last executing test programs: 2.549016171s ago: executing program 3 (id=998): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="2f00000014"], 0x20) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000100)=0x7, 0x4) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6], 0x7c}}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000002c0)=""/122, &(0x7f0000000400)=0x7a) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x1ff}, 0x16, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000006000305000000000000004300000000a4dc6a73327ec518178536ccba2e9bed9f20c788a6f5ed33f46bffb230cbfc55e7d003412fcd1dcd170f6a9f0bf787da91356775ea3c0980fded7eeba44b037c2e607e96b4e5f64833ea1c925d447845b8f5df56da053ecf7f8c51b700"/125, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="0916025edd7ea286cf0da099fded5704c3ffbbd37b9450a16a", @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES64], 0x5c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) 1.690323718s ago: executing program 3 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x8800800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300d8a1, &(0x7f0000000080), 0x64, 0x526, &(0x7f0000000f80)="$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") r4 = signalfd4(r3, &(0x7f00000003c0)={[0x3]}, 0x8, 0x80000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, r8, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x0, @remote}, r8, 0xfffffffc}}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<\t\t') connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x4}, 0x20) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getrandom(&(0x7f0000000040)=""/120, 0x78, 0x1) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2800, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r11, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000040)={0x8, 0xfffffffd, 0x1, 0x7ff, 0xb, "53b62f00000000000400"}) pwrite64(r10, &(0x7f00000002c0)="407bec94320ce8780b9013e66517f735418a04d996cb31d9adde2fbe1d2daf4518182728352400ae7fe441486191b2b19dffb2f0883c43f2f41f63d65245b9c1b1f2cf6845749d1f8c93980858d9d66cca9550ae3c8a531d25fd60bc4cb496cbe287d27a934660a38c2f8dbb0f66075ea3824359524d2f73", 0x78, 0x8) 1.227269641s ago: executing program 3 (id=1046): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sync() 1.128478232s ago: executing program 1 (id=1049): bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="f04bdc0421ddb1a11209180000000000", @ANYBLOB="fb18681184605762e2f2614d50d3eeb11a3ec39bed3cb41d50acb353b93a6d930864e4d426e6025169da63306efa9c1e9a7f6438c5ab5664ca034e5b2563fb1853d97c705427b6514e34088630438cc314b7ff9bc32277aa8174de8cf6f4a92ba68614b2d83b0d4928959c513c1abb5a93a8472f947f4ba3fa8f55994da1e871cd9e5bc739404026139ce35b018f3404c89afad5fe35b9acac2a6b0af2ce8eb579162296bc37f24529bfd317fd3ecb475bff75a0c9167b4e6290f9c9772794c0f283d39c6b45a3bbc8055c542348f6fab373c8204b57ef90bc4224ee1a"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x20000000, 0x1, 0x80000001}}, 0x120) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x5, 0x0, 0xd, 0x0, 0xc596}, 0x0, 0x0) 1.041024163s ago: executing program 3 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="2f00000014"], 0x20) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000100)=0x7, 0x4) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6], 0x7c}}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000002c0)=""/122, &(0x7f0000000400)=0x7a) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x1ff}, 0x16, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000006000305000000000000004300000000a4dc6a73327ec518178536ccba2e9bed9f20c788a6f5ed33f46bffb230cbfc55e7d003412fcd1dcd170f6a9f0bf787da91356775ea3c0980fded7eeba44b037c2e607e96b4e5f64833ea1c925d447845b8f5df56da053ecf7f8c51b700"/125, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="0916025edd7ea286cf0da099fded5704c3ffbbd37b9450a16a", @ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES64], 0x5c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) 1.022028393s ago: executing program 0 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000a0000000000000000000000080012"], 0x50}}, 0x4000000) 969.229494ms ago: executing program 0 (id=1053): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x24ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) 950.471683ms ago: executing program 0 (id=1054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x48ffc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81, 0x1ff], [0x1, 0xfffffffd, 0x10000, 0x9], 0x0, [0xfffffffd, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 884.577683ms ago: executing program 0 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 873.707904ms ago: executing program 0 (id=1057): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r2, 0x0, 0x4, 0x0) 823.318304ms ago: executing program 2 (id=1059): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffeb8, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 822.699614ms ago: executing program 2 (id=1060): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 723.566635ms ago: executing program 2 (id=1061): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sync() 669.014575ms ago: executing program 2 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffeb8, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 647.401446ms ago: executing program 2 (id=1063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000a0000000000000000000000080012"], 0x50}}, 0x4000000) 636.925316ms ago: executing program 2 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x14, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x389701, 0x9c) pwrite64(r3, 0x0, 0x0, 0x8000c61) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="c29dececbd9dacd342ea10d28774a9bc0db71cb5e9e463c1e10d7218522328257dd2e81ae4f6a43d427fe2fd916dff922f2d1a269043ae2456c08ab94914fb", @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000280)={0x11, 0x7, r6, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r6, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000980)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r10, 0x3, r4, 0x5}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0x10, 0x0, 0x0, 0x1852f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x804, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000340)={0x29, 0x37, 0x1, {0xcd52a5319269118d, 0x3, 0x657, r9, 0xb, 'asymmetric\x00'}}, 0x29) 275.556088ms ago: executing program 1 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 265.171308ms ago: executing program 1 (id=1069): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) 227.883898ms ago: executing program 1 (id=1070): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="be", 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0xa00000b, r4}}], 0x20, 0x6044}, 0x6) 226.709528ms ago: executing program 4 (id=1071): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@data_err_ignore}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@usrquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b5, &(0x7f00000004c0)="$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") ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 169.548199ms ago: executing program 3 (id=1072): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sync() 153.593689ms ago: executing program 4 (id=1073): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffeb8, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 141.632869ms ago: executing program 1 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a00000a0000000000000000000000080012"], 0x50}}, 0x4000000) 117.473589ms ago: executing program 4 (id=1075): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x4}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x8) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000080)}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000003c0)=""/42, 0x2a}], 0x4, &(0x7f0000000440)=""/2, 0x2}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 116.223919ms ago: executing program 1 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setreuid(0xee00, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0xd08, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x8, 0x1, 0x7fff, 'netbios-ns\x00', 'syz0\x00', {0xef}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000002c0)=0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mknod$loop(0x0, 0x100000000000600d, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSBRKP(r8, 0x5425, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) 90.62515ms ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)=@generic={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000c83f92fb5c65442994c76ef198", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000600)=""/172, 0xac, 0x0, &(0x7f00000006c0)=""/129, 0x81}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x23, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1811850207ed58f02df0f4ed6663a9000000000000000000000004000400", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085200000020000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018480000fcffffff000000000000000000420900020000001813", @ANYRES32, @ANYBLOB="0000000000000000185600000300000000000000000000008510000009000000048808005909000099a6000110000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x8, 0x3d, &(0x7f0000000280)=""/61, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x5, 0x10}, 0x10, r2, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000940)=[{0x1, 0x5, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x8}, {0x4, 0x3, 0xe, 0xa}], 0x10, 0x4, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x2140, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0xa8, 0x1, [@m_police={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa}]]}, {0x69, 0x6, "04d5fe62af74d5540c05d8ddf4ec665660a82bb7325e40f645488591c0809e2a7e5fc1a7d5be37370605b9ee508373a76f2029d17730bc1771a39e6ab55fe0ab4fe7b56593a4e2be6e2101623b3e9f7aa2899fa39f6a03fcc94eb07faec223252d6f512876"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}, {0x18c, 0x1, [@m_xt={0x188, 0xa, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x11f, 0x6, {0x6, 'filter\x00', 0x5, 0x2, "235bbf3215649c6bb56df600a6e23d9fda96d4f5257f147ac969fda1e93f42e25893db847055521a6b4d0bdbba6a56c9b5ed5c797fc952a934155d1ece56ace3e4cfd5d35bcfebc92eadad26c2ac21d2d44483f0ff122111a6ea9cfbb667dd96c23b2d124a2a05c324fd4312417e06428aec5dcf28fe8881e1c901e7a04cf370685fe49506a5ce31de0a1c34ff46f823ba603db40fd6ce7063d783a06d7a6f69327cb8f8f206a800284a207a20580446b60f61a8a1ca428bff479ae82a77ef4e5790f3ab9db6115b9fc8b1e02ea5dd002491601e0f1cd339e501b6c902fa36d6def7936265081bfe58a9ae2dbc2b4826c1fd7b1caa"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x13, 0x6, "c25cf22f7d4334b898a5e75350f1f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x624, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5bf}]}, {0x49, 0x6, "54fb13e20be66191e40165ea5297e541feff12d44679d2f1d11698ed80b60a7c0ec89903a9104befd67a258854ed85b6c764971521477c6d38c189f30b24918635d4675d87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xf0, 0x1c, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x1, 0x1, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x1, 0x4, 0xfff, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffd}]}, {0x46, 0x6, "3edee0dc5f062276971e47e57f2e7fb1df67ce055ba70e0d54d2a445fadd5081e57c358709807a651c00e2e2e73f55b79e0cae75426beb07eb041558c833efcd5ffe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x114, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x8, 0x6, 0x6}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3ff, 0x3, 0x4, 0x4}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x5, 0x81, 0x34}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x6, 0x8, 0x7}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6c, 0x3c00000, 0x3, 0xc943, 0x1}, 0x7c}}]}, {0x5a, 0x6, "1e1a1ff01b82efd2e7b4ea17054adea6bf37309371012f9b5961b233c789e62b6e7f4992a8cd1b502559ce97e0e4ebbc5f51764f07da5e94b33630d96b7f263ac0da8c6f91ed17ed58d1342e865de28ad025d9cc9465"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x18c, 0xc, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x8001, 0x10000000, 0xfffffffe, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x74}]}]}, {0xd6, 0x6, "3f0e604fb71c62910a0151a50a7fb5d10822973b2d1bbc739db83b70a2a6577d5fc86dc4bbc04f94d47b34b92cc1887188aa7b5648d066b627c96bebdf0356b7d5e0ba3bc14485ab10c52118115c72ecc774206ed236502f683fc9c925dc78d943dbf71fce753d09597324aee486790787f835d4c690a7d7ec1914fca9ac75ce0e71d9f30d4941abdd67c46f4ef47e9a125907b834844878bd23baa9bead7e3aca3b927655cd1c5cd6eb13cb5811c5c214e7912a239d121c069519f8c1f955d3978a781b15c340d483a2fab7ec0d52bbeeb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_gact={0xd4, 0x13, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xe0b7, 0x3, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xffffffffffffffff, 0x4b54, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x180, 0x8, 0x0, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2404}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xc, 0x20000000, 0xb, 0x1}}]}, {0x3b, 0x6, "b751e0cde561f054a0a436f048f7a5559b47fbcd6779b58518f9220522ee61fba17268bed95433b9dcc54e58df039b0a366362981aa655"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fcf}, @TCA_CTINFO_ACT={0x18, 0x3, {0x28000000, 0x3, 0x3, 0x9, 0x72}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0xd7, 0x6, "801673d488f0155dd954497fa1a75136ad4376a2f01921961142243d0f6580e7b7f29d2e665f091398552f945869c9b1892fe7dee655a892c685f33039fa6eaa4edfd26e840f3d9273e524111abbfb6385c0e69eec7606646babdc00c4545f68784cd679fc80efcf926eb043a579dc47c4f7f2ed304e649a3f6365e2b7b358ee4512e47e82dc277b582ef00c214599e01fa2631e24350d9069907e1bd943c379823c6f60a36de639adec53b3a6485b71208e187310b2534c54d633933828757338f4b19b88f5c91d5fc4972e52abbbcbd691cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x18d4, 0x1, [@m_skbedit={0x110, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd971}]}, {0xd3, 0x6, "3c370e034c7ecd19167db175fca65fa07c2c34abd37827a9248c719b9302fa1785474e674fc3e6237d07f6e318121a532e692f683b726286e73ba7c76e4bd9a082e4260bd309766c63f53f70eeb4cd54ef8e80f83b83a68b506a651c5af07b933be716b69f2e2c75671c02111604256c578c03de753ac3a045c4bd6be5e7cdd6a022d090ab877dd09dc064e67f474548bb704b003b34171a27725fa89b133bd4f5e8201a1ffee18a1ab11d96fe134fedc63ef26d8d5c2e50fd430a7a8b90d354c2272f49f800229c7f60371b14e2cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x110, 0x13, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x1000, 0x5, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1c}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_PARMS={0x18, 0x1, {0x400, 0xdd, 0x1, 0x7, 0x2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d0c4266d89d0c2cf3f807f50b75c5c45"}]}, {0x8b, 0x6, "c5fe4c2088a373b449cda9775ab2fbb23d8b8c0f0c3db63bacdaede3b2f124bb35a060a3ad64f0a16fdf986ba6aa84388d9af767c2d97c08e16bfa9952b352a9f6a6c57ca240357bc5e7a107e90145cf4875e2d920c4ff9d846c29a44b5cda5d0ae8dbf16e210453a20d61b541be62ea6518141183b15734dadc7eef26a0f959e610bedf1bb60f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x9c, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x12}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x3f, 0x6, "add9715e9fcc5e269a1a64c721850e1711378f436574346352291a6ad5fcf8148ff00070aea770de1a7bb8198218dd9621be1095027c7033f6ac9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x98, 0xd, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8000, 0x9, 0x4, 0x6}, {0x8, 0x40, 0x2, 0xd79}, {0x0, 0x0, 0x8, 0x3}, {0x5, 0x80, 0x6, 0x4}, {0x401, 0x80, 0x6, 0x13}, {0xffff, 0x5, 0x59, 0x20ec00}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x9, 0x4, 0x40, 0x800000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x6, 0x6, "e01b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x107c, 0xe, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xec40, 0x2}}, @TCA_DEF_DATA={0x13, 0x3, '/dev/snd/timer\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x3, 0x6, 0x100000, 0xffff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_police={0x500, 0xc, 0x0, 0x0, {{0xb}, {0x4c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x0, 0x9, 0x8, {0xc, 0x0, 0x5, 0x40, 0x2, 0x7}, {0x6, 0x0, 0xfff, 0x2, 0xf03, 0x80000000}, 0x6, 0x4, 0x1}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0x4, 0x80, 0x4, {0xeb, 0x0, 0x7, 0x6, 0xa1db, 0xdd5}, {0x1, 0x2, 0xff8e, 0x7f, 0x3, 0x6}, 0x41f4, 0x4a3, 0x6}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x59069b52}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf3c1, 0x3, 0xffffff01, 0x4, 0x7ff, 0x7, 0x10, 0x10000, 0x3, 0xfffffffe, 0x7ff, 0x7, 0xf, 0x5, 0x2, 0x401, 0xffffffff, 0x180000, 0x4, 0x0, 0x41, 0x8, 0xa, 0x8, 0xd3, 0x9, 0x0, 0x0, 0x9, 0x0, 0x4, 0x10, 0x1000, 0xb88e, 0xf, 0x2, 0x8000, 0x0, 0x7f, 0x10001, 0x9, 0x5, 0x2, 0x6, 0xa, 0x6, 0x1, 0x5, 0x3, 0x0, 0x7, 0x0, 0x101, 0xa, 0x3, 0x4, 0x9, 0x2, 0x5, 0x5, 0xd, 0x2, 0x8, 0x1, 0x5, 0x7ff, 0x65, 0x47a, 0x9, 0x0, 0xffff, 0xf, 0x1, 0x8, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7fff, 0x2, 0x40, 0x8, 0x7, 0x10001, 0xe7ac, 0x7, 0x0, 0xf8ac, 0x8, 0x0, 0x91d3, 0x9, 0x97d, 0x9, 0x7, 0x1ff, 0x200, 0x18, 0x8, 0x8, 0xbef, 0x2, 0x200, 0x14be48d3, 0x4aed, 0xa, 0xd1000000, 0x7ff, 0x0, 0x5, 0x3, 0x2, 0x4, 0xe5a1, 0x6, 0x84, 0x5, 0x1, 0xffffffff, 0x7fff, 0x3, 0x4, 0x1, 0x8000, 0x4, 0x5, 0x8cd9, 0x2, 0xc, 0xeda7, 0xd, 0x8, 0x7fffffff, 0x5, 0xe, 0x9, 0x8, 0x19, 0x4, 0x0, 0x4, 0x6, 0x4, 0x9, 0x0, 0xff, 0x7, 0x40, 0xb, 0x9, 0x9, 0x3, 0x22, 0x1, 0x1, 0x2, 0x0, 0x800, 0x5, 0x73, 0x3, 0x5, 0xf, 0x5, 0x40, 0x8, 0x101, 0x9, 0x2, 0x7, 0x6, 0x8, 0x0, 0x9, 0x54, 0x6, 0x5, 0x8, 0xffffff01, 0x1, 0x77, 0x3, 0x5b48, 0x8, 0x1, 0x800, 0x7ff, 0x5, 0x5, 0x5, 0x261a, 0x8, 0x948, 0x1, 0x1ff, 0x4, 0x1, 0x4, 0x1, 0x40f, 0x6, 0x8, 0x9, 0xffffffff, 0x40, 0x4, 0xffff7fff, 0x8001, 0x75, 0xeda9, 0x6, 0x200, 0x7, 0x1f5e, 0xfffffffc, 0xfffffffb, 0x5, 0x9, 0x0, 0x0, 0x5, 0x6, 0x2, 0x8, 0xfffffffa, 0x2, 0xfffffff7, 0x9, 0xfffffff7, 0x6267, 0x40, 0x5, 0x0, 0x5, 0x8, 0xf305, 0x5, 0x1, 0xd, 0x4, 0x80000001, 0x9, 0x5, 0x7, 0x5, 0x6, 0x200, 0x7, 0x9a3, 0x17fa, 0x0, 0x3, 0x0, 0x80, 0x1]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0xd, 0x6, "f795181afef13c0d2d"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x2140}, 0x1, 0x0, 0x0, 0x80004}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000002}}) 63.29732ms ago: executing program 4 (id=1078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) ioctl$SIOCGETVIFCNT(r2, 0x89e0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r6}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x29, 0x16002c, 0xffc, 0x4, 0x40002, 0xfffffffd, 0x7, 0x0, 0x0, 0x3}) close(r7) 51.16277ms ago: executing program 3 (id=1079): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(r3, 0x0, 0x10a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001"], 0x104}}, 0x40000) 19.82042ms ago: executing program 4 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)=@generic={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000c83f92fb5c65442994c76ef198", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000600)=""/172, 0xac, 0x0, &(0x7f00000006c0)=""/129, 0x81}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x23, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1811850207ed58f02df0f4ed6663a9000000000000000000000004000400", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085200000020000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018480000fcffffff000000000000000000420900020000001813", @ANYRES32, @ANYBLOB="0000000000000000185600000300000000000000000000008510000009000000048808005909000099a6000110000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x8, 0x3d, &(0x7f0000000280)=""/61, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x5, 0x10}, 0x10, r2, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000940)=[{0x1, 0x3, 0x1, 0x8}, {0x4, 0x3, 0xe, 0xa}], 0x10, 0x4, @void, @value}, 0x94) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x2104, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0xa8, 0x1, [@m_police={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa}]]}, {0x69, 0x6, "04d5fe62af74d5540c05d8ddf4ec665660a82bb7325e40f645488591c0809e2a7e5fc1a7d5be37370605b9ee508373a76f2029d17730bc1771a39e6ab55fe0ab4fe7b56593a4e2be6e2101623b3e9f7aa2899fa39f6a03fcc94eb07faec223252d6f512876"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}, {0x18c, 0x1, [@m_xt={0x188, 0xa, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x11f, 0x6, {0x6, 'filter\x00', 0x5, 0x2, "235bbf3215649c6bb56df600a6e23d9fda96d4f5257f147ac969fda1e93f42e25893db847055521a6b4d0bdbba6a56c9b5ed5c797fc952a934155d1ece56ace3e4cfd5d35bcfebc92eadad26c2ac21d2d44483f0ff122111a6ea9cfbb667dd96c23b2d124a2a05c324fd4312417e06428aec5dcf28fe8881e1c901e7a04cf370685fe49506a5ce31de0a1c34ff46f823ba603db40fd6ce7063d783a06d7a6f69327cb8f8f206a800284a207a20580446b60f61a8a1ca428bff479ae82a77ef4e5790f3ab9db6115b9fc8b1e02ea5dd002491601e0f1cd339e501b6c902fa36d6def7936265081bfe58a9ae2dbc2b4826c1fd7b1caa"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x13, 0x6, "c25cf22f7d4334b898a5e75350f1f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x624, 0x1, [@m_ctinfo={0x80, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5bf}]}, {0x49, 0x6, "54fb13e20be66191e40165ea5297e541feff12d44679d2f1d11698ed80b60a7c0ec89903a9104befd67a258854ed85b6c764971521477c6d38c189f30b24918635d4675d87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0xf0, 0x1c, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x1, 0x1, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x1, 0x4, 0xfff, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffd}]}, {0x46, 0x6, "3edee0dc5f062276971e47e57f2e7fb1df67ce055ba70e0d54d2a445fadd5081e57c358709807a651c00e2e2e73f55b79e0cae75426beb07eb041558c833efcd5ffe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0x114, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x8, 0x6, 0x6}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3ff, 0x3, 0x4, 0x4}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x5, 0x81, 0x34}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x6, 0x8, 0x7}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6c, 0x3c00000, 0x3, 0xc943, 0x1}, 0x7c}}]}, {0x5a, 0x6, "1e1a1ff01b82efd2e7b4ea17054adea6bf37309371012f9b5961b233c789e62b6e7f4992a8cd1b502559ce97e0e4ebbc5f51764f07da5e94b33630d96b7f263ac0da8c6f91ed17ed58d1342e865de28ad025d9cc9465"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x18c, 0xc, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x8001, 0x10000000, 0xfffffffe, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x74}]}]}, {0xd6, 0x6, "3f0e604fb71c62910a0151a50a7fb5d10822973b2d1bbc739db83b70a2a6577d5fc86dc4bbc04f94d47b34b92cc1887188aa7b5648d066b627c96bebdf0356b7d5e0ba3bc14485ab10c52118115c72ecc774206ed236502f683fc9c925dc78d943dbf71fce753d09597324aee486790787f835d4c690a7d7ec1914fca9ac75ce0e71d9f30d4941abdd67c46f4ef47e9a125907b834844878bd23baa9bead7e3aca3b927655cd1c5cd6eb13cb5811c5c214e7912a239d121c069519f8c1f955d3978a781b15c340d483a2fab7ec0d52bbeeb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_gact={0xd4, 0x13, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xe0b7, 0x3, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xffffffffffffffff, 0x4b54, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x180, 0x8, 0x0, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2404}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xc, 0x20000000, 0xb, 0x1}}]}, {0x3b, 0x6, "b751e0cde561f054a0a436f048f7a5559b47fbcd6779b58518f9220522ee61fba17268bed95433b9dcc54e58df039b0a366362981aa655"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fcf}, @TCA_CTINFO_ACT={0x18, 0x3, {0x28000000, 0x3, 0x3, 0x9, 0x72}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0xd7, 0x6, "801673d488f0155dd954497fa1a75136ad4376a2f01921961142243d0f6580e7b7f29d2e665f091398552f945869c9b1892fe7dee655a892c685f33039fa6eaa4edfd26e840f3d9273e524111abbfb6385c0e69eec7606646babdc00c4545f68784cd679fc80efcf926eb043a579dc47c4f7f2ed304e649a3f6365e2b7b358ee4512e47e82dc277b582ef00c214599e01fa2631e24350d9069907e1bd943c379823c6f60a36de639adec53b3a6485b71208e187310b2534c54d633933828757338f4b19b88f5c91d5fc4972e52abbbcbd691cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x1898, 0x1, [@m_skbedit={0x11c, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd971}]}, {0xe0, 0x6, "3c370e034c7ecd19167db175fca65fa07c2c34abd37827a9248c719b9302fa1785474e674fc3e6237d07f6e318121a532e692f683b726286e73ba7c76e4bd9a082e4260bd309766c63f53f70eeb4cd54ef8e80f83b83a68b506a651c5af07b933be716b69f2e2c75671c02111604256c578c03de753ac3a045c4bd6be5e7cdd6a022d090ab877dd09dc064e67f474548bb704b003b34171a27725fa89b133bd4f5e8201a1ffee18a1ab11d96fe134fedc63ef26d8d5c2e50fd430a7a8b90d354c2272f49f800229c7f60371b14e2cc5c4130a51877ebe595f3ff9f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x110, 0x13, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x1000, 0x5, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1c}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_PARMS={0x18, 0x1, {0x400, 0xdd, 0x1, 0x7, 0x2}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d0c4266d89d0c2cf3f807f50b75c5c45"}]}, {0x8b, 0x6, "c5fe4c2088a373b449cda9775ab2fbb23d8b8c0f0c3db63bacdaede3b2f124bb35a060a3ad64f0a16fdf986ba6aa84388d9af767c2d97c08e16bfa9952b352a9f6a6c57ca240357bc5e7a107e90145cf4875e2d920c4ff9d846c29a44b5cda5d0ae8dbf16e210453a20d61b541be62ea6518141183b15734dadc7eef26a0f959e610bedf1bb60f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x9c, 0x11, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x12}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x3f, 0x6, "add9715e9fcc5e269a1a64c721850e1711378f436574346352291a6ad5fcf8148ff00070aea770de1a7bb8198218dd9621be1095027c7033f6ac9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x98, 0xd, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8000, 0x9, 0x4, 0x6}, {0x8, 0x40, 0x2, 0xd79}, {0x0, 0x0, 0x8, 0x3}, {0x5, 0x80, 0x6, 0x4}, {0x401, 0x80, 0x6, 0x13}, {0xffff, 0x5, 0x59, 0x20ec00}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x9, 0x4, 0x40, 0x800000}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x6, 0x6, "e01b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x107c, 0xe, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xec40, 0x2}}, @TCA_DEF_DATA={0x13, 0x3, '/dev/snd/timer\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x3, 0x6, 0x100000, 0xffff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_police={0x4b8, 0xc, 0x0, 0x0, {{0xb}, {0x480, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0x4, 0x80, 0x4, {0xeb, 0x0, 0x7, 0x6, 0xa1db, 0xdd5}, {0x1, 0x2, 0xff8e, 0x7f, 0x3, 0x6}, 0x41f4, 0x4a3, 0x6}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x59069b52}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf3c1, 0x3, 0xffffff01, 0x4, 0x7ff, 0x7, 0x10, 0x10000, 0x3, 0xfffffffe, 0x7ff, 0x7, 0xf, 0x5, 0x2, 0x401, 0xffffffff, 0x180000, 0x4, 0x0, 0x41, 0x8, 0xa, 0x8, 0xd3, 0x9, 0x0, 0x0, 0x9, 0x0, 0x4, 0x10, 0x1000, 0xb88e, 0xf, 0x2, 0x8000, 0x0, 0x7f, 0x10001, 0x9, 0x5, 0x2, 0x6, 0xa, 0x6, 0x1, 0x5, 0x3, 0x0, 0x7, 0x0, 0x101, 0xa, 0x3, 0x4, 0x9, 0x2, 0x5, 0x5, 0xd, 0x2, 0x8, 0x1, 0x5, 0x7ff, 0x65, 0x47a, 0x9, 0x0, 0xffff, 0xf, 0x1, 0x8, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7fff, 0x2, 0x40, 0x8, 0x7, 0x10001, 0xe7ac, 0x7, 0x0, 0xf8ac, 0x8, 0x0, 0x91d3, 0x9, 0x97d, 0x9, 0x7, 0x1ff, 0x200, 0x18, 0x8, 0x8, 0xbef, 0x2, 0x200, 0x14be48d3, 0x4aed, 0xa, 0xd1000000, 0x7ff, 0x0, 0x5, 0x3, 0x2, 0x4, 0xe5a1, 0x6, 0x84, 0x5, 0x1, 0xffffffff, 0x7fff, 0x3, 0x4, 0x1, 0x8000, 0x4, 0x5, 0x8cd9, 0x2, 0xc, 0xeda7, 0xd, 0x8, 0x7fffffff, 0x5, 0xe, 0x9, 0x8, 0x19, 0x4, 0x0, 0x4, 0x6, 0x4, 0x9, 0x0, 0xff, 0x7, 0x40, 0xb, 0x9, 0x9, 0x3, 0x22, 0x1, 0x1, 0x2, 0x0, 0x800, 0x5, 0x73, 0x3, 0x5, 0xf, 0x5, 0x40, 0x8, 0x101, 0x9, 0x2, 0x7, 0x6, 0x8, 0x0, 0x9, 0x54, 0x6, 0x5, 0x8, 0xffffff01, 0x1, 0x77, 0x3, 0x5b48, 0x8, 0x1, 0x800, 0x7ff, 0x5, 0x5, 0x5, 0x261a, 0x8, 0x948, 0x1, 0x1ff, 0x4, 0x1, 0x4, 0x1, 0x40f, 0x6, 0x8, 0x9, 0xffffffff, 0x40, 0x4, 0xffff7fff, 0x8001, 0x75, 0xeda9, 0x6, 0x200, 0x7, 0x1f5e, 0xfffffffc, 0xfffffffb, 0x5, 0x9, 0x0, 0x0, 0x5, 0x6, 0x2, 0x8, 0xfffffffa, 0x2, 0xfffffff7, 0x9, 0xfffffff7, 0x6267, 0x40, 0x5, 0x0, 0x5, 0x8, 0xf305, 0x5, 0x1, 0xd, 0x4, 0x80000001, 0x9, 0x5, 0x7, 0x5, 0x6, 0x200, 0x7, 0x9a3, 0x17fa, 0x0, 0x3, 0x0, 0x80, 0x1]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]]}, {0xd, 0x6, "f795181afef13c0d2d"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x2104}, 0x1, 0x0, 0x0, 0x80004}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0x80000002}}) 0s ago: executing program 0 (id=1081): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x97, 0xb206, &(0x7f0000006680)) (async) munlockall() (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000a0000000818000001", @ANYRES32, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x48) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@huge_always}]}) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@empty, @remote, 0x0, 0xff, 'bond_slave_0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x1, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) kernel console output (not intermixed with test programs): 2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.839030][ T3782] RIP: 0033:0x7f976656d169 [ 36.839069][ T3782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.839084][ T3782] RSP: 002b:00007f9764bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.839101][ T3782] RAX: ffffffffffffffda RBX: 00007f9766785fa0 RCX: 00007f976656d169 [ 36.839129][ T3782] RDX: 0000000004000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 36.839146][ T3782] RBP: 00007f9764bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.839155][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.839166][ T3782] R13: 0000000000000000 R14: 00007f9766785fa0 R15: 00007ffd02ce0498 [ 36.839180][ T3782] [ 37.034732][ T3795] netlink: 'syz.1.116': attribute type 12 has an invalid length. [ 37.042615][ T3795] netlink: 'syz.1.116': attribute type 29 has an invalid length. [ 37.050378][ T3795] netlink: 148 bytes leftover after parsing attributes in process `syz.1.116'. [ 37.059415][ T3795] netlink: 59 bytes leftover after parsing attributes in process `syz.1.116'. [ 37.094122][ T3798] loop0: detected capacity change from 0 to 128 [ 37.100781][ T3798] ======================================================= [ 37.100781][ T3798] WARNING: The mand mount option has been deprecated and [ 37.100781][ T3798] and is ignored by this kernel. Remove the mand [ 37.100781][ T3798] option from the mount to silence this warning. [ 37.100781][ T3798] ======================================================= [ 37.160372][ T3803] process 'syz.0.118' launched '/dev/fd/6' with NULL argv: empty string added [ 37.184938][ T3803] 9pnet: p9_errstr2errno: server reported unknown error @í [ 37.228972][ T3803] loop0: detected capacity change from 0 to 512 [ 37.232225][ T3807] loop1: detected capacity change from 0 to 512 [ 37.241388][ T3803] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.244064][ T3807] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 37.254607][ T3803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.267622][ T3807] EXT4-fs (loop1): 1 truncate cleaned up [ 37.283522][ T3807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.289096][ T3803] EXT4-fs (loop0): 1 truncate cleaned up [ 37.301838][ T3803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.303613][ T3807] mmap: syz.1.120 (3807) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.338816][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.342733][ T3807] bond1: entered promiscuous mode [ 37.353057][ T3807] bond1: entered allmulticast mode [ 37.358685][ T3807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.368778][ T3807] bond1 (unregistering): Released all slaves [ 37.405575][ C0] hrtimer: interrupt took 24946 ns [ 37.412561][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.638687][ T3829] netlink: 'syz.1.127': attribute type 12 has an invalid length. [ 37.646572][ T3829] netlink: 'syz.1.127': attribute type 29 has an invalid length. [ 37.654371][ T3829] netlink: 148 bytes leftover after parsing attributes in process `syz.1.127'. [ 37.663350][ T3829] netlink: 59 bytes leftover after parsing attributes in process `syz.1.127'. [ 37.694898][ T3831] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 37.703345][ T3831] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 37.731963][ T3838] netlink: 'syz.1.131': attribute type 12 has an invalid length. [ 37.739883][ T3838] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 37.899902][ T3851] loop3: detected capacity change from 0 to 164 [ 37.933670][ T3851] iso9660: Unknown parameter 'nojmliet' [ 37.964341][ T3851] loop3: detected capacity change from 0 to 2048 [ 38.006913][ T3851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.049465][ T3862] loop0: detected capacity change from 0 to 4096 [ 38.063336][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.092137][ T41] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.111648][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.123929][ T41] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.123929][ T41] [ 38.133582][ T41] EXT4-fs (loop3): Total free blocks count 0 [ 38.139631][ T41] EXT4-fs (loop3): Free/Dirty block details [ 38.145516][ T41] EXT4-fs (loop3): free_blocks=66060288 [ 38.151115][ T41] EXT4-fs (loop3): dirty_blocks=32 [ 38.156235][ T41] EXT4-fs (loop3): Block reservation details [ 38.162216][ T41] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 38.171094][ T383] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 38.186260][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.393943][ T3897] loop2: detected capacity change from 0 to 164 [ 38.411111][ T3897] iso9660: Unknown parameter 'nojmliet' [ 38.461858][ T3897] loop2: detected capacity change from 0 to 2048 [ 38.500288][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.540125][ T51] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.561505][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.573906][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.573906][ T51] [ 38.583660][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 38.589727][ T51] EXT4-fs (loop2): Free/Dirty block details [ 38.595771][ T51] EXT4-fs (loop2): free_blocks=66060288 [ 38.601417][ T51] EXT4-fs (loop2): dirty_blocks=32 [ 38.606731][ T51] EXT4-fs (loop2): Block reservation details [ 38.612772][ T51] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 38.627525][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 38.678089][ T3911] bridge_slave_0: left allmulticast mode [ 38.683771][ T3911] bridge_slave_0: left promiscuous mode [ 38.689951][ T3911] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.701336][ T3911] bridge_slave_1: left allmulticast mode [ 38.707297][ T3911] bridge_slave_1: left promiscuous mode [ 38.713280][ T3911] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.740065][ T3911] bond0: (slave bond_slave_0): Releasing backup interface [ 38.750314][ T3911] bond0: (slave bond_slave_1): Releasing backup interface [ 38.765471][ T3911] team0: Port device team_slave_0 removed [ 38.774605][ T3911] team0: Port device team_slave_1 removed [ 38.789894][ T3911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.797473][ T3911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.813271][ T3911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.821044][ T3911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.863924][ T3911] syz.1.159 (3911) used greatest stack depth: 10432 bytes left [ 38.940031][ T3940] loop1: detected capacity change from 0 to 164 [ 38.946689][ T3940] iso9660: Unknown parameter 'nojmliet' [ 38.970934][ T3940] loop1: detected capacity change from 0 to 2048 [ 38.997453][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.031917][ T56] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 39.046782][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.059077][ T56] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.059077][ T56] [ 39.068724][ T56] EXT4-fs (loop1): Total free blocks count 0 [ 39.074739][ T56] EXT4-fs (loop1): Free/Dirty block details [ 39.080897][ T56] EXT4-fs (loop1): free_blocks=66060288 [ 39.086500][ T56] EXT4-fs (loop1): dirty_blocks=32 [ 39.091698][ T56] EXT4-fs (loop1): Block reservation details [ 39.097837][ T56] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.111808][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 39.115210][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.131941][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.139456][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.146861][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.154238][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.161843][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.169421][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.176861][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.184318][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.191845][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.199323][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.206756][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.214287][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.221726][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.229180][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.236578][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.243960][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.251440][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.258848][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.266338][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.273742][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.281205][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.288672][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.296074][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.303446][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.310958][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.318350][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.325781][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.333174][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.340651][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.348053][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.355409][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.362801][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.370257][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.377644][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.385014][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.392418][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.399842][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.407300][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.414666][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.422091][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.429587][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.436983][ T3375] hid-generic 0000:0000:0006.0001: unknown main item tag 0x0 [ 39.449074][ T3953] loop0: detected capacity change from 0 to 128 [ 39.455656][ T3953] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 39.462973][ T3375] hid-generic 0000:0000:0006.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 39.681886][ T3953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.691115][ T3953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.883998][ T3992] ip6gretap0: entered promiscuous mode [ 39.889550][ T3992] ip6gretap0: entered allmulticast mode [ 40.337757][ T4006] loop1: detected capacity change from 0 to 512 [ 40.362461][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.375229][ T4006] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.397949][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.432184][ T4014] loop1: detected capacity change from 0 to 512 [ 40.457170][ T4014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.464189][ T4014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.195: bg 0: block 248: padding at end of block bitmap is not set [ 40.479747][ T4014] __quota_error: 459 callbacks suppressed [ 40.479760][ T4014] Quota error (device loop1): write_blk: dquota write failed [ 40.492999][ T4014] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 40.502981][ T4014] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.195: Failed to acquire dquot type 1 [ 40.515521][ T4014] EXT4-fs (loop1): 1 truncate cleaned up [ 40.521882][ T4014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.541759][ T30] audit: type=1400 audit(1741879959.345:892): avc: denied { create } for pid=4013 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.679389][ T4014] syz.1.195 (4014) used greatest stack depth: 9280 bytes left [ 40.687596][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.698299][ T4030] loop3: detected capacity change from 0 to 128 [ 40.706036][ T4030] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 40.724286][ T4032] loop1: detected capacity change from 0 to 128 [ 40.737675][ T30] audit: type=1400 audit(1741879959.545:893): avc: denied { mount } for pid=4031 comm="syz.1.202" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.800833][ T30] audit: type=1400 audit(1741879959.585:894): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.845912][ T30] audit: type=1400 audit(1741879959.625:895): avc: denied { create } for pid=4037 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.894788][ T30] audit: type=1326 audit(1741879959.695:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4043 comm="syz.2.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf33dd169 code=0x0 [ 40.941802][ T30] audit: type=1326 audit(1741879959.745:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976656d169 code=0x7ffc0000 [ 40.965690][ T30] audit: type=1326 audit(1741879959.775:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f976656d169 code=0x7ffc0000 [ 40.996255][ T30] audit: type=1326 audit(1741879959.775:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976656d169 code=0x7ffc0000 [ 41.032415][ T4030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.050699][ T4030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.076053][ T4062] loop1: detected capacity change from 0 to 1024 [ 41.082766][ T4062] EXT4-fs: Ignoring removed bh option [ 41.094754][ T4062] EXT4-fs: inline encryption not supported [ 41.118224][ T4062] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.138145][ T4062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 41.147360][ T4062] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.212: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.187031][ T4062] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.212: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.212242][ T4062] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.212: Failed to acquire dquot type 0 [ 41.223818][ T4062] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 41.244447][ T4062] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.212: mark_inode_dirty error [ 41.262642][ T4070] bridge_slave_0: left allmulticast mode [ 41.268374][ T4070] bridge_slave_0: left promiscuous mode [ 41.270321][ T4062] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 41.274036][ T4070] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.292568][ T4062] EXT4-fs (loop1): 1 orphan inode deleted [ 41.299584][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.300182][ T4070] bridge_slave_1: left allmulticast mode [ 41.317806][ T4070] bridge_slave_1: left promiscuous mode [ 41.322058][ T4062] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 16: comm syz.1.212: lblock 0 mapped to illegal pblock 16 (length 1) [ 41.323432][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.339183][ T4062] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 16: comm syz.1.212: lblock 0 mapped to illegal pblock 16 (length 1) [ 41.344979][ T3404] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.374423][ T3404] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 41.388765][ T4070] bond0: (slave bond_slave_0): Releasing backup interface [ 41.398508][ T4070] bond0: (slave bond_slave_1): Releasing backup interface [ 41.398626][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.415326][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 41.429855][ T4070] team0: Port device team_slave_0 removed [ 41.429939][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 41.445689][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 41.446929][ T4070] team0: Port device team_slave_1 removed [ 41.464902][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.472391][ T4070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.487021][ T4070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.494437][ T4070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.620922][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.628449][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.635880][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.643283][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.650697][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.658129][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.665508][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.672928][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.680469][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.688093][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.695580][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.702960][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.710454][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.717964][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.725349][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.732995][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.740469][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.747888][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.755268][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.762698][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.770145][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.777537][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.784959][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.792363][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.799839][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.807432][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.814801][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.822191][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.829620][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.837140][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.844660][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.852099][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.859550][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.866947][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.874321][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.881727][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.889123][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.890324][ T4094] loop3: detected capacity change from 0 to 4096 [ 41.896502][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.910227][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.913831][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.917611][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.917633][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.917651][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.917730][ T3384] hid-generic 0000:0000:0006.0002: unknown main item tag 0x0 [ 41.918975][ T3384] hid-generic 0000:0000:0006.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.390007][ T4142] 9pnet_fd: Insufficient options for proto=fd [ 42.400506][ T4142] loop2: detected capacity change from 0 to 512 [ 42.411344][ T4142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.427573][ T4142] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.435493][ T4142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e11c, mo2=0002] [ 42.444077][ T4142] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.450104][ T4142] EXT4-fs (loop2): orphan cleanup on readonly fs [ 42.471793][ T4142] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.486456][ T4142] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 42.508762][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.518116][ T4142] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.243: bg 0: block 40: padding at end of block bitmap is not set [ 42.540388][ T4142] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.550347][ T4142] EXT4-fs (loop2): 1 truncate cleaned up [ 42.559204][ T4148] syz.0.244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.605081][ T4154] validate_nla: 5 callbacks suppressed [ 42.605093][ T4154] netlink: 'syz.4.247': attribute type 12 has an invalid length. [ 42.615985][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.618305][ T4154] netlink: 'syz.4.247': attribute type 29 has an invalid length. [ 42.638505][ T4154] __nla_validate_parse: 13 callbacks suppressed [ 42.638513][ T4154] netlink: 148 bytes leftover after parsing attributes in process `syz.4.247'. [ 42.653781][ T4154] netlink: 59 bytes leftover after parsing attributes in process `syz.4.247'. [ 42.676566][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.755307][ T4168] loop3: detected capacity change from 0 to 512 [ 42.765731][ T4168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.793359][ T4168] EXT4-fs (loop3): 1 truncate cleaned up [ 42.800508][ T4168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.867225][ T4177] netlink: 'syz.3.252': attribute type 13 has an invalid length. [ 42.974405][ T4182] netlink: 80 bytes leftover after parsing attributes in process `syz.3.252'. [ 43.224480][ T4177] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.233692][ T4177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.242685][ T4177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.251730][ T4177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.814499][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.878148][ T4204] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 43.902187][ T4206] loop1: detected capacity change from 0 to 512 [ 43.942437][ T4204] netlink: 80 bytes leftover after parsing attributes in process `syz.3.263'. [ 43.958775][ T4206] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.985871][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.147471][ T4221] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.264'. [ 44.186324][ T4206] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.264'. [ 44.208100][ T4223] loop0: detected capacity change from 0 to 512 [ 44.220103][ T4223] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.230831][ T4223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.243274][ T4223] EXT4-fs (loop0): 1 truncate cleaned up [ 44.249380][ T4223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.511580][ T4236] bridge_slave_0: left allmulticast mode [ 44.517368][ T4236] bridge_slave_0: left promiscuous mode [ 44.523034][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.535349][ T4236] bridge_slave_1: left allmulticast mode [ 44.541049][ T4236] bridge_slave_1: left promiscuous mode [ 44.546737][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.556943][ T4236] bond0: (slave bond_slave_0): Releasing backup interface [ 44.565975][ T4236] bond0: (slave bond_slave_1): Releasing backup interface [ 44.578221][ T4236] team0: Port device team_slave_0 removed [ 44.587998][ T4236] team0: Port device team_slave_1 removed [ 44.594948][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.602462][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.612203][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.619736][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.684808][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 44.695162][ T4241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.707240][ T4241] loop2: detected capacity change from 0 to 164 [ 44.714788][ T4241] Unable to read rock-ridge attributes [ 44.726121][ T4241] Unable to read rock-ridge attributes [ 44.741464][ T4241] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 44.749058][ T4244] loop4: detected capacity change from 0 to 1024 [ 44.756900][ T4244] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.767917][ T4244] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.778782][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.788772][ T4244] JBD2: no valid journal superblock found [ 44.794552][ T4244] EXT4-fs (loop4): Could not load journal inode [ 44.805744][ T4243] SELinux: security_context_str_to_sid (Đ-šXܘ7.H\š˙ %şu@) failed with errno=-22 [ 45.018166][ T4270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 45.279646][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.310324][ T4290] loop4: detected capacity change from 0 to 164 [ 45.322450][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 45.334054][ T4290] SELinux: security_context_str_to_sid (çâ~U%+EPđŘúĎâ ŠqŽŔŽźňĺŽuIabS˜‡Ł“ş:QxEڐžÍĘ;類”< H°—`ˇú2ĺłZ‘‚QIŋ\(8=ŹPůpŢ |EńŮ8m]ťŽI_ß_-`OYďę^ýj‘^đ2ě) failed with errno=-22 [ 45.352957][ T4294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 45.549653][ T4315] loop0: detected capacity change from 0 to 1024 [ 45.564497][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 45.564508][ T30] audit: type=1326 audit(1741879964.365:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.595741][ T4315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.623101][ T4315] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.640169][ T30] audit: type=1326 audit(1741879964.375:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.663609][ T30] audit: type=1326 audit(1741879964.405:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.686879][ T30] audit: type=1326 audit(1741879964.405:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.710194][ T30] audit: type=1326 audit(1741879964.405:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.733764][ T30] audit: type=1326 audit(1741879964.405:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.757262][ T30] audit: type=1326 audit(1741879964.405:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.780884][ T30] audit: type=1326 audit(1741879964.415:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.804261][ T30] audit: type=1326 audit(1741879964.415:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.827617][ T30] audit: type=1326 audit(1741879964.415:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc139fbd169 code=0x7ffc0000 [ 45.943185][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.036498][ T4352] FAULT_INJECTION: forcing a failure. [ 46.036498][ T4352] name failslab, interval 1, probability 0, space 0, times 1 [ 46.049299][ T4352] CPU: 0 UID: 0 PID: 4352 Comm: syz.4.320 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 46.049321][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.049330][ T4352] Call Trace: [ 46.049335][ T4352] [ 46.049340][ T4352] dump_stack_lvl+0xf2/0x150 [ 46.049363][ T4352] dump_stack+0x15/0x1a [ 46.049379][ T4352] should_fail_ex+0x24a/0x260 [ 46.049446][ T4352] should_failslab+0x8f/0xb0 [ 46.049471][ T4352] kmem_cache_alloc_noprof+0x52/0x320 [ 46.049493][ T4352] ? getname_flags+0x81/0x3b0 [ 46.049524][ T4352] getname_flags+0x81/0x3b0 [ 46.049608][ T4352] getname_uflags+0x24/0x30 [ 46.049625][ T4352] __x64_sys_execveat+0x5e/0x90 [ 46.049651][ T4352] x64_sys_call+0x291e/0x2dc0 [ 46.049674][ T4352] do_syscall_64+0xc9/0x1c0 [ 46.049785][ T4352] ? clear_bhb_loop+0x55/0xb0 [ 46.049859][ T4352] ? clear_bhb_loop+0x55/0xb0 [ 46.049962][ T4352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.049984][ T4352] RIP: 0033:0x7fc139fbd169 [ 46.049998][ T4352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.050074][ T4352] RSP: 002b:00007fc138621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 46.050090][ T4352] RAX: ffffffffffffffda RBX: 00007fc13a1d5fa0 RCX: 00007fc139fbd169 [ 46.050099][ T4352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 46.050109][ T4352] RBP: 00007fc138621090 R08: 0000000000001000 R09: 0000000000000000 [ 46.050119][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.050128][ T4352] R13: 0000000000000000 R14: 00007fc13a1d5fa0 R15: 00007ffde8eacb88 [ 46.050144][ T4352] [ 46.253813][ T4355] loop2: detected capacity change from 0 to 2048 [ 46.269686][ T4355] EXT4-fs: Ignoring removed orlov option [ 46.287937][ T4355] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 46.325328][ T4354] syz.0.318: attempt to access beyond end of device [ 46.325328][ T4354] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 46.634988][ T4384] SELinux: syz.1.334 (4384) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.659603][ T4384] loop1: detected capacity change from 0 to 2048 [ 46.697932][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.914220][ T4425] loop3: detected capacity change from 0 to 512 [ 46.925731][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.955185][ T4425] EXT4-fs: Ignoring removed orlov option [ 46.969326][ T4425] ext4: Unknown parameter 'nouser_xattr' [ 47.113617][ T4425] 9pnet_fd: Insufficient options for proto=fd [ 47.370808][ T4466] syz.2.348: attempt to access beyond end of device [ 47.370808][ T4466] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 47.749077][ T4522] loop7: detected capacity change from 0 to 16384 [ 47.960658][ T4524] loop7: detected capacity change from 16384 to 0 [ 47.970627][ T4532] __nla_validate_parse: 5 callbacks suppressed [ 47.970711][ T4532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 48.090853][ T4538] loop3: detected capacity change from 0 to 512 [ 48.098068][ T4538] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.107145][ T4538] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 48.116954][ T4538] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 48.126870][ T4538] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 48.134912][ T4538] System zones: 0-2, 18-18, 34-35 [ 48.144253][ T4538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.190656][ T4538] SELinux: ebitmap: truncated map [ 48.196079][ T4538] SELinux: failed to load policy [ 48.213435][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.222273][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.234750][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.249125][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.261710][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.270539][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.279666][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.311399][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.320269][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.329541][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 48.441108][ T4571] loop3: detected capacity change from 0 to 1024 [ 48.452384][ T4571] EXT4-fs: Ignoring removed nobh option [ 48.458070][ T4571] EXT4-fs: Ignoring removed bh option [ 48.488311][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.502397][ T4580] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 48.510716][ T4580] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 48.519538][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.549193][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.557034][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.564851][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.578385][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.586188][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.593983][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.601801][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609554][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609598][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609618][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609641][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609660][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609682][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.609781][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618700][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618787][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618805][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618826][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618918][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618939][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618980][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.618999][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619020][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619044][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619111][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619133][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619174][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619194][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.619216][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 48.632206][ T36] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz1 [ 48.641865][ T4590] loop0: detected capacity change from 0 to 512 [ 48.643730][ T4590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.653358][ T4590] EXT4-fs (loop0): 1 truncate cleaned up [ 48.653679][ T4590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.725590][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.725982][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.886422][ T4589] loop2: detected capacity change from 0 to 512 [ 48.899281][ T4589] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.951311][ T4589] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.380: invalid indirect mapped block 83886080 (level 1) [ 48.951751][ T4589] EXT4-fs (loop2): Remounting filesystem read-only [ 48.952272][ T4589] EXT4-fs (loop2): 1 orphan inode deleted [ 48.952350][ T4589] EXT4-fs (loop2): 1 truncate cleaned up [ 48.958311][ T4589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.958538][ T4589] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 48.978576][ T4589] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.072666][ T4606] loop3: detected capacity change from 0 to 512 [ 49.072853][ T4606] EXT4-fs: Ignoring removed orlov option [ 49.072925][ T4606] ext4: Unknown parameter 'nouser_xattr' [ 49.166301][ T4606] 9pnet_fd: Insufficient options for proto=fd [ 49.388233][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.646679][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.654452][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.662259][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.683788][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.691587][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.699353][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.707093][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.714828][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.722660][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.730497][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.738255][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.746001][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.753746][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.761511][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.772791][ T4649] loop0: detected capacity change from 0 to 512 [ 49.780146][ T4649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.791796][ T4649] EXT4-fs (loop0): 1 truncate cleaned up [ 49.798094][ T4649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.811126][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.818930][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.826790][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.834520][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.842270][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.850083][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.857903][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.865904][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.873657][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.881554][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.889307][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.897100][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.904917][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.912678][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.920474][ T4184] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 49.928855][ T4184] hid-generic 0000:0000:20000000.0004: hidraw0: HID v0.01 Device [syz0] on syz1 [ 49.978982][ T4661] loop1: detected capacity change from 0 to 512 [ 50.001622][ T4661] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.407: corrupted in-inode xattr: e_value size too large [ 50.018589][ T4661] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.407: couldn't read orphan inode 15 (err -117) [ 50.031683][ T4661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.057687][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.214529][ T4676] 9pnet_fd: Insufficient options for proto=fd [ 50.353386][ T4691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.411659][ T4691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.464073][ T4691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.495105][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.510241][ T4691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.551203][ T4714] 9pnet_fd: Insufficient options for proto=fd [ 50.588611][ T4691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.619046][ T4719] loop1: detected capacity change from 0 to 512 [ 50.625526][ T4719] EXT4-fs: Ignoring removed orlov option [ 50.641855][ T4691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.653388][ T4691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.664622][ T4691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.673690][ T4719] ext4: Unknown parameter 'nouser_xattr' [ 50.820276][ T4719] 9pnet_fd: Insufficient options for proto=fd [ 50.893408][ T4734] loop3: detected capacity change from 0 to 1024 [ 50.907439][ T4734] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 51.044154][ T30] kauditd_printk_skb: 407 callbacks suppressed [ 51.044167][ T30] audit: type=1400 audit(1741879969.845:1562): avc: denied { write } for pid=4746 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.113068][ T4749] xt_hashlimit: max too large, truncated to 1048576 [ 51.121449][ T4759] loop1: detected capacity change from 0 to 512 [ 51.130270][ T4749] Cannot find set identified by id 0 to match [ 51.138238][ T30] audit: type=1400 audit(1741879969.945:1563): avc: denied { ioctl } for pid=4760 comm="syz.0.444" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.164517][ T4759] EXT4-fs: Ignoring removed orlov option [ 51.164574][ T4759] ext4: Unknown parameter 'nouser_xattr' [ 51.326258][ T30] audit: type=1400 audit(1741879970.135:1564): avc: denied { ioctl } for pid=4748 comm="syz.2.439" path="socket:[8501]" dev="sockfs" ino=8501 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.382156][ T30] audit: type=1326 audit(1741879970.155:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.406839][ T30] audit: type=1326 audit(1741879970.155:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.431385][ T30] audit: type=1326 audit(1741879970.155:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.456147][ T30] audit: type=1326 audit(1741879970.155:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.480684][ T30] audit: type=1326 audit(1741879970.155:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.505325][ T30] audit: type=1326 audit(1741879970.155:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.529786][ T30] audit: type=1326 audit(1741879970.155:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4770 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 51.561996][ T4759] 9pnet_fd: Insufficient options for proto=fd [ 52.990678][ T4917] bond1: entered promiscuous mode [ 52.995794][ T4917] bond1: entered allmulticast mode [ 53.001214][ T4917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.011225][ T4917] bond1 (unregistering): Released all slaves [ 53.020969][ T4916] __nla_validate_parse: 7 callbacks suppressed [ 53.020981][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 53.428706][ T4946] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 53.536360][ T4954] syz.2.518: attempt to access beyond end of device [ 53.536360][ T4954] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.841064][ T4963] loop3: detected capacity change from 0 to 128 [ 53.847575][ T4963] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 54.072807][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.081571][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.252185][ T4985] SELinux: syz.1.530 (4985) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.267632][ T4985] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 54.320006][ T4991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 54.353781][ T4997] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 54.356416][ T4996] IPVS: stopping master sync thread 4997 ... [ 54.708431][ T5019] FAULT_INJECTION: forcing a failure. [ 54.708431][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 54.721920][ T5019] CPU: 1 UID: 0 PID: 5019 Comm: syz.2.542 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 54.721933][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.721940][ T5019] Call Trace: [ 54.721943][ T5019] [ 54.721982][ T5019] dump_stack_lvl+0xf2/0x150 [ 54.721999][ T5019] dump_stack+0x15/0x1a [ 54.722010][ T5019] should_fail_ex+0x24a/0x260 [ 54.722026][ T5019] should_failslab+0x8f/0xb0 [ 54.722099][ T5019] kmem_cache_alloc_noprof+0x52/0x320 [ 54.722112][ T5019] ? audit_log_start+0x34c/0x6b0 [ 54.722130][ T5019] audit_log_start+0x34c/0x6b0 [ 54.722235][ T5019] audit_seccomp+0x4b/0x130 [ 54.722310][ T5019] __seccomp_filter+0x6fa/0x1180 [ 54.722323][ T5019] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.722338][ T5019] ? vfs_write+0x644/0x920 [ 54.722401][ T5019] ? putname+0xcf/0xf0 [ 54.722413][ T5019] __secure_computing+0x9f/0x1c0 [ 54.722425][ T5019] syscall_trace_enter+0xd1/0x1f0 [ 54.722437][ T5019] ? fpregs_assert_state_consistent+0x83/0xa0 [ 54.722449][ T5019] do_syscall_64+0xaa/0x1c0 [ 54.722505][ T5019] ? clear_bhb_loop+0x55/0xb0 [ 54.722518][ T5019] ? clear_bhb_loop+0x55/0xb0 [ 54.722579][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.722593][ T5019] RIP: 0033:0x7fdaf33dd169 [ 54.722601][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.722610][ T5019] RSP: 002b:00007fdaf1a41038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 54.722621][ T5019] RAX: ffffffffffffffda RBX: 00007fdaf35f5fa0 RCX: 00007fdaf33dd169 [ 54.722630][ T5019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.722636][ T5019] RBP: 00007fdaf1a41090 R08: 0000000000000000 R09: 0000000000000000 [ 54.722642][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.722648][ T5019] R13: 0000000000000000 R14: 00007fdaf35f5fa0 R15: 00007ffcaf0b2478 [ 54.722658][ T5019] [ 54.966909][ T5029] capability: warning: `syz.2.545' uses 32-bit capabilities (legacy support in use) [ 54.977164][ T5029] FAULT_INJECTION: forcing a failure. [ 54.977164][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 54.990676][ T5029] CPU: 1 UID: 0 PID: 5029 Comm: syz.2.545 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 54.990743][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.990754][ T5029] Call Trace: [ 54.990760][ T5029] [ 54.990767][ T5029] dump_stack_lvl+0xf2/0x150 [ 54.990797][ T5029] dump_stack+0x15/0x1a [ 54.990808][ T5029] should_fail_ex+0x24a/0x260 [ 54.990877][ T5029] should_failslab+0x8f/0xb0 [ 54.990903][ T5029] kmem_cache_alloc_noprof+0x52/0x320 [ 54.990916][ T5029] ? prepare_creds+0x37/0x480 [ 54.990931][ T5029] ? __se_sys_capset+0x384/0x400 [ 54.990960][ T5029] prepare_creds+0x37/0x480 [ 54.990982][ T5029] __se_sys_capset+0x27c/0x400 [ 54.990995][ T5029] __x64_sys_capset+0x31/0x40 [ 54.991006][ T5029] x64_sys_call+0x1965/0x2dc0 [ 54.991033][ T5029] do_syscall_64+0xc9/0x1c0 [ 54.991050][ T5029] ? clear_bhb_loop+0x55/0xb0 [ 54.991099][ T5029] ? clear_bhb_loop+0x55/0xb0 [ 54.991201][ T5029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.991215][ T5029] RIP: 0033:0x7fdaf33dd169 [ 54.991224][ T5029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.991233][ T5029] RSP: 002b:00007fdaf1a41038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 54.991243][ T5029] RAX: ffffffffffffffda RBX: 00007fdaf35f5fa0 RCX: 00007fdaf33dd169 [ 54.991287][ T5029] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000400000000380 [ 54.991293][ T5029] RBP: 00007fdaf1a41090 R08: 0000000000000000 R09: 0000000000000000 [ 54.991299][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.991305][ T5029] R13: 0000000000000000 R14: 00007fdaf35f5fa0 R15: 00007ffcaf0b2478 [ 54.991314][ T5029] [ 55.213534][ T5038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.546'. [ 55.227410][ T5030] syz.4.543: attempt to access beyond end of device [ 55.227410][ T5030] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.287604][ T5042] loop0: detected capacity change from 0 to 128 [ 55.294154][ T5042] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 55.418432][ T5050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.553'. [ 55.512402][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.528912][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.560460][ T5063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 55.636980][ T5071] syz.3.559: attempt to access beyond end of device [ 55.636980][ T5071] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.788219][ T5076] 9pnet_fd: Insufficient options for proto=fd [ 55.939690][ T5082] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 55.948458][ T5082] loop4: detected capacity change from 0 to 164 [ 56.449571][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.459871][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.468923][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.478345][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.487683][ T5100] geneve2: entered promiscuous mode [ 56.493293][ T5100] geneve2: entered allmulticast mode [ 56.503462][ T5100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.513004][ T5100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.522373][ T5100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.531744][ T5100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.626346][ T5105] 9pnet_fd: Insufficient options for proto=fd [ 56.775265][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 56.775279][ T30] audit: type=1404 audit(1741879975.575:1828): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 56.796972][ T30] audit: type=1404 audit(1741879975.605:1829): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 56.850352][ T30] audit: type=1400 audit(1741879975.655:1830): avc: denied { map_create } for pid=5118 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.870307][ T30] audit: type=1400 audit(1741879975.655:1831): avc: denied { perfmon } for pid=5118 comm="syz.3.580" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.935078][ T30] audit: type=1400 audit(1741879975.735:1832): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.963854][ T30] audit: type=1400 audit(1741879975.735:1833): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.988115][ T30] audit: type=1400 audit(1741879975.735:1834): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.013820][ T30] audit: type=1400 audit(1741879975.795:1835): avc: denied { prog_load } for pid=5121 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.032822][ T30] audit: type=1400 audit(1741879975.795:1836): avc: denied { bpf } for pid=5121 comm="syz.0.581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.053311][ T30] audit: type=1400 audit(1741879975.795:1837): avc: denied { prog_run } for pid=5121 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.122849][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.130680][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.139663][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.148822][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.157907][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.167032][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.174796][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.182629][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.191569][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.200659][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.208420][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.208786][ T5130] loop4: detected capacity change from 0 to 512 [ 57.217488][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.224782][ T5130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.231409][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.248586][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.254256][ T5130] EXT4-fs (loop4): 1 truncate cleaned up [ 57.256448][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.263116][ T5130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.270907][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.291398][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.300825][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.309992][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.318558][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.327152][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.334886][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.343506][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.351870][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.359708][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.367484][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.375188][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.383912][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.392418][ T36] hid-generic 0000:0000:20000000.0005: unknown main item tag 0x0 [ 57.412660][ T36] hid-generic 0000:0000:20000000.0005: hidraw0: HID v0.01 Device [syz0] on syz1 [ 58.110767][ T5165] 9pnet_fd: Insufficient options for proto=fd [ 58.122610][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.219686][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.228735][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.237912][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.247173][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.254923][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.263910][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.271788][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.280494][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.288269][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.296016][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.303795][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.312836][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.321895][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.330929][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.345797][ T5176] loop4: detected capacity change from 0 to 512 [ 58.352860][ T5176] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.368432][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.377481][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.384765][ T5176] EXT4-fs (loop4): 1 truncate cleaned up [ 58.385201][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.391257][ T5176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.414287][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.422835][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.431334][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.440291][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.449268][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.458299][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.467365][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.473651][ T5180] syz.0.599: attempt to access beyond end of device [ 58.473651][ T5180] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.475084][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.492827][ T5191] syz.2.601: attempt to access beyond end of device [ 58.492827][ T5191] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.496553][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.516252][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.523955][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.532632][ T3384] hid-generic 0000:0000:20000000.0006: unknown main item tag 0x0 [ 58.590809][ T3384] hid-generic 0000:0000:20000000.0006: hidraw0: HID v0.01 Device [syz0] on syz1 [ 59.058728][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.302186][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 59.544189][ T5261] loop0: detected capacity change from 0 to 2048 [ 59.551726][ T5260] bond1: entered promiscuous mode [ 59.551742][ T5260] bond1: entered allmulticast mode [ 59.551841][ T5260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.576892][ T5260] bond1 (unregistering): Released all slaves [ 59.597944][ T5261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.624455][ T5264] loop4: detected capacity change from 0 to 8192 [ 59.647512][ T5264] syz.4.628: attempt to access beyond end of device [ 59.647512][ T5264] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 59.666335][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.679682][ T5264] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 59.687576][ T5264] FAT-fs (loop4): Filesystem has been set read-only [ 59.701154][ T5264] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 59.709797][ T5264] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 59.791999][ T5281] tmpfs: Bad value for 'mpol' [ 59.850397][ T5288] FAULT_INJECTION: forcing a failure. [ 59.850397][ T5288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.863574][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.0.637 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 59.863661][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.863671][ T5288] Call Trace: [ 59.863675][ T5288] [ 59.863681][ T5288] dump_stack_lvl+0xf2/0x150 [ 59.863705][ T5288] dump_stack+0x15/0x1a [ 59.863721][ T5288] should_fail_ex+0x24a/0x260 [ 59.863809][ T5288] should_fail+0xb/0x10 [ 59.863829][ T5288] should_fail_usercopy+0x1a/0x20 [ 59.863852][ T5288] strncpy_from_user+0x25/0x210 [ 59.863871][ T5288] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 59.863940][ T5288] ? getname_flags+0x81/0x3b0 [ 59.863970][ T5288] getname_flags+0xb0/0x3b0 [ 59.864074][ T5288] getname_uflags+0x24/0x30 [ 59.864123][ T5288] __x64_sys_execveat+0x5e/0x90 [ 59.864146][ T5288] x64_sys_call+0x291e/0x2dc0 [ 59.864171][ T5288] do_syscall_64+0xc9/0x1c0 [ 59.864197][ T5288] ? clear_bhb_loop+0x55/0xb0 [ 59.864219][ T5288] ? clear_bhb_loop+0x55/0xb0 [ 59.864239][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.864290][ T5288] RIP: 0033:0x7f31fbe4d169 [ 59.864304][ T5288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.864386][ T5288] RSP: 002b:00007f31fa4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 59.864405][ T5288] RAX: ffffffffffffffda RBX: 00007f31fc065fa0 RCX: 00007f31fbe4d169 [ 59.864416][ T5288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 59.864441][ T5288] RBP: 00007f31fa4b7090 R08: 0000000000001000 R09: 0000000000000000 [ 59.864453][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.864465][ T5288] R13: 0000000000000000 R14: 00007f31fc065fa0 R15: 00007ffc8529f818 [ 59.864551][ T5288] [ 60.129134][ T5300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 60.145687][ T5304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 60.148655][ T5303] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 60.222863][ T5314] FAULT_INJECTION: forcing a failure. [ 60.222863][ T5314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.237191][ T5314] CPU: 1 UID: 0 PID: 5314 Comm: syz.1.649 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 60.237271][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.237281][ T5314] Call Trace: [ 60.237287][ T5314] [ 60.237300][ T5314] dump_stack_lvl+0xf2/0x150 [ 60.237378][ T5314] dump_stack+0x15/0x1a [ 60.237431][ T5314] should_fail_ex+0x24a/0x260 [ 60.237459][ T5314] should_fail+0xb/0x10 [ 60.237547][ T5314] should_fail_usercopy+0x1a/0x20 [ 60.237653][ T5314] _copy_to_user+0x20/0xa0 [ 60.237732][ T5314] simple_read_from_buffer+0xa0/0x110 [ 60.237758][ T5314] proc_fail_nth_read+0xf9/0x140 [ 60.237795][ T5314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.237877][ T5314] vfs_read+0x19b/0x6f0 [ 60.237899][ T5314] ? pipe_fcntl+0xda/0x360 [ 60.237926][ T5314] ? __rcu_read_unlock+0x4e/0x70 [ 60.237953][ T5314] ? __fget_files+0x17c/0x1c0 [ 60.238054][ T5314] ksys_read+0xe8/0x1b0 [ 60.238102][ T5314] __x64_sys_read+0x42/0x50 [ 60.238125][ T5314] x64_sys_call+0x2874/0x2dc0 [ 60.238155][ T5314] do_syscall_64+0xc9/0x1c0 [ 60.238201][ T5314] ? clear_bhb_loop+0x55/0xb0 [ 60.238226][ T5314] ? clear_bhb_loop+0x55/0xb0 [ 60.238250][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.238304][ T5314] RIP: 0033:0x7f976656bb7c [ 60.238319][ T5314] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.238335][ T5314] RSP: 002b:00007f9764bd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.238353][ T5314] RAX: ffffffffffffffda RBX: 00007f9766785fa0 RCX: 00007f976656bb7c [ 60.238365][ T5314] RDX: 000000000000000f RSI: 00007f9764bd70a0 RDI: 0000000000000008 [ 60.238376][ T5314] RBP: 00007f9764bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.238387][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.238396][ T5314] R13: 0000000000000000 R14: 00007f9766785fa0 R15: 00007ffd02ce0498 [ 60.238456][ T5314] [ 60.461040][ T5318] hub 2-0:1.0: USB hub found [ 60.465785][ T5318] hub 2-0:1.0: 8 ports detected [ 60.474241][ T5318] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 60.531012][ T5329] loop1: detected capacity change from 0 to 2048 [ 60.537741][ T5329] ext4: Unknown parameter 'fowner<00000000000000000000' [ 60.570643][ T5333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.655'. [ 60.658997][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 60.754929][ T5357] FAULT_INJECTION: forcing a failure. [ 60.754929][ T5357] name failslab, interval 1, probability 0, space 0, times 0 [ 60.768863][ T5357] CPU: 1 UID: 0 PID: 5357 Comm: syz.1.664 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 60.768888][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.768899][ T5357] Call Trace: [ 60.768904][ T5357] [ 60.768984][ T5357] dump_stack_lvl+0xf2/0x150 [ 60.769011][ T5357] dump_stack+0x15/0x1a [ 60.769062][ T5357] should_fail_ex+0x24a/0x260 [ 60.769088][ T5357] ? __se_sys_mount+0xf2/0x2d0 [ 60.769120][ T5357] should_failslab+0x8f/0xb0 [ 60.769146][ T5357] __kmalloc_cache_noprof+0x4e/0x320 [ 60.769220][ T5357] ? memdup_user+0x9f/0xc0 [ 60.769246][ T5357] __se_sys_mount+0xf2/0x2d0 [ 60.769271][ T5357] ? fput+0x1c4/0x200 [ 60.769288][ T5357] ? ksys_write+0x176/0x1b0 [ 60.769311][ T5357] __x64_sys_mount+0x67/0x80 [ 60.769381][ T5357] x64_sys_call+0x2c84/0x2dc0 [ 60.769424][ T5357] do_syscall_64+0xc9/0x1c0 [ 60.769453][ T5357] ? clear_bhb_loop+0x55/0xb0 [ 60.769477][ T5357] ? clear_bhb_loop+0x55/0xb0 [ 60.769500][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.769523][ T5357] RIP: 0033:0x7f976656d169 [ 60.769598][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.769614][ T5357] RSP: 002b:00007f9764bd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.769667][ T5357] RAX: ffffffffffffffda RBX: 00007f9766785fa0 RCX: 00007f976656d169 [ 60.769678][ T5357] RDX: 0000400000000340 RSI: 0000400000000280 RDI: 0000000000000000 [ 60.769747][ T5357] RBP: 00007f9764bd7090 R08: 0000400000000700 R09: 0000000000000000 [ 60.769757][ T5357] R10: 00000000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 60.769766][ T5357] R13: 0000000000000000 R14: 00007f9766785fa0 R15: 00007ffd02ce0498 [ 60.769814][ T5357] [ 61.020211][ T5370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.669'. [ 61.161083][ T5383] netlink: 'syz.2.674': attribute type 13 has an invalid length. [ 61.170527][ T5383] netlink: 152 bytes leftover after parsing attributes in process `syz.2.674'. [ 61.181204][ T5383] syz_tun: refused to change device tx_queue_len [ 61.187614][ T5383] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 61.268605][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'. [ 61.330440][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 61.404450][ T5409] loop1: detected capacity change from 0 to 128 [ 61.471128][ T5413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.686'. [ 61.531589][ T5418] loop2: detected capacity change from 0 to 2048 [ 61.558757][ T5418] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.566689][ T5420] loop4: detected capacity change from 0 to 2048 [ 61.574326][ T5418] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.688: inode #0: comm syz.2.688: iget: illegal inode # [ 61.586929][ T5420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.588637][ T5418] EXT4-fs (loop2): get orphan inode failed [ 61.604978][ T5418] EXT4-fs (loop2): mount failed [ 61.651344][ T5418] wg2: entered promiscuous mode [ 61.656361][ T5418] wg2: entered allmulticast mode [ 61.820691][ T30] kauditd_printk_skb: 375 callbacks suppressed [ 61.820704][ T30] audit: type=1400 audit(1741879980.625:2213): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.893960][ T30] audit: type=1400 audit(1741879980.625:2214): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.916734][ T30] audit: type=1400 audit(1741879980.625:2215): avc: denied { read } for pid=3038 comm="dhcpcd" name="n27" dev="tmpfs" ino=3704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.939752][ T30] audit: type=1400 audit(1741879980.625:2216): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.964157][ T30] audit: type=1400 audit(1741879980.625:2217): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3704 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.988591][ T30] audit: type=1326 audit(1741879980.645:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf33dd169 code=0x7ffc0000 [ 62.013221][ T30] audit: type=1326 audit(1741879980.645:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf33dd169 code=0x7ffc0000 [ 62.038095][ T30] audit: type=1326 audit(1741879980.645:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaf33dd169 code=0x7ffc0000 [ 62.062607][ T30] audit: type=1326 audit(1741879980.645:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf33dd169 code=0x7ffc0000 [ 62.086950][ T30] audit: type=1326 audit(1741879980.645:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fdaf33dd169 code=0x7ffc0000 [ 62.125141][ T5477] loop2: detected capacity change from 0 to 512 [ 62.135729][ T5477] EXT4-fs: Ignoring removed orlov option [ 62.141754][ T5477] ext4: Unknown parameter 'nouser_xattr' [ 62.157711][ T5479] loop0: detected capacity change from 0 to 512 [ 62.164668][ T5479] EXT4-fs: Ignoring removed orlov option [ 62.170756][ T5479] ext4: Unknown parameter 'nouser_xattr' [ 62.517837][ T5491] FAULT_INJECTION: forcing a failure. [ 62.517837][ T5491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.531046][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.3.704 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 62.531070][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.531080][ T5491] Call Trace: [ 62.531086][ T5491] [ 62.531092][ T5491] dump_stack_lvl+0xf2/0x150 [ 62.531131][ T5491] dump_stack+0x15/0x1a [ 62.531149][ T5491] should_fail_ex+0x24a/0x260 [ 62.531177][ T5491] should_fail+0xb/0x10 [ 62.531202][ T5491] should_fail_usercopy+0x1a/0x20 [ 62.531290][ T5491] _copy_to_user+0x20/0xa0 [ 62.531307][ T5491] simple_read_from_buffer+0xa0/0x110 [ 62.531412][ T5491] proc_fail_nth_read+0xf9/0x140 [ 62.531435][ T5491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.531460][ T5491] vfs_read+0x19b/0x6f0 [ 62.531483][ T5491] ? __rcu_read_unlock+0x4e/0x70 [ 62.531510][ T5491] ? __fget_files+0x17c/0x1c0 [ 62.531600][ T5491] ksys_read+0xe8/0x1b0 [ 62.531647][ T5491] __x64_sys_read+0x42/0x50 [ 62.531667][ T5491] x64_sys_call+0x2874/0x2dc0 [ 62.531691][ T5491] do_syscall_64+0xc9/0x1c0 [ 62.531719][ T5491] ? clear_bhb_loop+0x55/0xb0 [ 62.531744][ T5491] ? clear_bhb_loop+0x55/0xb0 [ 62.531835][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.531857][ T5491] RIP: 0033:0x7ff603c3bb7c [ 62.531870][ T5491] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.531886][ T5491] RSP: 002b:00007ff6022a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.531907][ T5491] RAX: ffffffffffffffda RBX: 00007ff603e55fa0 RCX: 00007ff603c3bb7c [ 62.531919][ T5491] RDX: 000000000000000f RSI: 00007ff6022a10a0 RDI: 0000000000000007 [ 62.531956][ T5491] RBP: 00007ff6022a1090 R08: 0000000000000000 R09: 0000000000000000 [ 62.531974][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.531983][ T5491] R13: 0000000000000000 R14: 00007ff603e55fa0 R15: 00007fffc2da9bc8 [ 62.531997][ T5491] [ 62.776038][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.940023][ T5554] netlink: 'syz.0.716': attribute type 21 has an invalid length. [ 63.012109][ T5556] loop3: detected capacity change from 0 to 512 [ 63.030321][ T5566] loop2: detected capacity change from 0 to 1024 [ 63.054937][ T5556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.067476][ T5566] EXT4-fs: Ignoring removed nobh option [ 63.073095][ T5566] EXT4-fs: Ignoring removed bh option [ 63.188137][ T5566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.203972][ T5556] EXT4-fs (loop3): 1 truncate cleaned up [ 63.211142][ T5556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.229295][ T5556] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 63.244570][ T5581] FAULT_INJECTION: forcing a failure. [ 63.244570][ T5581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.244593][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz.1.719 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 63.244670][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.244680][ T5581] Call Trace: [ 63.244687][ T5581] [ 63.244694][ T5581] dump_stack_lvl+0xf2/0x150 [ 63.244721][ T5581] dump_stack+0x15/0x1a [ 63.244739][ T5581] should_fail_ex+0x24a/0x260 [ 63.244766][ T5581] should_fail+0xb/0x10 [ 63.244803][ T5581] should_fail_usercopy+0x1a/0x20 [ 63.244833][ T5581] _copy_from_user+0x1c/0xa0 [ 63.244850][ T5581] snd_seq_write+0x1ce/0x500 [ 63.244882][ T5581] ? __pfx_snd_seq_write+0x10/0x10 [ 63.244978][ T5581] vfs_write+0x27d/0x920 [ 63.245003][ T5581] ? __fget_files+0x17c/0x1c0 [ 63.245043][ T5581] ksys_write+0xe8/0x1b0 [ 63.245067][ T5581] __x64_sys_write+0x42/0x50 [ 63.245105][ T5581] x64_sys_call+0x287e/0x2dc0 [ 63.245166][ T5581] do_syscall_64+0xc9/0x1c0 [ 63.245200][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 63.245223][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 63.245256][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.245329][ T5581] RIP: 0033:0x7f976656d169 [ 63.245343][ T5581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.245358][ T5581] RSP: 002b:00007f9764b95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.245375][ T5581] RAX: ffffffffffffffda RBX: 00007f9766786160 RCX: 00007f976656d169 [ 63.245386][ T5581] RDX: 000000000000001c RSI: 0000400000000080 RDI: 000000000000000b [ 63.245397][ T5581] RBP: 00007f9764b95090 R08: 0000000000000000 R09: 0000000000000000 [ 63.245408][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.245419][ T5581] R13: 0000000000000000 R14: 00007f9766786160 R15: 00007ffd02ce0498 [ 63.245474][ T5581] [ 63.453523][ T5556] EXT4-fs (loop3): Remounting filesystem read-only [ 63.461427][ T5556] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -5) [ 63.487501][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.615475][ T5602] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 63.637969][ T5602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.888873][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.976379][ T5630] xt_hashlimit: max too large, truncated to 1048576 [ 63.983838][ T5630] xt_limit: Overflow, try lower: 0/0 [ 64.057211][ T5642] loop3: detected capacity change from 0 to 512 [ 64.067850][ T5642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.091524][ T5642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.111484][ T5642] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.123831][ T5652] loop2: detected capacity change from 0 to 256 [ 64.137233][ T5643] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 64.138467][ T5652] FAT-fs (loop2): Directory bread(block 64) failed [ 64.143864][ T5643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.150635][ T5652] FAT-fs (loop2): Directory bread(block 65) failed [ 64.159208][ T5643] vhci_hcd vhci_hcd.0: Device attached [ 64.164620][ T5652] FAT-fs (loop2): Directory bread(block 66) failed [ 64.176539][ T5652] FAT-fs (loop2): Directory bread(block 67) failed [ 64.180775][ T5656] loop1: detected capacity change from 0 to 256 [ 64.183157][ T5652] FAT-fs (loop2): Directory bread(block 68) failed [ 64.190742][ T5653] vhci_hcd: connection closed [ 64.197503][ T5652] FAT-fs (loop2): Directory bread(block 69) failed [ 64.210100][ T2118] vhci_hcd: stop threads [ 64.210256][ T5652] FAT-fs (loop2): Directory bread(block 70) failed [ 64.214365][ T2118] vhci_hcd: release socket [ 64.222487][ T5652] FAT-fs (loop2): Directory bread(block 71) failed [ 64.225355][ T2118] vhci_hcd: disconnect device [ 64.230783][ T5656] FAT-fs (loop1): Directory bread(block 64) failed [ 64.233262][ T5652] FAT-fs (loop2): Directory bread(block 72) failed [ 64.237551][ T5656] FAT-fs (loop1): Directory bread(block 65) failed [ 64.237623][ T5656] FAT-fs (loop1): Directory bread(block 66) failed [ 64.237640][ T5656] FAT-fs (loop1): Directory bread(block 67) failed [ 64.237663][ T5656] FAT-fs (loop1): Directory bread(block 68) failed [ 64.237760][ T5656] FAT-fs (loop1): Directory bread(block 69) failed [ 64.237806][ T5656] FAT-fs (loop1): Directory bread(block 70) failed [ 64.237823][ T5656] FAT-fs (loop1): Directory bread(block 71) failed [ 64.237843][ T5656] FAT-fs (loop1): Directory bread(block 72) failed [ 64.237859][ T5656] FAT-fs (loop1): Directory bread(block 73) failed [ 64.249339][ T5656] FAULT_INJECTION: forcing a failure. [ 64.249339][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 64.252223][ T5652] FAT-fs (loop2): Directory bread(block 73) failed [ 64.257541][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.1.749 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 64.257576][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.257587][ T5656] Call Trace: [ 64.257593][ T5656] [ 64.257600][ T5656] dump_stack_lvl+0xf2/0x150 [ 64.257672][ T5656] dump_stack+0x15/0x1a [ 64.257690][ T5656] should_fail_ex+0x24a/0x260 [ 64.257720][ T5656] should_failslab+0x8f/0xb0 [ 64.257767][ T5656] kmem_cache_alloc_noprof+0x52/0x320 [ 64.257808][ T5656] ? getname_flags+0x81/0x3b0 [ 64.257838][ T5656] getname_flags+0x81/0x3b0 [ 64.257943][ T5656] getname+0x17/0x20 [ 64.257959][ T5656] do_sys_openat2+0x67/0x120 [ 64.258050][ T5656] __x64_sys_openat+0xf3/0x120 [ 64.258126][ T5656] x64_sys_call+0x2b30/0x2dc0 [ 64.258147][ T5656] do_syscall_64+0xc9/0x1c0 [ 64.258175][ T5656] ? clear_bhb_loop+0x55/0xb0 [ 64.258263][ T5656] ? clear_bhb_loop+0x55/0xb0 [ 64.258284][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.258310][ T5656] RIP: 0033:0x7f976656d169 [ 64.258326][ T5656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.258378][ T5656] RSP: 002b:00007f9764bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.258396][ T5656] RAX: ffffffffffffffda RBX: 00007f9766785fa0 RCX: 00007f976656d169 [ 64.258409][ T5656] RDX: 000000000000275a RSI: 0000400000000040 RDI: ffffffffffffff9c [ 64.258467][ T5656] RBP: 00007f9764bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.258494][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.258505][ T5656] R13: 0000000000000000 R14: 00007f9766785fa0 R15: 00007ffd02ce0498 [ 64.258520][ T5656] [ 64.519438][ T56] kworker/u8:4: attempt to access beyond end of device [ 64.519438][ T56] loop1: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 64.570071][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.577912][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.585689][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.594481][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.596783][ T5671] __nla_validate_parse: 6 callbacks suppressed [ 64.596795][ T5671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.754'. [ 64.602308][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.625592][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.627977][ T3404] kworker/u8:7: attempt to access beyond end of device [ 64.627977][ T3404] loop2: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 64.635088][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.654732][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.662590][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.670368][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.678295][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.686052][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.693976][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.701803][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.720205][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.728061][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.735870][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.743748][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.751518][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.759360][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.767164][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.774949][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.782825][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.790676][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.798509][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.806265][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.813992][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.821760][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.829532][ T4181] hid-generic 0000:0000:20000000.0007: unknown main item tag 0x0 [ 64.839740][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.854246][ T4181] hid-generic 0000:0000:20000000.0007: hidraw0: HID v0.01 Device [syz0] on syz1 [ 64.982595][ T5699] syz.4.760: attempt to access beyond end of device [ 64.982595][ T5699] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 65.121520][ T5717] loop3: detected capacity change from 0 to 2048 [ 65.138258][ T5717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.162163][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.204073][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.211940][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.219743][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.227770][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.235498][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.243261][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.251042][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.258791][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.266582][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.274346][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.282161][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.289918][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.297654][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.305432][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.313465][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.321289][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.329110][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.336868][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.344582][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.352329][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.360222][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.367965][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.375703][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.383424][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.391244][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.399015][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.406839][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.414624][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.422475][ T4181] hid-generic 0000:0000:20000000.0008: unknown main item tag 0x0 [ 65.430733][ T4181] hid-generic 0000:0000:20000000.0008: hidraw0: HID v0.01 Device [syz0] on syz1 [ 65.749996][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 65.832596][ T5749] loop0: detected capacity change from 0 to 512 [ 65.847081][ T5749] EXT4-fs: Ignoring removed orlov option [ 65.860118][ T5749] ext4: Unknown parameter 'nouser_xattr' [ 65.921246][ T5753] loop4: detected capacity change from 0 to 512 [ 65.928750][ T5753] EXT4-fs: Ignoring removed orlov option [ 65.934554][ T5753] ext4: Unknown parameter 'nouser_xattr' [ 66.043770][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 66.123894][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 66.182381][ T5777] Y­4`Ҙ: renamed from lo (while UP) [ 66.196831][ T5777] loop2: detected capacity change from 0 to 512 [ 66.204864][ T5777] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.217228][ T5777] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 66.228376][ T5777] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.790: Corrupt directory, running e2fsck is recommended [ 66.242481][ T5777] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 66.252207][ T5777] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.790: corrupted in-inode xattr: invalid ea_ino [ 66.266832][ T5777] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.790: couldn't read orphan inode 15 (err -117) [ 66.282970][ T5777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.297756][ T5777] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.310185][ T5777] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 66.320264][ T5777] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.790: Corrupt directory, running e2fsck is recommended [ 66.335040][ T5777] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.346635][ T5777] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 66.356877][ T5777] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.790: Corrupt directory, running e2fsck is recommended [ 66.378789][ T5777] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.391799][ T5777] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 66.401924][ T5777] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.790: Corrupt directory, running e2fsck is recommended [ 66.431804][ T5777] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.451171][ T5794] loop1: detected capacity change from 0 to 512 [ 66.464165][ T5794] ext3: Unknown parameter 'uid>00000000000000000000' [ 66.474534][ T5794] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 66.483269][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.492603][ T5800] loop0: detected capacity change from 0 to 512 [ 66.503484][ T5800] EXT4-fs: Ignoring removed orlov option [ 66.510614][ T5800] ext4: Unknown parameter 'nouser_xattr' [ 66.910682][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 66.951597][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 66.951613][ T30] audit: type=1326 audit(1741879985.755:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 66.981491][ T30] audit: type=1326 audit(1741879985.755:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 66.981557][ T30] audit: type=1326 audit(1741879985.755:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 66.981579][ T30] audit: type=1326 audit(1741879985.755:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 66.981649][ T30] audit: type=1326 audit(1741879985.755:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbe4d169 code=0x7ffc0000 [ 66.981670][ T30] audit: type=1326 audit(1741879985.755:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31fbe4f087 code=0x7ffc0000 [ 66.981690][ T30] audit: type=1326 audit(1741879985.755:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f31fbe4effc code=0x7ffc0000 [ 66.981711][ T30] audit: type=1326 audit(1741879985.755:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31fbe4ef34 code=0x7ffc0000 [ 66.981770][ T30] audit: type=1326 audit(1741879985.755:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f31fbe4ef34 code=0x7ffc0000 [ 66.981789][ T30] audit: type=1326 audit(1741879985.755:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31fbe4bdca code=0x7ffc0000 [ 67.067794][ T5863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.824'. [ 67.139256][ T5868] FAULT_INJECTION: forcing a failure. [ 67.139256][ T5868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.211933][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 67.229973][ T5868] CPU: 0 UID: 0 PID: 5868 Comm: syz.0.826 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 67.229998][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.230008][ T5868] Call Trace: [ 67.230014][ T5868] [ 67.230021][ T5868] dump_stack_lvl+0xf2/0x150 [ 67.230100][ T5868] dump_stack+0x15/0x1a [ 67.230120][ T5868] should_fail_ex+0x24a/0x260 [ 67.230150][ T5868] should_fail+0xb/0x10 [ 67.230173][ T5868] should_fail_usercopy+0x1a/0x20 [ 67.230213][ T5868] _copy_from_iter+0xd5/0xd00 [ 67.230242][ T5868] ? kmalloc_reserve+0x16e/0x190 [ 67.230313][ T5868] ? __virt_addr_valid+0x1ed/0x250 [ 67.230336][ T5868] ? __check_object_size+0x364/0x520 [ 67.230432][ T5868] pfkey_sendmsg+0x16c/0x970 [ 67.230475][ T5868] ? selinux_socket_sendmsg+0x185/0x1c0 [ 67.230503][ T5868] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 67.230577][ T5868] __sock_sendmsg+0x140/0x180 [ 67.230608][ T5868] ____sys_sendmsg+0x326/0x4b0 [ 67.230657][ T5868] __sys_sendmsg+0x19d/0x230 [ 67.230688][ T5868] __x64_sys_sendmsg+0x46/0x50 [ 67.230711][ T5868] x64_sys_call+0x2734/0x2dc0 [ 67.230750][ T5868] do_syscall_64+0xc9/0x1c0 [ 67.230785][ T5868] ? clear_bhb_loop+0x55/0xb0 [ 67.230809][ T5868] ? clear_bhb_loop+0x55/0xb0 [ 67.230832][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.230855][ T5868] RIP: 0033:0x7f31fbe4d169 [ 67.230896][ T5868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.230962][ T5868] RSP: 002b:00007f31fa4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.230980][ T5868] RAX: ffffffffffffffda RBX: 00007f31fc065fa0 RCX: 00007f31fbe4d169 [ 67.230992][ T5868] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 67.231004][ T5868] RBP: 00007f31fa4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.231015][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.231097][ T5868] R13: 0000000000000000 R14: 00007f31fc065fa0 R15: 00007ffc8529f818 [ 67.231115][ T5868] [ 67.265356][ T5871] loop3: detected capacity change from 0 to 2048 [ 67.478019][ T5873] loop2: detected capacity change from 0 to 128 [ 67.484894][ T5873] EXT4-fs: Ignoring removed nobh option [ 67.495078][ T5873] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.510614][ T5873] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.522994][ T5871] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 67.536776][ T5871] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.827: inode #0: comm syz.3.827: iget: illegal inode # [ 67.555152][ T5871] EXT4-fs (loop3): get orphan inode failed [ 67.562304][ T5873] sctp: [Deprecated]: syz.2.828 (pid 5873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.562304][ T5873] Use struct sctp_sack_info instead [ 67.589654][ T5871] EXT4-fs (loop3): mount failed [ 67.597827][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.701925][ T5910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'. [ 67.726235][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 67.735102][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 67.764862][ T5918] bridge0: port 1(batadv1) entered blocking state [ 67.771585][ T5918] bridge0: port 1(batadv1) entered disabled state [ 67.779073][ T5918] batadv1: entered allmulticast mode [ 67.782153][ T5920] loop4: detected capacity change from 0 to 2048 [ 67.785075][ T5918] batadv1: entered promiscuous mode [ 67.812251][ T5920] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.824873][ T5920] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.847: inode #0: comm syz.4.847: iget: illegal inode # [ 67.841352][ T5920] EXT4-fs (loop4): get orphan inode failed [ 67.848520][ T5920] EXT4-fs (loop4): mount failed [ 67.872998][ T5930] loop1: detected capacity change from 0 to 164 [ 67.880296][ T5930] Unable to read rock-ridge attributes [ 67.887632][ T5930] Unable to read rock-ridge attributes [ 67.888531][ T5932] FAULT_INJECTION: forcing a failure. [ 67.888531][ T5932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.893378][ T5930] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.907494][ T5932] CPU: 1 UID: 0 PID: 5932 Comm: syz.4.853 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 67.907597][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.907608][ T5932] Call Trace: [ 67.907614][ T5932] [ 67.907621][ T5932] dump_stack_lvl+0xf2/0x150 [ 67.907647][ T5932] dump_stack+0x15/0x1a [ 67.907666][ T5932] should_fail_ex+0x24a/0x260 [ 67.907694][ T5932] should_fail+0xb/0x10 [ 67.907813][ T5932] should_fail_usercopy+0x1a/0x20 [ 67.907863][ T5932] _copy_to_user+0x20/0xa0 [ 67.907881][ T5932] simple_read_from_buffer+0xa0/0x110 [ 67.907911][ T5932] proc_fail_nth_read+0xf9/0x140 [ 67.907938][ T5932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.907981][ T5932] vfs_read+0x19b/0x6f0 [ 67.908003][ T5932] ? __rcu_read_unlock+0x4e/0x70 [ 67.908023][ T5932] ? __fget_files+0x17c/0x1c0 [ 67.908069][ T5932] ksys_read+0xe8/0x1b0 [ 67.908138][ T5932] __x64_sys_read+0x42/0x50 [ 67.908160][ T5932] x64_sys_call+0x2874/0x2dc0 [ 67.908183][ T5932] do_syscall_64+0xc9/0x1c0 [ 67.908210][ T5932] ? clear_bhb_loop+0x55/0xb0 [ 67.908279][ T5932] ? clear_bhb_loop+0x55/0xb0 [ 67.908303][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.908326][ T5932] RIP: 0033:0x7fc139fbbb7c [ 67.908340][ T5932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.908382][ T5932] RSP: 002b:00007fc138621030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.908400][ T5932] RAX: ffffffffffffffda RBX: 00007fc13a1d5fa0 RCX: 00007fc139fbbb7c [ 67.908411][ T5932] RDX: 000000000000000f RSI: 00007fc1386210a0 RDI: 0000000000000004 [ 67.908421][ T5932] RBP: 00007fc138621090 R08: 0000000000000000 R09: 0000000000000000 [ 67.908432][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.908443][ T5932] R13: 0000000000000000 R14: 00007fc13a1d5fa0 R15: 00007ffde8eacb88 [ 67.908459][ T5932] [ 68.168243][ T5952] loop1: detected capacity change from 0 to 512 [ 68.174980][ T5952] EXT4-fs: Ignoring removed orlov option [ 68.181537][ T5952] ext4: Unknown parameter 'nouser_xattr' [ 68.231676][ T5960] bridge_slave_0: entered allmulticast mode [ 68.266452][ T56] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 68.275838][ T56] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 68.384295][ T5977] syz.0.866: attempt to access beyond end of device [ 68.384295][ T5977] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.267601][ T6034] loop1: detected capacity change from 0 to 128 [ 69.275374][ T6034] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 69.287586][ T6036] loop4: detected capacity change from 0 to 512 [ 69.294093][ T6036] EXT4-fs: Ignoring removed orlov option [ 69.300088][ T6036] ext4: Unknown parameter 'nouser_xattr' [ 69.301080][ T6038] loop0: detected capacity change from 0 to 512 [ 69.313934][ T6038] EXT4-fs: Ignoring removed orlov option [ 69.321672][ T6038] ext4: Unknown parameter 'nouser_xattr' [ 69.539740][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.549013][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.699057][ T6070] FAULT_INJECTION: forcing a failure. [ 69.699057][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.713053][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.0.904 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 69.713076][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.713085][ T6070] Call Trace: [ 69.713090][ T6070] [ 69.713170][ T6070] dump_stack_lvl+0xf2/0x150 [ 69.713196][ T6070] dump_stack+0x15/0x1a [ 69.713214][ T6070] should_fail_ex+0x24a/0x260 [ 69.713241][ T6070] should_fail+0xb/0x10 [ 69.713346][ T6070] should_fail_usercopy+0x1a/0x20 [ 69.713380][ T6070] _copy_from_user+0x1c/0xa0 [ 69.713398][ T6070] memdup_user+0x64/0xc0 [ 69.713440][ T6070] strndup_user+0x68/0xa0 [ 69.713633][ T6070] __se_sys_mount+0x4e/0x2d0 [ 69.713718][ T6070] ? fput+0x1c4/0x200 [ 69.713735][ T6070] ? ksys_write+0x176/0x1b0 [ 69.713788][ T6070] __x64_sys_mount+0x67/0x80 [ 69.713883][ T6070] x64_sys_call+0x2c84/0x2dc0 [ 69.713907][ T6070] do_syscall_64+0xc9/0x1c0 [ 69.713977][ T6070] ? clear_bhb_loop+0x55/0xb0 [ 69.713992][ T6070] ? clear_bhb_loop+0x55/0xb0 [ 69.714005][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.714019][ T6070] RIP: 0033:0x7f31fbe4d169 [ 69.714027][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.714037][ T6070] RSP: 002b:00007f31fa4b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.714086][ T6070] RAX: ffffffffffffffda RBX: 00007f31fc065fa0 RCX: 00007f31fbe4d169 [ 69.714093][ T6070] RDX: 0000400000000480 RSI: 0000400000000200 RDI: 0000000000000000 [ 69.714099][ T6070] RBP: 00007f31fa4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.714105][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.714111][ T6070] R13: 0000000000000000 R14: 00007f31fc065fa0 R15: 00007ffc8529f818 [ 69.714120][ T6070] [ 69.929927][ T6079] loop0: detected capacity change from 0 to 512 [ 69.936430][ T6079] EXT4-fs: Ignoring removed orlov option [ 69.942250][ T6079] ext4: Unknown parameter 'nouser_xattr' [ 70.136296][ T6086] __nla_validate_parse: 6 callbacks suppressed [ 70.136310][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 70.258895][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 70.286516][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 70.372072][ T6124] loop4: detected capacity change from 0 to 128 [ 70.378644][ T6124] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 70.457978][ T6133] loop3: detected capacity change from 0 to 8192 [ 70.500441][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 70.537994][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 70.604095][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.613542][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.830505][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 70.940716][ T6178] loop2: detected capacity change from 0 to 128 [ 70.959727][ T6178] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.972885][ T6178] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.996002][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 71.004837][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 71.014044][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 71.029344][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 71.065025][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.300240][ T6206] loop4: detected capacity change from 0 to 512 [ 71.317416][ T6206] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.323784][ T6206] EXT4-fs error (device loop4): ext4_quota_enable:7097: comm syz.4.963: Bad quota inum: 5, type: 1 [ 71.338988][ T6206] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 71.364825][ T6208] loop2: detected capacity change from 0 to 8192 [ 71.372185][ T6206] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 71.391376][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.464987][ T6230] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.862556][ T6275] loop3: detected capacity change from 0 to 2048 [ 71.879020][ T6275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.905287][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.960696][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 71.960711][ T30] audit: type=1400 audit(1741879990.765:2520): avc: denied { connect } for pid=6290 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.989664][ T6291] loop3: detected capacity change from 0 to 512 [ 72.000112][ T6291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.018698][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 72.026972][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.057219][ T6291] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 72.081674][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.474698][ T30] audit: type=1400 audit(1741879991.275:2521): avc: denied { nlmsg_read } for pid=6353 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.496169][ T6354] loop2: detected capacity change from 0 to 512 [ 72.520843][ T6360] loop0: detected capacity change from 0 to 128 [ 72.527291][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.527346][ T6354] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.553903][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.565209][ T6360] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.578717][ T6360] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.607858][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.617178][ T6363] loop2: detected capacity change from 0 to 8192 [ 72.673070][ T30] audit: type=1400 audit(1741879991.475:2522): avc: denied { read } for pid=6371 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.693298][ T6373] loop2: detected capacity change from 0 to 512 [ 72.700667][ T6373] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 72.712619][ T30] audit: type=1400 audit(1741879991.515:2523): avc: denied { read write } for pid=6371 comm="syz.2.1023" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.742167][ T30] audit: type=1400 audit(1741879991.515:2524): avc: denied { open } for pid=6371 comm="syz.2.1023" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.766342][ T30] audit: type=1400 audit(1741879991.515:2525): avc: denied { map } for pid=6371 comm="syz.2.1023" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.790392][ T30] audit: type=1400 audit(1741879991.515:2526): avc: denied { execute } for pid=6371 comm="syz.2.1023" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.814636][ T30] audit: type=1400 audit(1741879991.515:2527): avc: denied { ioctl } for pid=6371 comm="syz.2.1023" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.884937][ T6393] 9pnet_virtio: no channels available for device 127.0.0.1 [ 73.011501][ T30] audit: type=1326 audit(1741879991.815:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff603c34127 code=0x7ffc0000 [ 73.051947][ T6410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.075770][ T30] audit: type=1326 audit(1741879991.845:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff603bd9359 code=0x7ffc0000 [ 73.099322][ T6406] loop1: detected capacity change from 0 to 8192 [ 73.112684][ T6410] vlan2: entered allmulticast mode [ 73.125213][ T6410] bond0: entered allmulticast mode [ 73.133493][ T6415] FAULT_INJECTION: forcing a failure. [ 73.133493][ T6415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.137351][ T6406] syz.1.1038: attempt to access beyond end of device [ 73.137351][ T6406] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.146613][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.0.1042 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 73.146638][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.146649][ T6415] Call Trace: [ 73.146724][ T6415] [ 73.146731][ T6415] dump_stack_lvl+0xf2/0x150 [ 73.146757][ T6415] dump_stack+0x15/0x1a [ 73.146776][ T6415] should_fail_ex+0x24a/0x260 [ 73.146860][ T6415] should_fail+0xb/0x10 [ 73.146885][ T6415] should_fail_usercopy+0x1a/0x20 [ 73.146915][ T6415] _copy_to_user+0x20/0xa0 [ 73.146933][ T6415] copy_siginfo_to_user+0x24/0xb0 [ 73.147010][ T6415] x64_setup_rt_frame+0x2b4/0x590 [ 73.147035][ T6415] arch_do_signal_or_restart+0x287/0x4b0 [ 73.147058][ T6415] syscall_exit_to_user_mode+0x62/0x120 [ 73.147085][ T6415] do_syscall_64+0xd6/0x1c0 [ 73.147245][ T6415] ? clear_bhb_loop+0x55/0xb0 [ 73.147304][ T6415] ? clear_bhb_loop+0x55/0xb0 [ 73.147326][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.147352][ T6415] RIP: 0033:0x7f31fbe4d167 [ 73.147374][ T6415] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 73.147402][ T6415] RSP: 002b:00007f31fa4b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 73.147418][ T6415] RAX: 00000000000000f7 RBX: 00007f31fc065fa0 RCX: 00007f31fbe4d169 [ 73.147465][ T6415] RDX: 0000000000000000 RSI: 00000000000001f9 RDI: 0000000000000001 [ 73.147477][ T6415] RBP: 00007f31fa4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.147487][ T6415] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 73.147498][ T6415] R13: 0000000000000000 R14: 00007f31fc065fa0 R15: 00007ffc8529f818 [ 73.147514][ T6415] [ 73.169760][ T6412] loop3: detected capacity change from 0 to 512 [ 73.172807][ T6406] Buffer I/O error on dev loop1, logical block 57847, async page read [ 73.203536][ T6412] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 73.358969][ T6410] bond0: left allmulticast mode [ 73.370280][ T6412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.380341][ T6412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389635][ T6412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.398307][ T6412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408388][ T6412] team0: Port device geneve1 added [ 73.558660][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.566526][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.574398][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.582180][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.589927][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.597741][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.605670][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.613400][ T4181] hid-generic 0000:0000:20000000.0009: unknown main item tag 0x0 [ 73.621276][ T4181] hid-generic 0000:0000:20000000.0009: item fetching failed at offset 8/43 [ 73.621474][ T6433] loop2: detected capacity change from 0 to 128 [ 73.631163][ T4181] hid-generic 0000:0000:20000000.0009: probe with driver hid-generic failed with error -22 [ 73.656248][ T6440] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.665157][ T6440] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.674108][ T6440] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.675789][ T6433] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.684426][ T6440] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.695807][ T6433] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.723279][ T6440] team0: Port device geneve1 removed [ 73.744725][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.308946][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.349274][ T6480] loop4: detected capacity change from 0 to 128 [ 74.356992][ T6480] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.369263][ T6480] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.416880][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.474054][ T6492] loop4: detected capacity change from 0 to 2048 [ 74.487697][ T6492] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.495814][ T6492] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz.4.1071: inode #0: comm syz.4.1071: iget: illegal inode # [ 74.509113][ T6492] EXT4-fs (loop4): get orphan inode failed [ 74.514997][ T6492] EXT4-fs (loop4): mount failed [ 74.648214][ T6515] loop3: detected capacity change from 0 to 128 [ 74.658969][ T6515] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.673078][ T6515] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.699271][ T6523] ================================================================== [ 74.707367][ T6523] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 74.714831][ T6523] [ 74.717228][ T6523] write to 0xffff888104878700 of 8 bytes by task 6520 on cpu 0: [ 74.724840][ T6523] mas_wmb_replace+0xe89/0x14d0 [ 74.729679][ T6523] mas_wr_store_entry+0x1530/0x23f0 [ 74.734870][ T6523] mas_store_prealloc+0x6bf/0x960 [ 74.739888][ T6523] vma_complete+0x3a7/0x760 [ 74.744386][ T6523] __split_vma+0x5d6/0x6a0 [ 74.748792][ T6523] vma_modify+0x105/0x200 [ 74.753106][ T6523] vma_modify_flags+0xf1/0x120 [ 74.757871][ T6523] mprotect_fixup+0x31a/0x5e0 [ 74.762534][ T6523] do_mprotect_pkey+0x6cc/0x9a0 [ 74.767373][ T6523] __x64_sys_mprotect+0x48/0x60 [ 74.772212][ T6523] x64_sys_call+0x2770/0x2dc0 [ 74.776883][ T6523] do_syscall_64+0xc9/0x1c0 [ 74.781404][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.787286][ T6523] [ 74.789591][ T6523] read to 0xffff888104878700 of 8 bytes by task 6523 on cpu 1: [ 74.797117][ T6523] mtree_range_walk+0x33d/0x460 [ 74.801961][ T6523] mas_walk+0x16e/0x320 [ 74.806110][ T6523] lock_vma_under_rcu+0x95/0x270 [ 74.811044][ T6523] exc_page_fault+0x150/0x650 [ 74.815728][ T6523] asm_exc_page_fault+0x26/0x30 [ 74.820578][ T6523] [ 74.822888][ T6523] value changed: 0xffff8881032d8f06 -> 0xffff888104878700 [ 74.829978][ T6523] [ 74.832291][ T6523] Reported by Kernel Concurrency Sanitizer on: [ 74.838426][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.0.1081 Not tainted 6.14.0-rc6-syzkaller-00022-gb7f94fcf5546 #0 [ 74.849172][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.859215][ T6523] ================================================================== [ 74.934493][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.947015][ T6508] hub 9-0:1.0: USB hub found [ 74.951804][ T6508] hub 9-0:1.0: 8 ports detected