-fs: error: could not find journal device path [ 412.130207][T21028] loop6: detected capacity change from 0 to 1024 [ 412.173425][T21030] loop5: detected capacity change from 0 to 1024 [ 412.194181][T21028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.211971][T21030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.227856][T21028] pim6reg: entered allmulticast mode [ 412.239594][T21030] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.250082][T21028] pim6reg: left allmulticast mode [ 412.274958][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.276436][T21033] lo speed is unknown, defaulting to 1000 [ 412.403963][T21054] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 412.640765][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5944'. [ 412.651514][T21072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5944'. [ 412.663954][T21072] loop4: detected capacity change from 0 to 256 [ 412.843089][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.016734][T21076] lo speed is unknown, defaulting to 1000 [ 413.089004][T21084] wireguard1: entered promiscuous mode [ 413.094546][T21084] wireguard1: entered allmulticast mode [ 413.100742][T21090] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 413.470741][T21119] loop4: detected capacity change from 0 to 164 [ 413.516321][T21122] wireguard0: entered promiscuous mode [ 413.521937][T21122] wireguard0: entered allmulticast mode [ 413.577891][T21133] loop4: detected capacity change from 0 to 1024 [ 413.586283][T21133] ext4: Unknown parameter 'func' [ 413.702950][T21152] loop1: detected capacity change from 0 to 1024 [ 413.720228][T21152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.737803][T21152] pim6reg: entered allmulticast mode [ 413.744479][T21157] loop6: detected capacity change from 0 to 256 [ 413.754375][T21152] pim6reg: left allmulticast mode [ 413.763848][T21161] ipt_ECN: cannot use operation on non-tcp rule [ 413.962083][T21164] lo speed is unknown, defaulting to 1000 [ 414.288210][T21167] __nla_validate_parse: 4 callbacks suppressed [ 414.288228][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5976'. [ 414.387587][T21173] loop2: detected capacity change from 0 to 1024 [ 414.396669][T21173] EXT4-fs: Ignoring removed orlov option [ 414.402444][T21173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.432678][T21173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.474590][T12084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.519857][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.669277][T21178] wireguard1: entered promiscuous mode [ 414.674819][T21178] wireguard1: entered allmulticast mode [ 414.740552][T21207] loop5: detected capacity change from 0 to 512 [ 414.760158][T21207] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.5990: casefold flag without casefold feature [ 414.770166][T21208] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 414.783453][T21207] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5990: couldn't read orphan inode 15 (err -117) [ 414.819837][T21207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.106052][T21227] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 415.349276][T21242] loop2: detected capacity change from 0 to 1024 [ 415.370612][T21242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.387047][T21242] pim6reg: entered allmulticast mode [ 415.394307][T21242] pim6reg: left allmulticast mode [ 415.518105][T21251] loop1: detected capacity change from 0 to 1024 [ 415.525047][T21251] EXT4-fs: Ignoring removed orlov option [ 415.530876][T21251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.550777][T21251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.563158][T21207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.601029][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.630100][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.709461][T21266] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 415.782596][T21271] loop5: detected capacity change from 0 to 1024 [ 415.804518][T21271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.857719][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.960040][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 416.002581][T21296] loop4: detected capacity change from 0 to 1024 [ 416.019638][T21296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.037938][T21301] loop5: detected capacity change from 0 to 1024 [ 416.062711][T12084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.074790][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.085208][T21301] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.133424][T21301] pim6reg: entered allmulticast mode [ 416.165186][T21301] pim6reg: left allmulticast mode [ 416.255987][T21313] lo speed is unknown, defaulting to 1000 [ 416.313406][T17637] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.323294][T17637] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.323304][T21329] loop4: detected capacity change from 0 to 1024 [ 416.352126][T21332] loop1: detected capacity change from 0 to 1024 [ 416.352455][T21329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.359377][T21332] EXT4-fs: Ignoring removed orlov option [ 416.373007][T21313] chnl_net:caif_netlink_parms(): no params data found [ 416.376694][T21332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.395141][T21329] pim6reg: entered allmulticast mode [ 416.402271][T21332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.403779][T21329] pim6reg: left allmulticast mode [ 416.428647][T17637] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.438519][T17637] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.450169][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.469995][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.477097][T21313] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.485358][T21313] bridge_slave_0: entered allmulticast mode [ 416.492543][T21313] bridge_slave_0: entered promiscuous mode [ 416.500640][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.507763][T21313] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.515089][T21313] bridge_slave_1: entered allmulticast mode [ 416.523006][T21313] bridge_slave_1: entered promiscuous mode [ 416.530134][T17637] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.540014][T17637] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.562004][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'. [ 416.563072][T21313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.582650][T21313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.605110][T17637] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.614960][T17637] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.626755][T21313] team0: Port device team_slave_0 added [ 416.634542][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 416.634620][ T29] audit: type=1326 audit(1752826489.695:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f75fe9a9 code=0x7ffc0000 [ 416.641615][T21313] team0: Port device team_slave_1 added [ 416.664924][ T29] audit: type=1326 audit(1752826489.695:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79f75fd45f code=0x7ffc0000 [ 416.693890][ T29] audit: type=1326 audit(1752826489.695:17480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f75fe9a9 code=0x7ffc0000 [ 416.717612][ T29] audit: type=1326 audit(1752826489.695:17481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21352 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f75fe9a9 code=0x7ffc0000 [ 416.748589][T21313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.755673][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.782409][T21313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.793756][T21313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.800753][T21313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.826971][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.840584][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.864931][ T29] audit: type=1326 audit(1752826489.925:17482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 416.889292][ T29] audit: type=1326 audit(1752826489.925:17483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 416.913227][ T29] audit: type=1326 audit(1752826489.925:17484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 416.936932][ T29] audit: type=1326 audit(1752826489.925:17485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 416.960438][ T29] audit: type=1326 audit(1752826489.925:17486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 416.984248][ T29] audit: type=1326 audit(1752826489.925:17487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21356 comm="syz.6.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa89630e9a9 code=0x7ffc0000 [ 417.053815][T21313] hsr_slave_0: entered promiscuous mode [ 417.062860][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.073220][T21313] hsr_slave_1: entered promiscuous mode [ 417.079607][T21313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.086932][T21371] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6032'. [ 417.101480][T21313] Cannot create hsr debugfs directory [ 417.116584][T21359] wireguard0: entered promiscuous mode [ 417.122156][T21359] wireguard0: entered allmulticast mode [ 417.140580][T17637] bridge_slave_1: left allmulticast mode [ 417.146512][T17637] bridge_slave_1: left promiscuous mode [ 417.152405][T17637] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.161948][T17637] bridge_slave_0: left allmulticast mode [ 417.167622][T17637] bridge_slave_0: left promiscuous mode [ 417.173482][T17637] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.277631][T17637] dvmrp1 (unregistering): left allmulticast mode [ 417.299247][T17637] geneve1 (unregistering): left promiscuous mode [ 417.316794][T17637] team0: Port device geneve1 removed [ 417.422379][T21382] lo speed is unknown, defaulting to 1000 [ 417.436539][T17637] tipc: Left network mode [ 417.464700][T17637] hsr_slave_0: left promiscuous mode [ 417.470632][T17637] hsr_slave_1: left promiscuous mode [ 417.476280][T17637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.483826][T17637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.492707][T17637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.500166][T17637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.510061][T17637] veth1_macvtap: left promiscuous mode [ 417.515623][T17637] veth0_macvtap: left promiscuous mode [ 417.521153][T17637] veth1_vlan: left promiscuous mode [ 417.526347][T17637] veth0_vlan: left promiscuous mode [ 417.580911][T17637] team_slave_1 (unregistering): left promiscuous mode [ 417.588290][T17637] team0 (unregistering): Port device team_slave_1 removed [ 417.597438][T17637] team_slave_0 (unregistering): left promiscuous mode [ 417.605372][T17637] team0 (unregistering): Port device team_slave_0 removed [ 417.706510][T21410] loop4: detected capacity change from 0 to 1024 [ 417.713750][T21410] EXT4-fs: Ignoring removed orlov option [ 417.719631][T21410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.730227][T21410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.915346][T21426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6049'. [ 417.980855][T21313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.998240][T21313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.007441][T21313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.033804][T21313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.139058][T21313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.157970][T21313] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.172908][T20424] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.180079][T20424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.195046][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.202181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.214277][T21438] wireguard0: entered promiscuous mode [ 418.220033][T21438] wireguard0: entered allmulticast mode [ 418.350434][T21313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.530873][T21313] veth0_vlan: entered promiscuous mode [ 418.543911][T21313] veth1_vlan: entered promiscuous mode [ 418.582812][T21313] veth0_macvtap: entered promiscuous mode [ 418.598714][T21469] loop1: detected capacity change from 0 to 1024 [ 418.600034][T21313] veth1_macvtap: entered promiscuous mode [ 418.616128][T21469] EXT4-fs: Ignoring removed orlov option [ 418.621989][T21469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.635518][T21313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.665123][T21313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.689335][T21313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.698180][T21313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.706955][T21313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.715858][T21313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.836982][T21481] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6060'. [ 418.928393][T21485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6061'. [ 419.070531][T21495] loop1: detected capacity change from 0 to 1024 [ 419.077377][T21495] EXT4-fs: Ignoring removed orlov option [ 419.083204][T21495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.111650][T21499] loop4: detected capacity change from 0 to 512 [ 419.118668][T21499] journal_path: Non-blockdev passed as './bus' [ 419.125029][T21499] EXT4-fs: error: could not find journal device path [ 419.151269][T21501] loop1: detected capacity change from 0 to 164 [ 419.313328][T21512] loop1: detected capacity change from 0 to 1024 [ 419.345546][T21512] pim6reg: entered allmulticast mode [ 419.358363][T21512] pim6reg: left allmulticast mode [ 419.365446][ T9] hid-generic 0001:0001:0004.0014: unknown main item tag 0x0 [ 419.372895][ T9] hid-generic 0001:0001:0004.0014: unknown main item tag 0x0 [ 419.380321][ T9] hid-generic 0001:0001:0004.0014: unknown main item tag 0x0 [ 419.403112][ T9] hid-generic 0001:0001:0004.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 419.722337][T21522] lo speed is unknown, defaulting to 1000 [ 419.802768][T21530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 419.936965][T21544] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 420.088728][T21558] loop5: detected capacity change from 0 to 164 [ 420.100218][T21559] loop4: detected capacity change from 0 to 1024 [ 420.108391][T21559] EXT4-fs: Ignoring removed orlov option [ 420.114164][T21559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.145615][T21536] loop6: detected capacity change from 0 to 256 [ 420.185776][T21536] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 420.185776][T21536] program syz.6.6079 not setting count and/or reply_len properly [ 420.220027][T21565] loop2: detected capacity change from 0 to 512 [ 420.228599][T21565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.258628][T21565] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.6090: invalid block [ 420.281057][T21565] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6090: invalid indirect mapped block 4294967295 (level 1) [ 420.316853][T21565] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6090: invalid indirect mapped block 4294967295 (level 1) [ 420.340288][T21579] loop5: detected capacity change from 0 to 512 [ 420.350225][T21565] EXT4-fs (loop2): 2 truncates cleaned up [ 420.364768][T21579] journal_path: Non-blockdev passed as './bus' [ 420.371104][T21579] EXT4-fs: error: could not find journal device path [ 420.386146][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6090'. [ 420.408981][T21581] loop4: detected capacity change from 0 to 1024 [ 420.415779][T21581] EXT4-fs: Ignoring removed orlov option [ 420.421597][T21581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.455771][T21582] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 420.587934][T21596] loop4: detected capacity change from 0 to 164 [ 420.672400][T21602] FAULT_INJECTION: forcing a failure. [ 420.672400][T21602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.685550][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.4.6104 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 420.685606][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.685619][T21602] Call Trace: [ 420.685626][T21602] [ 420.685634][T21602] __dump_stack+0x1d/0x30 [ 420.685719][T21602] dump_stack_lvl+0xe8/0x140 [ 420.685743][T21602] dump_stack+0x15/0x1b [ 420.685763][T21602] should_fail_ex+0x265/0x280 [ 420.685800][T21602] should_fail+0xb/0x20 [ 420.685830][T21602] should_fail_usercopy+0x1a/0x20 [ 420.685900][T21602] strncpy_from_user+0x25/0x230 [ 420.685952][T21602] ? kmem_cache_alloc_noprof+0x186/0x310 [ 420.685980][T21602] ? getname_flags+0x80/0x3b0 [ 420.686007][T21602] getname_flags+0xae/0x3b0 [ 420.686032][T21602] user_path_at+0x28/0x130 [ 420.686108][T21602] __se_sys_mount+0x25b/0x2e0 [ 420.686214][T21602] ? fput+0x8f/0xc0 [ 420.686299][T21602] __x64_sys_mount+0x67/0x80 [ 420.686332][T21602] x64_sys_call+0xd36/0x2fb0 [ 420.686355][T21602] do_syscall_64+0xd2/0x200 [ 420.686378][T21602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 420.686443][T21602] ? clear_bhb_loop+0x40/0x90 [ 420.686512][T21602] ? clear_bhb_loop+0x40/0x90 [ 420.686597][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.686619][T21602] RIP: 0033:0x7fef6ae4e9a9 [ 420.686673][T21602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.686701][T21602] RSP: 002b:00007fef694b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.686753][T21602] RAX: ffffffffffffffda RBX: 00007fef6b075fa0 RCX: 00007fef6ae4e9a9 [ 420.686768][T21602] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 420.686782][T21602] RBP: 00007fef694b7090 R08: 0000200000000a40 R09: 0000000000000000 [ 420.686794][T21602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.686807][T21602] R13: 0000000000000000 R14: 00007fef6b075fa0 R15: 00007fff4bbd69d8 [ 420.686826][T21602] [ 421.012761][T21609] loop6: detected capacity change from 0 to 1024 [ 421.032600][T21609] EXT4-fs: Ignoring removed orlov option [ 421.038431][T21609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.174423][T21618] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 421.186023][T21628] wireguard0: entered promiscuous mode [ 421.191730][T21628] wireguard0: entered allmulticast mode [ 421.220355][T21631] netlink: 'syz.1.6115': attribute type 10 has an invalid length. [ 421.223694][T21637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6110'. [ 421.228792][T21631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6115'. [ 421.377455][T21655] loop2: detected capacity change from 0 to 1024 [ 421.384452][T21655] EXT4-fs: Ignoring removed orlov option [ 421.390202][T21655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.421719][T21660] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6119'. [ 421.622035][T21673] netlink: 'syz.4.6128': attribute type 10 has an invalid length. [ 421.633103][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.640435][T21673] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.654391][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6128'. [ 421.667119][T21673] bridge_slave_1: left allmulticast mode [ 421.672827][T21673] bridge_slave_1: left promiscuous mode [ 421.678523][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.693923][T21673] bridge_slave_0: left allmulticast mode [ 421.700090][T21673] bridge_slave_0: left promiscuous mode [ 421.705892][T21673] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.763381][T21679] FAULT_INJECTION: forcing a failure. [ 421.763381][T21679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.776597][T21679] CPU: 1 UID: 0 PID: 21679 Comm: syz.6.6131 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 421.776629][T21679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.776642][T21679] Call Trace: [ 421.776647][T21679] [ 421.776655][T21679] __dump_stack+0x1d/0x30 [ 421.776740][T21679] dump_stack_lvl+0xe8/0x140 [ 421.776827][T21679] dump_stack+0x15/0x1b [ 421.776844][T21679] should_fail_ex+0x265/0x280 [ 421.776889][T21679] should_fail+0xb/0x20 [ 421.776922][T21679] should_fail_usercopy+0x1a/0x20 [ 421.776995][T21679] _copy_from_user+0x1c/0xb0 [ 421.777085][T21679] memdup_user+0x5e/0xd0 [ 421.777170][T21679] strndup_user+0x68/0xb0 [ 421.777193][T21679] __se_sys_mount+0x4d/0x2e0 [ 421.777228][T21679] ? fput+0x8f/0xc0 [ 421.777255][T21679] ? ksys_write+0x192/0x1a0 [ 421.777291][T21679] __x64_sys_mount+0x67/0x80 [ 421.777349][T21679] x64_sys_call+0xd36/0x2fb0 [ 421.777373][T21679] do_syscall_64+0xd2/0x200 [ 421.777391][T21679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 421.777437][T21679] ? clear_bhb_loop+0x40/0x90 [ 421.777461][T21679] ? clear_bhb_loop+0x40/0x90 [ 421.777554][T21679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.777604][T21679] RIP: 0033:0x7fa89630e9a9 [ 421.777622][T21679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.777644][T21679] RSP: 002b:00007fa89496f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.777665][T21679] RAX: ffffffffffffffda RBX: 00007fa896535fa0 RCX: 00007fa89630e9a9 [ 421.777678][T21679] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 421.777691][T21679] RBP: 00007fa89496f090 R08: 0000200000000200 R09: 0000000000000000 [ 421.777703][T21679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.777781][T21679] R13: 0000000000000000 R14: 00007fa896535fa0 R15: 00007ffcb4dec448 [ 421.777800][T21679] [ 422.078772][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 422.078787][ T29] audit: type=1326 audit(1752826495.135:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa59e2d5967 code=0x7ffc0000 [ 422.108646][ T29] audit: type=1326 audit(1752826495.135:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa59e27ab89 code=0x7ffc0000 [ 422.132276][ T29] audit: type=1326 audit(1752826495.135:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa59e2d5967 code=0x7ffc0000 [ 422.155760][ T29] audit: type=1326 audit(1752826495.135:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa59e27ab89 code=0x7ffc0000 [ 422.179346][ T29] audit: type=1326 audit(1752826495.135:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.203074][ T29] audit: type=1326 audit(1752826495.135:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.226800][ T29] audit: type=1326 audit(1752826495.135:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.250588][ T29] audit: type=1326 audit(1752826495.135:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.274164][ T29] audit: type=1326 audit(1752826495.135:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.297690][ T29] audit: type=1326 audit(1752826495.135:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21685 comm="syz.5.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e2de9a9 code=0x7ffc0000 [ 422.549500][T21720] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 422.559657][T21721] FAULT_INJECTION: forcing a failure. [ 422.559657][T21721] name failslab, interval 1, probability 0, space 0, times 0 [ 422.572454][T21721] CPU: 1 UID: 0 PID: 21721 Comm: syz.1.6145 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 422.572484][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.572497][T21721] Call Trace: [ 422.572504][T21721] [ 422.572513][T21721] __dump_stack+0x1d/0x30 [ 422.572535][T21721] dump_stack_lvl+0xe8/0x140 [ 422.572617][T21721] dump_stack+0x15/0x1b [ 422.572636][T21721] should_fail_ex+0x265/0x280 [ 422.572671][T21721] should_failslab+0x8c/0xb0 [ 422.572695][T21721] __kmalloc_noprof+0xa5/0x3e0 [ 422.572784][T21721] ? ip_options_get+0x52/0x350 [ 422.572806][T21721] ip_options_get+0x52/0x350 [ 422.572829][T21721] do_ip_setsockopt+0x19d4/0x2240 [ 422.572864][T21721] ip_setsockopt+0x58/0x110 [ 422.572990][T21721] ipv6_setsockopt+0xfb/0x130 [ 422.573070][T21721] tcp_setsockopt+0x95/0xb0 [ 422.573109][T21721] sock_common_setsockopt+0x69/0x80 [ 422.573232][T21721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 422.573264][T21721] __sys_setsockopt+0x184/0x200 [ 422.573303][T21721] __x64_sys_setsockopt+0x64/0x80 [ 422.573479][T21721] x64_sys_call+0x2bd5/0x2fb0 [ 422.573581][T21721] do_syscall_64+0xd2/0x200 [ 422.573625][T21721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 422.573658][T21721] ? clear_bhb_loop+0x40/0x90 [ 422.573685][T21721] ? clear_bhb_loop+0x40/0x90 [ 422.573712][T21721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.573810][T21721] RIP: 0033:0x7f79f75fe9a9 [ 422.573850][T21721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.573873][T21721] RSP: 002b:00007f79f5c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.573896][T21721] RAX: ffffffffffffffda RBX: 00007f79f7826080 RCX: 00007f79f75fe9a9 [ 422.573912][T21721] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000004 [ 422.573965][T21721] RBP: 00007f79f5c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 422.573980][T21721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.573995][T21721] R13: 0000000000000001 R14: 00007f79f7826080 R15: 00007ffcd5966118 [ 422.574019][T21721] [ 422.811090][T21696] loop2: detected capacity change from 0 to 256 [ 422.868350][T21696] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 422.868350][T21696] program syz.2.6137 not setting count and/or reply_len properly [ 422.909876][T21732] loop5: detected capacity change from 0 to 1024 [ 422.925077][T21732] EXT4-fs: Ignoring removed orlov option [ 422.930868][T21732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.952726][T21732] EXT4-fs mount: 17 callbacks suppressed [ 422.952818][T21732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.078573][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.370966][T21753] sit0: entered promiscuous mode [ 423.385700][T21753] netlink: 'syz.1.6159': attribute type 1 has an invalid length. [ 423.393492][T21753] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6159'. [ 423.544686][T21762] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6160'. [ 423.708086][T21771] netlink: 'syz.6.6164': attribute type 10 has an invalid length. [ 423.720703][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6164'. [ 423.841806][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6163'. [ 423.973226][T21783] loop6: detected capacity change from 0 to 164 [ 424.213815][T21802] netlink: 'syz.4.6175': attribute type 10 has an invalid length. [ 424.259876][T21807] loop5: detected capacity change from 0 to 256 [ 424.448953][T21821] loop6: detected capacity change from 0 to 164 [ 424.483767][T21825] FAULT_INJECTION: forcing a failure. [ 424.483767][T21825] name failslab, interval 1, probability 0, space 0, times 0 [ 424.496774][T21825] CPU: 0 UID: 0 PID: 21825 Comm: syz.1.6181 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 424.496809][T21825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.496824][T21825] Call Trace: [ 424.496831][T21825] [ 424.496838][T21825] __dump_stack+0x1d/0x30 [ 424.496864][T21825] dump_stack_lvl+0xe8/0x140 [ 424.496994][T21825] dump_stack+0x15/0x1b [ 424.497014][T21825] should_fail_ex+0x265/0x280 [ 424.497049][T21825] ? __pfx_cond_bools_destroy+0x10/0x10 [ 424.497085][T21825] should_failslab+0x8c/0xb0 [ 424.497111][T21825] kmem_cache_alloc_noprof+0x50/0x310 [ 424.497152][T21825] ? hashtab_duplicate+0xfe/0x360 [ 424.497216][T21825] ? __pfx_cond_bools_destroy+0x10/0x10 [ 424.497341][T21825] hashtab_duplicate+0xfe/0x360 [ 424.497367][T21825] ? __pfx_cond_bools_copy+0x10/0x10 [ 424.497462][T21825] cond_policydb_dup+0xd2/0x4e0 [ 424.497498][T21825] security_set_bools+0xa0/0x340 [ 424.497530][T21825] sel_commit_bools_write+0x1ea/0x270 [ 424.497640][T21825] vfs_writev+0x403/0x8b0 [ 424.497664][T21825] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 424.497701][T21825] ? mutex_lock+0xd/0x30 [ 424.497790][T21825] do_writev+0xe7/0x210 [ 424.497816][T21825] __x64_sys_writev+0x45/0x50 [ 424.497846][T21825] x64_sys_call+0x2006/0x2fb0 [ 424.497869][T21825] do_syscall_64+0xd2/0x200 [ 424.497887][T21825] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.497954][T21825] ? clear_bhb_loop+0x40/0x90 [ 424.497977][T21825] ? clear_bhb_loop+0x40/0x90 [ 424.498007][T21825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.498100][T21825] RIP: 0033:0x7f79f75fe9a9 [ 424.498118][T21825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.498140][T21825] RSP: 002b:00007f79f5c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 424.498163][T21825] RAX: ffffffffffffffda RBX: 00007f79f7825fa0 RCX: 00007f79f75fe9a9 [ 424.498179][T21825] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000008 [ 424.498246][T21825] RBP: 00007f79f5c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 424.498259][T21825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.498271][T21825] R13: 0000000000000000 R14: 00007f79f7825fa0 R15: 00007ffcd5966118 [ 424.498290][T21825] [ 424.650810][T21828] loop6: detected capacity change from 0 to 512 [ 424.735468][T21828] journal_path: Non-blockdev passed as './bus' [ 424.741839][T21828] EXT4-fs: error: could not find journal device path [ 424.966165][T21838] FAULT_INJECTION: forcing a failure. [ 424.966165][T21838] name failslab, interval 1, probability 0, space 0, times 0 [ 424.979022][T21838] CPU: 0 UID: 0 PID: 21838 Comm: syz.1.6187 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 424.979062][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.979077][T21838] Call Trace: [ 424.979082][T21838] [ 424.979090][T21838] __dump_stack+0x1d/0x30 [ 424.979114][T21838] dump_stack_lvl+0xe8/0x140 [ 424.979138][T21838] dump_stack+0x15/0x1b [ 424.979213][T21838] should_fail_ex+0x265/0x280 [ 424.979250][T21838] should_failslab+0x8c/0xb0 [ 424.979277][T21838] kmem_cache_alloc_node_noprof+0x57/0x320 [ 424.979307][T21838] ? __alloc_skb+0x101/0x320 [ 424.979343][T21838] __alloc_skb+0x101/0x320 [ 424.979408][T21838] _sctp_make_chunk+0x59/0x210 [ 424.979490][T21838] sctp_make_strreset_addstrm+0x7e/0x2b0 [ 424.979523][T21838] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 424.979646][T21838] ? should_fail_ex+0xdb/0x280 [ 424.979677][T21838] sctp_send_add_streams+0x1bf/0x260 [ 424.979698][T21838] sctp_setsockopt_add_streams+0x122/0x1c0 [ 424.979721][T21838] sctp_setsockopt+0x71d/0xe30 [ 424.979815][T21838] sock_common_setsockopt+0x69/0x80 [ 424.979845][T21838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 424.979936][T21838] __sys_setsockopt+0x184/0x200 [ 424.979974][T21838] __x64_sys_setsockopt+0x64/0x80 [ 424.980034][T21838] x64_sys_call+0x2bd5/0x2fb0 [ 424.980056][T21838] do_syscall_64+0xd2/0x200 [ 424.980074][T21838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.980197][T21838] ? clear_bhb_loop+0x40/0x90 [ 424.980219][T21838] ? clear_bhb_loop+0x40/0x90 [ 424.980245][T21838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.980270][T21838] RIP: 0033:0x7f79f75fe9a9 [ 424.980292][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.980311][T21838] RSP: 002b:00007f79f5c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 424.980330][T21838] RAX: ffffffffffffffda RBX: 00007f79f7825fa0 RCX: 00007f79f75fe9a9 [ 424.980379][T21838] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 424.980392][T21838] RBP: 00007f79f5c5f090 R08: 0000000000000008 R09: 0000000000000000 [ 424.980486][T21838] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.980501][T21838] R13: 0000000000000000 R14: 00007f79f7825fa0 R15: 00007ffcd5966118 [ 424.980567][T21838] [ 425.258174][T21844] loop5: detected capacity change from 0 to 1024 [ 425.264888][T21844] EXT4-fs: Ignoring removed orlov option [ 425.270878][T21844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.300834][T21844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.352542][T21859] loop1: detected capacity change from 0 to 1024 [ 425.370070][T21859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.391112][T21867] loop6: detected capacity change from 0 to 1024 [ 425.393532][T21860] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 425.405035][T21868] loop4: detected capacity change from 0 to 1024 [ 425.412470][T21859] pim6reg: entered allmulticast mode [ 425.418569][T21867] EXT4-fs: Ignoring removed orlov option [ 425.424272][T21867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.431472][T21859] pim6reg: left allmulticast mode [ 425.437344][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.449141][T21867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.462726][T21868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.490079][T21868] pim6reg: entered allmulticast mode [ 425.511041][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.523937][T21868] pim6reg: left allmulticast mode [ 425.644230][T21897] netlink: 'syz.2.6205': attribute type 10 has an invalid length. [ 425.652730][T21897] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.660019][T21897] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.672483][T21897] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.679629][T21897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.687094][T21897] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.692788][T21902] loop5: detected capacity change from 0 to 1024 [ 425.694219][T21897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.701158][T21903] __nla_validate_parse: 5 callbacks suppressed [ 425.701173][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6205'. [ 425.712145][T21897] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 425.714408][T21902] EXT4-fs: Ignoring removed orlov option [ 425.731584][T21904] loop6: detected capacity change from 0 to 1024 [ 425.737103][T21902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.745905][T21903] bridge_slave_1: left allmulticast mode [ 425.755913][T21903] bridge_slave_1: left promiscuous mode [ 425.757346][T21904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.761741][T21903] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.779172][T21902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.793386][T21903] bridge_slave_0: left allmulticast mode [ 425.799116][T21903] bridge_slave_0: left promiscuous mode [ 425.804826][T21903] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.816528][T21903] bond0: (slave bridge0): Releasing backup interface [ 425.836189][T13664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.862376][T21904] pim6reg: entered allmulticast mode [ 425.868094][T21909] pim6reg: left allmulticast mode [ 425.918846][T21919] loop5: detected capacity change from 0 to 164 [ 426.074023][T21927] lo speed is unknown, defaulting to 1000 [ 426.093202][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.128291][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6217'. [ 426.137220][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6217'. [ 426.152367][T21948] wireguard0: entered promiscuous mode [ 426.157882][T21948] wireguard0: entered allmulticast mode [ 426.159156][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.178759][T21927] chnl_net:caif_netlink_parms(): no params data found [ 426.191101][T21952] loop4: detected capacity change from 0 to 1024 [ 426.198330][T21952] EXT4-fs: Ignoring removed orlov option [ 426.204141][T21952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 426.222605][T21952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.243117][T21927] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.250277][T21927] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.257690][T21927] bridge_slave_0: entered allmulticast mode [ 426.264548][T21927] bridge_slave_0: entered promiscuous mode [ 426.271601][T21927] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.278791][T21927] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.286125][T21927] bridge_slave_1: entered allmulticast mode [ 426.288958][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.292690][T21927] bridge_slave_1: entered promiscuous mode [ 426.304691][T21953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 426.315713][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 426.348457][T21927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.360313][T21927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.389527][T21927] team0: Port device team_slave_0 added [ 426.396196][T21927] team0: Port device team_slave_1 added [ 426.405115][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'. [ 426.430083][T21927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.437087][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.463135][T21927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.478296][T21927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.485275][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.511372][T21927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.523811][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.541067][T21927] hsr_slave_0: entered promiscuous mode [ 426.547514][T21927] hsr_slave_1: entered promiscuous mode [ 426.560872][T21927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.574928][T21977] loop6: detected capacity change from 0 to 164 [ 426.581482][T21927] Cannot create hsr debugfs directory [ 426.606033][T21972] netlink: 'syz.2.6223': attribute type 10 has an invalid length. [ 426.620498][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6223'. [ 426.652031][T21988] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6229'. [ 426.712139][T21927] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.733643][T22000] wireguard0: entered promiscuous mode [ 426.739194][T22000] wireguard0: entered allmulticast mode [ 426.755286][T22002] loop2: detected capacity change from 0 to 512 [ 426.764852][T22002] journal_path: Non-blockdev passed as './bus' [ 426.771056][T22002] EXT4-fs: error: could not find journal device path [ 426.780704][T21927] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.808514][T22005] loop4: detected capacity change from 0 to 1024 [ 426.819405][T22005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.844281][T22005] pim6reg: entered allmulticast mode [ 426.850259][T22005] pim6reg: left allmulticast mode [ 426.899321][T21927] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.963641][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6235'. [ 426.989784][T21927] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.035477][T22017] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6236'. [ 427.099685][T21927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.122618][T21927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.142383][T21927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.161225][T21927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.175786][T22025] loop6: detected capacity change from 0 to 164 [ 427.243785][T22033] loop6: detected capacity change from 0 to 512 [ 427.259384][T21927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.272150][T22033] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.6241: casefold flag without casefold feature [ 427.283730][T21927] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.303724][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.310874][T17628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.321322][T22033] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.6241: couldn't read orphan inode 15 (err -117) [ 427.335489][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.338402][T22033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.342576][T17694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.446060][T21927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.453728][T22044] loop1: detected capacity change from 0 to 256 [ 427.555344][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.583004][T22058] netlink: 'syz.2.6243': attribute type 10 has an invalid length. [ 427.628101][T21927] veth0_vlan: entered promiscuous mode [ 427.639339][T21927] veth1_vlan: entered promiscuous mode [ 427.671351][T21927] veth0_macvtap: entered promiscuous mode [ 427.693449][T21927] veth1_macvtap: entered promiscuous mode [ 427.713589][T21927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.726491][T21927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.744626][T21927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.753477][T21927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.762220][T21927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.771011][T21927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.829694][T22081] FAULT_INJECTION: forcing a failure. [ 427.829694][T22081] name failslab, interval 1, probability 0, space 0, times 0 [ 427.842688][T22081] CPU: 1 UID: 0 PID: 22081 Comm: syz.2.6249 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 427.842758][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.842774][T22081] Call Trace: [ 427.842781][T22081] [ 427.842790][T22081] __dump_stack+0x1d/0x30 [ 427.842815][T22081] dump_stack_lvl+0xe8/0x140 [ 427.842839][T22081] dump_stack+0x15/0x1b [ 427.842860][T22081] should_fail_ex+0x265/0x280 [ 427.842977][T22081] ? vt_do_kdsk_ioctl+0x3e7/0x720 [ 427.843018][T22081] should_failslab+0x8c/0xb0 [ 427.843046][T22081] __kmalloc_cache_noprof+0x4c/0x320 [ 427.843082][T22081] vt_do_kdsk_ioctl+0x3e7/0x720 [ 427.843169][T22081] ? security_capable+0x83/0x90 [ 427.843246][T22081] vt_ioctl+0x8e8/0x1880 [ 427.843320][T22081] ? tty_jobctrl_ioctl+0x29e/0x810 [ 427.843413][T22081] tty_ioctl+0x7db/0xb80 [ 427.843448][T22081] ? __pfx_tty_ioctl+0x10/0x10 [ 427.843483][T22081] __se_sys_ioctl+0xce/0x140 [ 427.843572][T22081] __x64_sys_ioctl+0x43/0x50 [ 427.843610][T22081] x64_sys_call+0x19a8/0x2fb0 [ 427.843638][T22081] do_syscall_64+0xd2/0x200 [ 427.843660][T22081] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.843693][T22081] ? clear_bhb_loop+0x40/0x90 [ 427.843720][T22081] ? clear_bhb_loop+0x40/0x90 [ 427.843786][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.843812][T22081] RIP: 0033:0x7f4cfbe9e9a9 [ 427.843911][T22081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.843934][T22081] RSP: 002b:00007f4cfa507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.843958][T22081] RAX: ffffffffffffffda RBX: 00007f4cfc0c5fa0 RCX: 00007f4cfbe9e9a9 [ 427.843975][T22081] RDX: 0000200000000380 RSI: 0000000000004b47 RDI: 000000000000000d [ 427.844021][T22081] RBP: 00007f4cfa507090 R08: 0000000000000000 R09: 0000000000000000 [ 427.844037][T22081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.844053][T22081] R13: 0000000000000000 R14: 00007f4cfc0c5fa0 R15: 00007ffd5a86b528 [ 427.844075][T22081] [ 427.859477][T22083] loop4: detected capacity change from 0 to 1024 [ 427.859792][T22083] EXT4-fs: Ignoring removed orlov option [ 427.859835][T22083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.892197][T22083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.900651][T22088] loop5: detected capacity change from 0 to 512 [ 427.900914][T22088] journal_path: Non-blockdev passed as './bus' [ 427.900931][T22088] EXT4-fs: error: could not find journal device path [ 427.907988][T17776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.130397][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.434310][T22110] loop1: detected capacity change from 0 to 1024 [ 428.461692][T22110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.494853][T22110] pim6reg: entered allmulticast mode [ 428.502140][T22110] pim6reg: left allmulticast mode [ 429.047418][T22135] loop5: detected capacity change from 0 to 256 [ 429.080742][T22137] FAULT_INJECTION: forcing a failure. [ 429.080742][T22137] name failslab, interval 1, probability 0, space 0, times 0 [ 429.093521][T22137] CPU: 1 UID: 0 PID: 22137 Comm: syz.6.6268 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 429.093555][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.093571][T22137] Call Trace: [ 429.093584][T22137] [ 429.093634][T22137] __dump_stack+0x1d/0x30 [ 429.093665][T22137] dump_stack_lvl+0xe8/0x140 [ 429.093689][T22137] dump_stack+0x15/0x1b [ 429.093712][T22137] should_fail_ex+0x265/0x280 [ 429.093750][T22137] should_failslab+0x8c/0xb0 [ 429.093785][T22137] kmem_cache_alloc_noprof+0x50/0x310 [ 429.093818][T22137] ? mm_alloc+0x2b/0xa0 [ 429.093842][T22137] mm_alloc+0x2b/0xa0 [ 429.093863][T22137] alloc_bprm+0x20e/0x350 [ 429.093917][T22137] do_execveat_common+0x12e/0x750 [ 429.093952][T22137] __x64_sys_execve+0x5c/0x70 [ 429.093986][T22137] x64_sys_call+0x13ab/0x2fb0 [ 429.094009][T22137] do_syscall_64+0xd2/0x200 [ 429.094116][T22137] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 429.094143][T22137] ? clear_bhb_loop+0x40/0x90 [ 429.094182][T22137] ? clear_bhb_loop+0x40/0x90 [ 429.094204][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.094226][T22137] RIP: 0033:0x7fa89630e9a9 [ 429.094244][T22137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.094263][T22137] RSP: 002b:00007fa89496f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 429.094298][T22137] RAX: ffffffffffffffda RBX: 00007fa896535fa0 RCX: 00007fa89630e9a9 [ 429.094315][T22137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 429.094329][T22137] RBP: 00007fa89496f090 R08: 0000000000000000 R09: 0000000000000000 [ 429.094344][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.094359][T22137] R13: 0000000000000000 R14: 00007fa896535fa0 R15: 00007ffcb4dec448 [ 429.094385][T22137] [ 429.338844][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.364619][T22139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.376843][T22139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.404981][T22144] netlink: 'syz.6.6272': attribute type 10 has an invalid length. [ 429.421243][T22139] loop4: detected capacity change from 0 to 8192 [ 429.466955][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 429.466990][ T29] audit: type=1326 audit(1752826502.525:17848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22141 comm="syz.2.6271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cfbe9e9a9 code=0x0 [ 429.589980][T22151] wireguard0: entered promiscuous mode [ 429.595575][T22151] wireguard0: entered allmulticast mode [ 429.844525][T22171] loop6: detected capacity change from 0 to 1024 [ 429.857038][T22173] loop5: detected capacity change from 0 to 512 [ 429.864333][T22173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 429.874637][T22173] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.6279: invalid block [ 429.874627][T22171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.898938][T22173] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6279: invalid indirect mapped block 4294967295 (level 1) [ 429.913134][T22173] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6279: invalid indirect mapped block 4294967295 (level 1) [ 429.929227][T22173] EXT4-fs (loop5): 2 truncates cleaned up [ 429.936091][T22173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.952188][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.971653][T22173] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.115573][ T29] audit: type=1326 audit(1752826503.175:17849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.140145][ T29] audit: type=1326 audit(1752826503.175:17850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.164011][ T29] audit: type=1326 audit(1752826503.175:17851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.187687][ T29] audit: type=1326 audit(1752826503.175:17852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.211295][ T29] audit: type=1326 audit(1752826503.175:17853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.235038][ T29] audit: type=1326 audit(1752826503.175:17854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.258637][ T29] audit: type=1326 audit(1752826503.175:17855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.282297][ T29] audit: type=1326 audit(1752826503.175:17856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.305928][ T29] audit: type=1326 audit(1752826503.205:17857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22181 comm="syz.5.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba751ee9a9 code=0x7ffc0000 [ 430.435795][T22188] loop2: detected capacity change from 0 to 1024 [ 430.443034][T22188] EXT4-fs: Ignoring removed orlov option [ 430.448879][T22188] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.457153][T22186] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 430.470608][T22188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.506777][T21313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.524706][T22195] netlink: 'syz.1.6287': attribute type 10 has an invalid length. [ 430.532951][T22195] ipvlan0: entered allmulticast mode [ 430.538350][T22195] veth0_vlan: entered allmulticast mode [ 430.545624][T22195] team0: Device ipvlan0 failed to register rx_handler [ 430.828793][T22215] __nla_validate_parse: 10 callbacks suppressed [ 430.828809][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6293'. [ 430.850679][T22215] wireguard0: entered promiscuous mode [ 430.856239][T22215] wireguard0: entered allmulticast mode [ 431.009691][T22224] loop6: detected capacity change from 0 to 512 [ 431.016412][T22225] loop1: detected capacity change from 0 to 1024 [ 431.031447][T22224] journal_path: Non-blockdev passed as './bus' [ 431.037826][T22224] EXT4-fs: error: could not find journal device path [ 431.049412][T22225] EXT4-fs: Ignoring removed orlov option [ 431.055248][T22225] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.094761][T22227] loop5: detected capacity change from 0 to 512 [ 431.118783][T22225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.136479][T22227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.162491][T22227] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.214908][T20518] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.397884][T22237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6298'. [ 431.771499][T22252] wireguard1: entered promiscuous mode [ 431.777023][T22252] wireguard1: entered allmulticast mode [ 431.970540][T21927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.050965][T22267] FAULT_INJECTION: forcing a failure. [ 432.050965][T22267] name failslab, interval 1, probability 0, space 0, times 0 [ 432.063727][T22267] CPU: 0 UID: 0 PID: 22267 Comm: syz.5.6312 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 432.063766][T22267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.063780][T22267] Call Trace: [ 432.063788][T22267] [ 432.063836][T22267] __dump_stack+0x1d/0x30 [ 432.063858][T22267] dump_stack_lvl+0xe8/0x140 [ 432.063930][T22267] dump_stack+0x15/0x1b [ 432.063949][T22267] should_fail_ex+0x265/0x280 [ 432.063985][T22267] should_failslab+0x8c/0xb0 [ 432.064008][T22267] kmem_cache_alloc_noprof+0x50/0x310 [ 432.064035][T22267] ? __anon_vma_prepare+0xcd/0x2f0 [ 432.064074][T22267] __anon_vma_prepare+0xcd/0x2f0 [ 432.064112][T22267] handle_mm_fault+0x1d19/0x2be0 [ 432.064135][T22267] ? __rcu_read_unlock+0x4f/0x70 [ 432.064222][T22267] do_user_addr_fault+0x3fe/0x1090 [ 432.064257][T22267] ? __rcu_read_unlock+0x4f/0x70 [ 432.064284][T22267] exc_page_fault+0x62/0xa0 [ 432.064382][T22267] asm_exc_page_fault+0x26/0x30 [ 432.064405][T22267] RIP: 0010:__put_user_4+0xd/0x20 [ 432.064502][T22267] Code: 66 89 01 31 c9 0f 01 ca e9 d0 7d 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 432.064523][T22267] RSP: 0018:ffffc90003057e78 EFLAGS: 00050206 [ 432.064539][T22267] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00002000000001c0 [ 432.064594][T22267] RDX: ffff88812630c100 RSI: 0000000000000005 RDI: 0000000000000000 [ 432.064606][T22267] RBP: 0000000000000004 R08: 0001ffff86848aff R09: 0000000000000000 [ 432.064621][T22267] R10: 0001888116f9b9e0 R11: 0001888116f9b9e7 R12: 00002000000001c0 [ 432.064635][T22267] R13: 0000000000000003 R14: 000000000000000f R15: 0000000000000000 [ 432.064657][T22267] __sys_socketpair+0xa6/0x430 [ 432.064687][T22267] ? __bpf_trace_sys_enter+0x10/0x30 [ 432.064739][T22267] ? trace_sys_enter+0xd0/0x110 [ 432.064807][T22267] __x64_sys_socketpair+0x52/0x60 [ 432.064837][T22267] x64_sys_call+0x23f2/0x2fb0 [ 432.064864][T22267] do_syscall_64+0xd2/0x200 [ 432.064885][T22267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 432.064916][T22267] ? clear_bhb_loop+0x40/0x90 [ 432.064939][T22267] ? clear_bhb_loop+0x40/0x90 [ 432.064984][T22267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.065010][T22267] RIP: 0033:0x7fba751ee9a9 [ 432.065028][T22267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.065049][T22267] RSP: 002b:00007fba7384f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 432.065069][T22267] RAX: ffffffffffffffda RBX: 00007fba75415fa0 RCX: 00007fba751ee9a9 [ 432.065132][T22267] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 432.065153][T22267] RBP: 00007fba7384f090 R08: 0000000000000000 R09: 0000000000000000 [ 432.065167][T22267] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 432.065180][T22267] R13: 0000000000000001 R14: 00007fba75415fa0 R15: 00007fffa4e7cf18 [ 432.065198][T22267] [ 432.389124][T22271] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 432.539753][T22282] loop4: detected capacity change from 0 to 512 [ 432.553399][T22282] journal_path: Non-blockdev passed as './bus' [ 432.559629][T22282] EXT4-fs: error: could not find journal device path [ 432.653562][T22286] netlink: 'syz.5.6320': attribute type 10 has an invalid length. [ 432.671504][T22286] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.678864][T22286] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.693087][T22286] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.700207][T22286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.707619][T22286] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.714696][T22286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.722578][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6320'. [ 432.734933][T22286] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 432.744654][T22288] bridge_slave_1: left allmulticast mode [ 432.750550][T22288] bridge_slave_1: left promiscuous mode [ 432.756197][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.771321][T22291] loop2: detected capacity change from 0 to 1024 [ 432.777836][T22288] bridge_slave_0: left allmulticast mode [ 432.783549][T22288] bridge_slave_0: left promiscuous mode [ 432.789298][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.804588][T22288] bond0: (slave bridge0): Releasing backup interface [ 432.825742][T22292] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6321'. [ 432.839827][T22291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.886348][T22300] loop6: detected capacity change from 0 to 1024 [ 432.900653][T22291] pim6reg: entered allmulticast mode [ 432.916290][T22301] pim6reg: left allmulticast mode [ 432.916593][T22300] EXT4-fs: Ignoring removed orlov option [ 432.927132][T22300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.975630][T22300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.000859][T22303] loop5: detected capacity change from 0 to 1024 [ 433.007580][T22303] EXT4-fs: Ignoring removed orlov option [ 433.013492][T22303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.053939][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.064731][T22307] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 433.077230][T22303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.139227][T22313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.151655][T22313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.219786][T21927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.270059][T22313] loop1: detected capacity change from 0 to 8192 [ 433.294795][T22323] lo speed is unknown, defaulting to 1000 [ 433.401288][T22332] loop6: detected capacity change from 0 to 1024 [ 433.422494][T22332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.467533][T22332] pim6reg: entered allmulticast mode [ 433.473868][T21313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.492715][T22332] pim6reg: left allmulticast mode [ 433.556326][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 433.592660][T22340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6334'. [ 433.618224][T22340] loop2: detected capacity change from 0 to 256 [ 434.016771][T22348] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 434.132695][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.333720][T22368] loop5: detected capacity change from 0 to 1024 [ 434.369827][T22369] loop4: detected capacity change from 0 to 512 [ 434.388556][T22369] journal_path: Non-blockdev passed as './bus' [ 434.394872][T22369] EXT4-fs: error: could not find journal device path [ 434.399423][T22368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.483341][T22368] pim6reg: entered allmulticast mode [ 434.527775][T22377] pim6reg: left allmulticast mode [ 434.870134][T22381] loop6: detected capacity change from 0 to 164 [ 434.906835][T22383] loop6: detected capacity change from 0 to 1024 [ 434.915221][T22383] EXT4-fs: Ignoring removed orlov option [ 434.921058][T22383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.950268][T22383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.050001][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.090737][T21927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.194970][T22394] loop4: detected capacity change from 0 to 1024 [ 435.202097][T22394] ext4: Unknown parameter 'func' [ 435.211409][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 435.211426][ T29] audit: type=1326 audit(1752826508.275:17927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.241165][ T29] audit: type=1326 audit(1752826508.275:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.275258][ T29] audit: type=1326 audit(1752826508.275:17929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.298894][ T29] audit: type=1326 audit(1752826508.275:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.322586][ T29] audit: type=1326 audit(1752826508.275:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.346328][ T29] audit: type=1326 audit(1752826508.275:17932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.370190][ T29] audit: type=1326 audit(1752826508.275:17933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.393937][ T29] audit: type=1326 audit(1752826508.275:17934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.417766][ T29] audit: type=1326 audit(1752826508.275:17935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.441560][ T29] audit: type=1326 audit(1752826508.275:17936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.6353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef6ae4e9a9 code=0x7ffc0000 [ 435.473293][T22396] wireguard0: entered promiscuous mode [ 435.478955][T22396] wireguard0: entered allmulticast mode [ 435.569513][T22410] loop4: detected capacity change from 0 to 512 [ 435.593090][T22410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.611085][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6358'. [ 435.623928][T22410] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.6357: invalid block [ 435.625599][T22421] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6358'. [ 435.645460][T22410] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6357: invalid indirect mapped block 4294967295 (level 1) [ 435.662694][T22421] loop5: detected capacity change from 0 to 256 [ 435.671778][T22410] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6357: invalid indirect mapped block 4294967295 (level 1) [ 435.691195][T22410] EXT4-fs (loop4): 2 truncates cleaned up [ 435.724267][T22410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.740001][T22428] loop2: detected capacity change from 0 to 1024 [ 435.766074][T22410] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.779119][T22428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.815438][T22410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6357'. [ 435.829910][T22428] pim6reg: entered allmulticast mode [ 435.849886][T22428] pim6reg: left allmulticast mode [ 435.928723][T22434] wireguard0: entered promiscuous mode [ 435.945317][T22440] 8021q: VLANs not supported on vcan0 [ 435.968789][T22442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6364'. [ 436.199143][T22463] FAULT_INJECTION: forcing a failure. [ 436.199143][T22463] name failslab, interval 1, probability 0, space 0, times 0 [ 436.211961][T22463] CPU: 1 UID: 0 PID: 22463 Comm: syz.6.6375 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 436.211992][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.212013][T22463] Call Trace: [ 436.212022][T22463] [ 436.212110][T22463] __dump_stack+0x1d/0x30 [ 436.212135][T22463] dump_stack_lvl+0xe8/0x140 [ 436.212199][T22463] dump_stack+0x15/0x1b [ 436.212290][T22463] should_fail_ex+0x265/0x280 [ 436.212394][T22463] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 436.212426][T22463] should_failslab+0x8c/0xb0 [ 436.212450][T22463] __kmalloc_cache_noprof+0x4c/0x320 [ 436.212534][T22463] bpf_prog_alloc_no_stats+0xc4/0x390 [ 436.212653][T22463] bpf_prog_alloc+0x3c/0x150 [ 436.212682][T22463] __get_filter+0x92/0x230 [ 436.212765][T22463] sk_attach_filter+0x20/0xe0 [ 436.212795][T22463] sk_setsockopt+0x1a7b/0x2140 [ 436.212829][T22463] sock_setsockopt+0x40/0x50 [ 436.212939][T22463] __sys_setsockopt+0x13a/0x200 [ 436.212972][T22463] __x64_sys_setsockopt+0x64/0x80 [ 436.213027][T22463] x64_sys_call+0x2bd5/0x2fb0 [ 436.213049][T22463] do_syscall_64+0xd2/0x200 [ 436.213068][T22463] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 436.213095][T22463] ? clear_bhb_loop+0x40/0x90 [ 436.213193][T22463] ? clear_bhb_loop+0x40/0x90 [ 436.213216][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.213237][T22463] RIP: 0033:0x7fa89630e9a9 [ 436.213253][T22463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.213323][T22463] RSP: 002b:00007fa89496f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.213341][T22463] RAX: ffffffffffffffda RBX: 00007fa896535fa0 RCX: 00007fa89630e9a9 [ 436.213355][T22463] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 436.213437][T22463] RBP: 00007fa89496f090 R08: 0000000000000010 R09: 0000000000000000 [ 436.213450][T22463] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 436.213463][T22463] R13: 0000000000000000 R14: 00007fa896535fa0 R15: 00007ffcb4dec448 [ 436.213482][T22463] [ 436.472025][T21313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.482239][T22466] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 436.494831][T22470] loop5: detected capacity change from 0 to 512 [ 436.515425][T22470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.663659][T22489] loop6: detected capacity change from 0 to 1024 [ 436.690334][T22489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.733798][T22489] pim6reg: entered allmulticast mode [ 436.739912][T22489] pim6reg: left allmulticast mode [ 436.911350][T22502] netlink: 'syz.1.6388': attribute type 10 has an invalid length. [ 436.938222][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6388'. [ 436.978631][T22470] ================================================================== [ 436.986769][T22470] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 436.992919][T22506] loop1: detected capacity change from 0 to 1024 [ 436.995121][T22470] [ 436.995130][T22470] write to 0xffff888106f95844 of 4 bytes by task 22485 on cpu 1: [ 436.995149][T22470] __xa_set_mark+0x172/0x1a0 [ 437.002080][T22506] ext4: Unknown parameter 'func' [ 437.003778][T22470] __folio_mark_dirty+0x3af/0x4d0 [ 437.003808][T22470] mark_buffer_dirty+0x11e/0x210 [ 437.031055][T22470] block_write_end+0x12e/0x210 [ 437.035852][T22470] ext4_write_end+0x13a/0x730 [ 437.040564][T22470] ext4_da_write_end+0x70/0x810 [ 437.045452][T22470] generic_perform_write+0x312/0x490 [ 437.050756][T22470] ext4_buffered_write_iter+0x1ee/0x3c0 [ 437.056330][T22470] ext4_file_write_iter+0xdbf/0xf00 [ 437.061565][T22470] iter_file_splice_write+0x5ef/0x970 [ 437.066986][T22470] direct_splice_actor+0x153/0x2a0 [ 437.072136][T22470] splice_direct_to_actor+0x30f/0x680 [ 437.077546][T22470] do_splice_direct+0xda/0x150 [ 437.082338][T22470] do_sendfile+0x380/0x650 [ 437.086776][T22470] __x64_sys_sendfile64+0x105/0x150 [ 437.092085][T22470] x64_sys_call+0xb39/0x2fb0 [ 437.096702][T22470] do_syscall_64+0xd2/0x200 [ 437.101219][T22470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.107135][T22470] [ 437.109470][T22470] read to 0xffff888106f95844 of 4 bytes by task 22470 on cpu 0: [ 437.117113][T22470] filemap_write_and_wait_range+0xfc/0x340 [ 437.122956][T22470] ext4_file_write_iter+0xe04/0xf00 [ 437.128182][T22470] iter_file_splice_write+0x5ef/0x970 [ 437.133589][T22470] direct_splice_actor+0x153/0x2a0 [ 437.138749][T22470] splice_direct_to_actor+0x30f/0x680 [ 437.144145][T22470] do_splice_direct+0xda/0x150 [ 437.148947][T22470] do_sendfile+0x380/0x650 [ 437.153391][T22470] __x64_sys_sendfile64+0x105/0x150 [ 437.158629][T22470] x64_sys_call+0xb39/0x2fb0 [ 437.163256][T22470] do_syscall_64+0xd2/0x200 [ 437.167777][T22470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.173692][T22470] [ 437.176026][T22470] value changed: 0x00000021 -> 0x0a000021 [ 437.181758][T22470] [ 437.184085][T22470] Reported by Kernel Concurrency Sanitizer on: [ 437.190247][T22470] CPU: 0 UID: 0 PID: 22470 Comm: syz.5.6379 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 437.202777][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.212868][T22470] ================================================================== [ 437.421383][T17280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.434487][T22485] ================================================================== [ 437.442619][T22485] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 437.451512][T22485] [ 437.453845][T22485] read-write to 0xffff888106f95890 of 8 bytes by task 22470 on cpu 0: [ 437.462012][T22485] __filemap_add_folio+0x5b9/0x7d0 [ 437.467139][T22485] filemap_add_folio+0x98/0x1b0 [ 437.472000][T22485] page_cache_ra_unbounded+0x1f3/0x380 [ 437.477472][T22485] page_cache_sync_ra+0x687/0x6a0 [ 437.482510][T22485] filemap_get_pages+0x2d0/0x1150 [ 437.487548][T22485] filemap_splice_read+0x333/0x6b0 [ 437.492673][T22485] ext4_file_splice_read+0x8f/0xb0 [ 437.497796][T22485] splice_direct_to_actor+0x26f/0x680 [ 437.503181][T22485] do_splice_direct+0xda/0x150 [ 437.507954][T22485] do_sendfile+0x380/0x650 [ 437.512376][T22485] __x64_sys_sendfile64+0x105/0x150 [ 437.517597][T22485] x64_sys_call+0xb39/0x2fb0 [ 437.522192][T22485] do_syscall_64+0xd2/0x200 [ 437.526699][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.532621][T22485] [ 437.534940][T22485] read to 0xffff888106f95890 of 8 bytes by task 22485 on cpu 1: [ 437.542571][T22485] filemap_write_and_wait_range+0x59/0x340 [ 437.548410][T22485] ext4_file_write_iter+0xe04/0xf00 [ 437.553616][T22485] iter_file_splice_write+0x5ef/0x970 [ 437.559014][T22485] direct_splice_actor+0x153/0x2a0 [ 437.564135][T22485] splice_direct_to_actor+0x30f/0x680 [ 437.569518][T22485] do_splice_direct+0xda/0x150 [ 437.574292][T22485] do_sendfile+0x380/0x650 [ 437.578729][T22485] __x64_sys_sendfile64+0x105/0x150 [ 437.583942][T22485] x64_sys_call+0xb39/0x2fb0 [ 437.588535][T22485] do_syscall_64+0xd2/0x200 [ 437.593037][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.598936][T22485] [ 437.601258][T22485] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 437.608374][T22485] [ 437.610696][T22485] Reported by Kernel Concurrency Sanitizer on: [ 437.616844][T22485] CPU: 1 UID: 0 PID: 22485 Comm: syz.5.6379 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 437.629346][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.639402][T22485] ================================================================== [ 437.696187][T21927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.