last executing test programs: 3.655447905s ago: executing program 1 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(r4, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000400)=[0x8, 0x1]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f00000000c0), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0xe) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) close(0x3) syz_emit_ethernet(0x2a, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c200000008060001080006040001aaaaaaaaaa32ac1414ffffffffaa"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1809e67c5400000400000000031b000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x43, &(0x7f0000000240)=""/153, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) 3.566425482s ago: executing program 3 (id=1323): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) shmdt(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)={'#! ', '', [{0x20, 'memory.events\x00I\xeb\xaf\xd0\x18\xbe\xab\xa6I\xee\x19\xae1\xfaxZ\xf8R\xfcwT\xe9\xea\xaf\xd5\xe9\xeb\x13N\xc1H\xf2\x98\x95N\xba\x8f\xbc\x01h\x04\xb6\x8b0\xb6\x8c\x90y\xc8\xcc\xd2\xf3\xa0Q\xd0\x90\xea\xe3\xc0\xa9a\xe9\x93}\xed4\xc3\xc9Os\n\xc2\x17!\xbf\xf8\x8d`m\xd86\xef{`\x1e\xd4\xb9\xcfRy\n\v\xed7\x83]9\x1bS\x9a\xab:\xe7\x82\bl\x9caT\xf5\x16L\xecr\xf7\x93}\x86\x90\xcb\x15\xd2\xd5%\\\x16\xc7j\xd5\'D\xde\x84,\x15sl^A\xc8\xa7c(\xb2\x86C\xee\x1b^Z\xfa\xfe\xce\x9f\xb0\xe4\xc6N'}], 0xa, "dbc8ad21d7e2d82a40f93fa3c6580ce258c67812a41a6328cb725f73e047c5c801e4d3d0be0671326200e6df31781bb07f159147189d4e578a22745d7cd4bdea013cc159e1c45b2ffdc944e8e21d2fb30af3cc5cf8b38144fabe1325872c331d0372d40215d87aa95bd6d2b53d63ea107370b22003b43ec1a13b10a1ee1ae162d52905b4f301ce8b"}, 0x139) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x20040) rt_sigtimedwait(&(0x7f0000000240)={[0x1]}, &(0x7f0000000280), &(0x7f0000000340)={r5, r6+10000000}, 0x8) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00', 0x0, [0x0, 0x8001, 0xffff, 0xd7f, 0x4]}, &(0x7f0000000400)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0xc8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x3400, 0x3fffffffffffd, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.649918216s ago: executing program 4 (id=1331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 2.611108619s ago: executing program 3 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 2.592157431s ago: executing program 4 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYRESHEX, @ANYRESHEX], &(0x7f0000000880)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) lstat(&(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)) getresuid(&(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000ac0)='ns/mnt\x00') creat(&(0x7f0000000b00)='./mnt/file0\x00', 0x22) r3 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x1, 0xc, 0x2, 0xcf, 0x0, 0x0, 0x28, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x9, 0x3, 0xfffffffe, 0x2, 0xf2, 0x3, 0x1, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6, 0xff, 0xbd, 0x5, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c, 0x4, @perf_config_ext={0x5, 0xa21}, 0x1000, 0x0, 0x9, 0x9, 0x9, 0x0, 0xdca8, 0x0, 0x10001, 0x0, 0xa}, r2, 0xb, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './mnt\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r0, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x2a, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xe, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[r0, r0, r8, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000940)=[{0x1, 0x1, 0xc, 0x4}, {0x0, 0x4, 0xc, 0xc}, {0x0, 0x5, 0xb, 0xb}, {0x0, 0x4, 0x4, 0x5}, {0x5, 0x4, 0x4, 0x1}, {0x4, 0x2, 0xd, 0xa}, {0x1, 0x5, 0x9, 0x1}], 0x10, 0x6}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.591762081s ago: executing program 1 (id=1334): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f0000000080), 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x14) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) fcntl$dupfd(r7, 0x406, r9) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 2.580316362s ago: executing program 3 (id=1335): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000007b8af8ff00000000f8ffffffb70300000800dfb99ee63de50000b704000000000000850000008200000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2.538329305s ago: executing program 4 (id=1336): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) unshare(0x28000600) fcntl$getownex(r1, 0x10, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1, 0x1232, &(0x7f0000002300)="$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") rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 2.538073105s ago: executing program 3 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.446562032s ago: executing program 3 (id=1339): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) rename(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000181100"/20, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xb) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0x7}, 0x1c) 2.364475879s ago: executing program 1 (id=1341): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x76) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000380)=""/164, 0xa4}], 0x2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x94160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.97916591s ago: executing program 1 (id=1344): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) (async) r1 = syz_usbip_server_init(0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) (rerun: 32) syz_io_uring_setup(0x3da2, &(0x7f00000000c0)={0x0, 0x29e8, 0x2, 0x0, 0x2a3, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180)) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x13}}, 0x10) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x70ef8000) (async, rerun: 64) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000200)={@local, @loopback, 0x0}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0xd}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "025102d548"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c39f8b0f7"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000004c0)={'veth1_to_team\x00'}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000003180)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000000540)=@newtfilter={0x2bcc, 0x2c, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x10}, {0xfff3, 0xfff3}, {0x4, 0x4}}, [@f_tcindex={{0xc}, {0xc90, 0x2, [@TCA_TCINDEX_POLICE={0xc7c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x3, 0x53, 0x2, {0x6, 0x0, 0x7, 0x9, 0xabc, 0x7f}, {0x0, 0x0, 0x1fda, 0x7, 0x8000, 0x400}, 0x5, 0x1, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x8, 0x8, 0x2, 0x80000000, 0x6, 0x6, 0x3, 0x1, 0x2, 0x1, 0xff, 0x41d3, 0x9, 0x3, 0x1e5, 0x100, 0xb815, 0xfff, 0x4, 0x200, 0x12, 0x300, 0x4, 0x7, 0x4, 0x5, 0x4d0, 0x2, 0xe, 0xbb, 0xbbf8, 0x800, 0x80000001, 0xa3, 0x9, 0x80000001, 0x7fffffff, 0x2, 0x8, 0x3, 0x0, 0x44, 0x200, 0x8, 0x832, 0xf, 0x0, 0xb, 0x4, 0x2, 0xfffffff7, 0x2, 0xff, 0xe9, 0x4, 0x80, 0x2, 0x7, 0xffff476a, 0x0, 0x7, 0xa4, 0x1, 0xfffffff9, 0x3, 0x101, 0x2, 0x1, 0x8001, 0x5, 0x1, 0xc7, 0x5, 0x4, 0xfffffff3, 0x4, 0x4, 0x7, 0x8, 0x3, 0xae9, 0xfffffed7, 0x3, 0x3, 0x1, 0x5, 0x200, 0x7, 0x0, 0x2, 0x9, 0xc2, 0x56b0, 0x0, 0x8000, 0x6, 0x2a3, 0x1, 0x8000, 0x3, 0x2, 0x5, 0x9, 0x40, 0x81, 0x0, 0x4, 0x2, 0xa, 0x7, 0x2, 0xb1, 0x6, 0x3, 0x7f, 0x7, 0x1, 0x2, 0x6f2, 0x3, 0x0, 0x7, 0x9, 0x9b, 0x4, 0x2, 0xc, 0x8, 0xc6b, 0x9, 0x5, 0x10, 0xa, 0xed, 0x6, 0x4, 0x10, 0x4, 0x1, 0xe00000, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x7, 0x6ce, 0x3, 0x8, 0x0, 0x5, 0x8, 0x29, 0x8, 0x97, 0x25b9, 0x4, 0xfffffffa, 0x3, 0x4, 0x9, 0x7, 0x4, 0x0, 0x2, 0x1, 0x7, 0x7, 0x3, 0x7, 0x7, 0xb, 0x1, 0x1ff, 0x0, 0x8000, 0x101, 0x0, 0xa1, 0x1ff, 0x9, 0xffffffff, 0x6, 0x9, 0x4, 0x9, 0x0, 0x55, 0x6, 0x9, 0x4, 0x6, 0x2, 0x9, 0x72, 0x400, 0x41, 0x0, 0x80000000, 0x0, 0x7fff, 0x1, 0x4, 0x2, 0x1, 0x2, 0x1, 0x1, 0x2ce3d74b, 0x7, 0x4, 0x7, 0xc1, 0x7ff, 0x2, 0xff, 0x6, 0x401, 0x2, 0x9, 0xfffffff7, 0x2, 0x2e1d, 0x4, 0x0, 0x6, 0x400, 0x9d9, 0x7c48, 0x2, 0x2, 0x9, 0x5, 0xa365, 0x1, 0x8, 0x5, 0x1, 0xe4dc00, 0x8b, 0x81, 0x37, 0x7, 0x2, 0x5, 0x5, 0x401, 0xb18b, 0x7, 0x0, 0xfffffffe, 0x0, 0x7, 0xcf6, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x16}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffff, 0xffffff7f, 0x2, 0xd, 0x9, 0x4, 0x5, 0x4c, 0xffff, 0xfa, 0x2368, 0x9, 0x11, 0x5, 0x5, 0x7, 0x0, 0x8, 0x1b6, 0x3, 0x80000001, 0x7, 0x83, 0x8, 0x3, 0x9, 0x656, 0x8, 0x8, 0x6, 0x90a, 0x1, 0x9, 0x2, 0x2, 0x9, 0x80, 0xbe4, 0x2, 0x4, 0x5, 0xd, 0x8, 0x92a, 0x8001, 0x61, 0x5, 0x6, 0x8000, 0x3c2, 0xce6, 0xc06, 0x20000, 0x2, 0x10000, 0x8, 0x598, 0x225d0424, 0x7, 0xb9, 0x7, 0xf3, 0x81, 0x56, 0xf5c, 0xfc, 0x2bd34205, 0x5, 0x8, 0x4, 0x1, 0x6, 0x717, 0x9, 0x3, 0x3ff, 0x1, 0x1, 0x10001, 0x5, 0x5, 0x0, 0xae, 0x7f, 0x6, 0x6, 0x7, 0x101, 0x6, 0xfff, 0x5, 0x1, 0x401, 0x400, 0x1, 0x2, 0x3, 0xfffffff9, 0x7, 0x7fffffff, 0x7, 0xc5, 0x7, 0x5, 0x1000, 0x6, 0xa0d0, 0x2, 0x10001, 0xffffe3cc, 0xd4b, 0x8, 0xe00000, 0xf, 0x2, 0x393, 0x0, 0x7, 0x1, 0x5, 0x401, 0x5, 0x2, 0x6, 0x6, 0x3, 0x401, 0x3, 0x44, 0x2, 0x500, 0xe, 0xc8c, 0x0, 0x8001, 0x5, 0x9, 0xd, 0xfffffffd, 0x6, 0x8, 0x6, 0xfffffff7, 0xffffffff, 0x8, 0x5, 0x4, 0x5, 0x8, 0x3, 0x400000, 0x0, 0x0, 0x2, 0x80, 0xe00, 0x5, 0x1ff, 0x1, 0x7, 0xa35, 0x80000, 0x6, 0x1, 0xa2dd, 0x10, 0x80, 0xe, 0x43, 0x7, 0x4, 0x2, 0x5, 0x8, 0x8, 0x2, 0xec, 0x6, 0xd4, 0xdadb, 0xfbe2, 0x2, 0x4, 0x5, 0x0, 0xcc, 0xc, 0x0, 0x8, 0x9, 0x10000, 0x9, 0x10000, 0xffffffff, 0xb, 0x47, 0x9, 0x9, 0x0, 0x9, 0xcf, 0xf49, 0xffffffff, 0x9c, 0x5, 0x1, 0x6bcb, 0x0, 0x7, 0x0, 0x8, 0x10, 0xfffffff9, 0x8, 0x10001, 0x9, 0x10000, 0x5, 0x5, 0x328e, 0x8, 0x9, 0x5, 0x80, 0x1, 0xff, 0x598, 0x8, 0x0, 0x9, 0x80000001, 0x2, 0xff, 0x1, 0x8000, 0x4, 0x3, 0xff, 0xcd8d, 0x1, 0x7fff, 0x4e4c223b, 0xbb1c, 0x5, 0x1a38, 0x1e27, 0x0, 0x3, 0x9, 0x2, 0x4a, 0x7fff, 0x1, 0xfffffff7, 0xc000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff96}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x0, 0x1e, 0x3, 0x7, 0x7, 0x8, 0xfb1, 0x8000, 0x3, 0x6, 0x4, 0x4, 0x400, 0x6000000, 0x7fffffff, 0x6, 0x9, 0x6, 0x1, 0xf, 0xddac, 0x9102, 0x5, 0x5, 0x0, 0x4534, 0x57d, 0x5, 0x4, 0x4, 0x6, 0x3, 0x274, 0x10, 0x400, 0x3, 0x5, 0x3, 0x5, 0x6, 0xf0e, 0x8, 0xc, 0x588, 0x3, 0x1, 0x9, 0xfffffffd, 0x79f2, 0x0, 0xfffffffc, 0x3, 0x7fffffff, 0x4, 0x3, 0x40, 0x2, 0x2, 0x4, 0x7, 0x40, 0x4, 0x4, 0xfffffff7, 0x0, 0x7, 0xc6e, 0x6, 0x8, 0x6, 0x8, 0xb, 0x9, 0x8c, 0x0, 0x9, 0x9, 0x0, 0x1fffe0, 0x2, 0xa, 0x0, 0xffff, 0xffffffff, 0x4, 0xffffffff, 0x7fff, 0x1, 0x400, 0x1, 0xe43, 0x0, 0x6, 0x8, 0x8, 0x7, 0xfffffff8, 0x6, 0x1, 0x4, 0x1, 0x2, 0x60000000, 0x10001, 0x3, 0x9, 0xf76, 0x9, 0x7f, 0x6, 0xa5de, 0x4, 0x5, 0xf85a, 0x280, 0x2, 0x0, 0x2, 0x1, 0x6, 0xa, 0x7fff, 0x1, 0x5, 0x0, 0x7, 0x9, 0x5d, 0xb10d, 0x1, 0x2, 0x4, 0x6, 0x8, 0x4, 0x20, 0x5, 0x4, 0x7, 0x6, 0x6, 0x1, 0xffff, 0x7, 0x4, 0x5, 0xfffffffb, 0xfffffffa, 0x0, 0xa, 0xd3d6, 0x7, 0x9, 0x2543f077, 0x3, 0xc, 0x5, 0xcb, 0x3, 0xffff, 0x5ab, 0x7, 0x3, 0xffffffff, 0x4e202836, 0x8, 0x3, 0x78c, 0x6, 0x1, 0x8, 0xe600, 0x1, 0x0, 0x6, 0x7, 0x80000001, 0x3, 0x7, 0x5, 0x7, 0x3, 0x4, 0x3, 0x424, 0x0, 0x4, 0x6, 0x6140, 0x1, 0x545, 0x7, 0x5, 0x4, 0x1, 0xee, 0x8, 0x73, 0x2, 0x3, 0x2, 0x2, 0x8, 0x800, 0x7, 0x8, 0x1, 0xd80b, 0xf37, 0xffffffff, 0x8, 0x96, 0xc, 0x1, 0xab, 0x1, 0x1, 0x4, 0x8, 0x2, 0xa4b, 0xc, 0x2d9, 0xd, 0x5, 0x2, 0xaeba, 0x40, 0x0, 0xc43, 0x10001, 0x0, 0x9, 0x4, 0xfffffffc, 0x2, 0x0, 0x0, 0x3, 0x2, 0x9, 0x5a7d, 0x9, 0xc, 0xfffffff8, 0xf, 0xc, 0xb, 0x7, 0x1023, 0x7, 0x3, 0x80000001, 0x1]}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xa47}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x400}]}}, @f_rsvp={{0x9}, {0x908, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x93b, 0x9, 0x8000}, {0xa, 0x9, 0x5}, 0x88, 0x3, 0x6}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3ff, 0x9, 0x1000}, {0xee69, 0x3, 0x3}, 0x2f, 0x2, 0x7f}}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xed, 0x5, 0x0, 0x6, 0x80000000, 0xf, 0x9, 0x7, 0xc, 0x80000000, 0x0, 0x1000, 0x23c, 0x0, 0x400, 0x2, 0x401, 0xc, 0x3b90, 0xa, 0x7, 0x5, 0x0, 0x5, 0x7, 0xf0, 0x0, 0x7, 0x5, 0x4, 0x80000001, 0xc3, 0x5, 0x10000, 0x0, 0x504b, 0xffffffff, 0x6, 0x7f, 0xfffffffb, 0xe0000, 0x8, 0x101, 0xf, 0x961, 0x4ab69d59, 0x7f, 0xfffffffc, 0xfffffffa, 0x800, 0x3ff, 0x7, 0x0, 0x81, 0x7fff, 0x2, 0x7, 0x6, 0x1, 0x2, 0x80000001, 0xfffffff4, 0x10, 0xbd, 0x0, 0x1, 0x1, 0x9, 0x6, 0x6, 0x7, 0x10, 0x9d1e9e5, 0x4213, 0x100, 0x30000000, 0xffff, 0x40, 0x1, 0x1000, 0x7, 0x6494cb9e, 0x0, 0x6, 0xfffffffc, 0xf2, 0x5, 0x0, 0x48f, 0xcce, 0x4, 0x4, 0x0, 0x6, 0xfffffff7, 0xffffffff, 0xabc7, 0x47f, 0x2, 0x3, 0x7f, 0x0, 0x4, 0x5, 0x7ff, 0x1, 0x5, 0xffffffff, 0x1, 0x4, 0x3, 0x1, 0x1, 0x9, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x8, 0x81, 0x6, 0xfff, 0x7, 0x1000, 0x36, 0x0, 0x6, 0x8, 0x7f, 0x8, 0x8, 0xfffeffff, 0x6, 0x9, 0x100, 0x401, 0x8001, 0x1, 0x8, 0xf, 0x0, 0x3ff, 0x7f, 0x2, 0x81, 0x1, 0x81, 0x8687, 0x9, 0x8, 0x6, 0x7, 0x4dad, 0x8000, 0x1, 0x4, 0x1, 0x8, 0x8000, 0x5, 0x40, 0xc, 0x1, 0x0, 0x4, 0xae4d, 0x0, 0x9, 0x1, 0x4, 0x8000, 0x229, 0x6, 0xc0, 0x4, 0x7, 0x0, 0x2, 0xf, 0x1, 0x5, 0x6, 0x1, 0x7ff, 0x7, 0xf, 0x5, 0x4, 0x7, 0x8, 0xffffffff, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x8, 0x24d, 0xffffffff, 0x10000000, 0x80000001, 0x3, 0x7, 0x3c, 0x1, 0x80, 0x1f24, 0x7fffffff, 0x400, 0x0, 0x0, 0x2, 0x0, 0x5, 0xd692, 0x4, 0xa3, 0x4, 0x1, 0xf, 0x1, 0x7a, 0x3, 0xe, 0x6, 0x5, 0x2, 0x800, 0x7, 0x2, 0xf, 0x7, 0x8001, 0x7, 0x40, 0x8, 0x2, 0x3, 0x1122141f, 0x49a, 0x7, 0x2, 0x0, 0x0, 0x1, 0x401, 0x0, 0x10000, 0x6, 0x2a, 0x9, 0x0, 0x8, 0x7ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x72, 0x4, 0x3ff, 0x33, 0x8, {0x1, 0x0, 0x3, 0xa93, 0xf72, 0xfffffff0}, {0x2, 0x0, 0xfffe, 0x800, 0x8, 0x5}, 0x8, 0x7, 0x3c}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7fff, 0x4, 0x288, 0x8, 0x1, 0x2, 0x400, 0x10, 0x80000000, 0x5, 0x61, 0x7, 0xf, 0x5, 0x2, 0x6, 0x6, 0x80, 0x80000000, 0x9, 0x200, 0x9, 0x8, 0x1ff, 0x3, 0x7, 0x8, 0x7762a1d4, 0x176, 0x263, 0x3, 0x10, 0x9, 0x9, 0x6, 0x2, 0x0, 0x1ff, 0x7731, 0x7, 0x8, 0x7, 0xfff, 0xd222, 0x10, 0x1, 0xf, 0x6, 0x1d, 0xa946, 0x80, 0x2, 0x89, 0x5, 0x7, 0x7ff, 0xaac1, 0xe, 0x60000000, 0x8, 0x3, 0x7, 0xfffffff8, 0xffffffff, 0x4, 0x2d7, 0x1, 0xb6, 0x9962, 0xff, 0x2, 0x400, 0x1, 0xfffffffc, 0x2, 0x6, 0x2d03, 0x5, 0xa49, 0x8956f4b8, 0xfffffff8, 0x8, 0x80, 0x9, 0x0, 0x1, 0x3, 0x6, 0xfffffffd, 0x7ff, 0x6, 0x80000001, 0xb5, 0x3, 0x9, 0x9, 0x400, 0x1, 0x0, 0x0, 0x7, 0xffff, 0x6, 0xf, 0x3, 0x6, 0x1, 0x7, 0x5, 0x3, 0x8, 0x9, 0x743, 0x4, 0x6, 0x3, 0x8, 0xffffff80, 0xffffff58, 0x0, 0x659, 0xffffffa7, 0x200, 0xa, 0xd64, 0x1, 0x3, 0x46, 0x5, 0x80000001, 0xd225, 0x6, 0x9, 0x401, 0xf, 0x6, 0xd04, 0x3, 0xfffffffd, 0x1, 0x80000001, 0x9, 0x144, 0xfffff617, 0x2, 0xd, 0x0, 0xffff4af6, 0x8, 0x469c, 0x7, 0x0, 0x10, 0x5, 0x8e2, 0xfffffffd, 0x80, 0xe, 0x9, 0x0, 0x5, 0x62f, 0x6, 0xfffff001, 0x9, 0x6, 0xd1eb, 0x0, 0xf, 0x5, 0x5, 0x6, 0xfff, 0x4, 0x81, 0x100, 0x6, 0x0, 0x7, 0x7fffffff, 0x1, 0x9, 0x8, 0x10, 0x4, 0x2, 0x1, 0x3d2, 0x9a, 0x8, 0x9, 0x3, 0x4, 0xbd73, 0x573, 0x7, 0x8, 0x7, 0x3, 0x8e24, 0x11, 0x8, 0xfffffffb, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x6f7, 0x7, 0x0, 0x5, 0x6, 0x2, 0x1, 0x1, 0xe, 0x1, 0x1, 0x7, 0x1, 0x1, 0x5, 0x7ff, 0x7, 0x6, 0x4, 0x0, 0x3, 0x2, 0x2, 0x100, 0xb, 0x6766350, 0xffffffe6, 0xc, 0x7, 0x9, 0x6, 0x3, 0x0, 0xa, 0x3, 0x7, 0x0, 0x5, 0xac65, 0x7e41, 0x400, 0x6, 0x1, 0xfffffff6, 0x0, 0x1000, 0x7]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x7, 0xe47}, {0xd, 0x7, 0x7}, 0x8, 0x7, 0x3d}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb108, 0x8, 0x50}, {0x7, 0xab6, 0xa}, 0x6c, 0x9, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x6, 0xc}, {0x101, 0x4, 0x8d02}, 0x32, 0x2, 0x6}}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x99}]}}, @f_rsvp6={{0xa}, {0x15d4, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_ACT={0x15a8, 0x6, [@m_bpf={0x68, 0x19, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x80000000, 0x6, 0xfffffffa, 0x2}}]}, {0x1f, 0x6, "e2511a724881ed26bade28512f6b9f8e0a27ee60014c36389c2d7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_nat={0x1f4, 0x15, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x153, 0xffffffffeffffff9, 0x4, 0x4}, @private=0xa010102, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff8, 0x5, 0x20000000, 0x4, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x0, 0x6, 0xfffffffb}, @remote, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x291d1712, 0x63f6ae06, 0x2, 0x4, 0x7}, @multicast2, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x3, 0xffffffffffffffff, 0x1, 0x3649b9ab}, @local, @multicast1, 0xff000000}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x12c, 0x5, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x0, 'security\x00', 0xd, 0xfbb}}]}, {0xcd, 0x6, "49a821b49fa9d62621ee4227c325acc7b77c2329f61c1f43eba9c9c4303b50c812ffccbfc064f8a63077d05558b80cc39ebeb7acf479e222de7eb6bd7fa58c95111c5321a28b91b3eebeb9e9adbc1df355e1d2027b27b1ac871d36662d944907442cf2dae5c73641ab98d92518bb67c745a0a43e0872ad8ab65a4b0f2dce98a8257a94fe3fdd5c572f1fb288d0687da064116e7e6d16a5e882449fb18676e8277c0cb62dda9c78555c1968446a96005c5e7a74851d16f5925aa1a343281fe3c2c2c0c8eda187f207e5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x164, 0xe, 0x0, 0x0, {{0x7}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x103, 0x6, {0x9, 'raw\x00', 0x7, 0x0, "c8f60919439b490551cbd4b4b4461ce9363966fd969be5d7b13f4175ee9b0ebe5c6f38f3b57ab19b324514c465fa53517c58a23df94b2e0ba627ac69fab76b9cd36c8dff42a044918bdb748d9892a849ed73e86119c78f7a3405531c4b658c4cb3a4cba632469f0a7e424648ae0171a55d4a8d1270ab459ad22033c872cffbb2cd64984559e11a4b74a5b8096ceff2e8f7870f2432f5d469a22f12b953baef879b556da625c54c4d47890556c876bbcf41df63d99afe1d6e7abd404a1d75b60c38bd3b06bcb0d4d3e31df80615b9b19f0b3d6cccf03b4d2345"}}]}, {0x1f, 0x6, "59089032ded6c7a0d9dcfdbc48d2a8d06a82cc3ed480779b6c0bda"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x10b8, 0x14, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x6c, 0x6, {0x8, 'nat\x00', 0xb, 0x7, "94a460326e1f4787f8a411d3f75a062fd683495cf0c545971454629ccfa3fc3611384bcc595902b8c576149b754b23637aebb57bc00fae957beae5fb47d4ba1e3933"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2bcc}}, 0x4) (async) symlink(&(0x7f00000031c0)='.\x00', &(0x7f0000003200)='./file1\x00') (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000003240)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000003280)='net/vlan/config\x00') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003300)={&(0x7f00000032c0)='qgroup_update_counters\x00', r2, 0x0, 0x5}, 0x18) (async) listen(r0, 0x5cc4) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x40, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008005}, 0x810) (async) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000003480), &(0x7f00000034c0)=@ng={0x4, 0x16, "3ca5694ba55d9425"}, 0xa, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003540), r2) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000003600)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x1c, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40010) (async, rerun: 64) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000003640), &(0x7f0000003680)=0x4) (async, rerun: 64) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000036c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000003700)=0x28) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 1.877837828s ago: executing program 1 (id=1345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(r4, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000400)=[0x8, 0x1]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f00000000c0), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0xe) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) close(0x3) syz_emit_ethernet(0x2a, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c200000008060001080006040001aaaaaaaaaa32ac1414ffffffffaa"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1809e67c5400000400000000031b000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x43, &(0x7f0000000240)=""/153, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) 1.389177148s ago: executing program 4 (id=1348): creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 1.370406989s ago: executing program 4 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) shmdt(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)={'#! ', '', [{0x20, 'memory.events\x00I\xeb\xaf\xd0\x18\xbe\xab\xa6I\xee\x19\xae1\xfaxZ\xf8R\xfcwT\xe9\xea\xaf\xd5\xe9\xeb\x13N\xc1H\xf2\x98\x95N\xba\x8f\xbc\x01h\x04\xb6\x8b0\xb6\x8c\x90y\xc8\xcc\xd2\xf3\xa0Q\xd0\x90\xea\xe3\xc0\xa9a\xe9\x93}\xed4\xc3\xc9Os\n\xc2\x17!\xbf\xf8\x8d`m\xd86\xef{`\x1e\xd4\xb9\xcfRy\n\v\xed7\x83]9\x1bS\x9a\xab:\xe7\x82\bl\x9caT\xf5\x16L\xecr\xf7\x93}\x86\x90\xcb\x15\xd2\xd5%\\\x16\xc7j\xd5\'D\xde\x84,\x15sl^A\xc8\xa7c(\xb2\x86C\xee\x1b^Z\xfa\xfe\xce\x9f\xb0\xe4\xc6N'}], 0xa, "dbc8ad21d7e2d82a40f93fa3c6580ce258c67812a41a6328cb725f73e047c5c801e4d3d0be0671326200e6df31781bb07f159147189d4e578a22745d7cd4bdea013cc159e1c45b2ffdc944e8e21d2fb30af3cc5cf8b38144fabe1325872c331d0372d40215d87aa95bd6d2b53d63ea107370b22003b43ec1a13b10a1ee1ae162d52905b4f301ce8b"}, 0x139) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="f4a7758f", 0x4}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x270}}], 0x1, 0x20040) rt_sigtimedwait(&(0x7f0000000240)={[0x1]}, &(0x7f0000000280), &(0x7f0000000340)={r5, r6+10000000}, 0x8) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00', 0x0, [0x0, 0x8001, 0xffff, 0xd7f, 0x4]}, &(0x7f0000000400)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 1.259794148s ago: executing program 2 (id=1352): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) epoll_create(0x8001) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@loopback, 0x23}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000002013f1788ce5d337a0100000a0000040c0019"], 0x24}, 0x1, 0x0, 0x0, 0x8045}, 0x20000800) 1.219708581s ago: executing program 2 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu>=0||6') r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) syz_read_part_table(0x1063, &(0x7f0000002100)="$eJzsz7FtAkEQBdC/ujv7LrI7sMtw6MyBY1fgQq4fWiBApJRARh9Ii/ZOUAIQvBfMSjPztZrwUFNJ0vVfJalza7y/roM+0/J2Sx2yPfT7U/KRObUuO+O6uPsdxtS3bkxKjj9TC3y3wUsr5/p//aqsnc9yi+Zvc8dTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpXQIAAP//DFsO/A==") 958.805622ms ago: executing program 2 (id=1357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 879.351099ms ago: executing program 2 (id=1359): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 879.189569ms ago: executing program 2 (id=1360): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) unshare(0x28000600) fcntl$getownex(r1, 0x10, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1, 0x1232, &(0x7f0000002300)="$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") r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 878.946139ms ago: executing program 1 (id=1361): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) rename(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000181100"/20, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xb) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @remote, 0x7}, 0x1c) 855.096091ms ago: executing program 0 (id=1362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000100), 0x3, 0x44e, &(0x7f0000000880)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 699.660053ms ago: executing program 0 (id=1363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000100) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) 619.850649ms ago: executing program 0 (id=1364): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000280)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) 398.645318ms ago: executing program 0 (id=1365): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 369.78349ms ago: executing program 4 (id=1366): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1067a, 0x1, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4b3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x17\\J\xd0\x13+7\xb6OY\\\xd1\x17\xd6x\xce\x16\x7f\xa5\'\xd2\xcfr\x1a') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x16) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 356.636961ms ago: executing program 0 (id=1367): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000500)={[{@noblock_validity}, {@dioread_lock}, {@journal_dev}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}, {@grpjquota}, {@noquota}]}, 0x1, 0x79d, &(0x7f0000000980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0101020000000000240012800b0001006970766c616e00001400028006000100020000000600020007000000"], 0x44}, 0x1, 0xba01}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async, rerun: 32) ftruncate(r4, 0xc17a) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="318300000000002c9300000019000000180001801400020073797a5f74756e000000000000009114f983546458395594f09a3b23d3515f49261627d8ae0cdd0e8cc5ade2cc649ec7e67ade572ddf7e7654e2e1ddfa887d96690626874f7d5cb480fe61303d098768551719c111a0d66159cdd428cfaabc2b37bb6acb861b1d13ab0d071a9da3ee6e1559783f53b10440cc7d099dd74d916ab863695876469e508e3e5511e8cac7ba13f3b6"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendfile(r7, r8, &(0x7f0000000480)=0x2, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x7, 0xa}, {0xfff3}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x10001}]}, 0x5c}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095", @ANYRES64=r10, @ANYRES64=r10, @ANYRESOCT], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 57.070625ms ago: executing program 2 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) pipe(&(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100e001e1a000000ff7f0000000000000000610000c8723f0b1e000000000000"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x2, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x21, 0x0, 0x1000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x20000, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x8, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1000009, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8, 0xff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 56.639525ms ago: executing program 3 (id=1369): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x76) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000380)=""/164, 0xa4}], 0x2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) 0s ago: executing program 0 (id=1370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): 974][ T4053] 9pnet: Could not find request transport: r [ 49.623308][ C1] hrtimer: interrupt took 45556 ns [ 49.670377][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.694762][ T31] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 49.708967][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 49.721400][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.721400][ T31] [ 49.734475][ T31] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 49.750387][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 49.762806][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.762806][ T31] [ 49.827146][ T4063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 49.861663][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.898026][ T4069] loop3: detected capacity change from 0 to 512 [ 49.914552][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.939931][ T4072] loop1: detected capacity change from 0 to 764 [ 49.950275][ T4069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.964315][ T4072] Symlink component flag not implemented [ 49.977427][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 49.981464][ T4072] Symlink component flag not implemented (129) [ 49.995949][ T4072] rock: directory entry would overflow storage [ 50.002211][ T4072] rock: sig=0x4f50, size=4, remaining=3 [ 50.007826][ T4072] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 50.023744][ T4069] EXT4-fs (loop3): 1 truncate cleaned up [ 50.034646][ T4069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.091844][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.128373][ T4086] sd 0:0:1:0: device reset [ 50.136181][ T4083] FAULT_INJECTION: forcing a failure. [ 50.136181][ T4083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.149300][ T4083] CPU: 0 UID: 0 PID: 4083 Comm: syz.0.220 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 50.149389][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.149402][ T4083] Call Trace: [ 50.149408][ T4083] [ 50.149414][ T4083] __dump_stack+0x1d/0x30 [ 50.149436][ T4083] dump_stack_lvl+0xe8/0x140 [ 50.149456][ T4083] dump_stack+0x15/0x1b [ 50.149472][ T4083] should_fail_ex+0x265/0x280 [ 50.149493][ T4083] should_fail+0xb/0x20 [ 50.149542][ T4083] should_fail_usercopy+0x1a/0x20 [ 50.149564][ T4083] _copy_from_user+0x1c/0xb0 [ 50.149611][ T4083] ___sys_sendmsg+0xc1/0x1d0 [ 50.149649][ T4083] __x64_sys_sendmsg+0xd4/0x160 [ 50.149745][ T4083] x64_sys_call+0x191e/0x2ff0 [ 50.149768][ T4083] do_syscall_64+0xd2/0x200 [ 50.149808][ T4083] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.149833][ T4083] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.149859][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.149899][ T4083] RIP: 0033:0x7fa54799ebe9 [ 50.149914][ T4083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.149933][ T4083] RSP: 002b:00007fa5463ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.149958][ T4083] RAX: ffffffffffffffda RBX: 00007fa547bc5fa0 RCX: 00007fa54799ebe9 [ 50.149994][ T4083] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 50.150007][ T4083] RBP: 00007fa5463ff090 R08: 0000000000000000 R09: 0000000000000000 [ 50.150020][ T4083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.150032][ T4083] R13: 00007fa547bc6038 R14: 00007fa547bc5fa0 R15: 00007ffcb6674da8 [ 50.150052][ T4083] [ 50.442727][ T4102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 50.458631][ T4102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.471301][ T4102] macvlan2: entered promiscuous mode [ 50.476670][ T4102] macvlan2: entered allmulticast mode [ 50.484959][ T4102] bond1: entered promiscuous mode [ 50.490294][ T4102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.534608][ T4102] bond1: left promiscuous mode [ 50.549141][ T4108] loop2: detected capacity change from 0 to 512 [ 50.561358][ T4108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.577540][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 50.606033][ T4108] EXT4-fs (loop2): 1 truncate cleaned up [ 50.639685][ T4114] loop4: detected capacity change from 0 to 512 [ 50.673808][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.689829][ T4114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.698503][ T4114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.734078][ T4114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.231: corrupted inode contents [ 50.750298][ T4114] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.231: mark_inode_dirty error [ 50.771133][ T4114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.231: corrupted inode contents [ 50.792173][ T4114] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.231: mark_inode_dirty error [ 50.807389][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.816771][ T4114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.231: corrupted inode contents [ 50.830596][ T4114] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 50.839721][ T4114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.231: corrupted inode contents [ 50.854744][ T4114] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.231: mark_inode_dirty error [ 50.867346][ T4114] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 50.940727][ T4114] EXT4-fs (loop4): 1 truncate cleaned up [ 50.949215][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 50.983328][ T4128] loop2: detected capacity change from 0 to 2048 [ 50.992672][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.007467][ T4114] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.035959][ T3564] loop2: p1 < > p4 [ 51.042397][ T3564] loop2: p4 size 8388608 extends beyond EOD, truncated [ 51.081512][ T4128] loop2: p1 < > p4 [ 51.088733][ T4128] loop2: p4 size 8388608 extends beyond EOD, truncated [ 51.170205][ T4134] netlink: 'syz.2.236': attribute type 13 has an invalid length. [ 51.178119][ T4134] netlink: 'syz.2.236': attribute type 17 has an invalid length. [ 51.300271][ T4134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.333251][ T4134] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.345565][ T4134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.454282][ T4150] loop2: detected capacity change from 0 to 512 [ 51.464227][ T4150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.477557][ T4150] EXT4-fs (loop2): 1 truncate cleaned up [ 51.484003][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.511813][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.585493][ T4160] FAULT_INJECTION: forcing a failure. [ 51.585493][ T4160] name failslab, interval 1, probability 0, space 0, times 0 [ 51.598254][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.0.247 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 51.598351][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.598367][ T4160] Call Trace: [ 51.598374][ T4160] [ 51.598383][ T4160] __dump_stack+0x1d/0x30 [ 51.598427][ T4160] dump_stack_lvl+0xe8/0x140 [ 51.598445][ T4160] dump_stack+0x15/0x1b [ 51.598460][ T4160] should_fail_ex+0x265/0x280 [ 51.598479][ T4160] should_failslab+0x8c/0xb0 [ 51.598573][ T4160] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.598637][ T4160] ? __alloc_skb+0x101/0x320 [ 51.598695][ T4160] __alloc_skb+0x101/0x320 [ 51.598722][ T4160] ? audit_log_start+0x365/0x6c0 [ 51.598751][ T4160] audit_log_start+0x380/0x6c0 [ 51.598783][ T4160] audit_seccomp+0x48/0x100 [ 51.598806][ T4160] ? __seccomp_filter+0x68c/0x10d0 [ 51.598825][ T4160] __seccomp_filter+0x69d/0x10d0 [ 51.598848][ T4160] ? __list_add_valid_or_report+0x38/0xe0 [ 51.598884][ T4160] ? _raw_spin_unlock+0x26/0x50 [ 51.598998][ T4160] __secure_computing+0x82/0x150 [ 51.599050][ T4160] syscall_trace_enter+0xcf/0x1e0 [ 51.599109][ T4160] do_syscall_64+0xac/0x200 [ 51.599133][ T4160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.599159][ T4160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.599182][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.599201][ T4160] RIP: 0033:0x7fa54799d5fc [ 51.599214][ T4160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.599230][ T4160] RSP: 002b:00007fa5463ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.599247][ T4160] RAX: ffffffffffffffda RBX: 00007fa547bc5fa0 RCX: 00007fa54799d5fc [ 51.599301][ T4160] RDX: 000000000000000f RSI: 00007fa5463ff0a0 RDI: 0000000000000003 [ 51.599312][ T4160] RBP: 00007fa5463ff090 R08: 0000000000000000 R09: 0000000000000000 [ 51.599323][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.599333][ T4160] R13: 00007fa547bc6038 R14: 00007fa547bc5fa0 R15: 00007ffcb6674da8 [ 51.599351][ T4160] [ 51.858072][ T4165] netlink: 'syz.0.248': attribute type 9 has an invalid length. [ 51.866402][ T4165] netlink: 399 bytes leftover after parsing attributes in process `syz.0.248'. [ 51.937938][ T4170] loop0: detected capacity change from 0 to 764 [ 51.949872][ T4170] Symlink component flag not implemented [ 51.973655][ T4170] Symlink component flag not implemented (129) [ 52.046435][ T4170] rock: directory entry would overflow storage [ 52.052812][ T4170] rock: sig=0x4f50, size=4, remaining=3 [ 52.058396][ T4170] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 52.358338][ T4183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 52.387816][ T4184] loop4: detected capacity change from 0 to 512 [ 52.464542][ T4184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.480157][ T4183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.488958][ T4183] FAULT_INJECTION: forcing a failure. [ 52.488958][ T4183] name failslab, interval 1, probability 0, space 0, times 0 [ 52.501665][ T4183] CPU: 1 UID: 0 PID: 4183 Comm: syz.1.254 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 52.501766][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.501857][ T4183] Call Trace: [ 52.501865][ T4183] [ 52.501875][ T4183] __dump_stack+0x1d/0x30 [ 52.501897][ T4183] dump_stack_lvl+0xe8/0x140 [ 52.501916][ T4183] dump_stack+0x15/0x1b [ 52.501938][ T4183] should_fail_ex+0x265/0x280 [ 52.501980][ T4183] should_failslab+0x8c/0xb0 [ 52.502108][ T4183] __kvmalloc_node_noprof+0x123/0x4e0 [ 52.502149][ T4183] ? alloc_netdev_mqs+0xa0/0xa20 [ 52.502263][ T4183] ? vsnprintf+0x829/0x890 [ 52.502299][ T4183] ? __pfx_macvlan_setup+0x10/0x10 [ 52.502332][ T4183] alloc_netdev_mqs+0xa0/0xa20 [ 52.502357][ T4183] rtnl_create_link+0x239/0x710 [ 52.502432][ T4183] rtnl_newlink_create+0x14c/0x620 [ 52.502491][ T4183] ? security_capable+0x83/0x90 [ 52.502524][ T4183] ? netlink_ns_capable+0x86/0xa0 [ 52.502566][ T4183] rtnl_newlink+0xf29/0x12d0 [ 52.502609][ T4183] ? cmp_ex_search+0x25/0x40 [ 52.502702][ T4183] ? bsearch+0x95/0xc0 [ 52.502754][ T4183] ? __pfx_cmp_ex_search+0x10/0x10 [ 52.502784][ T4183] ? strncpy_from_kernel_nofault+0x78/0x130 [ 52.502912][ T4183] ? __memcg_slab_free_hook+0x135/0x230 [ 52.503011][ T4183] ? __rcu_read_unlock+0x4f/0x70 [ 52.503032][ T4183] ? avc_has_perm_noaudit+0x1b1/0x200 [ 52.503061][ T4183] ? cred_has_capability+0x210/0x280 [ 52.503156][ T4183] ? selinux_capable+0x31/0x40 [ 52.503194][ T4183] ? security_capable+0x83/0x90 [ 52.503222][ T4183] ? ns_capable+0x7d/0xb0 [ 52.503249][ T4183] ? __pfx_rtnl_newlink+0x10/0x10 [ 52.503284][ T4183] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 52.503360][ T4183] netlink_rcv_skb+0x120/0x220 [ 52.503386][ T4183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.503430][ T4183] rtnetlink_rcv+0x1c/0x30 [ 52.503534][ T4183] netlink_unicast+0x5c0/0x690 [ 52.503592][ T4183] netlink_sendmsg+0x58b/0x6b0 [ 52.503690][ T4183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.503716][ T4183] __sock_sendmsg+0x142/0x180 [ 52.503745][ T4183] ____sys_sendmsg+0x31e/0x4e0 [ 52.503773][ T4183] ___sys_sendmsg+0x17b/0x1d0 [ 52.503820][ T4183] __x64_sys_sendmsg+0xd4/0x160 [ 52.503918][ T4183] x64_sys_call+0x191e/0x2ff0 [ 52.503947][ T4183] do_syscall_64+0xd2/0x200 [ 52.503977][ T4183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.504010][ T4183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.504115][ T4183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.504146][ T4183] RIP: 0033:0x7f618495ebe9 [ 52.504163][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.504181][ T4183] RSP: 002b:00007f61833bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.504207][ T4183] RAX: ffffffffffffffda RBX: 00007f6184b85fa0 RCX: 00007f618495ebe9 [ 52.504224][ T4183] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 52.504306][ T4183] RBP: 00007f61833bf090 R08: 0000000000000000 R09: 0000000000000000 [ 52.504322][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.504339][ T4183] R13: 00007f6184b86038 R14: 00007f6184b85fa0 R15: 00007ffddb86c988 [ 52.504364][ T4183] [ 52.866416][ T4184] EXT4-fs (loop4): 1 truncate cleaned up [ 52.871495][ T4191] loop2: detected capacity change from 0 to 2048 [ 52.872848][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.918128][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.922995][ T4195] loop3: detected capacity change from 0 to 2048 [ 52.968334][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.981111][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.020058][ T4195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.075570][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.097570][ T4212] veth0: entered promiscuous mode [ 53.135313][ T4217] loop1: detected capacity change from 0 to 764 [ 53.153712][ T4212] veth0: left promiscuous mode [ 53.160310][ T4217] Symlink component flag not implemented [ 53.169708][ T4217] Symlink component flag not implemented (129) [ 53.196899][ T4217] rock: directory entry would overflow storage [ 53.203150][ T4217] rock: sig=0x4f50, size=4, remaining=3 [ 53.208807][ T4217] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 53.223253][ T4220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.268'. [ 53.233321][ T4220] x_tables: ip_tables: udp match: only valid for protocol 17 [ 53.694004][ T4236] netlink: '+}[@': attribute type 21 has an invalid length. [ 53.727857][ T4237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'. [ 53.757778][ T4236] netlink: '+}[@': attribute type 6 has an invalid length. [ 53.765119][ T4236] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 53.771615][ T4237] x_tables: ip_tables: udp match: only valid for protocol 17 [ 53.862972][ T4244] loop4: detected capacity change from 0 to 164 [ 53.876054][ T4244] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.894977][ T4244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.278'. [ 53.906195][ T4246] loop0: detected capacity change from 0 to 764 [ 53.934501][ T4246] Symlink component flag not implemented [ 53.940389][ T4246] Symlink component flag not implemented (129) [ 53.951475][ T4246] rock: directory entry would overflow storage [ 53.957708][ T4246] rock: sig=0x4f50, size=4, remaining=3 [ 53.963293][ T4246] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 54.133361][ T4266] loop4: detected capacity change from 0 to 512 [ 54.152559][ T4266] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.179119][ T4266] EXT4-fs (loop4): 1 truncate cleaned up [ 54.193472][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.197426][ T4274] loop2: detected capacity change from 0 to 512 [ 54.208515][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 54.208532][ T29] audit: type=1400 audit(1754802002.423:2058): avc: denied { setattr } for pid=4264 comm="syz.4.289" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.299339][ T4274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.337503][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.339589][ T4280] loop0: detected capacity change from 0 to 764 [ 54.369798][ T4282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 54.380366][ T4280] Symlink component flag not implemented [ 54.380361][ T4274] EXT4-fs (loop2): 1 truncate cleaned up [ 54.380808][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.386089][ T4280] Symlink component flag not implemented (129) [ 54.443723][ T4280] rock: directory entry would overflow storage [ 54.450003][ T4280] rock: sig=0x4f50, size=4, remaining=3 [ 54.455683][ T4280] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 54.469468][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.490394][ T4286] bridge0: entered allmulticast mode [ 54.505463][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 54.523556][ T4286] bridge_slave_1: left allmulticast mode [ 54.529434][ T4286] bridge_slave_1: left promiscuous mode [ 54.535324][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.563276][ T29] audit: type=1326 audit(1754802002.763:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 54.586845][ T29] audit: type=1326 audit(1754802002.763:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 54.610491][ T29] audit: type=1326 audit(1754802002.763:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 54.633907][ T29] audit: type=1326 audit(1754802002.763:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 54.657390][ T29] audit: type=1326 audit(1754802002.763:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.2.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 54.681409][ T4292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'. [ 54.701346][ T4286] bridge_slave_0: left allmulticast mode [ 54.707108][ T4286] bridge_slave_0: left promiscuous mode [ 54.707894][ T29] audit: type=1400 audit(1754802002.893:2064): avc: denied { write } for pid=4285 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.712948][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.733149][ T29] audit: type=1400 audit(1754802002.893:2065): avc: denied { nlmsg_write } for pid=4285 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.760695][ T29] audit: type=1400 audit(1754802002.913:2066): avc: denied { setopt } for pid=4293 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.780179][ T29] audit: type=1400 audit(1754802002.913:2067): avc: denied { write } for pid=4293 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.859004][ T4286] bridge0 (unregistering): left allmulticast mode [ 54.979156][ T4310] loop0: detected capacity change from 0 to 512 [ 55.002121][ T4310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.036910][ T4310] EXT4-fs (loop0): 1 truncate cleaned up [ 55.043376][ T4310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.106677][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.182329][ T4324] loop4: detected capacity change from 0 to 512 [ 55.196499][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 55.213624][ T4324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.227597][ T4324] EXT4-fs (loop4): 1 truncate cleaned up [ 55.235288][ T4324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.336099][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 55.378479][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.573211][ T4370] loop0: detected capacity change from 0 to 512 [ 55.610530][ T4370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.622869][ T4371] loop4: detected capacity change from 0 to 512 [ 55.628007][ T4375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 55.648919][ T4370] EXT4-fs (loop0): 1 truncate cleaned up [ 55.657263][ T4370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.681892][ T4371] EXT4-fs (loop4): too many log groups per flexible block group [ 55.689740][ T4371] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 55.696928][ T4371] EXT4-fs (loop4): mount failed [ 55.720581][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.801657][ T4394] loop0: detected capacity change from 0 to 764 [ 55.814037][ T4394] Symlink component flag not implemented [ 55.822532][ T4394] Symlink component flag not implemented (129) [ 55.844446][ T4398] netlink: 'syz.1.342': attribute type 21 has an invalid length. [ 55.852411][ T4394] rock: directory entry would overflow storage [ 55.858654][ T4394] rock: sig=0x4f50, size=4, remaining=3 [ 55.864225][ T4394] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.324300][ T4416] loop0: detected capacity change from 0 to 764 [ 56.374554][ T4416] Symlink component flag not implemented [ 56.381417][ T4416] Symlink component flag not implemented (129) [ 56.390865][ T4416] rock: directory entry would overflow storage [ 56.397087][ T4416] rock: sig=0x4f50, size=4, remaining=3 [ 56.402680][ T4416] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.707818][ T4447] loop0: detected capacity change from 0 to 764 [ 56.774539][ T4447] Symlink component flag not implemented [ 56.780536][ T4447] Symlink component flag not implemented (129) [ 56.792555][ T4453] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.814716][ T4447] rock: directory entry would overflow storage [ 56.820991][ T4447] rock: sig=0x4f50, size=4, remaining=3 [ 56.826722][ T4447] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 56.891993][ T4458] sd 0:0:1:0: device reset [ 56.947110][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.956008][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.529681][ T4471] __nla_validate_parse: 2 callbacks suppressed [ 57.529722][ T4471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.370'. [ 57.621153][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.369'. [ 57.661621][ T4478] binfmt_misc: register: failed to install interpreter file ./file0 [ 57.834530][ T4490] loop4: detected capacity change from 0 to 512 [ 57.863451][ T4490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.904239][ T4490] EXT4-fs (loop4): 1 truncate cleaned up [ 57.920810][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.007641][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.040783][ T4514] sd 0:0:1:0: device reset [ 59.249611][ T4525] sd 0:0:1:0: device reset [ 59.263218][ T4523] bridge0: entered allmulticast mode [ 59.268779][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 59.279006][ T4523] bridge_slave_1: left allmulticast mode [ 59.284831][ T4523] bridge_slave_1: left promiscuous mode [ 59.290783][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.313148][ T4523] bridge_slave_0: left allmulticast mode [ 59.318879][ T4523] bridge_slave_0: left promiscuous mode [ 59.324727][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.340435][ T4523] bridge0 (unregistering): left allmulticast mode [ 59.645687][ T4539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 59.756652][ T4547] loop1: detected capacity change from 0 to 512 [ 59.766792][ T4547] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.780251][ T4547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.821057][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 59.821072][ T29] audit: type=1326 audit(1754802008.033:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.1.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f618495ebe9 code=0x0 [ 59.873816][ T29] audit: type=1400 audit(1754802008.083:2299): avc: denied { name_bind } for pid=4546 comm="syz.1.395" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.909929][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 59.992070][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 60.111167][ T29] audit: type=1326 audit(1754802008.323:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.134758][ T29] audit: type=1326 audit(1754802008.323:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.165856][ T29] audit: type=1326 audit(1754802008.353:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.189258][ T29] audit: type=1326 audit(1754802008.353:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.212956][ T29] audit: type=1326 audit(1754802008.353:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.236625][ T29] audit: type=1326 audit(1754802008.353:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.260386][ T29] audit: type=1326 audit(1754802008.353:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.283771][ T29] audit: type=1326 audit(1754802008.353:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4566 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 60.381970][ T4573] loop3: detected capacity change from 0 to 2048 [ 60.412847][ T4582] capability: warning: `syz.2.409' uses 32-bit capabilities (legacy support in use) [ 60.424654][ T3564] loop3: p1 < > p3 < p5 > p4 [ 60.425748][ T4582] FAULT_INJECTION: forcing a failure. [ 60.425748][ T4582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.429406][ T3564] loop3: partition table partially beyond EOD, truncated [ 60.442545][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.2.409 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 60.442579][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.442594][ T4582] Call Trace: [ 60.442601][ T4582] [ 60.442611][ T4582] __dump_stack+0x1d/0x30 [ 60.442639][ T4582] dump_stack_lvl+0xe8/0x140 [ 60.442738][ T4582] dump_stack+0x15/0x1b [ 60.442783][ T4582] should_fail_ex+0x265/0x280 [ 60.442844][ T4582] should_fail+0xb/0x20 [ 60.442878][ T4582] should_fail_usercopy+0x1a/0x20 [ 60.442980][ T4582] _copy_to_user+0x20/0xa0 [ 60.443086][ T4582] simple_read_from_buffer+0xb5/0x130 [ 60.443124][ T4582] proc_fail_nth_read+0x10e/0x150 [ 60.443165][ T4582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.443273][ T4582] vfs_read+0x1a8/0x770 [ 60.443312][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 60.443342][ T4582] ? __fget_files+0x184/0x1c0 [ 60.443388][ T4582] ksys_read+0xda/0x1a0 [ 60.443456][ T4582] __x64_sys_read+0x40/0x50 [ 60.443492][ T4582] x64_sys_call+0x27bc/0x2ff0 [ 60.443530][ T4582] do_syscall_64+0xd2/0x200 [ 60.443568][ T4582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.443642][ T4582] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.443688][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.443758][ T4582] RIP: 0033:0x7fb68063d5fc [ 60.443785][ T4582] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.443815][ T4582] RSP: 002b:00007fb67f09f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.443850][ T4582] RAX: ffffffffffffffda RBX: 00007fb680865fa0 RCX: 00007fb68063d5fc [ 60.443878][ T4582] RDX: 000000000000000f RSI: 00007fb67f09f0a0 RDI: 0000000000000003 [ 60.443891][ T4582] RBP: 00007fb67f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.443915][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.443977][ T4582] R13: 00007fb680866038 R14: 00007fb680865fa0 R15: 00007ffc066a90b8 [ 60.444016][ T4582] [ 60.639618][ T4591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'. [ 60.666941][ T4591] x_tables: ip_tables: udp match: only valid for protocol 17 [ 60.686834][ T3564] loop3: p1 start 100663296 is beyond EOD, truncated [ 60.697864][ T3564] loop3: p4 size 395008 extends beyond EOD, truncated [ 60.701818][ T4600] loop1: detected capacity change from 0 to 512 [ 60.706179][ T3564] loop3: p5 size 395008 extends beyond EOD, truncated [ 60.721694][ T4596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4596 comm=syz.3.407 [ 60.722719][ T4600] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.735538][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 60.773926][ T4600] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 60.796710][ T4573] loop3: p1 < > p3 < p5 > p4 [ 60.801701][ T4573] loop3: partition table partially beyond EOD, truncated [ 60.807207][ T4607] bridge0: entered allmulticast mode [ 60.813532][ T4573] loop3: p1 start 100663296 is beyond EOD, truncated [ 60.814735][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 60.821997][ T4573] loop3: p4 size 395008 extends beyond EOD, truncated [ 60.845718][ T4573] loop3: p5 size 395008 extends beyond EOD, truncated [ 60.858149][ T4609] team0: Device veth1_vlan failed to register rx_handler [ 60.866379][ T4600] EXT4-fs (loop1): 1 truncate cleaned up [ 60.873334][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.876645][ T3565] udevd[3565]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 60.883743][ T4600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.894450][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 60.921987][ T4607] bridge_slave_1: left allmulticast mode [ 60.927755][ T4607] bridge_slave_1: left promiscuous mode [ 60.930555][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 60.933510][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.944528][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 60.953768][ T3580] udevd[3580]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.977263][ T4607] bridge_slave_0: left allmulticast mode [ 60.982963][ T4607] bridge_slave_0: left promiscuous mode [ 60.988678][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.005217][ T4607] bridge0 (unregistering): left allmulticast mode [ 61.031400][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.233382][ T4622] FAULT_INJECTION: forcing a failure. [ 61.233382][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 61.246069][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.1.422 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 61.246159][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.246198][ T4622] Call Trace: [ 61.246206][ T4622] [ 61.246216][ T4622] __dump_stack+0x1d/0x30 [ 61.246239][ T4622] dump_stack_lvl+0xe8/0x140 [ 61.246260][ T4622] dump_stack+0x15/0x1b [ 61.246331][ T4622] should_fail_ex+0x265/0x280 [ 61.246391][ T4622] should_failslab+0x8c/0xb0 [ 61.246417][ T4622] kmem_cache_alloc_noprof+0x50/0x310 [ 61.246449][ T4622] ? audit_log_start+0x365/0x6c0 [ 61.246509][ T4622] audit_log_start+0x365/0x6c0 [ 61.246549][ T4622] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 61.246597][ T4622] audit_seccomp+0x48/0x100 [ 61.246695][ T4622] ? __seccomp_filter+0x68c/0x10d0 [ 61.246724][ T4622] __seccomp_filter+0x69d/0x10d0 [ 61.246750][ T4622] ? __list_add_valid_or_report+0x38/0xe0 [ 61.246847][ T4622] ? _raw_spin_unlock+0x26/0x50 [ 61.246940][ T4622] __secure_computing+0x82/0x150 [ 61.246968][ T4622] syscall_trace_enter+0xcf/0x1e0 [ 61.247006][ T4622] do_syscall_64+0xac/0x200 [ 61.247033][ T4622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.247067][ T4622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.247154][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.247181][ T4622] RIP: 0033:0x7f618495d5fc [ 61.247199][ T4622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.247220][ T4622] RSP: 002b:00007f61833bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.247241][ T4622] RAX: ffffffffffffffda RBX: 00007f6184b85fa0 RCX: 00007f618495d5fc [ 61.247327][ T4622] RDX: 000000000000000f RSI: 00007f61833bf0a0 RDI: 0000000000000006 [ 61.247343][ T4622] RBP: 00007f61833bf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.247359][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.247375][ T4622] R13: 00007f6184b86038 R14: 00007f6184b85fa0 R15: 00007ffddb86c988 [ 61.247422][ T4622] [ 61.613121][ T4631] netlink: 'syz.1.425': attribute type 21 has an invalid length. [ 61.791125][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 61.872843][ T4644] loop3: detected capacity change from 0 to 764 [ 61.882667][ T4644] Symlink component flag not implemented [ 61.897715][ T4644] Symlink component flag not implemented (129) [ 61.906248][ T4644] rock: directory entry would overflow storage [ 61.912488][ T4644] rock: sig=0x4f50, size=4, remaining=3 [ 61.918162][ T4644] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 62.117017][ T4652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32528 sclass=netlink_audit_socket pid=4652 comm=syz.3.434 [ 62.129708][ T4652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4652 comm=syz.3.434 [ 62.334906][ T4666] netlink: 'syz.3.439': attribute type 8 has an invalid length. [ 62.466953][ T4681] sd 0:0:1:0: device reset [ 62.483146][ T4683] FAULT_INJECTION: forcing a failure. [ 62.483146][ T4683] name failslab, interval 1, probability 0, space 0, times 0 [ 62.496051][ T4683] CPU: 0 UID: 0 PID: 4683 Comm: syz.2.447 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 62.496158][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.496175][ T4683] Call Trace: [ 62.496182][ T4683] [ 62.496190][ T4683] __dump_stack+0x1d/0x30 [ 62.496212][ T4683] dump_stack_lvl+0xe8/0x140 [ 62.496231][ T4683] dump_stack+0x15/0x1b [ 62.496251][ T4683] should_fail_ex+0x265/0x280 [ 62.496276][ T4683] should_failslab+0x8c/0xb0 [ 62.496302][ T4683] kmem_cache_alloc_noprof+0x50/0x310 [ 62.496339][ T4683] ? security_file_alloc+0x32/0x100 [ 62.496465][ T4683] security_file_alloc+0x32/0x100 [ 62.496587][ T4683] init_file+0x5c/0x1d0 [ 62.496624][ T4683] alloc_empty_file+0x8b/0x200 [ 62.496655][ T4683] alloc_file_pseudo+0xc6/0x160 [ 62.496695][ T4683] __shmem_file_setup+0x1de/0x210 [ 62.496811][ T4683] shmem_file_setup+0x3b/0x50 [ 62.496925][ T4683] __se_sys_memfd_create+0x2c3/0x590 [ 62.496955][ T4683] __x64_sys_memfd_create+0x31/0x40 [ 62.496983][ T4683] x64_sys_call+0x2abe/0x2ff0 [ 62.497007][ T4683] do_syscall_64+0xd2/0x200 [ 62.497076][ T4683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.497100][ T4683] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.497171][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.497201][ T4683] RIP: 0033:0x7fb68063ebe9 [ 62.497226][ T4683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.497268][ T4683] RSP: 002b:00007fb67f09ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 62.497292][ T4683] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fb68063ebe9 [ 62.497310][ T4683] RDX: 00007fb67f09eef0 RSI: 0000000000000000 RDI: 00007fb6806c27e8 [ 62.497327][ T4683] RBP: 0000200000000180 R08: 00007fb67f09ebb7 R09: 00007fb67f09ee40 [ 62.497343][ T4683] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 62.497359][ T4683] R13: 00007fb67f09eef0 R14: 00007fb67f09eeb0 R15: 0000200000000080 [ 62.497396][ T4683] [ 62.766298][ T4693] netlink: 'syz.2.451': attribute type 21 has an invalid length. [ 62.829493][ T4700] loop4: detected capacity change from 0 to 512 [ 62.841609][ T4700] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.850620][ T4700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.958878][ T4718] netlink: 'syz.2.458': attribute type 21 has an invalid length. [ 62.985825][ T4722] loop1: detected capacity change from 0 to 512 [ 62.994096][ T4722] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.001673][ T4722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.019154][ T4724] loop2: detected capacity change from 0 to 764 [ 63.027710][ T4724] Symlink component flag not implemented [ 63.033533][ T4724] Symlink component flag not implemented (129) [ 63.034814][ T4724] rock: directory entry would overflow storage [ 63.034824][ T4724] rock: sig=0x4f50, size=4, remaining=3 [ 63.034844][ T4724] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.679357][ T4746] netlink: 'syz.4.468': attribute type 21 has an invalid length. [ 63.736707][ T4752] __nla_validate_parse: 1 callbacks suppressed [ 63.736725][ T4752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 63.752125][ T4752] x_tables: ip_tables: udp match: only valid for protocol 17 [ 63.790992][ T4755] sd 0:0:1:0: device reset [ 64.203645][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 64.282876][ T4790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'. [ 64.291986][ T4790] x_tables: ip_tables: udp match: only valid for protocol 17 [ 64.941526][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 65.013233][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 65.058392][ T4813] loop1: detected capacity change from 0 to 512 [ 65.126798][ T4813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.296822][ T4813] EXT4-fs (loop1): 1 truncate cleaned up [ 65.302991][ T4813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.330847][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 65.330864][ T29] audit: type=1326 audit(1754802013.543:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 65.390478][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.412923][ T4829] loop2: detected capacity change from 0 to 764 [ 65.419576][ T29] audit: type=1326 audit(1754802013.583:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 65.443129][ T29] audit: type=1326 audit(1754802013.583:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 65.509330][ T4832] loop4: detected capacity change from 0 to 764 [ 65.536509][ T4832] Symlink component flag not implemented [ 65.549933][ T4832] Symlink component flag not implemented (129) [ 65.558793][ T4832] rock: directory entry would overflow storage [ 65.565011][ T4832] rock: sig=0x4f50, size=4, remaining=3 [ 65.570627][ T4832] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 65.570682][ T4829] Symlink component flag not implemented [ 65.590084][ T4829] Symlink component flag not implemented (129) [ 65.609971][ T4829] rock: directory entry would overflow storage [ 65.616350][ T4829] rock: sig=0x4f50, size=4, remaining=3 [ 65.622019][ T4829] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 65.680511][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 65.682762][ T29] audit: type=1326 audit(1754802013.893:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.1.500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f618495ebe9 code=0x0 [ 65.733927][ T4844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 65.756310][ T4847] netlink: 'syz.3.505': attribute type 21 has an invalid length. [ 66.542488][ T4870] loop3: detected capacity change from 0 to 512 [ 66.552985][ T4870] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.717534][ T4875] loop2: detected capacity change from 0 to 512 [ 66.726600][ T4875] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.763085][ T4879] loop0: detected capacity change from 0 to 512 [ 66.856096][ T4875] EXT4-fs (loop2): 1 truncate cleaned up [ 66.862220][ T4875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.878751][ T4870] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 66.888850][ T4870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 66.898867][ T4870] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.511: Failed to acquire dquot type 1 [ 66.925193][ T4879] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.939269][ T4870] EXT4-fs (loop3): 1 truncate cleaned up [ 66.946522][ T4879] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 66.956874][ T4879] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 66.966805][ T4879] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.514: Failed to acquire dquot type 1 [ 67.035760][ T4870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.161445][ T4879] EXT4-fs (loop0): 1 truncate cleaned up [ 67.276579][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 67.307413][ T4891] loop3: detected capacity change from 0 to 512 [ 67.318763][ T4891] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.357403][ T4891] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 67.367563][ T4891] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 67.367613][ T4891] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.518: Failed to acquire dquot type 1 [ 67.399674][ T4891] EXT4-fs (loop3): 1 truncate cleaned up [ 67.465314][ T4905] netlink: 10700 bytes leftover after parsing attributes in process `syz.2.521'. [ 67.483250][ T4905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.506918][ T4917] loop4: detected capacity change from 0 to 512 [ 67.514732][ T4905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.530224][ T4917] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.562691][ T4917] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 67.574914][ T4917] EXT4-fs (loop4): 1 truncate cleaned up [ 67.651235][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 67.835882][ T4942] bond0: (slave syz_tun): Releasing backup interface [ 68.813012][ T5001] __nla_validate_parse: 3 callbacks suppressed [ 68.813027][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 68.866163][ T5009] loop0: detected capacity change from 0 to 512 [ 68.873578][ T5009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.883879][ T5008] loop2: detected capacity change from 0 to 512 [ 68.894323][ T5008] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.909235][ T5011] loop4: detected capacity change from 0 to 512 [ 68.923383][ T5009] EXT4-fs (loop0): 1 truncate cleaned up [ 68.932854][ T5013] netlink: 14 bytes leftover after parsing attributes in process `syz.3.562'. [ 68.947447][ T5008] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 68.968514][ T5011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.981126][ T5011] EXT4-fs (loop4): 1 truncate cleaned up [ 68.987553][ T5008] EXT4-fs (loop2): 1 truncate cleaned up [ 69.255843][ T5044] FAULT_INJECTION: forcing a failure. [ 69.255843][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 69.268960][ T5044] CPU: 0 UID: 0 PID: 5044 Comm: syz.4.576 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 69.269022][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.269036][ T5044] Call Trace: [ 69.269043][ T5044] [ 69.269051][ T5044] __dump_stack+0x1d/0x30 [ 69.269075][ T5044] dump_stack_lvl+0xe8/0x140 [ 69.269102][ T5044] dump_stack+0x15/0x1b [ 69.269121][ T5044] should_fail_ex+0x265/0x280 [ 69.269215][ T5044] should_failslab+0x8c/0xb0 [ 69.269297][ T5044] kmem_cache_alloc_noprof+0x50/0x310 [ 69.269334][ T5044] ? mm_alloc+0x2b/0xa0 [ 69.269367][ T5044] mm_alloc+0x2b/0xa0 [ 69.269396][ T5044] alloc_bprm+0x20e/0x350 [ 69.269422][ T5044] do_execveat_common+0x12e/0x750 [ 69.269461][ T5044] ? getname_flags+0x154/0x3b0 [ 69.269500][ T5044] __x64_sys_execveat+0x73/0x90 [ 69.269543][ T5044] x64_sys_call+0x1fec/0x2ff0 [ 69.269573][ T5044] do_syscall_64+0xd2/0x200 [ 69.269642][ T5044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.269676][ T5044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.269709][ T5044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.269774][ T5044] RIP: 0033:0x7f901d2eebe9 [ 69.269797][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.269815][ T5044] RSP: 002b:00007f901bd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 69.269892][ T5044] RAX: ffffffffffffffda RBX: 00007f901d516090 RCX: 00007f901d2eebe9 [ 69.269992][ T5044] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 69.270004][ T5044] RBP: 00007f901bd2e090 R08: 0000000000001000 R09: 0000000000000000 [ 69.270016][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.270028][ T5044] R13: 00007f901d516128 R14: 00007f901d516090 R15: 00007ffe16aca318 [ 69.270052][ T5044] [ 69.493895][ T5053] loop0: detected capacity change from 0 to 512 [ 69.523562][ T5053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.540528][ T5053] EXT4-fs (loop0): 1 truncate cleaned up [ 69.627368][ T5059] loop0: detected capacity change from 0 to 512 [ 69.643096][ T5059] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.678375][ T5059] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 69.693991][ T5059] EXT4-fs (loop0): 1 truncate cleaned up [ 69.695404][ T5065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'. [ 69.701416][ T5059] EXT4-fs mount: 16 callbacks suppressed [ 69.701434][ T5059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.709113][ T5065] x_tables: ip_tables: udp match: only valid for protocol 17 [ 69.739505][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.794860][ T5071] loop1: detected capacity change from 0 to 764 [ 69.813667][ T5071] Symlink component flag not implemented [ 69.819768][ T5071] Symlink component flag not implemented (129) [ 69.827289][ T5071] rock: directory entry would overflow storage [ 69.833497][ T5071] rock: sig=0x4f50, size=4, remaining=3 [ 69.839309][ T5071] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.268999][ T5101] netlink: 14 bytes leftover after parsing attributes in process `syz.2.596'. [ 71.063043][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 71.063132][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 71.063145][ T29] audit: type=1326 audit(1754802019.273:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.128963][ T29] audit: type=1326 audit(1754802019.313:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.152350][ T29] audit: type=1326 audit(1754802019.313:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.176009][ T29] audit: type=1326 audit(1754802019.313:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.203164][ T5123] 9pnet_fd: Insufficient options for proto=fd [ 71.236135][ T29] audit: type=1326 audit(1754802019.453:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.287773][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 71.335064][ T29] audit: type=1326 audit(1754802019.453:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.358591][ T29] audit: type=1326 audit(1754802019.453:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.382044][ T29] audit: type=1326 audit(1754802019.453:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.405731][ T29] audit: type=1326 audit(1754802019.453:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.429491][ T29] audit: type=1326 audit(1754802019.453:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5125 comm="syz.3.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 71.577070][ T5143] loop2: detected capacity change from 0 to 8192 [ 71.583969][ T5143] vfat: Unknown parameter 'ÿÿÿÿ' [ 71.700927][ T5156] 9pnet_fd: Insufficient options for proto=fd [ 71.840739][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 71.928525][ T5162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.619'. [ 72.402133][ T5168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 72.447391][ T5170] loop3: detected capacity change from 0 to 512 [ 72.485359][ T5170] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.508550][ T5170] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.622: Failed to acquire dquot type 1 [ 72.602571][ T5170] EXT4-fs (loop3): 1 truncate cleaned up [ 72.686531][ T5170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.708569][ T5188] 9pnet_fd: Insufficient options for proto=fd [ 72.748208][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.761835][ T5190] loop4: detected capacity change from 0 to 512 [ 72.792602][ T5190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.826685][ T5190] EXT4-fs (loop4): 1 truncate cleaned up [ 72.832903][ T5190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.949761][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.210429][ T5214] netlink: 'syz.1.635': attribute type 8 has an invalid length. [ 73.230533][ T5214] loop1: detected capacity change from 0 to 1024 [ 73.275593][ T5214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.286278][ T5221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 73.323950][ T5225] FAULT_INJECTION: forcing a failure. [ 73.323950][ T5225] name failslab, interval 1, probability 0, space 0, times 0 [ 73.336835][ T5225] CPU: 0 UID: 0 PID: 5225 Comm: syz.4.640 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 73.336872][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.336889][ T5225] Call Trace: [ 73.336897][ T5225] [ 73.336969][ T5225] __dump_stack+0x1d/0x30 [ 73.336990][ T5225] dump_stack_lvl+0xe8/0x140 [ 73.337009][ T5225] dump_stack+0x15/0x1b [ 73.337031][ T5225] should_fail_ex+0x265/0x280 [ 73.337059][ T5225] should_failslab+0x8c/0xb0 [ 73.337222][ T5225] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 73.337275][ T5225] ? alloc_inode+0x9a/0x170 [ 73.337306][ T5225] alloc_inode+0x9a/0x170 [ 73.337335][ T5225] alloc_anon_inode+0x1e/0x170 [ 73.337440][ T5225] aio_setup_ring+0x91/0x760 [ 73.337470][ T5225] ioctx_alloc+0x2c4/0x4e0 [ 73.337605][ T5225] ? fput+0x8f/0xc0 [ 73.337676][ T5225] __se_sys_io_setup+0x6b/0x1b0 [ 73.337709][ T5225] __x64_sys_io_setup+0x31/0x40 [ 73.337738][ T5225] x64_sys_call+0x2eff/0x2ff0 [ 73.337781][ T5225] do_syscall_64+0xd2/0x200 [ 73.337808][ T5225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.337889][ T5225] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.337919][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.337985][ T5225] RIP: 0033:0x7f901d2eebe9 [ 73.338001][ T5225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.338023][ T5225] RSP: 002b:00007f901bd4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 73.338048][ T5225] RAX: ffffffffffffffda RBX: 00007f901d515fa0 RCX: 00007f901d2eebe9 [ 73.338065][ T5225] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 73.338134][ T5225] RBP: 00007f901bd4f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.338147][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.338163][ T5225] R13: 00007f901d516038 R14: 00007f901d515fa0 R15: 00007ffe16aca318 [ 73.338188][ T5225] [ 73.550672][ T5228] bridge0: entered allmulticast mode [ 73.557268][ T5228] bridge_slave_1: left allmulticast mode [ 73.562935][ T5228] bridge_slave_1: left promiscuous mode [ 73.568748][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.586443][ T5230] 9pnet_fd: Insufficient options for proto=fd [ 73.609917][ T5233] loop4: detected capacity change from 0 to 512 [ 73.618218][ T5214] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 73.622078][ T5233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.644434][ T5228] bridge_slave_0: left allmulticast mode [ 73.650460][ T5228] bridge_slave_0: left promiscuous mode [ 73.656454][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.673587][ T5233] EXT4-fs (loop4): 1 truncate cleaned up [ 73.674058][ T5228] bridge0 (unregistering): left allmulticast mode [ 73.682247][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.708727][ T5239] loop2: detected capacity change from 0 to 512 [ 73.715726][ T5239] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.729567][ T5239] EXT4-fs (loop2): 1 truncate cleaned up [ 73.738879][ T5239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.739342][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.773926][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.893539][ T5255] __nla_validate_parse: 2 callbacks suppressed [ 73.893558][ T5255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'. [ 73.926967][ T5260] 9pnet_fd: Insufficient options for proto=fd [ 73.956887][ T5263] loop3: detected capacity change from 0 to 512 [ 73.971146][ T5263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.002075][ T5263] EXT4-fs (loop3): 1 truncate cleaned up [ 74.032320][ T5273] loop0: detected capacity change from 0 to 512 [ 74.038113][ T5263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.062723][ T5270] loop4: detected capacity change from 0 to 512 [ 74.074607][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.085661][ T5270] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.097030][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.112719][ T5273] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.133803][ T5273] EXT4-fs (loop0): 1 truncate cleaned up [ 74.140702][ T5273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.153688][ T5270] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.657: Failed to acquire dquot type 1 [ 74.165581][ T5270] EXT4-fs (loop4): 1 truncate cleaned up [ 74.171818][ T5270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.186874][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.212089][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 74.212661][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.247854][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.661'. [ 74.257281][ T5289] x_tables: ip_tables: udp match: only valid for protocol 17 [ 74.402077][ T5296] 9pnet_fd: Insufficient options for proto=fd [ 74.917604][ T5318] loop1: detected capacity change from 0 to 512 [ 74.928488][ T5318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.958226][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 74.973975][ T5318] EXT4-fs (loop1): 1 truncate cleaned up [ 74.979917][ T5317] loop3: detected capacity change from 0 to 764 [ 74.980510][ T5318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.028447][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.039624][ T5317] Symlink component flag not implemented [ 75.051889][ T5317] Symlink component flag not implemented (129) [ 75.072595][ T5329] 9pnet_fd: Insufficient options for proto=fd [ 75.080616][ T5317] rock: directory entry would overflow storage [ 75.086845][ T5317] rock: sig=0x4f50, size=4, remaining=3 [ 75.092424][ T5317] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 75.154672][ T5338] loop4: detected capacity change from 0 to 512 [ 75.162890][ T5338] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.202615][ T5338] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.684: Failed to acquire dquot type 1 [ 75.230322][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 75.261498][ T5338] EXT4-fs (loop4): 1 truncate cleaned up [ 75.302818][ T5338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.408374][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.498518][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 75.589188][ T5370] loop4: detected capacity change from 0 to 512 [ 75.647417][ T5370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.666688][ T5370] EXT4-fs (loop4): 1 truncate cleaned up [ 75.681781][ T5370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.761344][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 75.774401][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.802152][ T5384] 9pnet_fd: Insufficient options for proto=fd [ 75.849757][ T5391] loop0: detected capacity change from 0 to 764 [ 75.922317][ T5391] Symlink component flag not implemented [ 75.947685][ T5393] loop1: detected capacity change from 0 to 512 [ 75.957540][ T5391] Symlink component flag not implemented (129) [ 75.974452][ T5391] rock: directory entry would overflow storage [ 75.980681][ T5391] rock: sig=0x4f50, size=4, remaining=3 [ 75.986434][ T5391] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.016909][ T5393] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.049812][ T5393] EXT4-fs (loop1): 1 truncate cleaned up [ 76.063326][ T5393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.125822][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.127551][ T5403] loop2: detected capacity change from 0 to 512 [ 76.150135][ T5405] loop0: detected capacity change from 0 to 512 [ 76.167948][ T5403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.189232][ T5403] EXT4-fs (loop2): 1 truncate cleaned up [ 76.195617][ T5405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.216688][ T5403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.231406][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 76.246384][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 76.246402][ T29] audit: type=1400 audit(1754802024.463:3005): avc: denied { write } for pid=5404 comm="syz.0.701" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.352459][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.411109][ T5405] mmap: syz.0.701 (5405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.446492][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.496283][ T5425] sd 0:0:1:0: device reset [ 76.551932][ T5429] loop0: detected capacity change from 0 to 764 [ 76.570097][ T5424] loop4: detected capacity change from 0 to 8192 [ 76.644332][ T29] audit: type=1400 audit(1754802024.833:3006): avc: denied { mount } for pid=5423 comm="syz.4.709" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.706167][ T5429] Symlink component flag not implemented [ 76.715226][ T5429] Symlink component flag not implemented (129) [ 76.718790][ T29] audit: type=1326 audit(1754802024.893:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.744984][ T29] audit: type=1326 audit(1754802024.893:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.768433][ T29] audit: type=1326 audit(1754802024.893:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.768475][ T29] audit: type=1326 audit(1754802024.893:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.815254][ T29] audit: type=1326 audit(1754802024.893:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.839128][ T29] audit: type=1326 audit(1754802024.893:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.862676][ T29] audit: type=1326 audit(1754802024.893:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5423 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901d2eebe9 code=0x7ffc0000 [ 76.886354][ T29] audit: type=1400 audit(1754802024.903:3014): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.912203][ T5429] rock: directory entry would overflow storage [ 76.918431][ T5429] rock: sig=0x4f50, size=4, remaining=3 [ 76.924009][ T5429] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 76.993222][ T5443] loop0: detected capacity change from 0 to 512 [ 77.002195][ T5443] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.051283][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 77.061870][ T5443] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.715: Failed to acquire dquot type 1 [ 77.075520][ T5443] EXT4-fs (loop0): 1 truncate cleaned up [ 77.081693][ T5443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.111388][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.156020][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 77.466882][ T5474] loop2: detected capacity change from 0 to 764 [ 77.485486][ T5474] Symlink component flag not implemented [ 77.497871][ T5474] Symlink component flag not implemented (129) [ 77.506408][ T5474] rock: directory entry would overflow storage [ 77.512724][ T5474] rock: sig=0x4f50, size=4, remaining=3 [ 77.518339][ T5474] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 77.596100][ T5484] loop2: detected capacity change from 0 to 512 [ 77.606954][ T5484] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.733288][ T5484] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 77.745272][ T5484] EXT4-fs (loop2): 1 truncate cleaned up [ 77.752879][ T5484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.804256][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.620282][ T5519] loop1: detected capacity change from 0 to 512 [ 78.648887][ T5519] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.759639][ T5519] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 78.801011][ T5519] EXT4-fs (loop1): 1 truncate cleaned up [ 78.823368][ T5519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.963253][ T5534] loop0: detected capacity change from 0 to 512 [ 78.984329][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.006581][ T5534] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.045195][ T5534] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.746: Failed to acquire dquot type 1 [ 79.045560][ T5539] __nla_validate_parse: 1 callbacks suppressed [ 79.045577][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 79.101241][ T5534] EXT4-fs (loop0): 1 truncate cleaned up [ 79.118374][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.152965][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.248672][ T5561] loop1: detected capacity change from 0 to 8192 [ 79.345440][ T3564] loop1: p2 p3 p4 [ 79.349701][ T3564] loop1: p2 start 164919041 is beyond EOD, truncated [ 79.356508][ T3564] loop1: p3 size 66846464 extends beyond EOD, truncated [ 79.366868][ T3564] loop1: p4 size 37048832 extends beyond EOD, truncated [ 79.480511][ T5568] process 'syz.1.756' launched '/dev/fd/11' with NULL argv: empty string added [ 80.134000][ T5575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5575 comm=syz.3.759 [ 80.224780][ T5561] loop1: p2 p3 p4 [ 80.231270][ T5561] loop1: p2 start 164919041 is beyond EOD, truncated [ 80.238220][ T5561] loop1: p3 size 66846464 extends beyond EOD, truncated [ 80.271580][ T5561] loop1: p4 size 37048832 extends beyond EOD, truncated [ 80.394024][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 80.406224][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 80.423475][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 80.423492][ T3580] udevd[3580]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 80.452086][ T5593] loop2: detected capacity change from 0 to 512 [ 80.475489][ T5593] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.507344][ T5593] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.764: Failed to acquire dquot type 1 [ 80.530639][ T5593] EXT4-fs (loop2): 1 truncate cleaned up [ 80.537878][ T5593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.568878][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.661367][ T5610] loop3: detected capacity change from 0 to 512 [ 80.676114][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 80.685372][ T5610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.712199][ T5610] EXT4-fs (loop3): 1 truncate cleaned up [ 80.720553][ T5610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.816884][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.940089][ T5629] 9pnet: Could not find request transport: fd0x0000000000000004 [ 81.047152][ T5638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.114153][ T5638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.176304][ T5638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.241335][ T5638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.335194][ T134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.355075][ T134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.373674][ T134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443184][ T134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497302][ T5663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.787'. [ 81.500681][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 81.518223][ T5663] x_tables: ip_tables: udp match: only valid for protocol 17 [ 81.606487][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.789'. [ 81.713762][ T5674] sd 0:0:1:0: device reset [ 82.097935][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 82.242340][ T5724] loop4: detected capacity change from 0 to 512 [ 82.264335][ T5724] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.284518][ T5726] loop2: detected capacity change from 0 to 512 [ 82.306157][ T5726] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.317476][ T5724] __quota_error: 44 callbacks suppressed [ 82.317493][ T5724] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.333317][ T5724] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 82.333346][ T5724] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 82.358549][ T5724] EXT4-fs (loop4): 1 truncate cleaned up [ 82.359119][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.363056][ T5726] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.363099][ T5726] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 82.363118][ T5726] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.810: Failed to acquire dquot type 1 [ 82.363677][ T5726] EXT4-fs (loop2): 1 truncate cleaned up [ 82.364128][ T5726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.383752][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.414869][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.611835][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 82.640712][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 82.674445][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.821'. [ 82.696994][ T5756] x_tables: ip_tables: udp match: only valid for protocol 17 [ 82.725807][ T5765] loop0: detected capacity change from 0 to 512 [ 82.732874][ T5765] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.742871][ T5763] loop3: detected capacity change from 0 to 512 [ 82.777928][ T5765] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.788101][ T5765] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 82.798132][ T5765] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.825: Failed to acquire dquot type 1 [ 82.799460][ T5763] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.843152][ T5763] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 82.848303][ T5765] EXT4-fs (loop0): 1 truncate cleaned up [ 82.853500][ T5763] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 82.860458][ T5765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.869015][ T5763] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 82.908538][ T5779] loop2: detected capacity change from 0 to 512 [ 82.929616][ T5779] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.929982][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.941513][ T5779] EXT4-fs (loop2): 1 truncate cleaned up [ 82.951345][ T5779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.965569][ T5763] EXT4-fs (loop3): 1 truncate cleaned up [ 82.966010][ T5763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.982523][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.023964][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.400714][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 84.830909][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 84.939637][ T5886] netlink: 14 bytes leftover after parsing attributes in process `syz.0.867'. [ 85.190767][ T5893] 9pnet: Could not find request transport: fd0x0000000000000004 [ 85.381569][ T29] audit: type=1326 audit(1754802033.593:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f618495ebe9 code=0x0 [ 85.505963][ T5926] loop3: detected capacity change from 0 to 512 [ 85.629207][ T5926] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.845384][ T5926] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 85.855699][ T5926] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.885: Failed to acquire dquot type 1 [ 85.968113][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 85.974825][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.478284][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.614238][ T5979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.896'. [ 86.649967][ T5983] loop3: detected capacity change from 0 to 512 [ 86.657455][ T5983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.673702][ T5983] EXT4-fs (loop3): 1 truncate cleaned up [ 86.680026][ T5983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.712634][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.529829][ T6007] FAULT_INJECTION: forcing a failure. [ 87.529829][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 87.542608][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.4.913 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 87.542644][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.542660][ T6007] Call Trace: [ 87.542727][ T6007] [ 87.542736][ T6007] __dump_stack+0x1d/0x30 [ 87.542761][ T6007] dump_stack_lvl+0xe8/0x140 [ 87.542808][ T6007] dump_stack+0x15/0x1b [ 87.542825][ T6007] should_fail_ex+0x265/0x280 [ 87.542848][ T6007] should_failslab+0x8c/0xb0 [ 87.542915][ T6007] __kmalloc_noprof+0xa5/0x3e0 [ 87.542945][ T6007] ? copy_splice_read+0xc2/0x660 [ 87.543020][ T6007] copy_splice_read+0xc2/0x660 [ 87.543062][ T6007] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 87.543089][ T6007] splice_direct_to_actor+0x290/0x680 [ 87.543117][ T6007] ? __pfx_direct_splice_actor+0x10/0x10 [ 87.543211][ T6007] do_splice_direct+0xda/0x150 [ 87.543265][ T6007] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 87.543356][ T6007] do_sendfile+0x380/0x650 [ 87.543436][ T6007] __x64_sys_sendfile64+0x105/0x150 [ 87.543467][ T6007] x64_sys_call+0x2bb0/0x2ff0 [ 87.543550][ T6007] do_syscall_64+0xd2/0x200 [ 87.543578][ T6007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.543605][ T6007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.543705][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.543727][ T6007] RIP: 0033:0x7f901d2eebe9 [ 87.543742][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.543761][ T6007] RSP: 002b:00007f901bd4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 87.543854][ T6007] RAX: ffffffffffffffda RBX: 00007f901d515fa0 RCX: 00007f901d2eebe9 [ 87.543866][ T6007] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 87.543879][ T6007] RBP: 00007f901bd4f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.543891][ T6007] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 87.543904][ T6007] R13: 00007f901d516038 R14: 00007f901d515fa0 R15: 00007ffe16aca318 [ 87.543924][ T6007] [ 87.571361][ T6008] loop3: detected capacity change from 0 to 128 [ 87.718424][ T6017] loop2: detected capacity change from 0 to 512 [ 87.726552][ T6008] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.734383][ T6017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.747666][ T6008] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.751435][ T6017] EXT4-fs (loop2): 1 truncate cleaned up [ 87.802678][ T6017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.812784][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 87.812852][ T29] audit: type=1400 audit(1754802036.013:3077): avc: denied { create } for pid=6005 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.858239][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.866971][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.027464][ T6035] loop1: detected capacity change from 0 to 8192 [ 88.034900][ T6035] vfat: Unknown parameter 'ÿÿÿÿ' [ 88.139266][ T6041] loop0: detected capacity change from 0 to 512 [ 88.147365][ T6041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.159014][ T6041] EXT4-fs (loop0): 1 truncate cleaned up [ 88.166891][ T6041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.196359][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.346166][ T6050] netlink: 14 bytes leftover after parsing attributes in process `syz.0.928'. [ 88.482969][ T6054] loop2: detected capacity change from 0 to 512 [ 88.508435][ T6054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.521597][ T6054] EXT4-fs (loop2): 1 truncate cleaned up [ 88.555620][ T6054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.613782][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.943830][ T6085] loop3: detected capacity change from 0 to 512 [ 88.968818][ T6085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.978917][ T6089] loop1: detected capacity change from 0 to 1024 [ 88.986426][ T6085] EXT4-fs (loop3): 1 truncate cleaned up [ 88.992776][ T6085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.014622][ T6089] ext4: Bad value for 'max_batch_time' [ 89.021146][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.225483][ T6116] loop4: detected capacity change from 0 to 512 [ 89.232311][ T6116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.234733][ T6089] $Hÿ: renamed from bond0 (while UP) [ 89.243477][ T6116] EXT4-fs (loop4): 1 truncate cleaned up [ 89.280531][ T6089] $Hÿ: entered promiscuous mode [ 89.285707][ T6089] bond_slave_0: entered promiscuous mode [ 89.291437][ T6089] bond_slave_1: entered promiscuous mode [ 89.315651][ T6114] loop3: detected capacity change from 0 to 8192 [ 89.322442][ T6114] vfat: Unknown parameter 'ÿÿÿÿ' [ 89.329730][ T29] audit: type=1400 audit(1754802037.543:3078): avc: denied { relabelfrom } for pid=6088 comm="syz.1.944" name="" dev="pipefs" ino=13517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.438753][ T29] audit: type=1400 audit(1754802037.653:3079): avc: denied { write } for pid=6139 comm="syz.3.967" name="route" dev="proc" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.510242][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 89.574269][ T6147] netlink: 14 bytes leftover after parsing attributes in process `syz.4.968'. [ 89.665382][ T6153] loop3: detected capacity change from 0 to 512 [ 89.681618][ T6153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.695598][ T6155] loop2: detected capacity change from 0 to 512 [ 89.718899][ T6155] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.760062][ T6153] EXT4-fs (loop3): 1 truncate cleaned up [ 89.778659][ T6155] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 89.788847][ T6155] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.798898][ T6155] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.972: Failed to acquire dquot type 1 [ 89.867274][ T6155] EXT4-fs (loop2): 1 truncate cleaned up [ 90.083779][ T29] audit: type=1326 audit(1754802038.293:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.1.980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f618495ebe9 code=0x0 [ 90.843821][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 91.279413][ T6221] loop3: detected capacity change from 0 to 512 [ 91.289493][ T6221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.388098][ T6221] EXT4-fs (loop3): 1 truncate cleaned up [ 91.428645][ T6227] netlink: 14 bytes leftover after parsing attributes in process `syz.1.995'. [ 91.928466][ T6244] loop3: detected capacity change from 0 to 512 [ 92.005026][ T6244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.023929][ T6244] EXT4-fs (loop3): 1 truncate cleaned up [ 92.218641][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 92.229624][ T6265] x_tables: ip_tables: udp match: only valid for protocol 17 [ 92.318000][ T6270] sd 0:0:1:0: device reset [ 92.332571][ T6272] loop4: detected capacity change from 0 to 512 [ 92.342192][ T6272] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.460299][ T6272] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 92.470645][ T6272] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 92.480669][ T6272] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 92.494715][ T6272] EXT4-fs (loop4): 1 truncate cleaned up [ 92.851574][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1021'. [ 92.861092][ T6290] x_tables: ip_tables: udp match: only valid for protocol 17 [ 93.119649][ T29] audit: type=1326 audit(1754802041.263:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.143235][ T29] audit: type=1326 audit(1754802041.263:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.166813][ T29] audit: type=1326 audit(1754802041.263:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.190360][ T29] audit: type=1326 audit(1754802041.333:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.214035][ T29] audit: type=1326 audit(1754802041.333:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.237675][ T29] audit: type=1326 audit(1754802041.333:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.261229][ T29] audit: type=1326 audit(1754802041.333:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.284688][ T29] audit: type=1326 audit(1754802041.333:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.308198][ T29] audit: type=1326 audit(1754802041.333:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.331701][ T29] audit: type=1326 audit(1754802041.333:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.2.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb68063ebe9 code=0x7ffc0000 [ 93.447804][ T6304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1024'. [ 93.846091][ T6310] loop1: detected capacity change from 0 to 512 [ 93.854075][ T6310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.867034][ T6310] EXT4-fs (loop1): 1 truncate cleaned up [ 94.173089][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 94.183910][ T6328] x_tables: ip_tables: udp match: only valid for protocol 17 [ 94.231312][ T6330] loop1: detected capacity change from 0 to 512 [ 94.240819][ T6330] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.258066][ T6330] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 94.270630][ T6330] EXT4-fs (loop1): 1 truncate cleaned up [ 94.346907][ T6339] loop1: detected capacity change from 0 to 8192 [ 94.353738][ T6339] vfat: Unknown parameter 'ÿÿÿÿ' [ 94.461093][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1044'. [ 94.743763][ T6365] loop1: detected capacity change from 0 to 8192 [ 94.750755][ T6365] vfat: Unknown parameter 'ÿÿÿÿ' [ 94.927789][ T6371] loop2: detected capacity change from 0 to 8192 [ 94.934485][ T6371] vfat: Unknown parameter 'ÿÿÿÿ' [ 95.010678][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 95.088472][ T6388] loop3: detected capacity change from 0 to 512 [ 95.095401][ T6388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.106566][ T6388] EXT4-fs (loop3): 1 truncate cleaned up [ 95.508504][ T6404] loop1: detected capacity change from 0 to 1024 [ 95.521968][ T6402] loop4: detected capacity change from 0 to 8192 [ 95.584190][ T6404] ext4: Bad value for 'max_batch_time' [ 95.592549][ T6402] vfat: Unknown parameter 'ÿÿÿÿ' [ 96.056160][ T6416] loop0: detected capacity change from 0 to 512 [ 96.063219][ T6416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.074338][ T6416] EXT4-fs (loop0): 1 truncate cleaned up [ 96.942119][ T6442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1076'. [ 97.049435][ T6446] loop0: detected capacity change from 0 to 512 [ 97.073808][ T6446] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.109300][ T6446] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1080: Failed to acquire dquot type 1 [ 97.143958][ T6446] EXT4-fs (loop0): 1 truncate cleaned up [ 97.180635][ T6454] loop4: detected capacity change from 0 to 512 [ 97.192476][ T6454] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.209401][ T6454] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1083: Failed to acquire dquot type 1 [ 97.223252][ T6454] EXT4-fs (loop4): 1 truncate cleaned up [ 98.429549][ T6491] loop0: detected capacity change from 0 to 512 [ 98.479072][ T6491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.510346][ T6494] loop3: detected capacity change from 0 to 512 [ 98.549515][ T6491] EXT4-fs (loop0): 1 truncate cleaned up [ 98.558034][ T6494] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.611255][ T6494] __quota_error: 43 callbacks suppressed [ 98.611313][ T6494] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.627221][ T6494] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 98.637150][ T6494] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 98.658537][ T6494] EXT4-fs (loop3): 1 truncate cleaned up [ 98.766868][ T6509] loop3: detected capacity change from 0 to 512 [ 98.779677][ T6509] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.836000][ T6509] EXT4-fs (loop3): 1 truncate cleaned up [ 98.998661][ T6523] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1104'. [ 99.029905][ T6525] loop3: detected capacity change from 0 to 512 [ 99.110235][ T6525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.140420][ T6525] EXT4-fs (loop3): 1 truncate cleaned up [ 99.210024][ T6528] loop3: detected capacity change from 0 to 1024 [ 99.228212][ T6528] EXT4-fs: Ignoring removed oldalloc option [ 99.234267][ T6528] EXT4-fs: Ignoring removed bh option [ 99.270691][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 99.282210][ T6528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6528 comm=syz.3.1108 [ 99.298529][ T6528] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1108: Allocating blocks 497-513 which overlap fs metadata [ 99.346873][ T6532] loop3: detected capacity change from 0 to 512 [ 99.372728][ T6532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.401393][ T6532] EXT4-fs (loop3): 1 truncate cleaned up [ 99.784770][ T29] audit: type=1326 audit(1754802047.993:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.0.1113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa54799ebe9 code=0x0 [ 100.382300][ T6564] loop1: detected capacity change from 0 to 512 [ 100.389170][ T6564] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.400458][ T6564] EXT4-fs (loop1): 1 truncate cleaned up [ 100.406646][ T6564] EXT4-fs mount: 36 callbacks suppressed [ 100.406659][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.437135][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.453136][ T29] audit: type=1326 audit(1754802048.663:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.453246][ T29] audit: type=1326 audit(1754802048.663:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.453492][ T29] audit: type=1326 audit(1754802048.663:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.453733][ T29] audit: type=1326 audit(1754802048.663:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.453865][ T29] audit: type=1326 audit(1754802048.663:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.576102][ T29] audit: type=1326 audit(1754802048.793:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.601139][ T29] audit: type=1326 audit(1754802048.793:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf304ebe9 code=0x7ffc0000 [ 100.704905][ T6582] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 101.892956][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 101.926472][ T6623] x_tables: ip_tables: udp match: only valid for protocol 17 [ 102.064485][ T6631] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1142'. [ 102.073754][ T6631] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1142'. [ 102.699572][ T6667] loop2: detected capacity change from 0 to 512 [ 102.708335][ T6667] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.728328][ T6667] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 102.740399][ T6667] EXT4-fs (loop2): 1 truncate cleaned up [ 102.749070][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.776996][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.261564][ T6686] loop0: detected capacity change from 0 to 512 [ 103.269867][ T6686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.281553][ T6686] EXT4-fs (loop0): 1 truncate cleaned up [ 103.287986][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.321330][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.534757][ T6703] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1171'. [ 103.543915][ T6703] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1171'. [ 103.677410][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'. [ 103.687033][ T6714] x_tables: ip_tables: udp match: only valid for protocol 17 [ 104.524150][ T6747] loop4: detected capacity change from 0 to 1024 [ 104.551547][ T6747] ext4: Bad value for 'max_batch_time' [ 105.337954][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1192'. [ 105.367587][ T6756] x_tables: ip_tables: udp match: only valid for protocol 17 [ 105.627070][ T6767] loop4: detected capacity change from 0 to 8192 [ 105.642773][ T6767] vfat: Unknown parameter 'ÿÿÿÿ' [ 105.699819][ T6775] loop2: detected capacity change from 0 to 1024 [ 105.710347][ T6773] sch_fq: defrate 0 ignored. [ 105.715540][ T6775] ext4: Bad value for 'max_batch_time' [ 105.918024][ T6786] loop3: detected capacity change from 0 to 512 [ 105.925397][ T6786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.938510][ T6786] EXT4-fs (loop3): 1 truncate cleaned up [ 105.944903][ T6786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.964501][ T6793] loop1: detected capacity change from 0 to 1024 [ 105.971790][ T6793] ext4: Bad value for 'max_batch_time' [ 105.978458][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.649660][ T6814] sch_fq: defrate 0 ignored. [ 106.981860][ T6823] loop1: detected capacity change from 0 to 512 [ 107.009058][ T6823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.048430][ T6826] loop0: detected capacity change from 0 to 512 [ 107.062926][ T6823] EXT4-fs (loop1): 1 truncate cleaned up [ 107.072774][ T6826] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.086254][ T6823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.107537][ T6826] __quota_error: 47 callbacks suppressed [ 107.107557][ T6826] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 107.123554][ T6826] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 107.133494][ T6826] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 107.146653][ T6826] EXT4-fs (loop0): 1 truncate cleaned up [ 107.152791][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.199064][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.213287][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.248941][ T6844] loop0: detected capacity change from 0 to 512 [ 107.274303][ T6844] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.306638][ T6844] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 107.317059][ T6844] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 107.327046][ T6844] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1228: Failed to acquire dquot type 1 [ 107.456307][ T6864] sch_fq: defrate 0 ignored. [ 107.469221][ T6844] EXT4-fs (loop0): 1 truncate cleaned up [ 107.477687][ T6844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.692618][ T6867] loop1: detected capacity change from 0 to 512 [ 107.719365][ T6867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.762392][ T6867] EXT4-fs (loop1): 1 truncate cleaned up [ 107.787247][ T6867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.311806][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.325535][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.399436][ T6898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1243'. [ 108.437960][ T6901] loop0: detected capacity change from 0 to 512 [ 108.454129][ T6901] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.476448][ T6901] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 108.486763][ T6901] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.496848][ T6901] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 108.518376][ T6901] EXT4-fs (loop0): 1 truncate cleaned up [ 108.527726][ T6901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.602716][ T6916] loop4: detected capacity change from 0 to 1024 [ 108.610191][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.611661][ T6916] ext4: Bad value for 'max_batch_time' [ 108.797304][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6924 comm=syz.2.1262 [ 108.881572][ T6930] loop2: detected capacity change from 0 to 512 [ 108.890507][ T6930] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.909004][ T6930] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 108.919534][ T6930] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 108.929608][ T6930] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 109.013352][ T6930] EXT4-fs (loop2): 1 truncate cleaned up [ 109.019733][ T6930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.048356][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.273089][ T29] audit: type=1400 audit(1754802057.483:3181): avc: denied { compute_member } for pid=6948 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.394383][ T29] audit: type=1400 audit(1754802057.603:3182): avc: denied { setopt } for pid=6963 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.394589][ T6964] FAULT_INJECTION: forcing a failure. [ 109.394589][ T6964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.427109][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.2.1279 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 109.427160][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.427227][ T6964] Call Trace: [ 109.427235][ T6964] [ 109.427261][ T6964] __dump_stack+0x1d/0x30 [ 109.427289][ T6964] dump_stack_lvl+0xe8/0x140 [ 109.427315][ T6964] dump_stack+0x15/0x1b [ 109.427387][ T6964] should_fail_ex+0x265/0x280 [ 109.427417][ T6964] should_fail+0xb/0x20 [ 109.427440][ T6964] should_fail_usercopy+0x1a/0x20 [ 109.427470][ T6964] strncpy_from_user+0x25/0x230 [ 109.427528][ T6964] strncpy_from_user_nofault+0x68/0xf0 [ 109.427568][ T6964] bpf_probe_read_compat_str+0xb4/0x130 [ 109.427680][ T6964] bpf_prog_d4867bcac6759b53+0x40/0x6c [ 109.427711][ T6964] bpf_trace_run2+0x104/0x1c0 [ 109.427817][ T6964] ? raw_setsockopt+0xb57/0xbf0 [ 109.427841][ T6964] ? raw_setsockopt+0xb57/0xbf0 [ 109.427866][ T6964] __traceiter_kfree+0x2b/0x50 [ 109.427987][ T6964] ? raw_setsockopt+0xb57/0xbf0 [ 109.428009][ T6964] kfree+0x27b/0x320 [ 109.428138][ T6964] raw_setsockopt+0xb57/0xbf0 [ 109.428163][ T6964] ? __pfx_raw_setsockopt+0x10/0x10 [ 109.428190][ T6964] __sys_setsockopt+0x181/0x200 [ 109.428212][ T6964] __x64_sys_setsockopt+0x64/0x80 [ 109.428269][ T6964] x64_sys_call+0x20ec/0x2ff0 [ 109.428298][ T6964] do_syscall_64+0xd2/0x200 [ 109.428333][ T6964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.428360][ T6964] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.428396][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.428420][ T6964] RIP: 0033:0x7fb68063ebe9 [ 109.428439][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.428464][ T6964] RSP: 002b:00007fb67f09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.428500][ T6964] RAX: ffffffffffffffda RBX: 00007fb680865fa0 RCX: 00007fb68063ebe9 [ 109.428528][ T6964] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000006 [ 109.428545][ T6964] RBP: 00007fb67f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.428570][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.428587][ T6964] R13: 00007fb680866038 R14: 00007fb680865fa0 R15: 00007ffc066a90b8 [ 109.428612][ T6964] [ 109.668414][ T6970] loop2: detected capacity change from 0 to 512 [ 109.677130][ T6970] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.697945][ T6970] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1282: Failed to acquire dquot type 1 [ 109.710473][ T6970] EXT4-fs (loop2): 1 truncate cleaned up [ 109.718927][ T6970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.746767][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.765719][ T6973] loop1: detected capacity change from 0 to 1024 [ 109.772609][ T6973] EXT4-fs: Ignoring removed orlov option [ 109.789525][ T6973] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 109.811342][ T6973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.871187][ T6966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6966 comm=syz.1.1280 [ 109.983095][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.054122][ T6999] loop4: detected capacity change from 0 to 8192 [ 110.064089][ T6999] vfat: Unknown parameter 'ÿÿÿÿ' [ 110.081873][ T7009] sch_fq: defrate 0 ignored. [ 110.334134][ T7024] loop0: detected capacity change from 0 to 512 [ 110.342814][ T7024] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.384866][ T7024] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 110.397266][ T7024] EXT4-fs (loop0): 1 truncate cleaned up [ 110.403499][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.448346][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.078705][ T7048] Falling back ldisc for ttyS3. [ 111.466812][ T7059] loop0: detected capacity change from 0 to 512 [ 111.473979][ T7059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.545874][ T7059] EXT4-fs (loop0): 1 truncate cleaned up [ 111.554698][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.599633][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.864789][ T7068] FAULT_INJECTION: forcing a failure. [ 111.864789][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 111.877497][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.4.1314 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 111.877567][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.877580][ T7068] Call Trace: [ 111.877586][ T7068] [ 111.877644][ T7068] __dump_stack+0x1d/0x30 [ 111.877665][ T7068] dump_stack_lvl+0xe8/0x140 [ 111.877684][ T7068] dump_stack+0x15/0x1b [ 111.877705][ T7068] should_fail_ex+0x265/0x280 [ 111.877733][ T7068] should_failslab+0x8c/0xb0 [ 111.877764][ T7068] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 111.877816][ T7068] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 111.877851][ T7068] hugetlbfs_alloc_inode+0xbc/0x100 [ 111.877929][ T7068] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 111.877961][ T7068] alloc_inode+0x40/0x170 [ 111.877988][ T7068] new_inode+0x1d/0xe0 [ 111.878012][ T7068] hugetlbfs_get_inode+0x7b/0x370 [ 111.878057][ T7068] hugetlb_file_setup+0x192/0x3d0 [ 111.878089][ T7068] ksys_mmap_pgoff+0x157/0x310 [ 111.878126][ T7068] x64_sys_call+0x14a3/0x2ff0 [ 111.878151][ T7068] do_syscall_64+0xd2/0x200 [ 111.878219][ T7068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.878251][ T7068] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.878289][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.878310][ T7068] RIP: 0033:0x7f901d2eebe9 [ 111.878325][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.878349][ T7068] RSP: 002b:00007f901bd2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.878442][ T7068] RAX: ffffffffffffffda RBX: 00007f901d516090 RCX: 00007f901d2eebe9 [ 111.878459][ T7068] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 111.878612][ T7068] RBP: 00007f901bd2e090 R08: ffffffffffffffff R09: 0000000000000000 [ 111.878625][ T7068] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 111.878637][ T7068] R13: 00007f901d516128 R14: 00007f901d516090 R15: 00007ffe16aca318 [ 111.878676][ T7068] [ 112.269463][ T7070] loop2: detected capacity change from 0 to 8192 [ 112.278620][ T7070] vfat: Unknown parameter 'ÿÿÿÿ' [ 112.334022][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 112.334043][ T29] audit: type=1400 audit(1754802060.523:3222): avc: denied { setopt } for pid=7074 comm="syz.0.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.504913][ T29] audit: type=1326 audit(1754802060.713:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.531316][ T29] audit: type=1326 audit(1754802060.713:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.554932][ T29] audit: type=1326 audit(1754802060.723:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.578306][ T29] audit: type=1326 audit(1754802060.723:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.602196][ T29] audit: type=1326 audit(1754802060.723:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.625779][ T29] audit: type=1326 audit(1754802060.723:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.649388][ T29] audit: type=1326 audit(1754802060.753:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.672861][ T29] audit: type=1326 audit(1754802060.753:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 112.696630][ T29] audit: type=1326 audit(1754802060.753:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618495ebe9 code=0x7ffc0000 [ 113.140583][ T7106] sch_fq: defrate 0 ignored. [ 113.408268][ T7113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.431290][ T7113] SELinux: failed to load policy [ 113.547380][ T7127] sd 0:0:1:0: device reset [ 113.592882][ T7125] loop4: detected capacity change from 0 to 8192 [ 113.613324][ T7125] vfat: Unknown parameter 'ÿÿÿÿ' [ 113.714639][ T7136] sch_fq: defrate 0 ignored. [ 114.080251][ T7143] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 114.086819][ T7143] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.094524][ T7143] vhci_hcd vhci_hcd.0: Device attached [ 114.120462][ T7144] vhci_hcd: connection closed [ 114.155123][ T51] vhci_hcd: stop threads [ 114.164274][ T51] vhci_hcd: release socket [ 114.168852][ T51] vhci_hcd: disconnect device [ 114.373442][ T7159] FAULT_INJECTION: forcing a failure. [ 114.373442][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 114.386157][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.2.1347 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 114.386230][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.386278][ T7159] Call Trace: [ 114.386286][ T7159] [ 114.386296][ T7159] __dump_stack+0x1d/0x30 [ 114.386323][ T7159] dump_stack_lvl+0xe8/0x140 [ 114.386350][ T7159] dump_stack+0x15/0x1b [ 114.386369][ T7159] should_fail_ex+0x265/0x280 [ 114.386448][ T7159] ? tcf_exts_init_ex+0x9a/0x340 [ 114.386534][ T7159] should_failslab+0x8c/0xb0 [ 114.386567][ T7159] __kmalloc_cache_noprof+0x4c/0x320 [ 114.386610][ T7159] tcf_exts_init_ex+0x9a/0x340 [ 114.386657][ T7159] mall_change+0x1ae/0x480 [ 114.386719][ T7159] ? __pfx_mall_change+0x10/0x10 [ 114.386805][ T7159] tc_new_tfilter+0xde4/0x10a0 [ 114.386834][ T7159] ? __rcu_read_unlock+0x4f/0x70 [ 114.386879][ T7159] ? ns_capable+0x7d/0xb0 [ 114.386906][ T7159] ? __pfx_tc_new_tfilter+0x10/0x10 [ 114.386930][ T7159] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 114.387012][ T7159] netlink_rcv_skb+0x120/0x220 [ 114.387069][ T7159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.387133][ T7159] rtnetlink_rcv+0x1c/0x30 [ 114.387159][ T7159] netlink_unicast+0x5c0/0x690 [ 114.387216][ T7159] netlink_sendmsg+0x58b/0x6b0 [ 114.387240][ T7159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.387261][ T7159] __sock_sendmsg+0x142/0x180 [ 114.387297][ T7159] ____sys_sendmsg+0x31e/0x4e0 [ 114.387396][ T7159] ___sys_sendmsg+0x17b/0x1d0 [ 114.387463][ T7159] __x64_sys_sendmsg+0xd4/0x160 [ 114.387498][ T7159] x64_sys_call+0x191e/0x2ff0 [ 114.387527][ T7159] do_syscall_64+0xd2/0x200 [ 114.387600][ T7159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.387709][ T7159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.387750][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.387778][ T7159] RIP: 0033:0x7fb68063ebe9 [ 114.387844][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.387869][ T7159] RSP: 002b:00007fb67f09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.387894][ T7159] RAX: ffffffffffffffda RBX: 00007fb680865fa0 RCX: 00007fb68063ebe9 [ 114.387907][ T7159] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 114.387922][ T7159] RBP: 00007fb67f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.388006][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.388063][ T7159] R13: 00007fb680866038 R14: 00007fb680865fa0 R15: 00007ffc066a90b8 [ 114.388124][ T7159] [ 114.729424][ T7165] IPv6: Can't replace route, no match found [ 114.806221][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 114.837342][ T7172] bridge: RTM_NEWNEIGH with invalid ether address [ 114.901998][ T7179] sch_fq: defrate 0 ignored. [ 114.915081][ T7175] loop2: detected capacity change from 0 to 8192 [ 114.955615][ T7175] loop2: p1 p2 p3 [ 114.959497][ T7175] loop2: p1 start 51379968 is beyond EOD, truncated [ 114.985890][ T7175] loop2: p3 size 100663552 extends beyond EOD, truncated [ 115.199938][ T7187] loop2: detected capacity change from 0 to 8192 [ 115.209672][ T7187] vfat: Unknown parameter 'ÿÿÿÿ' [ 115.220322][ T7191] loop0: detected capacity change from 0 to 512 [ 115.239457][ T7191] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.278359][ T7191] EXT4-fs (loop0): 1 truncate cleaned up [ 115.291406][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.342480][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.776142][ T7205] loop0: detected capacity change from 0 to 2048 [ 115.815742][ T7205] EXT4-fs: Invalid want_extra_isize 1 [ 116.027456][ T7203] ================================================================== [ 116.035604][ T7203] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 116.044696][ T7203] [ 116.047078][ T7203] read to 0xffff888126167a20 of 4 bytes by task 7210 on cpu 1: [ 116.054647][ T7203] selinux_inode_permission+0x334/0x740 [ 116.060257][ T7203] security_inode_permission+0x6d/0xb0 [ 116.065751][ T7203] inode_permission+0x106/0x310 [ 116.070632][ T7203] link_path_walk+0x162/0x900 [ 116.075373][ T7203] path_openat+0x1de/0x2170 [ 116.079895][ T7203] do_filp_open+0x109/0x230 [ 116.084423][ T7203] io_openat2+0x272/0x390 [ 116.088781][ T7203] io_openat+0x1b/0x30 [ 116.092874][ T7203] __io_issue_sqe+0xfe/0x2e0 [ 116.097701][ T7203] io_issue_sqe+0x53/0x970 [ 116.102137][ T7203] io_wq_submit_work+0x3f7/0x5f0 [ 116.107272][ T7203] io_worker_handle_work+0x44e/0x9b0 [ 116.112581][ T7203] io_wq_worker+0x22e/0x870 [ 116.117089][ T7203] ret_from_fork+0xda/0x150 [ 116.121633][ T7203] ret_from_fork_asm+0x1a/0x30 [ 116.126408][ T7203] [ 116.128753][ T7203] write to 0xffff888126167a20 of 4 bytes by task 7203 on cpu 0: [ 116.136411][ T7203] selinux_inode_permission+0x3ac/0x740 [ 116.142076][ T7203] security_inode_permission+0x6d/0xb0 [ 116.147556][ T7203] inode_permission+0x106/0x310 [ 116.152431][ T7203] link_path_walk+0x162/0x900 [ 116.157140][ T7203] path_openat+0x1de/0x2170 [ 116.161701][ T7203] do_filp_open+0x109/0x230 [ 116.166370][ T7203] io_openat2+0x272/0x390 [ 116.170734][ T7203] io_openat+0x1b/0x30 [ 116.174826][ T7203] __io_issue_sqe+0xfe/0x2e0 [ 116.179434][ T7203] io_issue_sqe+0x53/0x970 [ 116.183863][ T7203] io_submit_sqes+0x664/0x1050 [ 116.188648][ T7203] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 116.194233][ T7203] __x64_sys_io_uring_enter+0x78/0x90 [ 116.199629][ T7203] x64_sys_call+0x2de1/0x2ff0 [ 116.204346][ T7203] do_syscall_64+0xd2/0x200 [ 116.208879][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.214807][ T7203] [ 116.217170][ T7203] value changed: 0x00000000 -> 0x00000001 [ 116.222895][ T7203] [ 116.225221][ T7203] Reported by Kernel Concurrency Sanitizer on: [ 116.231381][ T7203] CPU: 0 UID: 0 PID: 7203 Comm: syz.4.1366 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 116.243473][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.253556][ T7203] ================================================================== [ 116.407802][ T7199] syz.1.1361 (7199) used greatest stack depth: 9832 bytes left