last executing test programs: 47.157920546s ago: executing program 1 (id=690): bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+WpAALbWEZllQIIurCbgHb6EIFiq5q1CiKAk02gZdZGXAW8SbQLlkFWWURIPF/EBhZKQGCCebOUOJjZihSFKnIn89gNPfxO+f87tw792iGM/eEP2b1er28b3P+0vd3M1kePecnv/78i08b93+/lb7sy+vFD5OBJNWk5/flsdI7MbkwP7tJRTeTK0luJ0WS/jQfO9i/Zu5Kiv/Ok/fmb6f4bg63KTawxY1jU3W+1fb6+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfSxOTo6FiRmem5S29XOyuHAO+yfqW6r8pRv4uvVjfR16bZIika9wwMrAz1ffjQvdXPNv45nueac881R/4eyCdPPHvwjWd6KivluyS0Kz78+JOb7y4vX/vg3qLeTQv1P9yctqVve8Uu1OamF+enZ89dqFWnF+erZ0+fHj15cWqxOjWd2uLlxaXabHVioXZuaX6hOjTxSnXs7NlT1drI5flLcxcmR2ZqKwvP/MX46Ojp6lsjf1M7t7A4P3fyrZHFiYvTMzPTcxfKmMbqRsyZxoH419NL1aXaudlq9fqN5WunNkuyETTWdk1R3ZdVQeOb1TQ+Oj4+NjY+Pnb69bOvnxkd7dmwYHSdbIjY+4OWvfODh3IOh22qtPr/zGQ6c7mUt1Nte5vIZBYyn9kO61tW+v8TJ2td213d/6/08ofvrT6Ssv9/oTn3Qqf+v0Mum9/q9WbN2y2/cvswH+eT3My7Wc5yruWDB66xP+sy++2D1ti6VR98azfeLqSWuUxnMfOZzmzOlUuqrSXVnM3pnM5o3snFTGUx1UxlOjOpZTGXs5il1MojaiILqeVcljKfhVQzlIm8kmrGcjZncyrV1DKSy5nPpczlQiZzrqzlem6Uz/upLjneDRq7n6DxLkE73P/XH8X/CfKw7ej5Gx5EvdX/t3uP3gyor0wNTexaVgAAAMBO+vOf5MChp3/8y6Q3z5efy09Nz9RG9zotAAAAYAeVX9d7rvHQ25h6PoX3/wAAAPC4Kcrf2BVJBnO0OdX8JdS++BAAAAAAHhPl3/9faDwMNqaOprh7JZQre50bAAAAsDPuXmM/na6xu+lV+Ivhlcv/Vq82H6+2IlrX+R2cmp6pjUzMz7wxlpfKqwyUvzTYUNu+pOgtf37wao41o44NNh8H19Y40IgaG3ljLK/meGtDhl5sPLw41CZyvBn5cjPy5S6RpxqRAPC4O96lP77f/v/VDDcjho/09CXpOdKmZx3VswLAo2LzMXY2jSj+8t77/95WtWv6/6dz/WjzKwUjeS/vZzlXM1z+2qD8xsGaWv/+s9ZnBne/hjCa4U0+DViJ/dmZSoY7fB7Ql/X1jmd4k08EmrH5h+TUw98RALCLjnfoh7fS/w+vev+fje//7w4tdM1PCgHgkXB3BPuHOLHX2wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23o1f7H9hm8V+1xvV7uMMQbJjY33oOtl/P/yTZvZyLRlv9O1dhZQfqqSfZrf21exM5mGz7WW17GPcl2fvt2srEXp6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2C1Fsq/d8krSn2Q0ycndz2r7isYWdXFr1zLZbT/92w4r/mr1THEnd/JRDuxOTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3x6t6/9X0nx8orkoPZXkRJIrSf5ur3PcSXf2OoEdsn+b5VZd/7+xz1Mv0tPc7Sl6JyYX5mfL8RP6G+u//vyLTxv3VcX777edMrCybnCJVgvrY7/35MrUU2WpwclrH978l/f/uTp5PpX05fzS1Mzk7IWFN+8Vebb4MqmmeV+xku+/nfjRZ222/MvGlra3vt2p8smZ3Njun7Ur3b3dbm4sXxtvtLRUe3vpX//pxkerVj2dY8mLQ8nQ2pb+sXHv0NKx9HZrrfim+M/iQP4vV8r933g2inrR2EV/Um7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflFczM/zH6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/7/+8q+7TA1bNV/rXnxVlad/1v7aofOR/Wi6/loVYtbe12sa3HdUdHldVH2SIfWlWidfTqVaeV5qBnVIc8/zWtJz5FuZ8UNvfVrm53SVsq/2X71dl//3ymG8pvcMv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6CuSfe2WV5ITSQ6uzFeT+haq7e+0ojJYbDXFHXXr7j+PhcpWCxR3cicf5cDDSQcAAAAAAACA3XZ+8uvPv/i0cS//Hr/vTr3e+vt+NelJcrD43/2ZXJif3aSi3uRKktuN6YFOQb+rN61d2iiXJ+/N327MHW5bwcH73S4AoLM/BAAA///r9m7p") (fail_nth: 3) 46.813927324s ago: executing program 1 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0xf5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 46.813625274s ago: executing program 1 (id=693): r0 = io_uring_setup(0x5eb3, &(0x7f0000000280)={0x0, 0x6125, 0x200, 0x1, 0x371}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb2"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f086dd0f13268b326d400ec6", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x2daa, 0x80, 0x8101002, 0x3d7, 0x0, r0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="9471717013272679561ea2a240f7ed68afaeb9a0cd7ac703cfe6654ad9b7eb2240ee9e27c20a0f09d4da986f3a494206350ce1302211391227c1add6b29238d387ecef523c27d00dd1348c2754fe79503e4e25987e3020d31cdd125e5c47c4ef887065711a2be360073faed720b730a52b795c3ff05b68c8a2a0d509e502e280bfc451c4f96829e22f329b344f62e270712df9eddc8ac8eb73a78f5d", 0x9c}, {&(0x7f00000001c0)="f3618d", 0x3}, {&(0x7f0000000380)}, {0x0}, {&(0x7f00000006c0)="fce9f432fb4e189a", 0x8}, {&(0x7f0000000700)="ba0ee8e404f30df2a75a7f70b8e3c51b9808e5f770761d271b6b0eb0672f0f9b0db5c02e0229c40546fb5a242d0996011b38a0832373074de6bfbe94b0fb531bacc2a759155fd9c62582b8ba2febb910a7a25ffd4aac5b5b5d", 0x59}], 0x6, &(0x7f0000000940)=[{0x38, 0x1, 0x3, "65209f62ee5e64fefaba97213e9514a57933956e5d21ce88b82c5ff7bccb81f666c84c2d21"}, {0x68, 0x10b, 0x1, "f94553a8307ba054c4228b5cad57b4f9556573f6a9ddcd139e4ed185bd4914f3a7181d480f1cde0265ce4d099ab783cf38a1b7a2dcd8418f6f3d8993c1732313f6a0a51144fb73a59b1f4e8d83c96431ff8d0706c6"}, {0xd0, 0x107, 0xf53, "b29240150ce959cc5b827b701d1bc2d946ccbaf38cbed503ce575380c908419135fc3a4927a1e57e0b59c92f430a08a5ff8da8ccb21f00e05ed666a7ca4c81d128b10427bf0a2d9f99e64565e5ace18dcb3a48e7de124167eb8e26dfd821ed2683ddaea2ba4e5416d89aeb8e37509dcf98b82f19b3eaa03d968d0e2b3b376ad356d57518e1b38d4d457cd489cfa2231d4fd1b27d31a5f216efaffffcca6765c2e13921739a9f58309e4c71a55ddd18a19e69080941c6d77dddbb476667"}, {0x68, 0x10d, 0x6, "1a5826fce475d8193bdf3f39b6e09b6379c495d71b5b14840bfd43757345cf30d8660cdb1a29b0626e5e7bf593706e66ebdee1933519f7947b3d8888f00e39d13a522fdd6e9b10a70a8a074dd80b06824fc8c6775852d7"}, {0xd8, 0x115, 0x6, "2591fb931212e5d9f88e1f67825c3d1f5a545493b50b7d811d79de1b1cef913a0b8d443149c9d407009f41eb28b4f0af0256bd4752cb6c1a7e3f6ecf3a397384b8c20e7df6e91d41491eca48aa7b91c748153a298745dfc09a26f8d02ec5368178b496a4c8402dd29f2db7f59c2ad5caa9c6792d57f2b9702806344491ccddaa2a4b4effebaca843dbe7c855bb00b35d783a2677c030f823f90cade8ca6398aa74a384f915290dfe46af9e89ee7255c36811bf6def124e6b7d109532fc344493f465e99b3ee771"}, {0x10, 0x88, 0x7fffffff}, {0xc0, 0x0, 0x2, "8eb77507bce3f80466002f32c057c092c6dcae1393be4dac25a4687dad1a4378b117c64a3b6c1377a06405f2d73dc98223143ca37e4cad03d880c8551422a63f35ef7e35663dae5f108df8f13b94a1f462bc4b2d974b193417202887c9a8837c5eb12bf82af7a2c65d253549c24977743ac71c516ae10f5e54c084e9136b4c1ad32d96ef071f68c9202c25257fd3da5efaff7f6857c6d80cb4ce54b2774fa51c2008846c6315cd43308ca5fe"}, {0x48, 0x108, 0x5, "ef3d8239b66f171e332911d6287559eeb3c406accdacc9aed10619344b28a648771005d80cfb1016044bd0ab773703b0189d8e5ec010"}], 0x3c8}}], 0x1, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 45.899291137s ago: executing program 1 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 45.898866697s ago: executing program 1 (id=704): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000004c0)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}], [{@subj_user}, {@obj_user={'obj_user', 0x3d, 'mb_optimize_scan'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz'}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x6}) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) (async) unlink(&(0x7f0000000100)='./file1\x00') r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r4 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="8f8ce571376e45f64c556c297fae3b4b3f4ddb63eff8a98b182c88ce21b07746c7aeb6a3e7", 0x25, 0xffffffffffffffff) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r4) 45.797768915s ago: executing program 1 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="171466bb14dbe08ff08dbefa4013b1b18d95ec6534273a9aed0b1484e3aba74c5926d05818780848c3766c5e29dccfdc4c59be36cca8a97c0abd06031818148f7fba257accd906096cd12dea97615676b9197db044c3a3ab8051030a835a47c359b7646cbf88fa274322d9b773053f63513076d9d1408203dfb69e2816782016b5e966000f46894b283c928b1828148056427cf405bbffb13a7fc1edc45a7bf4606468c689fc8d2046f82d0ac496f75c0ae238ee2a0ccb85c0e2ad45c7205b3a19f907943cd9000b2be9a490ccd1b681ccdca8bde8d47603a915b63a650e8c0f69c0904385e7"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) close(r4) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000007c0)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/38, 0x26}], &(0x7f00000003c0)=[0x7]}, 0x20) inotify_init() (async, rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) (async) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0x2, 0x699, &(0x7f0000000140)="$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") (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x4, 0xfff, 0x6}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xffd2) (async) r13 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r13, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 30.7882037s ago: executing program 32 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="171466bb14dbe08ff08dbefa4013b1b18d95ec6534273a9aed0b1484e3aba74c5926d05818780848c3766c5e29dccfdc4c59be36cca8a97c0abd06031818148f7fba257accd906096cd12dea97615676b9197db044c3a3ab8051030a835a47c359b7646cbf88fa274322d9b773053f63513076d9d1408203dfb69e2816782016b5e966000f46894b283c928b1828148056427cf405bbffb13a7fc1edc45a7bf4606468c689fc8d2046f82d0ac496f75c0ae238ee2a0ccb85c0e2ad45c7205b3a19f907943cd9000b2be9a490ccd1b681ccdca8bde8d47603a915b63a650e8c0f69c0904385e7"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32) close(r4) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000007c0)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/38, 0x26}], &(0x7f00000003c0)=[0x7]}, 0x20) inotify_init() (async, rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) (async) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r10, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) (async) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0x2, 0x699, &(0x7f0000000140)="$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") (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x4, 0xfff, 0x6}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xffd2) (async) r13 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r13, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2.63258921s ago: executing program 5 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000ea0b0000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) unshare(0x26020480) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x64000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r10, 0x3309) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r8, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="180000002a000000000000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f8ffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018000000a630beb7000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001837000001000000000000000000000018180000", @ANYRES32=r8, @ANYBLOB="000000000000000018000000020000000000000002000000bf91000000000000b7020000000000008500000084000000b7000000000104000000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xf, 0x6, &(0x7f0000000400)=""/6, 0x41000, 0xd, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r8, r8, r8, r8, r8], &(0x7f0000000680)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x5, 0x9, 0x8}, {0x3, 0x4, 0xf, 0x8}, {0x3, 0x5, 0xe, 0x2}, {0x5, 0x4, 0x4, 0x4}, {0x3, 0x2, 0xc, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r12, 0x4b41, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x33, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e}, 0x20) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73060000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.621603681s ago: executing program 0 (id=1353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2.601912292s ago: executing program 0 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x204000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') listxattr(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001900000000000000080000000000003c37e1f38c068f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@jmp={0x5, 0x1, 0x1, 0x2, 0x0, 0x4, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.482459672s ago: executing program 5 (id=1357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) close(r2) 2.449868095s ago: executing program 5 (id=1358): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000700005383fa010cc5be00000000000000001812000093805e74d85f32b082a11e314e97c7ca3c10780f625b50473a12b93dc3fe9ee8d55454269b1f61f0af50c4ae45a0fe9b4c8474349d0545a4a17922becddb83699983d6613ea6e89cca5a493e75c9fbf4b572825a5e8594112fcee29d0df44a9fff024c351f36dbb8b48bb32e2f81c98e05a470c49eac2bae2ffdc78e284470bd573312d61f9118efe309cb0b44902b8e84d14fcb47d4f014c094c427a7efc2f61e57e6e5f1946dcb54b3ed0ef184c8670bad382bb4671680553df728b6b9c5136897e7cd3c6138ba66a1ffa92712f2", @ANYRES32=r0, @ANYBLOB="000000f5ffffff00b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601040000000000000038dbe2b50205000100070000005a07317d7e836a3b4e1d9012aad967aabcf6d5944cec21ba34ca02e6a500662cb6e1f2f564961ae4479749f729fd4cbb70e88dbfbd379f34027d78f12925a2d6b4ec5da8539665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e3453a7b706369d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x2, 0x0, 0x2, 0x80000001, 0x200, 0x0, 0xfffffffffffffff7, 0x80, 0x0, 0x0, 0x2, 0x0, 0x393, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfc83, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.806465966s ago: executing program 0 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=r0], 0x6c}}, 0x814) 1.724844772s ago: executing program 0 (id=1365): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00:'], 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x8, 0x0, 0x2, 0x20, 0x4}, @ldst={0x0, 0x3, 0x4, 0x9, 0xe, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xb, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000440)=[r2, r1, r2], &(0x7f0000000480)=[{0x2, 0x4, 0x9, 0x5}, {0x3, 0x4, 0x7, 0xb}, {0x5, 0x3, 0x8, 0x9}, {0x0, 0x3, 0x4, 0x4}, {0x2, 0x1, 0x7, 0x2}, {0x0, 0x3, 0x3, 0x7}, {0x5, 0x3, 0x7, 0x1}, {0x5, 0x5, 0x8, 0x9}, {0x4, 0x2, 0xc, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=""/29, 0x1d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(r3, &(0x7f0000000080)=""/22, 0x16, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.585670003s ago: executing program 4 (id=1367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.49755824s ago: executing program 4 (id=1368): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000700005383fa010cc5be00000000000000001812000093805e74d85f32b082a11e314e97c7ca3c10780f625b50473a12b93dc3fe9ee8d55454269b1f61f0af50c4ae45a0fe9b4c8474349d0545a4a17922becddb83699983d6613ea6e89cca5a493e75c9fbf4b572825a5e8594112fcee29d0df44a9fff024c351f36dbb8b48bb32e2f81c98e05a470c49eac2bae2ffdc78e284470bd573312d61f9118efe309cb0b44902b8e84d14fcb47d4f014c094c427a7efc2f61e57e6e5f1946dcb54b3ed0ef184c8670bad382bb4671680553df728b6b9c5136897e7cd3c6138ba66a1ffa92712f2", @ANYRES32=r0, @ANYBLOB="000000f5ffffff00b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601040000000000000038dbe2b50205000100070000005a07317d7e836a3b4e1d9012aad967aabcf6d5944cec21ba34ca02e6a500662cb6e1f2f564961ae4479749f729fd4cbb70e88dbfbd379f34027d78f12925a2d6b4ec5da8539665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e3453a7b706369d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x2, 0x0, 0x2, 0x80000001, 0x200, 0x0, 0xfffffffffffffff7, 0x80, 0x0, 0x0, 0x2, 0x0, 0x393, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfc83, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.12447263s ago: executing program 0 (id=1375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) close(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00\t'], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) 888.420079ms ago: executing program 2 (id=1382): r0 = socket(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2a, 0x1, 0x1}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000280)="681e585d2cfce4323e8307880df6506a4b86daeb5f8094505e697a6ea88d11844745e01a1c58908e9b27fd21893de59bfcd2d27dc1882e35c98021fbe5cbc7b3a363b4077da023467d137c4d066c5a612e72164f7387d29ad7c1c349334aa5c132a2da466270fc7e466bdef511e3debeaee51bf5b1c1916aeb42550df0269d13d9edcf009f30a91f65145bc862f8660cd6cf44489e583e324d3383f7b83370f95920401ea8834c968b3ef884be28e48e90d4ee845b0bb075a159949f71107b5c811095160ebde2a331d2bea884a12ef67b33c0d43f", 0xd5}], 0x1, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x1418, 0x10}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x85c3}, 0x1}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x517043, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x115000, 0x10000, 0x0, 0x1, 0x401, 0x20005, 0x4b, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b80000000000019078ac1414bbac1414bb0400907800000000470000000000000700880000ffffffffe0000001071300e0000002e00000010a01010000000000440c00000000000000000000009404000000864c00000000010813b7978fba810012e3f6bacc9c000000009323002b0e675600126b7b4a1094252042261c433e64e50220000581e51100088d916f030847000533c6500008bb6c67eb17fb374100000000000000000000ac1414aa0000000c000000"], 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'netdevsim0\x00', 0x8000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001280)}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 715.516503ms ago: executing program 2 (id=1384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 696.109604ms ago: executing program 2 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0x60}}, 0x0) 683.779415ms ago: executing program 3 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 656.555007ms ago: executing program 2 (id=1387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00\t'], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) 655.791977ms ago: executing program 3 (id=1388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800080000008111be00"/29], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="8ed9b37139c08d234d402366e187b2396bd1afce167c280705b520403586c3b06e5c6e9c5c7baf032f3a1e51b5fc3f062cd406e4a9c66eee286399be1d910fbdaa3a6c4d09", 0x45}, {&(0x7f0000000180)="51f4aba4e71e689356936573deefbae140bd9f1fd87d2d44a4a7b695d1e56d2fa62396cfdce8043e513006802b37e005dae1c7c05444095bef5a3eec18df01a99329893e95a984616b5f0f0117082f51036f4a1d014a4667de75612e32a215b7320dea35fd592a304ab24e6f4ba7a5455ae9e4c969ed050d8b", 0x79}, {&(0x7f0000000200)="90eda36d3fa7a12735fbdb179c576b13f60152fd9cfd553dd63ab498f03b7d89b32220e525ad01cc7d3ad581da5c0afec20119505a371e38b189f849", 0x3c}, {&(0x7f0000000240)="3f9129859f45cc27b78d9fe32d2fa865cbf302ae063afac155f24e6619f4a75981c2dc0905aed68b6f7551af6790629fdf8cb50874ee35a1e2be4d9a", 0x3c}, {&(0x7f0000000280)="fe1cd82dc4682aeed08bbe11b996f2356a682977417f58f753f89d13506c9a6114be971a9e7d14237bda80ff1ea9cb0e4d43b06ffd03a3fd31c741f6fb0f7daae33ed0ccc5d69e45ff95da741a23a093506ead848b5e4b861547", 0x5a}, {&(0x7f0000000300)="e2b4b1401e668a6155009672adad27f79e1e1ed04b24bcb29fe09d9d12b387d3258aa84226da90bbd6338f361e9c16ad746a706d789dec0c07f878b00c79d98a8b350e6e64a54ed6a04225bfa1310829c18520e0500d47e390141323f8dfb212e0cf706d75a187e91d42507813e501ffbdb1bc5852a9d9756aecb0607a362371a9113f25", 0x84}, {&(0x7f00000003c0)="b759cde730254a0d018254b324285bf67b713b5ec112b7521316b0bfbd894f984fec333b05e67f13f756de35c5e7cf6f7c2ad53c0412547156486fa5a7a328b69a8fbf7b5d3580504cbc3e4a2f2b3bbf22a4333463b16144af8d0639aba9be5f722d3ec24ee7c481fd28e3838e8c053fbbed3938031d26ea32c45d0ce059ef7bfedd53f72bfc6624c9da7519251e0e206ba2139fb54b2ada6c9b46d5b3a13091eb59c2776d7afab7c5255591286e5dba9696b7fa4f8a62a5729dcea95c86589e95a03182b746b5fe3bf5eb440f856dd49fd9108c42c0ec", 0xd7}], 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="80000000000000002900000036000000000c0000000000000720000000000605ff0007000000000000003d901d6f000000000104010000000000c910fc01000000000000000000000000000007280000000208090000f5ffffffffffffffffffff7f0000000003000000000000000e000000000000000502ffb6000000000000"], 0x80}, 0x4048084) 642.780138ms ago: executing program 0 (id=1389): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000700005383fa010cc5be00000000000000001812000093805e74d85f32b082a11e314e97c7ca3c10780f625b50473a12b93dc3fe9ee8d55454269b1f61f0af50c4ae45a0fe9b4c8474349d0545a4a17922becddb83699983d6613ea6e89cca5a493e75c9fbf4b572825a5e8594112fcee29d0df44a9fff024c351f36dbb8b48bb32e2f81c98e05a470c49eac2bae2ffdc78e284470bd573312d61f9118efe309cb0b44902b8e84d14fcb47d4f014c094c427a7efc2f61e57e6e5f1946dcb54b3ed0ef184c8670bad382bb4671680553df728b6b9c5136897e7cd3c6138ba66a1ffa92712f2", @ANYRES32=r0, @ANYBLOB="000000f5ffffff00b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601040000000000000038dbe2b50205000100070000005a07317d7e836a3b4e1d9012aad967aabcf6d5944cec21ba34ca02e6a500662cb6e1f2f564961ae4479749f729fd4cbb70e88dbfbd379f34027d78f12925a2d6b4ec5da8539665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e3453a7b706369d, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0x100000000, 0x2, 0x0, 0x2, 0x80000001, 0x200, 0x0, 0xfffffffffffffff7, 0x80, 0x0, 0x0, 0x2, 0x0, 0x393, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfc83, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 548.015796ms ago: executing program 2 (id=1390): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000900)={{0x80}, {}, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000400)=""/198}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_type(r3, &(0x7f0000000700), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000b80)={0x108, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26e15b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26a48db1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a5fda0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x108dc5b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc26}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1280be0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a81}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x108}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 531.913217ms ago: executing program 3 (id=1391): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x8, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(0xffffffffffffffff, 0x1d3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c3e42, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 529.147577ms ago: executing program 2 (id=1392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) r3 = dup2(r2, r2) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='source', 0x0, r2) socket$inet6(0xa, 0x802, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3fe}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, 0x0, 0x101442, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='rcu_stall_warning\x00', r6}, 0x18) r7 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x3, 0x9) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001240)={0x0, 0xb0}, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffd}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001100010027bd7000fddbdf2500000000", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) 479.422021ms ago: executing program 3 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 409.675427ms ago: executing program 3 (id=1394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x44830}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x400000008000f28, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0x2, r6, 0x0, 0x8000000}, 0x38) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x44008010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) write$binfmt_script(r8, &(0x7f0000000200)={'#! ', './file0'}, 0xb) 325.517653ms ago: executing program 4 (id=1395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x0) 270.143378ms ago: executing program 4 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000ea0b0000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) unshare(0x26020480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x64000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r8, 0x3309) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x29, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xf, 0x6, &(0x7f0000000400)=""/6, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r6, r6, r6, r6, r6], &(0x7f0000000680)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x5, 0x9, 0x8}, {0x3, 0x4, 0xf, 0x8}, {0x3, 0x5, 0xe, 0x2}, {0x5, 0x4, 0x4, 0x4}, {0x3, 0x2, 0xc, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r9, 0x4b41, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e}, 0x20) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73060000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 161.399347ms ago: executing program 4 (id=1397): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x8000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f00000002c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r9, r9) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r10, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x2000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='siw\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0xb, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) pidfd_send_signal(r4, 0x0, &(0x7f0000000400)={0x10, 0x9, 0x2}, 0x0) 61.638165ms ago: executing program 3 (id=1398): r0 = socket(0x15, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) sendmsg$qrtr(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2a, 0x1, 0x1}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000280)="681e585d2cfce4323e8307880df6506a4b86daeb5f8094505e697a6ea88d11844745e01a1c58908e9b27fd21893de59bfcd2d27dc1882e35c98021fbe5cbc7b3a363b4077da023467d137c4d066c5a612e72164f7387d29ad7c1c349334aa5c132a2da466270fc7e466bdef511e3debeaee51bf5b1c1916aeb42550df0269d13d9edcf009f30a91f65145bc862f8660cd6cf44489e583e324d3383f7b83370f95920401ea8834c968b3ef884be28e48e90d4ee845b0bb075a159949f71107b5c811095160ebde2a331d2bea884a12ef67b33c0d43f", 0xd5}], 0x1, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x1418, 0x10}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x85c3}, 0x1}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x517043, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x115000, 0x10000, 0x0, 0x1, 0x401, 0x20005, 0x4b, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0xc6, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b80000000000019078ac1414bbac1414bb0400907800000000470000000000000700880000ffffffffe0000001071300e0000002e00000010a01010000000000440c00000000000000000000009404000000864c00000000010813b7978fba810012e3f6bacc9c000000009323002b0e675600126b7b4a1094252042261c433e64e50220000581e51100088d916f030847000533c6500008bb6c67eb17fb374100000000000000000000ac1414aa0000000c000000"], 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'netdevsim0\x00', 0x8000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001280)}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 61.055404ms ago: executing program 5 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 53.328265ms ago: executing program 5 (id=1400): r0 = syz_open_dev$usbfs(&(0x7f0000000500), 0x8, 0x10100) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000005c0)=0x9) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000280)={0x2, 0xe28, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x17}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa58fb7020000000000086b3c347189161f707000b703000000000000850000002d00000095098a70e2300377ae873b2cb8adfed005adc79b690645144c1590293928bae75dbea0987e21b4af6eb655a68b6686300ce63c9f64bcae61c70596cd6c085320a1e8c4"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r6, @ANYBLOB="0000ea0000000000b7030000000000003b3849e6cb0b85000000c5060000b7000020cc5576bc245a687e96d720b997b5efed000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1000}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = dup2(r10, r10) fcntl$setlease(r8, 0x400, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000044abfd5eff0000000000000000400000deb685763fa579290c2580bf76878ce39dac178964c352d31c4ea092e349399af47b3c4809d8c4e744343fb8672197856fca00"/84], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSUSAGE(r10, 0x4018480c, &(0x7f00000004c0)={0x3, 0x100, 0xfa, 0x9, 0x8, 0x4}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r11) 17.354108ms ago: executing program 5 (id=1401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00\x00\x00\x00\t'], 0x48}, 0x1, 0x0, 0x0, 0x4044084}, 0x8080) 0s ago: executing program 4 (id=1402): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x5, 0xc, &(0x7f0000001400)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000040)=0x1, 0x4) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000000), 0x4) (async) read(r3, &(0x7f0000000100)=""/126, 0x7e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050081}, 0x4040805) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'dummy0\x00'}) (async) timer_settime(r4, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) (async) close(r0) (async) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t pid=5487 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 85.711790][ T5492] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 85.747537][ T5488] Process accounting resumed [ 85.893247][ T5507] validate_nla: 5 callbacks suppressed [ 85.893261][ T5507] netlink: 'syz.3.547': attribute type 21 has an invalid length. [ 85.939789][ T5509] loop2: detected capacity change from 0 to 1024 [ 85.943379][ T5507] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 85.953846][ T5507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.547'. [ 85.970829][ T5509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.996368][ T5509] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.019770][ T5509] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 86.042324][ T5509] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 86.054738][ T5509] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.054738][ T5509] [ 86.064377][ T5509] EXT4-fs (loop2): Total free blocks count 0 [ 86.070446][ T5509] EXT4-fs (loop2): Free/Dirty block details [ 86.076328][ T5509] EXT4-fs (loop2): free_blocks=4293918720 [ 86.082129][ T5509] EXT4-fs (loop2): dirty_blocks=16 [ 86.087339][ T5509] EXT4-fs (loop2): Block reservation details [ 86.093338][ T5509] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 86.122733][ T5509] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.548: lblock 1 mapped to illegal pblock 1 (length 3) [ 86.138481][ T5509] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 86.211625][ T5509] syz.2.548 (5509) used greatest stack depth: 9896 bytes left [ 86.338749][ T3372] usb usb8-port1: attempt power cycle [ 86.418906][ T5527] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 86.568614][ T5529] netlink: 204 bytes leftover after parsing attributes in process `syz.3.555'. [ 86.631085][ T5539] netlink: 'syz.3.559': attribute type 21 has an invalid length. [ 86.642891][ T5539] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 86.650634][ T5539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.559'. [ 86.803246][ T5543] netlink: 204 bytes leftover after parsing attributes in process `syz.3.561'. [ 86.883224][ T5547] netlink: 204 bytes leftover after parsing attributes in process `syz.4.562'. [ 87.306671][ T5579] netlink: 204 bytes leftover after parsing attributes in process `syz.3.573'. [ 87.469275][ T5586] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 88.218588][ T3372] usb usb8-port1: unable to enumerate USB device [ 88.614153][ T5621] netlink: 204 bytes leftover after parsing attributes in process `syz.4.587'. [ 88.767037][ T5625] netlink: 204 bytes leftover after parsing attributes in process `syz.0.592'. [ 88.909829][ T5631] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 88.924050][ T5631] bond1: entered promiscuous mode [ 88.937110][ T5633] loop4: detected capacity change from 0 to 2048 [ 88.973797][ T5631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.991325][ T5633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.017474][ T5635] team0 (unregistering): Port device team_slave_0 removed [ 89.031821][ T5635] team0 (unregistering): Port device team_slave_1 removed [ 89.041329][ T5633] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.097785][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.142637][ T5640] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.362817][ T5652] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 89.470069][ T5648] netlink: 204 bytes leftover after parsing attributes in process `syz.0.604'. [ 89.888866][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 89.888883][ T29] audit: type=1326 audit(1755287870.804:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6012335ba7 code=0x7ffc0000 [ 89.919972][ T29] audit: type=1326 audit(1755287870.834:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60122dadd9 code=0x7ffc0000 [ 89.943263][ T29] audit: type=1326 audit(1755287870.834:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6012335ba7 code=0x7ffc0000 [ 89.966455][ T29] audit: type=1326 audit(1755287870.834:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60122dadd9 code=0x7ffc0000 [ 89.989776][ T29] audit: type=1326 audit(1755287870.834:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f601233ebe9 code=0x7ffc0000 [ 90.013247][ T29] audit: type=1326 audit(1755287870.904:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6012335ba7 code=0x7ffc0000 [ 90.036490][ T29] audit: type=1326 audit(1755287870.904:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60122dadd9 code=0x7ffc0000 [ 90.059798][ T29] audit: type=1326 audit(1755287870.904:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f601233ebe9 code=0x7ffc0000 [ 90.083083][ T29] audit: type=1326 audit(1755287870.914:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6012335ba7 code=0x7ffc0000 [ 90.106288][ T29] audit: type=1326 audit(1755287870.914:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60122dadd9 code=0x7ffc0000 [ 90.293668][ T5667] loop4: detected capacity change from 0 to 2048 [ 90.320285][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.332840][ T5667] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.357420][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.418301][ T3479] usb usb8-port1: attempt power cycle [ 90.531819][ T5682] syzkaller1: entered promiscuous mode [ 90.537326][ T5682] syzkaller1: entered allmulticast mode [ 91.457528][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.480020][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.597319][ T5689] Set syz1 is full, maxelem 65536 reached [ 91.864104][ T5696] netlink: 204 bytes leftover after parsing attributes in process `syz.1.624'. [ 92.288255][ T3479] usb usb8-port1: unable to enumerate USB device [ 92.296247][ T5622] hub 8-0:1.0: USB hub found [ 92.301041][ T5622] hub 8-0:1.0: 8 ports detected [ 92.347789][ T5716] FAULT_INJECTION: forcing a failure. [ 92.347789][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 92.360532][ T5716] CPU: 1 UID: 0 PID: 5716 Comm: syz.3.632 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 92.360557][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.360572][ T5716] Call Trace: [ 92.360577][ T5716] [ 92.360584][ T5716] __dump_stack+0x1d/0x30 [ 92.360604][ T5716] dump_stack_lvl+0xe8/0x140 [ 92.360665][ T5716] dump_stack+0x15/0x1b [ 92.360682][ T5716] should_fail_ex+0x265/0x280 [ 92.360703][ T5716] should_failslab+0x8c/0xb0 [ 92.360773][ T5716] __kvmalloc_node_noprof+0x123/0x4e0 [ 92.360796][ T5716] ? traverse+0x9d/0x3a0 [ 92.360823][ T5716] traverse+0x9d/0x3a0 [ 92.360919][ T5716] seq_read_iter+0x853/0x940 [ 92.360945][ T5716] ? _parse_integer_limit+0x170/0x190 [ 92.360970][ T5716] kernfs_fop_read_iter+0xc4/0x300 [ 92.360999][ T5716] ? __import_iovec+0x321/0x540 [ 92.361038][ T5716] do_iter_readv_writev+0x49c/0x540 [ 92.361060][ T5716] vfs_readv+0x1ea/0x690 [ 92.361091][ T5716] __x64_sys_preadv+0xfd/0x1c0 [ 92.361119][ T5716] x64_sys_call+0x282a/0x2ff0 [ 92.361140][ T5716] do_syscall_64+0xd2/0x200 [ 92.361166][ T5716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.361230][ T5716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.361252][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.361356][ T5716] RIP: 0033:0x7fc6cf95ebe9 [ 92.361369][ T5716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.361382][ T5716] RSP: 002b:00007fc6ce3bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 92.361407][ T5716] RAX: ffffffffffffffda RBX: 00007fc6cfb85fa0 RCX: 00007fc6cf95ebe9 [ 92.361418][ T5716] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000005 [ 92.361428][ T5716] RBP: 00007fc6ce3bf090 R08: 00000000000000cb R09: 0000000000000000 [ 92.361438][ T5716] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 92.361449][ T5716] R13: 00007fc6cfb86038 R14: 00007fc6cfb85fa0 R15: 00007ffe9bb73a58 [ 92.361494][ T5716] [ 92.627110][ T5725] loop3: detected capacity change from 0 to 2048 [ 92.638881][ T5720] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 92.686344][ T5731] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.692769][ T5731] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.710207][ T5731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.638'. [ 92.751281][ T5725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.793826][ T5725] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.870433][ T5723] netlink: 204 bytes leftover after parsing attributes in process `syz.2.635'. [ 92.884236][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.938993][ T5742] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 92.961281][ T5746] syzkaller1: entered promiscuous mode [ 92.966776][ T5746] syzkaller1: entered allmulticast mode [ 93.064818][ T5762] netlink: 'syz.4.651': attribute type 21 has an invalid length. [ 93.073350][ T5762] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 93.081001][ T5762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.651'. [ 93.106556][ T5764] syzkaller1: entered promiscuous mode [ 93.112114][ T5764] syzkaller1: entered allmulticast mode [ 93.214647][ T5766] Driver unsupported XDP return value 0 on prog (id 419) dev N/A, expect packet loss! [ 93.271702][ T5770] netlink: 204 bytes leftover after parsing attributes in process `syz.4.655'. [ 93.333917][ T5784] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.342877][ T5775] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 93.416089][ T5795] syz.1.666 uses obsolete (PF_INET,SOCK_PACKET) [ 93.424414][ T5795] FAULT_INJECTION: forcing a failure. [ 93.424414][ T5795] name failslab, interval 1, probability 0, space 0, times 0 [ 93.425084][ T5794] loop4: detected capacity change from 0 to 2048 [ 93.437049][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.1.666 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 93.437084][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.437095][ T5795] Call Trace: [ 93.437101][ T5795] [ 93.437107][ T5795] __dump_stack+0x1d/0x30 [ 93.437128][ T5795] dump_stack_lvl+0xe8/0x140 [ 93.437148][ T5795] dump_stack+0x15/0x1b [ 93.437163][ T5795] should_fail_ex+0x265/0x280 [ 93.437245][ T5795] ? alloc_super+0x3d/0x570 [ 93.437275][ T5795] should_failslab+0x8c/0xb0 [ 93.437347][ T5795] __kmalloc_cache_noprof+0x4c/0x320 [ 93.437448][ T5795] alloc_super+0x3d/0x570 [ 93.437478][ T5795] sget_fc+0x24e/0x6e0 [ 93.437504][ T5795] ? __pfx_set_anon_super_fc+0x10/0x10 [ 93.437525][ T5795] ? __pfx_mqueue_fill_super+0x10/0x10 [ 93.437611][ T5795] get_tree_nodev+0x2a/0x100 [ 93.437631][ T5795] mqueue_get_tree+0x63/0x90 [ 93.437654][ T5795] vfs_get_tree+0x57/0x1d0 [ 93.437720][ T5795] fc_mount_longterm+0x18/0xb0 [ 93.437749][ T5795] mq_init_ns+0x249/0x2f0 [ 93.437785][ T5795] copy_ipcs+0x214/0x3b0 [ 93.437808][ T5795] create_new_namespaces+0x12a/0x3d0 [ 93.437841][ T5795] unshare_nsproxy_namespaces+0xe8/0x120 [ 93.437871][ T5795] ksys_unshare+0x3d0/0x6d0 [ 93.437946][ T5795] ? ksys_write+0x15f/0x1a0 [ 93.437968][ T5795] __x64_sys_unshare+0x1f/0x30 [ 93.437994][ T5795] x64_sys_call+0x2911/0x2ff0 [ 93.438047][ T5795] do_syscall_64+0xd2/0x200 [ 93.438072][ T5795] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.438102][ T5795] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.438179][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.438199][ T5795] RIP: 0033:0x7f601233ebe9 [ 93.438212][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.438228][ T5795] RSP: 002b:00007f6010da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.438246][ T5795] RAX: ffffffffffffffda RBX: 00007f6012565fa0 RCX: 00007f601233ebe9 [ 93.438258][ T5795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c000080 [ 93.438337][ T5795] RBP: 00007f6010da7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.438350][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.438361][ T5795] R13: 00007f6012566038 R14: 00007f6012565fa0 R15: 00007ffd699ab5d8 [ 93.438381][ T5795] [ 93.455281][ T5797] vlan2: entered allmulticast mode [ 93.480464][ T5794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.694640][ T5794] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.731047][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.757055][ T5804] syzkaller1: entered promiscuous mode [ 93.762627][ T5804] syzkaller1: entered allmulticast mode [ 93.971630][ T5828] netlink: 204 bytes leftover after parsing attributes in process `syz.1.678'. [ 94.065872][ T5830] loop3: detected capacity change from 0 to 2048 [ 94.180718][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.192857][ T5830] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.235039][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.485220][ T5849] syzkaller1: entered promiscuous mode [ 94.491073][ T5849] syzkaller1: entered allmulticast mode [ 94.671728][ T5855] FAULT_INJECTION: forcing a failure. [ 94.671728][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 94.684371][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.1.690 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 94.684398][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.684409][ T5855] Call Trace: [ 94.684415][ T5855] [ 94.684464][ T5855] __dump_stack+0x1d/0x30 [ 94.684485][ T5855] dump_stack_lvl+0xe8/0x140 [ 94.684504][ T5855] dump_stack+0x15/0x1b [ 94.684520][ T5855] should_fail_ex+0x265/0x280 [ 94.684588][ T5855] should_failslab+0x8c/0xb0 [ 94.684612][ T5855] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 94.684639][ T5855] ? shmem_alloc_inode+0x34/0x50 [ 94.684662][ T5855] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 94.684763][ T5855] shmem_alloc_inode+0x34/0x50 [ 94.684832][ T5855] alloc_inode+0x3d/0x170 [ 94.684852][ T5855] new_inode+0x1d/0xe0 [ 94.684875][ T5855] shmem_get_inode+0x244/0x750 [ 94.684950][ T5855] ? __se_sys_memfd_create+0x1cc/0x590 [ 94.684973][ T5855] __shmem_file_setup+0x113/0x210 [ 94.685004][ T5855] shmem_file_setup+0x3b/0x50 [ 94.685095][ T5855] __se_sys_memfd_create+0x2c3/0x590 [ 94.685169][ T5855] __x64_sys_memfd_create+0x31/0x40 [ 94.685189][ T5855] x64_sys_call+0x2abe/0x2ff0 [ 94.685219][ T5855] do_syscall_64+0xd2/0x200 [ 94.685245][ T5855] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.685268][ T5855] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.685293][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.685361][ T5855] RIP: 0033:0x7f601233ebe9 [ 94.685376][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.685392][ T5855] RSP: 002b:00007f6010da6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 94.685411][ T5855] RAX: ffffffffffffffda RBX: 0000000000000a2f RCX: 00007f601233ebe9 [ 94.685425][ T5855] RDX: 00007f6010da6ef0 RSI: 0000000000000000 RDI: 00007f60123c27e8 [ 94.685437][ T5855] RBP: 0000200000001580 R08: 00007f6010da6bb7 R09: 00007f6010da6e40 [ 94.685455][ T5855] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 94.685521][ T5855] R13: 00007f6010da6ef0 R14: 00007f6010da6eb0 R15: 0000200000000140 [ 94.685541][ T5855] [ 94.922952][ T36] usb usb8-port1: attempt power cycle [ 95.036331][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 95.036346][ T29] audit: type=1400 audit(1755287848.951:7363): avc: denied { create } for pid=5859 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.061995][ T29] audit: type=1400 audit(1755287848.951:7364): avc: denied { ioctl } for pid=5859 comm="syz.1.693" path="socket:[11343]" dev="sockfs" ino=11343 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.086637][ T29] audit: type=1400 audit(1755287848.951:7365): avc: denied { write } for pid=5859 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 95.170014][ T5863] siw: device registration error -23 [ 95.220667][ T29] audit: type=1326 audit(1755287849.141:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.244060][ T29] audit: type=1326 audit(1755287849.141:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.267412][ T29] audit: type=1326 audit(1755287849.141:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.320807][ T29] audit: type=1326 audit(1755287849.211:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.344193][ T29] audit: type=1326 audit(1755287849.211:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.367771][ T29] audit: type=1326 audit(1755287849.211:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.391148][ T29] audit: type=1326 audit(1755287849.211:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5873 comm="syz.0.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 95.496763][ T5879] syzkaller1: entered promiscuous mode [ 95.502360][ T5879] syzkaller1: entered allmulticast mode [ 95.835921][ T5888] loop0: detected capacity change from 0 to 1764 [ 95.973690][ T5899] netlink: 'syz.0.706': attribute type 21 has an invalid length. [ 96.018149][ T5899] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 96.025813][ T5899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.706'. [ 96.240014][ T5905] loop0: detected capacity change from 0 to 2368 [ 96.246727][ T5905] iso9660: Bad value for 'check' [ 96.328532][ T5905] lo speed is unknown, defaulting to 1000 [ 96.348417][ T5905] lo speed is unknown, defaulting to 1000 [ 96.490045][ T5908] syzkaller1: entered promiscuous mode [ 96.495566][ T5908] syzkaller1: entered allmulticast mode [ 96.786218][ T36] usb usb8-port1: unable to enumerate USB device [ 96.844968][ T5917] loop4: detected capacity change from 0 to 1764 [ 97.171648][ T5913] Set syz1 is full, maxelem 65536 reached [ 97.247122][ T5931] loop2: detected capacity change from 0 to 2048 [ 97.302341][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.347057][ T5931] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.379915][ T5939] syzkaller1: entered promiscuous mode [ 97.385393][ T5939] syzkaller1: entered allmulticast mode [ 97.396626][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.037628][ T5954] netlink: 'syz.4.727': attribute type 1 has an invalid length. [ 98.048952][ T5954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 98.079895][ T5953] can0: slcan on ttyS3. [ 98.128261][ T5953] can0 (unregistered): slcan off ttyS3. [ 98.215069][ T5953] can0: slcan on ttyS3. [ 98.238648][ T5953] netlink: 'syz.4.727': attribute type 1 has an invalid length. [ 98.246306][ T5953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.727'. [ 98.359005][ T5952] can0 (unregistered): slcan off ttyS3. [ 98.626397][ T5992] netlink: 204 bytes leftover after parsing attributes in process `syz.2.728'. [ 98.939563][ T5998] netlink: 'syz.4.732': attribute type 13 has an invalid length. [ 99.058382][ T5998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.175819][ T5996] Set syz1 is full, maxelem 65536 reached [ 99.655633][ T6023] loop2: detected capacity change from 0 to 2048 [ 99.695324][ T6025] netlink: 'syz.4.743': attribute type 21 has an invalid length. [ 99.711458][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.714547][ T6025] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 99.731161][ T6025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.743'. [ 99.751719][ T6023] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.792718][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.899332][ T6034] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 99.912019][ T6031] loop4: detected capacity change from 0 to 2364 [ 99.964374][ T2990] udevd[2990]: worker [3563] terminated by signal 33 (Unknown signal 33) [ 99.986571][ T2990] udevd[2990]: worker [3563] failed while handling '/devices/virtual/block/loop4' [ 100.024062][ T6039] loop0: detected capacity change from 0 to 2048 [ 100.032403][ T2990] udevd[2990]: worker [3504] terminated by signal 33 (Unknown signal 33) [ 100.033481][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 100.051805][ T2990] udevd[2990]: worker [3504] failed while handling '/devices/virtual/block/loop4' [ 100.071747][ T2990] udevd[2990]: worker [3301] terminated by signal 33 (Unknown signal 33) [ 100.097499][ T2990] udevd[2990]: worker [3301] failed while handling '/devices/virtual/block/loop2' [ 100.118372][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.143948][ T2990] udevd[2990]: worker [3299] terminated by signal 33 (Unknown signal 33) [ 100.148148][ T6039] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.160390][ T2990] udevd[2990]: worker [3299] failed while handling '/devices/virtual/block/loop0' [ 100.208338][ T6052] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 100.260839][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.306093][ T6054] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 100.320590][ T6057] netlink: 'syz.2.755': attribute type 21 has an invalid length. [ 100.344534][ T6057] netlink: 'syz.2.755': attribute type 1 has an invalid length. [ 100.352276][ T6057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.755'. [ 100.381392][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 100.381405][ T29] audit: type=1326 audit(1755287827.293:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.410894][ T29] audit: type=1326 audit(1755287827.293:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.434263][ T29] audit: type=1326 audit(1755287827.293:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.469745][ T6059] loop0: detected capacity change from 0 to 2048 [ 100.483988][ T29] audit: type=1326 audit(1755287827.393:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.507297][ T29] audit: type=1326 audit(1755287827.393:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.576209][ T29] audit: type=1326 audit(1755287827.423:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.599481][ T29] audit: type=1326 audit(1755287827.453:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.622693][ T29] audit: type=1326 audit(1755287827.453:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.647334][ T29] audit: type=1326 audit(1755287827.453:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.670816][ T29] audit: type=1326 audit(1755287827.463:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2cfb7febe9 code=0x7ffc0000 [ 100.732213][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.754785][ T6059] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.783368][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.340728][ T6087] netlink: 'syz.4.764': attribute type 21 has an invalid length. [ 101.388090][ T6087] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 101.395757][ T6087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.764'. [ 102.184733][ T6101] netlink: 'syz.2.768': attribute type 21 has an invalid length. [ 102.201692][ T6101] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 102.209508][ T6101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.768'. [ 102.562658][ T6112] syzkaller1: entered promiscuous mode [ 102.568226][ T6112] syzkaller1: entered allmulticast mode [ 102.729231][ T6116] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 103.216210][ T6131] loop2: detected capacity change from 0 to 512 [ 103.677284][ T6136] loop0: detected capacity change from 0 to 2368 [ 103.704622][ T6136] iso9660: Bad value for 'check' [ 103.764034][ T6136] lo speed is unknown, defaulting to 1000 [ 103.775602][ T6136] lo speed is unknown, defaulting to 1000 [ 104.026824][ T6134] Set syz1 is full, maxelem 65536 reached [ 104.084615][ T6140] netlink: 204 bytes leftover after parsing attributes in process `syz.0.782'. [ 104.239856][ T6145] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 104.269144][ T6147] loop0: detected capacity change from 0 to 2048 [ 104.288385][ T36] usb usb8-port1: attempt power cycle [ 104.308587][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.343529][ T6147] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.370372][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.468873][ T6156] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 104.548186][ T6161] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 104.584320][ T6163] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 104.920799][ T6169] netlink: 204 bytes leftover after parsing attributes in process `syz.3.792'. [ 105.381575][ T6179] loop2: detected capacity change from 0 to 2048 [ 105.399765][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.412582][ T6179] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.435158][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.539313][ T6186] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 105.564152][ T6190] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 105.574431][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 105.574442][ T29] audit: type=1326 audit(1755287805.490:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.614411][ T29] audit: type=1326 audit(1755287805.490:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.637669][ T29] audit: type=1326 audit(1755287805.490:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.660966][ T29] audit: type=1326 audit(1755287805.490:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.684296][ T29] audit: type=1326 audit(1755287805.490:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.707602][ T29] audit: type=1326 audit(1755287805.490:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.730817][ T29] audit: type=1326 audit(1755287805.490:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.754181][ T29] audit: type=1326 audit(1755287805.490:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.777379][ T29] audit: type=1326 audit(1755287805.490:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 105.800740][ T29] audit: type=1326 audit(1755287805.490:8059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6187 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 106.201557][ T6188] Set syz1 is full, maxelem 65536 reached [ 106.291822][ T36] usb usb8-port1: unable to enumerate USB device [ 106.512083][ T6204] siw: device registration error -23 [ 106.608939][ T6200] Set syz1 is full, maxelem 65536 reached [ 106.649005][ T6206] netlink: 204 bytes leftover after parsing attributes in process `syz.2.808'. [ 106.739296][ T6220] loop2: detected capacity change from 0 to 2048 [ 106.790548][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 106.802980][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 106.815963][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.860636][ T6220] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.942318][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.022744][ T6248] netlink: 'syz.2.824': attribute type 21 has an invalid length. [ 107.048062][ T6248] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 107.055910][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.824'. [ 107.229557][ T6251] netlink: 204 bytes leftover after parsing attributes in process `syz.2.825'. [ 107.310076][ T6256] FAULT_INJECTION: forcing a failure. [ 107.310076][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 107.322966][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.2.827 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 107.322990][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.323000][ T6256] Call Trace: [ 107.323008][ T6256] [ 107.323015][ T6256] __dump_stack+0x1d/0x30 [ 107.323037][ T6256] dump_stack_lvl+0xe8/0x140 [ 107.323123][ T6256] dump_stack+0x15/0x1b [ 107.323191][ T6256] should_fail_ex+0x265/0x280 [ 107.323213][ T6256] should_failslab+0x8c/0xb0 [ 107.323269][ T6256] kmem_cache_alloc_node_noprof+0x57/0x320 [ 107.323295][ T6256] ? __alloc_skb+0x101/0x320 [ 107.323332][ T6256] __alloc_skb+0x101/0x320 [ 107.323381][ T6256] netlink_alloc_large_skb+0xba/0xf0 [ 107.323412][ T6256] netlink_sendmsg+0x3cf/0x6b0 [ 107.323435][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.323517][ T6256] __sock_sendmsg+0x145/0x180 [ 107.323582][ T6256] ____sys_sendmsg+0x31e/0x4e0 [ 107.323607][ T6256] ___sys_sendmsg+0x17b/0x1d0 [ 107.323662][ T6256] __x64_sys_sendmsg+0xd4/0x160 [ 107.323684][ T6256] x64_sys_call+0x191e/0x2ff0 [ 107.323704][ T6256] do_syscall_64+0xd2/0x200 [ 107.323730][ T6256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.323822][ T6256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.323841][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.323859][ T6256] RIP: 0033:0x7f91b787ebe9 [ 107.323871][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.323885][ T6256] RSP: 002b:00007f91b62e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.323910][ T6256] RAX: ffffffffffffffda RBX: 00007f91b7aa5fa0 RCX: 00007f91b787ebe9 [ 107.323923][ T6256] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 107.323936][ T6256] RBP: 00007f91b62e7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.323948][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.323959][ T6256] R13: 00007f91b7aa6038 R14: 00007f91b7aa5fa0 R15: 00007fffc0492df8 [ 107.323973][ T6256] [ 107.690108][ T6260] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 107.780277][ T6266] FAULT_INJECTION: forcing a failure. [ 107.780277][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 107.793031][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.0.832 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 107.793061][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.793074][ T6266] Call Trace: [ 107.793101][ T6266] [ 107.793109][ T6266] __dump_stack+0x1d/0x30 [ 107.793130][ T6266] dump_stack_lvl+0xe8/0x140 [ 107.793149][ T6266] dump_stack+0x15/0x1b [ 107.793165][ T6266] should_fail_ex+0x265/0x280 [ 107.793186][ T6266] should_failslab+0x8c/0xb0 [ 107.793218][ T6266] __kmalloc_noprof+0xa5/0x3e0 [ 107.793320][ T6266] ? io_cache_alloc_new+0x2a/0xb0 [ 107.793345][ T6266] ? __rcu_read_unlock+0x4f/0x70 [ 107.793365][ T6266] io_cache_alloc_new+0x2a/0xb0 [ 107.793393][ T6266] io_sendmsg_prep+0x2bb/0x3d0 [ 107.793418][ T6266] io_submit_sqes+0x5db/0x1050 [ 107.793446][ T6266] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 107.793467][ T6266] ? 0xffffffff81000000 [ 107.793481][ T6266] ? __rcu_read_unlock+0x4f/0x70 [ 107.793526][ T6266] ? get_pid_task+0x96/0xd0 [ 107.793547][ T6266] ? proc_fail_nth_write+0x13b/0x160 [ 107.793574][ T6266] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.793600][ T6266] ? vfs_write+0x7e8/0x960 [ 107.793650][ T6266] ? __rcu_read_unlock+0x4f/0x70 [ 107.793669][ T6266] ? __fget_files+0x184/0x1c0 [ 107.793694][ T6266] ? fput+0x8f/0xc0 [ 107.793723][ T6266] __x64_sys_io_uring_enter+0x78/0x90 [ 107.793746][ T6266] x64_sys_call+0x2de1/0x2ff0 [ 107.793767][ T6266] do_syscall_64+0xd2/0x200 [ 107.793793][ T6266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.793817][ T6266] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.793841][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.793936][ T6266] RIP: 0033:0x7f815611ebe9 [ 107.793951][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.793966][ T6266] RSP: 002b:00007f8154b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 107.793986][ T6266] RAX: ffffffffffffffda RBX: 00007f8156345fa0 RCX: 00007f815611ebe9 [ 107.793999][ T6266] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000005 [ 107.794011][ T6266] RBP: 00007f8154b87090 R08: 0000000000000000 R09: 0000000000000000 [ 107.794024][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.794116][ T6266] R13: 00007f8156346038 R14: 00007f8156345fa0 R15: 00007fffa6ad0998 [ 107.794135][ T6266] [ 108.116669][ T6264] netlink: 204 bytes leftover after parsing attributes in process `syz.2.831'. [ 108.203974][ T6276] loop0: detected capacity change from 0 to 2368 [ 108.215037][ T6276] iso9660: Bad value for 'check' [ 108.251149][ T6278] loop3: detected capacity change from 0 to 2048 [ 108.259689][ T6276] lo speed is unknown, defaulting to 1000 [ 108.265724][ T6276] lo speed is unknown, defaulting to 1000 [ 108.281487][ T6278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.305625][ T6278] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.411397][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.611187][ T6299] loop0: detected capacity change from 0 to 1024 [ 108.958247][ T3418] usb usb8-port1: attempt power cycle [ 109.234113][ T6324] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 109.354767][ T6314] Set syz1 is full, maxelem 65536 reached [ 109.439258][ T6333] loop0: detected capacity change from 0 to 2368 [ 109.445831][ T6333] iso9660: Bad value for 'check' [ 109.457896][ T6339] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 109.526306][ T6333] lo speed is unknown, defaulting to 1000 [ 109.538483][ T6333] lo speed is unknown, defaulting to 1000 [ 109.768759][ T6353] netlink: 204 bytes leftover after parsing attributes in process `syz.2.868'. [ 109.854888][ T6356] loop0: detected capacity change from 0 to 2048 [ 109.891322][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.911632][ T6356] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.936730][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.998033][ T6370] loop0: detected capacity change from 0 to 2048 [ 110.073160][ T6370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.097334][ T6374] loop2: detected capacity change from 0 to 2048 [ 110.098186][ T6370] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.148872][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.162166][ T6374] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.182002][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.234016][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.276822][ T6382] syzkaller1: entered promiscuous mode [ 110.282423][ T6382] syzkaller1: entered allmulticast mode [ 110.419805][ T6388] loop3: detected capacity change from 0 to 2048 [ 110.452037][ T6388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.477590][ T6386] loop2: detected capacity change from 0 to 2048 [ 110.488123][ T6388] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.511855][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.541211][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.587565][ T6386] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.634153][ T29] kauditd_printk_skb: 857 callbacks suppressed [ 110.634166][ T29] audit: type=1326 audit(1755287810.550:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.680309][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.709160][ T29] audit: type=1326 audit(1755287810.580:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.732714][ T29] audit: type=1326 audit(1755287810.580:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.756192][ T29] audit: type=1326 audit(1755287810.610:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.779614][ T29] audit: type=1326 audit(1755287810.610:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.803306][ T29] audit: type=1326 audit(1755287810.610:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.826550][ T29] audit: type=1326 audit(1755287810.610:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6406 comm="syz.3.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 110.858838][ T3418] usb usb8-port1: unable to enumerate USB device [ 110.878804][ T29] audit: type=1326 audit(1755287810.720:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 110.902178][ T29] audit: type=1326 audit(1755287810.720:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 110.925671][ T29] audit: type=1326 audit(1755287810.720:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6409 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 110.979623][ T6417] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 111.207060][ T6428] lo speed is unknown, defaulting to 1000 [ 111.214735][ T6445] netlink: 204 bytes leftover after parsing attributes in process `syz.3.901'. [ 111.215422][ T6428] lo speed is unknown, defaulting to 1000 [ 111.262251][ T3687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.309989][ T6428] chnl_net:caif_netlink_parms(): no params data found [ 111.342257][ T3687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.354329][ T6459] FAULT_INJECTION: forcing a failure. [ 111.354329][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 111.367067][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.3.908 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 111.367093][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.367103][ T6459] Call Trace: [ 111.367108][ T6459] [ 111.367115][ T6459] __dump_stack+0x1d/0x30 [ 111.367176][ T6459] dump_stack_lvl+0xe8/0x140 [ 111.367191][ T6459] dump_stack+0x15/0x1b [ 111.367205][ T6459] should_fail_ex+0x265/0x280 [ 111.367223][ T6459] should_failslab+0x8c/0xb0 [ 111.367246][ T6459] kmem_cache_alloc_noprof+0x50/0x310 [ 111.367273][ T6459] ? dst_alloc+0xbd/0x100 [ 111.367290][ T6459] ? __rcu_read_unlock+0x4f/0x70 [ 111.367382][ T6459] dst_alloc+0xbd/0x100 [ 111.367461][ T6459] ip_route_input_rcu+0xd88/0x1d00 [ 111.367491][ T6459] ? obj_cgroup_charge_account+0x122/0x1a0 [ 111.367521][ T6459] ? xas_load+0x413/0x430 [ 111.367609][ T6459] ? _raw_spin_unlock_bh+0x36/0x40 [ 111.367662][ T6459] ? ip_check_mc_rcu+0x208/0x220 [ 111.367806][ T6459] ip_route_input_noref+0x5f/0x90 [ 111.367842][ T6459] ip_rcv_finish_core+0x315/0xb40 [ 111.367899][ T6459] ip_rcv_finish+0x100/0x1c0 [ 111.367919][ T6459] ip_rcv+0x62/0x140 [ 111.367936][ T6459] ? __pfx_ip_rcv_finish+0x10/0x10 [ 111.367962][ T6459] ? __pfx_ip_rcv+0x10/0x10 [ 111.367976][ T6459] __netif_receive_skb+0xff/0x270 [ 111.368001][ T6459] ? tun_rx_batched+0xc7/0x430 [ 111.368038][ T6459] netif_receive_skb+0x4b/0x2e0 [ 111.368060][ T6459] ? tun_rx_batched+0xc7/0x430 [ 111.368087][ T6459] tun_rx_batched+0xfc/0x430 [ 111.368114][ T6459] tun_get_user+0x1eb6/0x2680 [ 111.368218][ T6459] ? ref_tracker_alloc+0x1f2/0x2f0 [ 111.368238][ T6459] tun_chr_write_iter+0x15e/0x210 [ 111.368263][ T6459] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.368291][ T6459] vfs_write+0x527/0x960 [ 111.368315][ T6459] ksys_write+0xda/0x1a0 [ 111.368415][ T6459] __x64_sys_write+0x40/0x50 [ 111.368433][ T6459] x64_sys_call+0x27fe/0x2ff0 [ 111.368451][ T6459] do_syscall_64+0xd2/0x200 [ 111.368475][ T6459] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.368519][ T6459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.368543][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.368563][ T6459] RIP: 0033:0x7fc6cf95d69f [ 111.368653][ T6459] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.368703][ T6459] RSP: 002b:00007fc6ce3bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.368721][ T6459] RAX: ffffffffffffffda RBX: 00007fc6cfb85fa0 RCX: 00007fc6cf95d69f [ 111.368734][ T6459] RDX: 000000000000003a RSI: 0000200000002100 RDI: 00000000000000c8 [ 111.368746][ T6459] RBP: 00007fc6ce3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.368759][ T6459] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 111.368770][ T6459] R13: 00007fc6cfb86038 R14: 00007fc6cfb85fa0 R15: 00007ffe9bb73a58 [ 111.368788][ T6459] [ 111.411334][ T3687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.684983][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.692220][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.702590][ T6428] bridge_slave_0: entered allmulticast mode [ 111.709323][ T6428] bridge_slave_0: entered promiscuous mode [ 111.718705][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.725775][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.733361][ T6428] bridge_slave_1: entered allmulticast mode [ 111.740043][ T6428] bridge_slave_1: entered promiscuous mode [ 111.758183][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.788984][ T3687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.814409][ T6464] loop0: detected capacity change from 0 to 8192 [ 111.832835][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.842373][ T6484] loop4: detected capacity change from 0 to 2368 [ 111.858775][ T6484] iso9660: Bad value for 'check' [ 111.897203][ T6490] loop2: detected capacity change from 0 to 2048 [ 111.911613][ T6428] team0: Port device team_slave_0 added [ 111.921664][ T6490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.921848][ T6428] team0: Port device team_slave_1 added [ 111.938580][ T6490] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.969670][ T3687] bridge_slave_1: left allmulticast mode [ 111.975330][ T3687] bridge_slave_1: left promiscuous mode [ 111.981071][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.996758][ T3687] bridge_slave_0: left allmulticast mode [ 112.002490][ T3687] bridge_slave_0: left promiscuous mode [ 112.008120][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.017829][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.130555][ T3687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.140811][ T3687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.150623][ T3687] bond0 (unregistering): Released all slaves [ 112.162050][ T6484] lo speed is unknown, defaulting to 1000 [ 112.174876][ T6484] lo speed is unknown, defaulting to 1000 [ 112.180993][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.187915][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.213850][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.244543][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.251601][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.277812][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.329688][ T3687] hsr_slave_0: left promiscuous mode [ 112.342151][ T3687] hsr_slave_1: left promiscuous mode [ 112.349166][ T3687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.356601][ T3687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.369412][ T3687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.376869][ T3687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.404568][ T3687] veth1_macvtap: left promiscuous mode [ 112.416802][ T3687] veth0_macvtap: left promiscuous mode [ 112.427116][ T3687] veth1_vlan: left promiscuous mode [ 112.436079][ T3687] veth0_vlan: left promiscuous mode [ 112.436500][ T6528] netlink: 'syz.0.927': attribute type 21 has an invalid length. [ 112.504489][ T3687] team0 (unregistering): Port device team_slave_1 removed [ 112.514846][ T3687] team0 (unregistering): Port device team_slave_0 removed [ 112.564284][ T6428] hsr_slave_0: entered promiscuous mode [ 112.567749][ T6530] netlink: 'syz.2.928': attribute type 21 has an invalid length. [ 112.575489][ T6428] hsr_slave_1: entered promiscuous mode [ 112.583607][ T6428] debugfs: 'hsr0' already exists in 'hsr' [ 112.589425][ T6428] Cannot create hsr debugfs directory [ 112.597462][ T6528] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 112.605120][ T6528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'. [ 112.623505][ T6530] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 112.631311][ T6530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.928'. [ 112.713774][ T6539] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 112.803226][ T6553] loop4: detected capacity change from 0 to 1024 [ 112.831124][ T6553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.848777][ T6428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.858156][ T6428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.866866][ T6537] siw: device registration error -23 [ 112.869305][ T6428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.894457][ T6428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.925400][ T6553] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.936: Allocating blocks 385-513 which overlap fs metadata [ 112.940041][ T6553] EXT4-fs (loop4): pa ffff8881071f00e0: logic 16, phys. 129, len 24 [ 112.948065][ T6553] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 112.959665][ T6553] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1 [ 112.971763][ T6553] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.971763][ T6553] [ 113.012048][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.022342][ T6553] syz.4.936 (6553) used greatest stack depth: 9064 bytes left [ 113.048299][ T3308] Trying to write to read-only block-device loop4 [ 113.060051][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.075034][ T6579] netlink: 204 bytes leftover after parsing attributes in process `syz.2.937'. [ 113.087853][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.099085][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.106132][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.141304][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.148382][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.174278][ T6586] netlink: 204 bytes leftover after parsing attributes in process `syz.0.938'. [ 113.183419][ T6428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.193770][ T6428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.289803][ T6598] netlink: 'syz.0.940': attribute type 21 has an invalid length. [ 113.305163][ T6598] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 113.312925][ T6598] netlink: 132 bytes leftover after parsing attributes in process `syz.0.940'. [ 113.332117][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.406989][ T6615] loop2: detected capacity change from 0 to 2048 [ 113.434790][ T6615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.468579][ T6615] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.507141][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.561239][ T6639] netlink: 'syz.2.947': attribute type 21 has an invalid length. [ 113.569619][ T6639] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 113.577277][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.947'. [ 113.606408][ T6428] veth0_vlan: entered promiscuous mode [ 113.619009][ T6428] veth1_vlan: entered promiscuous mode [ 113.644881][ T6428] veth0_macvtap: entered promiscuous mode [ 113.654295][ T6428] veth1_macvtap: entered promiscuous mode [ 113.673286][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.690480][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.703433][ T3640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.718450][ T3631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.742999][ T3631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.760374][ T3631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.880928][ T6649] netlink: 204 bytes leftover after parsing attributes in process `syz.3.950'. [ 113.946423][ T6679] loop3: detected capacity change from 0 to 256 [ 114.048994][ T6685] loop5: detected capacity change from 0 to 2048 [ 114.079403][ T6685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.091899][ T6685] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.115003][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.621908][ T6689] Set syz1 is full, maxelem 65536 reached [ 114.804230][ T6721] FAULT_INJECTION: forcing a failure. [ 114.804230][ T6721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.817407][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.2.970 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 114.817434][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.817446][ T6721] Call Trace: [ 114.817453][ T6721] [ 114.817460][ T6721] __dump_stack+0x1d/0x30 [ 114.817479][ T6721] dump_stack_lvl+0xe8/0x140 [ 114.817559][ T6721] dump_stack+0x15/0x1b [ 114.817576][ T6721] should_fail_ex+0x265/0x280 [ 114.817603][ T6721] should_fail+0xb/0x20 [ 114.817617][ T6721] should_fail_usercopy+0x1a/0x20 [ 114.817635][ T6721] strncpy_from_user+0x25/0x230 [ 114.817687][ T6721] ? __fget_files+0x184/0x1c0 [ 114.817710][ T6721] __se_sys_request_key+0x57/0x290 [ 114.817732][ T6721] ? fput+0x8f/0xc0 [ 114.817820][ T6721] __x64_sys_request_key+0x55/0x70 [ 114.817839][ T6721] x64_sys_call+0x1d98/0x2ff0 [ 114.817857][ T6721] do_syscall_64+0xd2/0x200 [ 114.817978][ T6721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.818003][ T6721] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.818023][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.818040][ T6721] RIP: 0033:0x7f91b787ebe9 [ 114.818052][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.818069][ T6721] RSP: 002b:00007f91b62e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 114.818087][ T6721] RAX: ffffffffffffffda RBX: 00007f91b7aa5fa0 RCX: 00007f91b787ebe9 [ 114.818099][ T6721] RDX: 0000200000000740 RSI: 0000200000000780 RDI: 0000200000000240 [ 114.818183][ T6721] RBP: 00007f91b62e7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.818194][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.818204][ T6721] R13: 00007f91b7aa6038 R14: 00007f91b7aa5fa0 R15: 00007fffc0492df8 [ 114.818222][ T6721] [ 115.004778][ T6723] loop5: detected capacity change from 0 to 512 [ 115.071790][ T6723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.132505][ T6723] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.168513][ T6723] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.516771][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'. [ 115.538266][ T3372] usb usb8-port1: attempt power cycle [ 115.543091][ T6738] syzkaller1: entered promiscuous mode [ 115.549377][ T6738] syzkaller1: entered allmulticast mode [ 115.644419][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 115.644431][ T29] audit: type=1326 audit(1755287797.561:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b7875ba7 code=0x7ffc0000 [ 115.716466][ T29] audit: type=1326 audit(1755287797.591:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b781add9 code=0x7ffc0000 [ 115.739824][ T29] audit: type=1326 audit(1755287797.591:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b7875ba7 code=0x7ffc0000 [ 115.763085][ T29] audit: type=1326 audit(1755287797.591:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b781add9 code=0x7ffc0000 [ 115.786340][ T29] audit: type=1326 audit(1755287797.591:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 115.809668][ T29] audit: type=1326 audit(1755287797.601:9799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b7875ba7 code=0x7ffc0000 [ 115.832893][ T29] audit: type=1326 audit(1755287797.601:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b781add9 code=0x7ffc0000 [ 115.856098][ T29] audit: type=1326 audit(1755287797.601:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f91b787ebe9 code=0x7ffc0000 [ 115.879401][ T29] audit: type=1326 audit(1755287797.611:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b7875ba7 code=0x7ffc0000 [ 115.902591][ T29] audit: type=1326 audit(1755287797.611:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91b781add9 code=0x7ffc0000 [ 115.989215][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.039108][ T6746] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 116.073006][ T6756] loop5: detected capacity change from 0 to 2048 [ 116.089359][ T6756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.103182][ T6756] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.144232][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.155816][ T6763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.166235][ T6763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.193273][ T6766] loop0: detected capacity change from 0 to 256 [ 116.221161][ T6765] lo speed is unknown, defaulting to 1000 [ 116.240587][ T6765] lo speed is unknown, defaulting to 1000 [ 116.250982][ T6768] netlink: 88 bytes leftover after parsing attributes in process `syz.5.985'. [ 116.259944][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.985'. [ 116.271201][ T6763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.281498][ T6763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.321286][ T6769] lo speed is unknown, defaulting to 1000 [ 116.335042][ T6769] lo speed is unknown, defaulting to 1000 [ 116.437661][ T6763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.448038][ T6763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.510240][ T6774] siw: device registration error -23 [ 116.607548][ T6755] Set syz1 is full, maxelem 65536 reached [ 116.623434][ T6763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.630605][ T6782] netlink: 'syz.5.990': attribute type 21 has an invalid length. [ 116.633830][ T6763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.658105][ T6782] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 116.665757][ T6782] netlink: 132 bytes leftover after parsing attributes in process `syz.5.990'. [ 116.735032][ T3659] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.743344][ T3659] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.762231][ T3659] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.770487][ T3659] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.785567][ T3659] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.793852][ T3659] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.805361][ T3659] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.813610][ T3659] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.003255][ T6808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.023966][ T6806] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 117.055392][ T6815] loop3: detected capacity change from 0 to 256 [ 117.065886][ T6808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.118935][ T6822] siw: device registration error -23 [ 117.130687][ T6808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.180808][ T6808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.245551][ T3687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.268937][ T3687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.283854][ T3687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301221][ T3687] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.390697][ T6840] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 117.463105][ T6854] loop5: detected capacity change from 0 to 2048 [ 117.480833][ T6854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.498407][ T3372] usb usb8-port1: unable to enumerate USB device [ 117.527989][ T6655] hub 8-0:1.0: USB hub found [ 117.537410][ T6655] hub 8-0:1.0: 8 ports detected [ 117.568358][ T6854] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.617304][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.637374][ T6864] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 117.794725][ T6872] loop5: detected capacity change from 0 to 512 [ 118.033095][ T6872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.077107][ T6872] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.125862][ T6872] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.1026: corrupted xattr block 19: overlapping e_value [ 118.188360][ T6872] EXT4-fs (loop5): Remounting filesystem read-only [ 118.194892][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 118.229531][ T6872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 118.241721][ T6880] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1027'. [ 118.283678][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.379464][ T6884] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 118.463805][ T6890] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1030'. [ 118.660158][ T6902] loop5: detected capacity change from 0 to 2368 [ 118.687426][ T6902] iso9660: Bad value for 'check' [ 118.733335][ T6902] lo speed is unknown, defaulting to 1000 [ 118.740634][ T6902] lo speed is unknown, defaulting to 1000 [ 118.923418][ T6914] netlink: 'syz.5.1041': attribute type 21 has an invalid length. [ 118.931341][ T6914] netlink: 'syz.5.1041': attribute type 1 has an invalid length. [ 118.939260][ T6914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1041'. [ 118.965640][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 119.070327][ T6918] loop5: detected capacity change from 0 to 2368 [ 119.087016][ T6918] iso9660: Bad value for 'check' [ 119.107220][ T6918] lo speed is unknown, defaulting to 1000 [ 119.113782][ T6918] lo speed is unknown, defaulting to 1000 [ 119.348405][ T6942] loop5: detected capacity change from 0 to 2368 [ 119.356550][ T6942] iso9660: Bad value for 'check' [ 119.398350][ T6942] lo speed is unknown, defaulting to 1000 [ 119.404501][ T6942] lo speed is unknown, defaulting to 1000 [ 119.418612][ T3372] usb usb8-port1: attempt power cycle [ 119.669355][ T6956] netlink: 'syz.3.1054': attribute type 21 has an invalid length. [ 119.681594][ T6956] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 119.689469][ T6956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1054'. [ 119.733932][ T6960] loop3: detected capacity change from 0 to 2048 [ 119.759868][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.809647][ T6960] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.867543][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.995914][ T6977] loop5: detected capacity change from 0 to 2368 [ 120.028559][ T6977] iso9660: Bad value for 'check' [ 120.093359][ T6977] lo speed is unknown, defaulting to 1000 [ 120.100488][ T6977] lo speed is unknown, defaulting to 1000 [ 120.176855][ T6985] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.488382][ T7001] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 120.596702][ T7006] siw: device registration error -23 [ 120.660612][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 120.660625][ T29] audit: type=1326 audit(1755287766.578:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.712007][ T29] audit: type=1326 audit(1755287766.608:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.735631][ T29] audit: type=1326 audit(1755287766.608:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.759153][ T29] audit: type=1326 audit(1755287766.608:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.782639][ T29] audit: type=1326 audit(1755287766.608:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.806192][ T29] audit: type=1326 audit(1755287766.608:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.829690][ T29] audit: type=1326 audit(1755287766.628:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.853266][ T29] audit: type=1326 audit(1755287766.628:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.876823][ T29] audit: type=1326 audit(1755287766.628:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 120.900229][ T29] audit: type=1326 audit(1755287766.628:10109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.5.1075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 121.278207][ T3372] usb usb8-port1: unable to enumerate USB device [ 121.720318][ T7046] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 123.082414][ T7037] Set syz1 is full, maxelem 65536 reached [ 123.534169][ T7074] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1097'. [ 123.668279][ T3372] usb usb6-port1: attempt power cycle [ 123.713262][ T7087] loop4: detected capacity change from 0 to 2048 [ 123.738122][ T7089] FAULT_INJECTION: forcing a failure. [ 123.738122][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 123.750869][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.2.1103 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 123.750897][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.750909][ T7089] Call Trace: [ 123.750915][ T7089] [ 123.750922][ T7089] __dump_stack+0x1d/0x30 [ 123.750949][ T7089] dump_stack_lvl+0xe8/0x140 [ 123.751087][ T7089] dump_stack+0x15/0x1b [ 123.751176][ T7089] should_fail_ex+0x265/0x280 [ 123.751196][ T7089] should_failslab+0x8c/0xb0 [ 123.751219][ T7089] __kmalloc_noprof+0xa5/0x3e0 [ 123.751266][ T7089] ? nla_strdup+0x78/0xc0 [ 123.751288][ T7089] nla_strdup+0x78/0xc0 [ 123.751310][ T7089] nf_tables_newtable+0x3ba/0xea0 [ 123.751336][ T7089] nfnetlink_rcv+0xb99/0x1690 [ 123.751436][ T7089] netlink_unicast+0x5c0/0x690 [ 123.751468][ T7089] netlink_sendmsg+0x58b/0x6b0 [ 123.751524][ T7089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.751625][ T7089] __sock_sendmsg+0x145/0x180 [ 123.751651][ T7089] ____sys_sendmsg+0x31e/0x4e0 [ 123.751705][ T7089] ___sys_sendmsg+0x17b/0x1d0 [ 123.751736][ T7089] __x64_sys_sendmsg+0xd4/0x160 [ 123.751759][ T7089] x64_sys_call+0x191e/0x2ff0 [ 123.751780][ T7089] do_syscall_64+0xd2/0x200 [ 123.751922][ T7089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.751945][ T7089] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.751976][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.751997][ T7089] RIP: 0033:0x7f91b787ebe9 [ 123.752027][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.752044][ T7089] RSP: 002b:00007f91b62e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.752118][ T7089] RAX: ffffffffffffffda RBX: 00007f91b7aa5fa0 RCX: 00007f91b787ebe9 [ 123.752131][ T7089] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 123.752144][ T7089] RBP: 00007f91b62e7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.752156][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.752203][ T7089] R13: 00007f91b7aa6038 R14: 00007f91b7aa5fa0 R15: 00007fffc0492df8 [ 123.752301][ T7089] [ 124.033202][ T7092] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 124.115458][ T7108] pimreg: entered allmulticast mode [ 124.209792][ T7114] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 124.232487][ T7122] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.289167][ T7127] loop4: detected capacity change from 0 to 2048 [ 124.335847][ T7133] loop4: detected capacity change from 0 to 2048 [ 124.387132][ T7135] netlink: 'syz.4.1111': attribute type 21 has an invalid length. [ 124.395148][ T7135] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 124.402970][ T7135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1111'. [ 124.488962][ T7144] loop4: detected capacity change from 0 to 2048 [ 124.849767][ T7169] loop2: detected capacity change from 0 to 2048 [ 124.887985][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 124.898180][ T7174] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 124.898780][ T7169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.920500][ T7169] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.968113][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.136402][ T7196] netlink: 'syz.2.1130': attribute type 21 has an invalid length. [ 125.144298][ T7196] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 125.152030][ T7196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1130'. [ 125.162659][ T7195] siw: device registration error -23 [ 125.169841][ T7193] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.491282][ T7222] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1136'. [ 125.548512][ T3372] usb usb6-port1: unable to enumerate USB device [ 125.645418][ T7232] netlink: 'syz.4.1140': attribute type 21 has an invalid length. [ 125.653287][ T7232] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.730720][ T7235] netlink: 'syz.4.1141': attribute type 21 has an invalid length. [ 125.738801][ T7235] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 125.746508][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1141'. [ 125.772822][ T7228] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1139'. [ 125.813086][ T7241] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 125.848811][ T7243] loop5: detected capacity change from 0 to 2048 [ 125.876723][ T7243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.890447][ T7243] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.926942][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.956539][ T7255] syzkaller1: entered promiscuous mode [ 125.962078][ T7255] syzkaller1: entered allmulticast mode [ 126.003899][ T7258] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1147'. [ 126.124925][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 126.124966][ T29] audit: type=1400 audit(1755287745.041:10494): avc: denied { connect } for pid=7271 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.158153][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'. [ 126.170976][ T7272] loop2: detected capacity change from 0 to 512 [ 126.175338][ T7274] loop4: detected capacity change from 0 to 2048 [ 126.180153][ T29] audit: type=1326 audit(1755287745.071:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.207066][ T29] audit: type=1326 audit(1755287745.071:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.230616][ T29] audit: type=1326 audit(1755287745.071:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.253999][ T29] audit: type=1400 audit(1755287745.071:10498): avc: denied { create } for pid=7271 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 126.274700][ T29] audit: type=1326 audit(1755287745.071:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.298256][ T29] audit: type=1326 audit(1755287745.071:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.321812][ T29] audit: type=1326 audit(1755287745.071:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.345267][ T29] audit: type=1326 audit(1755287745.071:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.357408][ T7278] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1159'. [ 126.368908][ T29] audit: type=1326 audit(1755287745.071:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.5.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c2b1ebe9 code=0x7ffc0000 [ 126.454494][ T7272] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1157: bg 0: block 248: padding at end of block bitmap is not set [ 126.470789][ T7272] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1157: Failed to acquire dquot type 1 [ 126.490833][ T7272] EXT4-fs (loop2): 1 truncate cleaned up [ 126.497022][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.539404][ T7272] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.551168][ T7272] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1157: deleted inode referenced: 12 [ 126.670940][ T7275] Set syz1 is full, maxelem 65536 reached [ 126.683363][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.754440][ T7295] syzkaller1: entered promiscuous mode [ 126.760206][ T7295] syzkaller1: entered allmulticast mode [ 126.948975][ T7305] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 126.975995][ T7311] loop4: detected capacity change from 0 to 256 [ 126.987039][ T7309] loop0: detected capacity change from 0 to 2048 [ 127.024908][ T7309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.060432][ T7309] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.114352][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.141976][ T7319] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 127.644749][ T7329] syzkaller1: entered promiscuous mode [ 127.650341][ T7329] syzkaller1: entered allmulticast mode [ 127.846486][ T7336] netlink: 'syz.3.1183': attribute type 21 has an invalid length. [ 127.878801][ T7336] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 127.946094][ T7339] loop4: detected capacity change from 0 to 2048 [ 127.954510][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.961984][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.999710][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.007183][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.142502][ T7357] loop3: detected capacity change from 0 to 512 [ 128.170041][ T7357] ext4: Unknown parameter 'measure' [ 128.204001][ T7360] syzkaller1: entered promiscuous mode [ 128.209623][ T7360] syzkaller1: entered allmulticast mode [ 128.262824][ T7364] netlink: 'syz.3.1195': attribute type 21 has an invalid length. [ 128.367685][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.375234][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.383899][ T7372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.391322][ T7372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.409135][ T7373] pimreg: entered allmulticast mode [ 128.581696][ T7370] loop3: detected capacity change from 0 to 8192 [ 128.625931][ T7382] pimreg: entered allmulticast mode [ 128.751877][ T7383] loop4: detected capacity change from 0 to 8192 [ 128.774950][ T7383] /dev/loop4: Can't open blockdev [ 128.848559][ T7377] Set syz1 is full, maxelem 65536 reached [ 129.066338][ T7387] pim6reg: entered allmulticast mode [ 129.402550][ T7407] loop2: detected capacity change from 0 to 128 [ 129.473983][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.473983][ T7407] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 129.496528][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.496528][ T7407] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 129.514529][ T7414] loop3: detected capacity change from 0 to 2368 [ 129.525053][ T7414] iso9660: Bad value for 'check' [ 129.543263][ T7414] lo speed is unknown, defaulting to 1000 [ 129.554208][ T7414] lo speed is unknown, defaulting to 1000 [ 129.578976][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.578976][ T7407] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 129.597749][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.597749][ T7407] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 129.633852][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.633852][ T7407] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 129.648705][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.648705][ T7407] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 129.670597][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.670597][ T7407] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 129.684682][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.684682][ T7407] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 129.698990][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.698990][ T7407] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 129.712759][ T7407] syz.2.1213: attempt to access beyond end of device [ 129.712759][ T7407] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 129.849337][ T7432] __nla_validate_parse: 6 callbacks suppressed [ 129.849351][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 129.867744][ T7432] ªªªªªª: renamed from vlan0 (while UP) [ 129.927723][ T7436] validate_nla: 1 callbacks suppressed [ 129.927736][ T7436] netlink: 'syz.2.1223': attribute type 21 has an invalid length. [ 129.964056][ T7436] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 129.971887][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1223'. [ 130.079179][ T7444] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 130.261556][ T7448] serio: Serial port ttyS3 [ 130.331349][ T7449] loop2: detected capacity change from 0 to 2048 [ 130.403612][ T7449] loop2: p2 p3 p7 [ 130.834800][ T7451] loop3: detected capacity change from 0 to 2368 [ 130.864010][ T7451] iso9660: Bad value for 'check' [ 130.912256][ T7451] lo speed is unknown, defaulting to 1000 [ 130.928443][ T7451] lo speed is unknown, defaulting to 1000 [ 130.968225][ T3397] usb usb8-port1: attempt power cycle [ 131.269431][ T7459] loop2: detected capacity change from 0 to 2048 [ 131.305479][ T7460] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1231'. [ 131.323601][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.356049][ T7459] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.421306][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.447255][ T7470] FAULT_INJECTION: forcing a failure. [ 131.447255][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.460337][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.2.1234 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 131.460385][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.460395][ T7470] Call Trace: [ 131.460400][ T7470] [ 131.460406][ T7470] __dump_stack+0x1d/0x30 [ 131.460425][ T7470] dump_stack_lvl+0xe8/0x140 [ 131.460449][ T7470] dump_stack+0x15/0x1b [ 131.460466][ T7470] should_fail_ex+0x265/0x280 [ 131.460487][ T7470] should_fail+0xb/0x20 [ 131.460501][ T7470] should_fail_usercopy+0x1a/0x20 [ 131.460521][ T7470] _copy_to_user+0x20/0xa0 [ 131.460544][ T7470] simple_read_from_buffer+0xb5/0x130 [ 131.460565][ T7470] proc_fail_nth_read+0x10e/0x150 [ 131.460593][ T7470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.460698][ T7470] vfs_read+0x1a5/0x770 [ 131.460722][ T7470] ? __rcu_read_unlock+0x4f/0x70 [ 131.460823][ T7470] ? __fget_files+0x184/0x1c0 [ 131.460874][ T7470] ? __sys_setsockopt+0x18e/0x200 [ 131.460897][ T7470] ksys_read+0xda/0x1a0 [ 131.460920][ T7470] __x64_sys_read+0x40/0x50 [ 131.460949][ T7470] x64_sys_call+0x27bc/0x2ff0 [ 131.460966][ T7470] do_syscall_64+0xd2/0x200 [ 131.460990][ T7470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.461055][ T7470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.461078][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.461155][ T7470] RIP: 0033:0x7f91b787d5fc [ 131.461169][ T7470] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.461187][ T7470] RSP: 002b:00007f91b62e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.461207][ T7470] RAX: ffffffffffffffda RBX: 00007f91b7aa5fa0 RCX: 00007f91b787d5fc [ 131.461221][ T7470] RDX: 000000000000000f RSI: 00007f91b62e70a0 RDI: 0000000000000007 [ 131.461234][ T7470] RBP: 00007f91b62e7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.461247][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.461257][ T7470] R13: 00007f91b7aa6038 R14: 00007f91b7aa5fa0 R15: 00007fffc0492df8 [ 131.461277][ T7470] [ 131.678917][ T3372] usb usb6-port1: attempt power cycle [ 131.735436][ T7472] loop5: detected capacity change from 0 to 1024 [ 131.784258][ T7474] loop2: detected capacity change from 0 to 2048 [ 131.795812][ T7472] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 131.805794][ T7472] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.821814][ T7472] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #32: comm syz.5.1235: iget: special inode unallocated [ 131.835456][ T7472] EXT4-fs (loop5): no journal found [ 131.842051][ T7474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.860294][ T7474] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.907369][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.920312][ T7478] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 131.952204][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 131.980043][ T7481] ªªªªªª: renamed from vlan0 (while UP) [ 132.000529][ T7484] loop2: detected capacity change from 0 to 2368 [ 132.017661][ T7484] iso9660: Bad value for 'check' [ 132.044456][ T7484] lo speed is unknown, defaulting to 1000 [ 132.088999][ T7484] lo speed is unknown, defaulting to 1000 [ 132.150504][ T7489] netlink: 'syz.2.1242': attribute type 21 has an invalid length. [ 132.158529][ T7489] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 132.166299][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1242'. [ 132.202308][ T7491] pimreg: entered allmulticast mode [ 132.249875][ T7491] loop2: detected capacity change from 0 to 8192 [ 132.310383][ T7493] loop2: detected capacity change from 0 to 2048 [ 132.332050][ T7493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.344645][ T7493] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.361077][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 132.361091][ T29] audit: type=1326 audit(1755287724.274:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.391003][ T29] audit: type=1326 audit(1755287724.274:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.414531][ T29] audit: type=1326 audit(1755287724.274:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6cf95ec23 code=0x7ffc0000 [ 132.438134][ T29] audit: type=1326 audit(1755287724.274:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6cf95ec23 code=0x7ffc0000 [ 132.441053][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.461604][ T29] audit: type=1326 audit(1755287724.274:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.494585][ T29] audit: type=1326 audit(1755287724.274:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.518086][ T29] audit: type=1326 audit(1755287724.274:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.530071][ T7500] bond1: entered promiscuous mode [ 132.541649][ T29] audit: type=1326 audit(1755287724.274:11171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.541675][ T29] audit: type=1326 audit(1755287724.274:11172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.546693][ T7500] bond1: entered allmulticast mode [ 132.570178][ T29] audit: type=1326 audit(1755287724.274:11173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6cf95ebe9 code=0x7ffc0000 [ 132.595357][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.659106][ T7499] loop3: detected capacity change from 0 to 2048 [ 132.697451][ T7505] loop2: detected capacity change from 0 to 512 [ 132.706830][ T7505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.719947][ T7505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.731905][ T6137] Alternate GPT is invalid, using primary GPT. [ 132.733190][ T7505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 132.738198][ T6137] loop3: p2 p3 p7 [ 132.747163][ T7505] System zones: 1-12 [ 132.754715][ T7505] EXT4-fs (loop2): 1 truncate cleaned up [ 132.758746][ T7499] Alternate GPT is invalid, using primary GPT. [ 132.761405][ T7505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.766907][ T7499] loop3: p2 p3 p7 [ 132.786066][ T7505] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 132.797416][ T7505] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.807428][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1246'. [ 132.823674][ T2990] udevd[2990]: worker [6137] terminated by signal 33 (Unknown signal 33) [ 132.902062][ T7510] loop3: detected capacity change from 0 to 2048 [ 132.910476][ T7510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.922644][ T7510] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.046592][ T7520] loop5: detected capacity change from 0 to 512 [ 133.055441][ T7520] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.065901][ T7520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 133.074680][ T7520] System zones: 1-12 [ 133.079224][ T7520] EXT4-fs (loop5): 1 truncate cleaned up [ 133.085229][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.099094][ T3397] usb usb8-port1: unable to enumerate USB device [ 133.108258][ T7519] netlink: 'syz.5.1251': attribute type 10 has an invalid length. [ 133.127353][ T7519] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.140925][ T7525] FAULT_INJECTION: forcing a failure. [ 133.140925][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 133.153609][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.0.1253 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 133.153698][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.153709][ T7525] Call Trace: [ 133.153715][ T7525] [ 133.153722][ T7525] __dump_stack+0x1d/0x30 [ 133.153741][ T7525] dump_stack_lvl+0xe8/0x140 [ 133.153794][ T7525] dump_stack+0x15/0x1b [ 133.153811][ T7525] should_fail_ex+0x265/0x280 [ 133.153833][ T7525] should_failslab+0x8c/0xb0 [ 133.153855][ T7525] __kmalloc_noprof+0xa5/0x3e0 [ 133.153904][ T7525] ? nla_strdup+0x78/0xc0 [ 133.153922][ T7525] nla_strdup+0x78/0xc0 [ 133.153948][ T7525] nf_tables_newtable+0x3ba/0xea0 [ 133.153976][ T7525] nfnetlink_rcv+0xb99/0x1690 [ 133.154055][ T7525] netlink_unicast+0x5c0/0x690 [ 133.154088][ T7525] netlink_sendmsg+0x58b/0x6b0 [ 133.154109][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.154221][ T7525] __sock_sendmsg+0x145/0x180 [ 133.154248][ T7525] ____sys_sendmsg+0x31e/0x4e0 [ 133.154273][ T7525] ___sys_sendmsg+0x17b/0x1d0 [ 133.154305][ T7525] __x64_sys_sendmsg+0xd4/0x160 [ 133.154390][ T7525] x64_sys_call+0x191e/0x2ff0 [ 133.154407][ T7525] do_syscall_64+0xd2/0x200 [ 133.154431][ T7525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 133.154456][ T7525] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.154479][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.154598][ T7525] RIP: 0033:0x7f815611ebe9 [ 133.154612][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.154630][ T7525] RSP: 002b:00007f8154b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.154714][ T7525] RAX: ffffffffffffffda RBX: 00007f8156345fa0 RCX: 00007f815611ebe9 [ 133.154727][ T7525] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 133.154740][ T7525] RBP: 00007f8154b87090 R08: 0000000000000000 R09: 0000000000000000 [ 133.154751][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.154761][ T7525] R13: 00007f8156346038 R14: 00007f8156345fa0 R15: 00007fffa6ad0998 [ 133.154777][ T7525] [ 133.387084][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1251'. [ 133.396831][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.404289][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.412602][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.420068][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.440122][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.450844][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.460401][ T7527] loop0: detected capacity change from 0 to 2048 [ 133.480071][ T7527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.492632][ T7527] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.517892][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.558332][ T6428] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.578441][ T3372] usb usb6-port1: unable to enumerate USB device [ 133.662295][ T7552] netlink: 'syz.0.1264': attribute type 21 has an invalid length. [ 133.670248][ T7552] netlink: 'syz.0.1264': attribute type 1 has an invalid length. [ 133.678162][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1264'. [ 133.785327][ T7559] loop4: detected capacity change from 0 to 8192 [ 133.792001][ T7559] /dev/loop4: Can't open blockdev [ 133.806330][ T7560] loop0: detected capacity change from 0 to 512 [ 133.813167][ T7560] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.828462][ T7560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 133.836459][ T7560] System zones: 1-12 [ 133.840992][ T7560] EXT4-fs (loop0): 1 truncate cleaned up [ 133.847017][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.861169][ T7560] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 133.872171][ T7560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.882114][ T7560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1266'. [ 134.469250][ T7573] loop2: detected capacity change from 0 to 512 [ 134.476500][ T7573] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.488567][ T7573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 134.496773][ T7573] System zones: 1-12 [ 134.502125][ T7573] EXT4-fs (loop2): 1 truncate cleaned up [ 134.508512][ T7573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.527063][ T7568] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 134.545646][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1270'. [ 134.559042][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.568118][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.575478][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.594257][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.601674][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.772969][ T7589] loop3: detected capacity change from 0 to 512 [ 134.817489][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.836353][ T7591] FAULT_INJECTION: forcing a failure. [ 134.836353][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 134.849032][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: syz.0.1275 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 134.849078][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.849089][ T7591] Call Trace: [ 134.849096][ T7591] [ 134.849104][ T7591] __dump_stack+0x1d/0x30 [ 134.849125][ T7591] dump_stack_lvl+0xe8/0x140 [ 134.849145][ T7591] dump_stack+0x15/0x1b [ 134.849185][ T7591] should_fail_ex+0x265/0x280 [ 134.849204][ T7591] should_failslab+0x8c/0xb0 [ 134.849227][ T7591] kmem_cache_alloc_node_noprof+0x57/0x320 [ 134.849255][ T7591] ? dup_task_struct+0x70/0x6a0 [ 134.849361][ T7591] dup_task_struct+0x70/0x6a0 [ 134.849381][ T7591] ? copy_process+0x6a/0x2000 [ 134.849420][ T7591] copy_process+0x399/0x2000 [ 134.849469][ T7591] ? kstrtouint+0x76/0xc0 [ 134.849486][ T7591] ? strncpy_from_user_nofault+0xa7/0xf0 [ 134.849561][ T7591] ? __rcu_read_unlock+0x4f/0x70 [ 134.849647][ T7591] kernel_clone+0x16c/0x5c0 [ 134.849675][ T7591] __x64_sys_clone+0xe6/0x120 [ 134.849701][ T7591] x64_sys_call+0x119c/0x2ff0 [ 134.849727][ T7591] do_syscall_64+0xd2/0x200 [ 134.849763][ T7591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.849787][ T7591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.849810][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.849891][ T7591] RIP: 0033:0x7f815611ebe9 [ 134.849906][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.849920][ T7591] RSP: 002b:00007f8154b44fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 134.849938][ T7591] RAX: ffffffffffffffda RBX: 00007f8156346180 RCX: 00007f815611ebe9 [ 134.849952][ T7591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 134.849970][ T7591] RBP: 00007f8154b45090 R08: 0000000000000000 R09: 0000000000000000 [ 134.849984][ T7591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 134.850055][ T7591] R13: 00007f8156346218 R14: 00007f8156346180 R15: 00007fffa6ad0998 [ 134.850074][ T7591] [ 135.104442][ T7594] __nla_validate_parse: 1 callbacks suppressed [ 135.104458][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 135.122089][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1281'. [ 135.158550][ T7589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1278: bg 0: block 248: padding at end of block bitmap is not set [ 135.198545][ T7589] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1278: Failed to acquire dquot type 1 [ 135.220506][ T7589] EXT4-fs (loop3): 1 truncate cleaned up [ 135.230358][ T7589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.254164][ T7589] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.282730][ T7589] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1278: deleted inode referenced: 12 [ 135.391019][ T7607] lo speed is unknown, defaulting to 1000 [ 135.397371][ T7607] lo speed is unknown, defaulting to 1000 [ 135.725626][ T7613] loop4: detected capacity change from 0 to 2368 [ 135.759883][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.770753][ T7613] iso9660: Bad value for 'check' [ 135.793890][ T7616] loop3: detected capacity change from 0 to 1024 [ 135.802310][ T7616] EXT4-fs: test_dummy_encryption option not supported [ 135.804422][ T7613] lo speed is unknown, defaulting to 1000 [ 135.825462][ T7613] lo speed is unknown, defaulting to 1000 [ 135.827245][ T7618] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 135.841724][ T7619] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1285'. [ 135.940752][ T7627] loop0: detected capacity change from 0 to 2048 [ 135.956667][ T7631] loop4: detected capacity change from 0 to 2048 [ 135.970992][ T7627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.991335][ T7627] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.103241][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.129647][ T7638] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 136.170369][ T7641] loop2: detected capacity change from 0 to 512 [ 136.208192][ T7641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.238774][ T7641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 136.270277][ T7641] System zones: 1-12 [ 136.289921][ T7652] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 136.297639][ T7641] EXT4-fs (loop2): 1 truncate cleaned up [ 136.313755][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.366970][ T7641] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 136.496315][ T7655] loop4: detected capacity change from 0 to 8192 [ 136.616125][ T7666] loop4: detected capacity change from 0 to 2368 [ 136.629337][ T7666] iso9660: Bad value for 'check' [ 136.651955][ T7668] loop0: detected capacity change from 0 to 2048 [ 136.674772][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.698168][ T7666] lo speed is unknown, defaulting to 1000 [ 136.707933][ T7668] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.728934][ T7666] lo speed is unknown, defaulting to 1000 [ 136.734830][ T7671] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1303'. [ 136.879705][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1305'. [ 136.913592][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.923817][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.941861][ T7675] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 136.958173][ T7675] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 136.966065][ T3479] lo speed is unknown, defaulting to 1000 [ 136.971919][ T3479] syz2: Port: 1 Link DOWN [ 136.987344][ T3479] lo speed is unknown, defaulting to 1000 [ 136.993232][ T3479] syz2: Port: 1 Link ACTIVE [ 137.000602][ T7673] loop4: detected capacity change from 0 to 512 [ 137.009607][ T7677] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 137.100347][ T7694] loop2: detected capacity change from 0 to 2048 [ 137.119989][ T7694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.147515][ T7694] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.171680][ T7686] siw: device registration error -23 [ 137.205666][ T7692] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1314'. [ 137.222010][ T7700] loop0: detected capacity change from 0 to 2368 [ 137.249239][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.262006][ T7700] iso9660: Bad value for 'check' [ 137.287601][ T7700] lo speed is unknown, defaulting to 1000 [ 137.294499][ T7700] lo speed is unknown, defaulting to 1000 [ 137.324398][ T7700] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1316'. [ 137.400948][ T7710] loop2: detected capacity change from 0 to 512 [ 137.407684][ T7710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.430868][ T7710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 137.448335][ T7710] System zones: 1-12 [ 137.461621][ T7710] EXT4-fs (loop2): 1 truncate cleaned up [ 137.475652][ T7710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.551587][ T7705] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1318'. [ 137.551685][ T7710] netlink: 'syz.2.1317': attribute type 10 has an invalid length. [ 137.603094][ T7709] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1319'. [ 137.696441][ T7721] siw: device registration error -23 [ 137.729490][ T7719] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 137.731220][ T7725] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 137.776844][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1325'. [ 137.803088][ T7727] loop4: detected capacity change from 0 to 512 [ 137.811325][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 137.811336][ T29] audit: type=1400 audit(1755287711.725:11882): avc: denied { mounton } for pid=7730 comm="syz.0.1327" path="/234/bus" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.853095][ T29] audit: type=1400 audit(1755287711.765:11883): avc: denied { ioctl } for pid=7730 comm="syz.0.1327" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.899427][ T29] audit: type=1400 audit(1755287711.765:11884): avc: denied { append } for pid=7730 comm="syz.0.1327" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.922439][ T29] audit: type=1326 audit(1755287711.795:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8156115ba7 code=0x7ffc0000 [ 137.945835][ T29] audit: type=1326 audit(1755287711.795:11886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81560badd9 code=0x7ffc0000 [ 137.969298][ T29] audit: type=1326 audit(1755287711.795:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815611ebe9 code=0x7ffc0000 [ 137.992796][ T29] audit: type=1326 audit(1755287711.795:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8156115ba7 code=0x7ffc0000 [ 138.016322][ T29] audit: type=1326 audit(1755287711.795:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81560badd9 code=0x7ffc0000 [ 138.039799][ T29] audit: type=1326 audit(1755287711.795:11890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8156115ba7 code=0x7ffc0000 [ 138.063218][ T29] audit: type=1326 audit(1755287711.795:11891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.0.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81560badd9 code=0x7ffc0000 [ 138.089299][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.152452][ T7741] FAULT_INJECTION: forcing a failure. [ 138.152452][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 138.165112][ T7741] CPU: 1 UID: 0 PID: 7741 Comm: syz.2.1331 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 138.165136][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.165147][ T7741] Call Trace: [ 138.165208][ T7741] [ 138.165214][ T7741] __dump_stack+0x1d/0x30 [ 138.165232][ T7741] dump_stack_lvl+0xe8/0x140 [ 138.165250][ T7741] dump_stack+0x15/0x1b [ 138.165264][ T7741] should_fail_ex+0x265/0x280 [ 138.165308][ T7741] should_failslab+0x8c/0xb0 [ 138.165336][ T7741] kmem_cache_alloc_node_noprof+0x57/0x320 [ 138.165363][ T7741] ? __alloc_skb+0x101/0x320 [ 138.165446][ T7741] __alloc_skb+0x101/0x320 [ 138.165473][ T7741] netlink_alloc_large_skb+0xba/0xf0 [ 138.165505][ T7741] netlink_sendmsg+0x3cf/0x6b0 [ 138.165526][ T7741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.165593][ T7741] __sock_sendmsg+0x145/0x180 [ 138.165693][ T7741] ____sys_sendmsg+0x31e/0x4e0 [ 138.165714][ T7741] ___sys_sendmsg+0x17b/0x1d0 [ 138.165743][ T7741] __x64_sys_sendmsg+0xd4/0x160 [ 138.165776][ T7741] x64_sys_call+0x191e/0x2ff0 [ 138.165879][ T7741] do_syscall_64+0xd2/0x200 [ 138.165904][ T7741] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.165923][ T7741] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.165943][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.165960][ T7741] RIP: 0033:0x7f91b787ebe9 [ 138.165979][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.165997][ T7741] RSP: 002b:00007f91b62e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.166013][ T7741] RAX: ffffffffffffffda RBX: 00007f91b7aa5fa0 RCX: 00007f91b787ebe9 [ 138.166023][ T7741] RDX: 0000000040000084 RSI: 0000200000000300 RDI: 0000000000000003 [ 138.166034][ T7741] RBP: 00007f91b62e7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.166045][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.166058][ T7741] R13: 00007f91b7aa6038 R14: 00007f91b7aa5fa0 R15: 00007fffc0492df8 [ 138.166147][ T7741] [ 138.483067][ T7746] loop4: detected capacity change from 0 to 1024 [ 138.505278][ T7754] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.596307][ T7763] pimreg: entered allmulticast mode [ 138.637314][ T7763] loop5: detected capacity change from 0 to 8192 [ 138.671748][ T7760] siw: device registration error -23 [ 138.680965][ T7768] loop2: detected capacity change from 0 to 512 [ 138.697921][ T7768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.717268][ T7768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 138.725760][ T7768] System zones: 1-12 [ 138.749938][ T7768] EXT4-fs (loop2): 1 truncate cleaned up [ 138.755911][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.781512][ T7768] netlink: 'syz.2.1341': attribute type 10 has an invalid length. [ 138.867087][ T7772] siw: device registration error -23 [ 138.898208][ T7782] loop4: detected capacity change from 0 to 2368 [ 138.904956][ T7782] iso9660: Bad value for 'check' [ 138.997059][ T7782] lo speed is unknown, defaulting to 1000 [ 139.022564][ T7782] lo speed is unknown, defaulting to 1000 [ 139.085857][ T7791] siw: device registration error -23 [ 139.118409][ T7793] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 139.226004][ T7805] infiniband syz1: set active [ 139.230762][ T7805] infiniband syz1: added syz_tun [ 139.245263][ T7805] RDS/IB: syz1: added [ 139.250568][ T7805] smc: adding ib device syz1 with port count 1 [ 139.257208][ T7805] smc: ib device syz1 port 1 has pnetid [ 139.312903][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.791472][ T7801] siw: device registration error -23 [ 139.842585][ T7828] siw: device registration error -23 [ 140.179536][ T7839] __nla_validate_parse: 6 callbacks suppressed [ 140.179549][ T7839] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1360'. [ 140.558528][ T7836] Set syz1 is full, maxelem 65536 reached [ 140.589554][ T7853] capability: warning: `syz.2.1372' uses 32-bit capabilities (legacy support in use) [ 140.674341][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1374'. [ 140.723828][ T7864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1375'. [ 140.780564][ T7864] loop0: detected capacity change from 0 to 512 [ 140.783368][ T7868] netlink: 'syz.2.1377': attribute type 21 has an invalid length. [ 140.799708][ T7868] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 140.801247][ T7864] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1375: bg 0: block 248: padding at end of block bitmap is not set [ 140.807449][ T7868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1377'. [ 140.859586][ T7877] netlink: 'syz.2.1380': attribute type 21 has an invalid length. [ 140.867764][ T7877] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 140.875550][ T7877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1380'. [ 140.891403][ T7864] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1375: Failed to acquire dquot type 1 [ 140.997533][ T7864] EXT4-fs (loop0): 1 truncate cleaned up [ 141.008552][ T7864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.040468][ T7864] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.149235][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.185254][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1387'. [ 141.262289][ T7904] netlink: 'syz.3.1391': attribute type 21 has an invalid length. [ 141.270710][ T7904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 141.344454][ T7910] loop2: detected capacity change from 0 to 512 [ 141.351520][ T7910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.363034][ T7910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 141.371166][ T7910] System zones: 1-12 [ 141.377253][ T7910] EXT4-fs (loop2): 1 truncate cleaned up [ 141.386106][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.451176][ T7910] validate_nla: 1 callbacks suppressed [ 141.451194][ T7910] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 141.488541][ T7918] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1394'. [ 141.514222][ T7912] loop3: detected capacity change from 0 to 512 [ 141.532010][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'. [ 141.532455][ T7912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.585646][ T7912] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.687161][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.753728][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 141.776395][ T7927] siw: device registration error -23 [ 141.796012][ T7939] ================================================================== [ 141.804109][ T7939] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 141.811394][ T7939] [ 141.813701][ T7939] write to 0xffff888104d2ff00 of 8 bytes by task 7937 on cpu 1: [ 141.821319][ T7939] mas_wmb_replace+0x20d/0x14a0 [ 141.826163][ T7939] mas_wr_store_entry+0x1773/0x2b50 [ 141.831364][ T7939] mas_store_prealloc+0x74d/0x9e0 [ 141.836376][ T7939] vma_iter_store_new+0x1c5/0x200 [ 141.841389][ T7939] vma_complete+0x125/0x580 [ 141.845878][ T7939] __split_vma+0x5d9/0x650 [ 141.850284][ T7939] vma_modify+0x3f2/0xc80 [ 141.854600][ T7939] vma_modify_flags+0x101/0x130 [ 141.859438][ T7939] mprotect_fixup+0x2cc/0x570 [ 141.864102][ T7939] do_mprotect_pkey+0x6d6/0x980 [ 141.868944][ T7939] __x64_sys_mprotect+0x48/0x60 [ 141.873786][ T7939] x64_sys_call+0x274e/0x2ff0 [ 141.878451][ T7939] do_syscall_64+0xd2/0x200 [ 141.882944][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.888824][ T7939] [ 141.891133][ T7939] read to 0xffff888104d2ff00 of 8 bytes by task 7939 on cpu 0: [ 141.898656][ T7939] mas_state_walk+0x485/0x650 [ 141.903322][ T7939] mas_walk+0x60/0x150 [ 141.907378][ T7939] lock_vma_under_rcu+0x8d/0x160 [ 141.912306][ T7939] do_user_addr_fault+0x233/0x1090 [ 141.917415][ T7939] exc_page_fault+0x62/0xa0 [ 141.921904][ T7939] asm_exc_page_fault+0x26/0x30 [ 141.926739][ T7939] [ 141.929042][ T7939] value changed: 0xffff88810a116d81 -> 0xffff888104d2ff00 [ 141.936129][ T7939] [ 141.938431][ T7939] Reported by Kernel Concurrency Sanitizer on: [ 141.944561][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.4.1402 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 141.956957][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.966999][ T7939] ================================================================== [ 142.124092][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.