last executing test programs: 8m14.790829744s ago: executing program 0 (id=206): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05d33c0000000400000008000000050000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 8m14.627083407s ago: executing program 0 (id=210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000400)={0xa, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4fe3f34e}}}, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfe0a200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000100)="b9ff0307", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60645d9bffd0f2b7ec679b9c14d767040c100000000000000000000000000000ff"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x20008800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="a4010000100001000000000000000000ac1e0001000000000000000000000000ff0100000000000000000000000000010000f0ffffff00000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101000000000000000000000000000000000032000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000025bd7000000000000a000200af0000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000100000000000000000020000000000000000000fdffffff040000004c001400636d6163286165732900"/295], 0x1a4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) fspick(0xffffffffffffffff, 0x0, 0x72fd0ce478709744) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00028006"], 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 8m14.568375638s ago: executing program 0 (id=212): r0 = socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x70}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf8}, 0x14) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) openat(r4, &(0x7f0000000000)='./file2\x00', 0x4000, 0x1ec) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x79b8}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000a80)=0x7fff, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "197d25ab5c6cdbf01fe39863eb62f49000c3d6942a5e686ea59618aa7c984968", "12d234da810a504a6b0a4166eccca2e766c504479ebb08d334b334ee3d90b5ae5e1f8578858cec6b7f0937827e16b047", "3cec384575ba47e50f91fcc0eafcc824113d3c52b65c89357f4f3052", {"bd88a81b8301690b4baa4a55f96f03f3", "cc13d82e7d8ecbb5d90a4000d1d2d556"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8m14.458838969s ago: executing program 0 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@orlov}, {@nomblk_io_submit}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x80000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfea7) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xf79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000ad4800000018120000bc4c151062fe713d5418a3b6ce8dfba922f69afdac689d726a2a03986b23b9", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000100), &(0x7f0000000140)=r11}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r12 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r12, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x2, 0x19, 0x5, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d3b5ed52000000000000000000000d0000001000", [0x0, 0x800000000020002]}) copy_file_range(r4, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000200000000001c0012800b0001006d616373656300000c000280050003000d"], 0x3c}}, 0x0) 8m14.091219005s ago: executing program 0 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r3}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe) r4 = getpid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x40045436, 0x14) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) r10 = dup(r9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x10000, 0x0, 0xf963}}) read(r7, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8m13.10368949s ago: executing program 0 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000280000000e010000", @ANYRES32, @ANYBLOB="0000000000001b6600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000004c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) pipe2(0x0, 0x4880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x4804) 8m13.1025962s ago: executing program 32 (id=240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000280000000e010000", @ANYRES32, @ANYBLOB="0000000000001b6600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000004c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) pipe2(0x0, 0x4880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x4804) 7m25.030309267s ago: executing program 2 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000dbe44867d9aa84e63af314d3ff4b850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x8, 0xe}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x7c, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_ingress={0xc}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x38e7}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x86}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @local, @loopback}, &(0x7f0000000a40)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20f8ffff130001000000000000000000020000ff", @ANYRES32=r9, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250700000058000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES16=r0, @ANYBLOB="1400020070696d72656731000000000000000000080003000100000008000100", @ANYRESOCT=r4, @ANYBLOB="080003000100000070000180140002006e65747063693000000000000000000008000300030000001400020064766d7270310000000000000000000008000300000000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000000000008000300020000005800018008000300000000001400020076657468315f746f5f68737200000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d72656700000000000000000000080003000100000058000180140002006261746164763000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776730000000000000000000000000001400020076657468315f746f5f687372000000005400018014000200766c616e300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="37000200726f736530000000000000000000e9ff0b00018008000100", @ANYRES32=r4, @ANYBLOB="5400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRES8=r9, @ANYRES32=0x0, @ANYBLOB="1600020070696d7265673000000000000000f4240eee97c449230a04ce7b7b967c9fe9d542", @ANYRES32=r10, @ANYBLOB="08000300010000002c000180080003000000000008000300020000000800030001000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB="c22237e744e3067be29b0e19510600000000004000242b858e6fd50702d8010ec6"], 0x28c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r12, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r12, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m24.867039489s ago: executing program 2 (id=1262): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000440)=""/161, 0xa1, 0x0, &(0x7f0000000a40)=""/194, 0xc2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4003, &(0x7f0000000080)=0x80, 0x585) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 7m24.82299649s ago: executing program 2 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) sendfile(r4, r4, 0x0, 0xfffe81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x210, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000080)='|', 0x1}], 0x1, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88100, 0x3fe29401074e79cb) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', r7) 7m23.942352573s ago: executing program 2 (id=1278): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x57}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xa7, 0x0, 0x5, @local, @loopback, 0x80, 0x80, 0x9, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x800010, &(0x7f0000000080), 0x4, 0xba6, &(0x7f0000000c00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@lazytime}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4004, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 7m23.404561852s ago: executing program 2 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m23.108695366s ago: executing program 2 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) getpgrp(0xffffffffffffffff) 7m23.108430176s ago: executing program 33 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) getpgrp(0xffffffffffffffff) 5m48.465446977s ago: executing program 6 (id=3642): epoll_create1(0x0) 5m48.428921547s ago: executing program 6 (id=3643): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x840000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f0000000900)=""/199, 0xc7}, {&(0x7f0000000a00)=""/20, 0x14}], 0xa) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010001006e657464657673696d7673696d300000000000000000000000000000000076d428ed0eb43638dc6545a528b7f1e328d2116d4da245aaa0860b4e2721ad3ffdcf00"/80], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x98, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) ioctl$TCSETSW2(r3, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r6}, 0x10) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0) 5m48.24470807s ago: executing program 6 (id=3648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x73ac, 0x0, 0xffffffffffffffff, 0x2e787ec3}, 0x0, 0x0, 0x0) 5m48.24437583s ago: executing program 6 (id=3649): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x200c44, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="9e5d2edaa671c7e0eae4fd60dae69ab4f2bc67edc56b86dd2aad498e48b660bfcd9e012251e8a44f4ce60e4952e1d7d090"], 0xfe, 0x668, &(0x7f0000000e80)="$eJzs3Utv29gZxvGHsnwtMC3aYhAEmfGZpAM4aKpI8sQDI12UpSibU0kUSLqwV4N0Yg+CyJk2SYHGm6k3vQDtF+huNrPohyjQddf9Al0WGLS7At2oICnqSlm+J23/PyPREfmS56XI6A0t8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWUyuXK5YaXmtn10zn1AK/ecL8dG3zups27s7sV7LiP1pa0o100o1vD2a/Hf91W7fSZ7e0FD8s6ehrb3/j4beKhWz5ExI6D511hS9eHT191OnsPz9fb13rPMtdiYlMVDjFUltuywt9r2lvucYLfbO5sVG+v10PTd1ruOFeGLlN4wRuIfIDs+bcNZXNzXXjlvb8ndZWzT50s4kffq9aLm+YjxZ7u//+R6XQ2fYaDa+1lcTEs+OYxf4R4tpNYw6edPbXZyUZB1VOE1SdFVQtV6uVSrVa2Xiw+eDDcrk4MaE8RhMRg4P2zdn5uE6X9M4NXFwhrv9/s6SGltTSjnZlcn8c1RTIV3PK/J6s/r9/3z2x3+H6n1X5G4PZN5XU/3fTZ+9Oq/9TcjEyyQJ5c6wp08/380KvdKSneqSOOtrX82mRXz/TelcvL8Or/dmSipKnUL48NWVrS65Mb4rRpja0obI+1rbqCmVUl6eGXIXaU6hIrprJPgnkylYkX4GM1uTorowq2tSm1mXkqqQ9+dpRS1uqyda/ut3ugZ4kr/v6CTkqC6qcJqjYPwYng6bV/598ni5xtvqP/z39Y+cUMcBr1+2d/083lzdx9eoyAgAAAAAAl81KfvtuJZ/dvyOpq7rXcMuvOy0AAAAAAHCJkk/+b8UP83HrHVlTzv+7158bAAAAAAC4HFZyjZ0laSX5Ur81uBLqNF8CyL04AAAAAAAAvFmSz/+LC1I3GVptVdaZzv8BAAAAAMB/gd8MjbFfzMbY7WYf6xckhe1F60//WFQwbx23d79jHdrxHPuwFzPxDYCoftMqKh2oNxmvd0FS8sxxb1m98YF7g2Ba6cC+0lcHs8b6t4KxBBbmsl9f5CTw1tFQAhvF3jP9Tu+lMe/1+n18VFAyJ+1lpe413JLjNx5WZNtvFSJ3N/r5sye/kIL+dh486eyXPvms8zjJ5TiedHwY5/H5SDqFWbm8TMZbSK65yNviZdWzLn/baq5YSb/lbPvnZB8Whjs63fb/SrfTmNsr6ePKUbYHZP2y16iUkl022PpkdAhrkEVlfMvzdsSULJaSLO6kMXfW7qQPWX7pXlj67pxULU3ug2A4i+pwFrNfC+ufE6/FjCziY2E9zuLP8YqmZLF+tiwm9ggAvC4HgyqUDGI+Ocb+eN09z7vc7Or+g9FeXv6hm15wOCcVe59NpBchTqsrit/R19KwhXQU9+LNnHf0cq+uLGnKO3r5AtUt7uuPg3sg9dLuzSn2s/h3t9t9WEn6/f1YVf0iXuCLqf2Gjepc/BLef3n402QA/Nin+5/uP6tW1zfKH5TLD6qaTzaj90DtAQDkmH2PndGIpUE969fuD/pn1Y///n7aGqm73+x/paCkT/SZOnqse9ktBFbz+10Z+hrCvcmz1jh2WRqPreje1LO6pJYOxVb7sfPKFhn9/8Igdv2qdwMAANfq9ow6PF7/887d72Xn3Ws3c8+7R2v5+B2Ch2PnR2o5AAC4Gm7wlbUS/doKAq/9cWVzs2JH264JfOdHJvBqW67xWpEbONt2a8s17cCPfMdvmHagRa/mhibcabf9IDJ1PzBtP/R2kzu/m96t30O3abcizwnbDdcOXeP4rch2IlPzQse0d37Y8MJtN0gWDtuu49U9x448v2VCf1mOWzImdN2hQK/mtiKv7sXNlmkHXtMO9syP/cZO0zU1N3QCrx356QqzvrxW3Q+ayWpL6p50o0MAAP5vvHh19PRRp7P//ITGsdJG9n20E4IX8lb4mjcRAACMoUoDAAAAAAAAAAAAAAAAAAAAAPDmO831fyc2sosCsynzygmW+lN+9tap1mxpMOXLv14ow3M0CuNTeiPtdmcv/pe0UcyLWY4bC5I62cs/HHN8qVuxeqpgpY3i5b+Gy1LekXBlje8fjB6HEzHxzNxZi/19Ubz4P4e8xrMvp8yafUQtjr6GCydt4GijKOn5wgV2wfW/FwG4Xv8JAAD//6TAPYc=") openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="71eb010018000000000000080c0000000c0000000200000000000000000000040000000000ff"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xe, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x9a, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x18204, 0x0, 0x3, 0x6, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000280)='attr/current\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0xd}]}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 5m48.192837491s ago: executing program 6 (id=3651): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000001d00)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000511000000003e9a0000000000001052605c8a1b7d91afe89909560f25068600000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001580)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r10}, 0x10) poll(0x0, 0x0, 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x18) r12 = gettid() r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r13, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) tkill(r12, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r13, 0xc02c5341, &(0x7f00000004c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) recvmsg$kcm(r3, &(0x7f00000016c0)={&(0x7f0000001480)=@nfc_llcp, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/150, 0x96}, 0x20) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/239, 0xef}], 0x2, &(0x7f0000002440)=""/4096, 0x1000}, 0x2040) 5m47.396289893s ago: executing program 6 (id=3664): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) r3 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8, 0x200400d1}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b80)={0x0, 0x0}) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) getresuid(0x0, &(0x7f0000000fc0), &(0x7f0000001000)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000c40)={0x280, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@generic="d3ed2c4a2c0afeedc4430eee0d4edc5145c41fc0485f61689babc6bf284f050f2da3cf6cbb8ff5356867e2bbedb125a478c498e12233053755f1f8297aef2af9f0f7de5aa0667c4daa0460cd45229597c9b0495df65aab58d45426cb0e79723b6e55c2533a63ec450a3536d69ebdba89368e84638c4d0cf104628a88c9bd48a9ef4e862a1597a43da28470a409c40891484b5e349530a94d13b3eb04cea9b8357e3630f386a9e0963db9ec31dec2458ede6feef8be824afbd41b6728fe2f4960c6ebe49a2de2cf63462fc7aa1ef570415993b960dfaec50dc12f261adf309fc1dc93111c0bb9c3ec14686565a976b08a61", @generic="8fdc69a36000e51502726b9f0b211f33435688bf1b5916821ad90d926a1f6e5b6a7eb5fc7a0e0267cbeb013c8b37148857e366bb0eb410f58070fae0ff154b0a2ce6d6d4949e0486644d9aa4bba5440f940d422297983255a2e59891ac72b4dd7a2b0d9fe710a074e86411ed40242c945dd716854e4dc6ad3ba22590bf7501b91fd6465e75224e464b16061ed06e5df1fd0b1ed4e2a799bcadca72b184b29966d291d1cb23187c1540845f004956d19e3c4345b74cf921bf6ce07914a4f6c07e1cd928", @generic="1773e1618060030799a9dda5cfdfcda47f7813dcd2b2202b639b30a443e6d1c43f6a263102abb14e230afa1b79329e736569a9a0abc2895b6b991470e276648159a09263927771bdc5fa34a63696640002b8a28484fcfd2b5e627866b51595bba7770d9ce615540cc911d1a921500b0515ebeef9bdc34673b8c552765dae9704c0601767017707a92d896deed6b073f0625486cabae2ccb52174c3b00d0cc9cc0fa9bc1dd66b7fd8bde1e77818d2e3f5feadc2c5b657b260e475f4"]}, 0x280}], 0x1, &(0x7f0000001080)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r2]}}], 0xf8, 0x41}, 0x2040001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000008880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x40800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r13 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "60166d7e10a37c130d3a70f490509a3bca6d90b236428fc17a23c87ed787f76428b2776df13a2db91cc6e75c9ced7117592cc0a002d38c8211905d203c434422", 0x12}, 0x48, r13) 5m47.395696163s ago: executing program 34 (id=3664): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) r3 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f00000003c0)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8, 0x200400d1}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b80)={0x0, 0x0}) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) getresuid(0x0, &(0x7f0000000fc0), &(0x7f0000001000)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000c40)={0x280, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfb, "", [@generic="d3ed2c4a2c0afeedc4430eee0d4edc5145c41fc0485f61689babc6bf284f050f2da3cf6cbb8ff5356867e2bbedb125a478c498e12233053755f1f8297aef2af9f0f7de5aa0667c4daa0460cd45229597c9b0495df65aab58d45426cb0e79723b6e55c2533a63ec450a3536d69ebdba89368e84638c4d0cf104628a88c9bd48a9ef4e862a1597a43da28470a409c40891484b5e349530a94d13b3eb04cea9b8357e3630f386a9e0963db9ec31dec2458ede6feef8be824afbd41b6728fe2f4960c6ebe49a2de2cf63462fc7aa1ef570415993b960dfaec50dc12f261adf309fc1dc93111c0bb9c3ec14686565a976b08a61", @generic="8fdc69a36000e51502726b9f0b211f33435688bf1b5916821ad90d926a1f6e5b6a7eb5fc7a0e0267cbeb013c8b37148857e366bb0eb410f58070fae0ff154b0a2ce6d6d4949e0486644d9aa4bba5440f940d422297983255a2e59891ac72b4dd7a2b0d9fe710a074e86411ed40242c945dd716854e4dc6ad3ba22590bf7501b91fd6465e75224e464b16061ed06e5df1fd0b1ed4e2a799bcadca72b184b29966d291d1cb23187c1540845f004956d19e3c4345b74cf921bf6ce07914a4f6c07e1cd928", @generic="1773e1618060030799a9dda5cfdfcda47f7813dcd2b2202b639b30a443e6d1c43f6a263102abb14e230afa1b79329e736569a9a0abc2895b6b991470e276648159a09263927771bdc5fa34a63696640002b8a28484fcfd2b5e627866b51595bba7770d9ce615540cc911d1a921500b0515ebeef9bdc34673b8c552765dae9704c0601767017707a92d896deed6b073f0625486cabae2ccb52174c3b00d0cc9cc0fa9bc1dd66b7fd8bde1e77818d2e3f5feadc2c5b657b260e475f4"]}, 0x280}], 0x1, &(0x7f0000001080)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r2]}}], 0xf8, 0x41}, 0x2040001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000008880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x40800) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r13 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "60166d7e10a37c130d3a70f490509a3bca6d90b236428fc17a23c87ed787f76428b2776df13a2db91cc6e75c9ced7117592cc0a002d38c8211905d203c434422", 0x12}, 0x48, r13) 4m9.128479549s ago: executing program 3 (id=5869): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000001d00)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000511000000003e9a0000000000001052605c8a1b7d91afe89909560f25068600000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001580)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r10}, 0x10) poll(0x0, 0x0, 0x9) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020f56c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x18) r12 = gettid() r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r13, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r13, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) tkill(r12, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r13, 0xc02c5341, &(0x7f00000004c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) recvmsg$kcm(r3, &(0x7f00000016c0)={&(0x7f0000001480)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/150, 0x96}, 0x20) recvmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/239, 0xef}], 0x2, &(0x7f0000002440)=""/4096, 0x1000}, 0x2040) 4m8.212216474s ago: executing program 3 (id=5891): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000400008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m8.191220444s ago: executing program 3 (id=5892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) 4m8.165533935s ago: executing program 3 (id=5893): msgget$private(0x0, 0x409) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000001c0)="65c0a8193ae74ad15135d5242022c15690aef9b97ba8e3c8f894b31062f3de0c9d2763b7e35b040b79ed001f3d76aca9278974f53fee3afcca973c85057bf62ba7407381452f94a48b81462a586c8e410766faa1041b5e61e80958f5aecf2b5565aaa37857092d2814ecf483d57c98521bf57e057e75544176660e66b9e9c1a94756a58b4f427c924751c6fc08ad156960ebd233e6fa4c5a797e4ed79c61627ef87911a2", 0xa4}, {&(0x7f0000000100)="b568b943cacb00b43cd443e451ccd8dbc58021227bcce38b1cbe53d04c35daee08", 0x21}, {&(0x7f0000000540)="2a551a1e5f955c5a434a02eef4cc2e8769d1a588e7717168a31c7a1020c68f79553cdf1e07ff36179e722775aaba06c12f4a13f382fbeb937dca4e937f8cc3f659abfa77b6b2797091b465a3e06871065e60246aa7cb03a3fd211874cb62fdbc50fdf886eafad7314aaa7e7e34ef3a87466e9f9ad61fa9594d896c77344e8ca797141c12", 0x84}, {&(0x7f0000000280)="41fd564fbeaaab863dc348e0d07b641863079345bf50efa157dc9d4e82d0b3ba465defa83a3f669e83dc6a0ebdfc8288722a7f6db6923634d88b3b7fbd9ee79df1d847dc7055340106ac49aae0ebf887f029962079847b61054375f7467bbe9a93f6a39f94d0cc7a776088c2c150", 0x6e}, {&(0x7f0000000400)="bc3bfd240085bc6d067604d66464885324f0632bcf6d86e8e06b1a2aa92dd1af55a6155072ed6cce349583bf051f91b35aa27df8a8979706b13f3371741f47dff9492097976e79a329ae93138f7e3a0b697c941155d8e0c4f83797", 0x5b}, {&(0x7f0000000600)="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", 0x3ba}, {&(0x7f0000000080)="78978960310ce677b529e8a79ecfab947b", 0x11}], 0x7}}], 0x6, 0x200000d1) 4m8.077181366s ago: executing program 3 (id=5894): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket$inet(0x2, 0x3, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0300f3f1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r7 = socket$inet(0x2, 0x3, 0x6) r8 = dup3(r4, r7, 0x0) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r9, 0x894c, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 4m8.016544777s ago: executing program 3 (id=5895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000440)=""/161, 0xa1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r8, 0x0, 0xfffffffff7fffffe}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 3m52.991907687s ago: executing program 35 (id=5895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000440)=""/161, 0xa1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r8, 0x0, 0xfffffffff7fffffe}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1m43.535676974s ago: executing program 1 (id=8528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r2 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r2, 0x10, 0x2, 0x7000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0xb1) write$P9_RSTAT(r2, &(0x7f0000000040)={0x47, 0x7d, 0x2, {0x0, 0x40, 0xdc3, 0xffff7fff, {0x40, 0x0, 0x8}, 0x1900000, 0x8000, 0x7ff, 0x401, 0x0, '', 0x1, '!', 0x7, 'minixdf', 0x5, 'ext4\x00'}}, 0x47) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x18, 0x0, 0x2}) 1m43.489456074s ago: executing program 1 (id=8530): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000004d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 1m43.402456985s ago: executing program 1 (id=8534): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000075981400000000003b810000850000007d000000760000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) 1m43.308923787s ago: executing program 1 (id=8538): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m42.780602555s ago: executing program 1 (id=8546): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x6, 0x82, &(0x7f0000000000)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.978462888s ago: executing program 1 (id=8561): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 1m26.938546618s ago: executing program 36 (id=8561): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 5.88128881s ago: executing program 5 (id=10045): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd2(0xffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) 5.469450036s ago: executing program 5 (id=10049): acct(0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0xffffffffffffffff, &(0x7f0000000380)) lstat(0x0, 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB="756d61736b3d303030308d2cc1c13030303030303030303030303030302c666c7573682c6e6f646f74732c646f74732c6769643d", @ANYRESHEX=r4, @ANYBLOB="00006b746769643d0092", @ANYRESDEC=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x206, &(0x7f0000000a00)="$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") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004cc0)={{{@in=@remote, @in=@private}}, {{@in6=@mcast2}}}, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x10004001) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x700) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'dummy0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c80)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ip={@private=0xa010101, @multicast1, 0xff, 0xffffffff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x88, 0x2, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "a13e", 0x1}}, @common=@ah={{0x30}, {[0xfff, 0x4]}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffff00, 0x78d8e2074d6bd6cb, 'bridge_slave_0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x88, 0x1, 0x10}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x861, 0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010101, @multicast1, 0xffffffff, 0xffffff00, 'wg0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0x3, 0x5}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'ip6tnl0\x00', {0x10000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) 4.142853067s ago: executing program 5 (id=10059): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd2(0xffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) 3.430171478s ago: executing program 5 (id=10062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x57f, 0x40, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x3808004, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="abed3528f0"], 0x4, 0x7d2, &(0x7f0000001ec0)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x2, {0x26, 0xba7b}, 0x2}, 0x1) 3.314015869s ago: executing program 5 (id=10064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xafc) getitimer(0x2, &(0x7f0000000600)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={0x0, 0x4}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x26ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x52a, &(0x7f0000000a00)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r10, 0x0, 0x2}, 0x18) time(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) truncate(0x0, 0x5c00) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80, 0x6) 1.891273411s ago: executing program 9 (id=10090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 1.747809523s ago: executing program 9 (id=10091): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000300)={&(0x7f00000004c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) poll(&(0x7f0000000200)=[{r0, 0x10}], 0x1, 0x20000000) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xff01, 0xfe, 0xff92, 0xa, 0x34, "000401010100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 1.30383219s ago: executing program 4 (id=10109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x5000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.28559121s ago: executing program 4 (id=10111): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x17) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 1.26284231s ago: executing program 4 (id=10113): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffb2, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x0, 0x8, 0x9d}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffdfff}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8f}, @TCA_FQ_CODEL_ECN, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400f000", @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000180), 0x4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x102) 1.208338782s ago: executing program 4 (id=10115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x40000000000000, 0x0) 1.207925832s ago: executing program 8 (id=10117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 1.171266852s ago: executing program 4 (id=10118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c3, &(0x7f0000000500)={0x0, 0x67a4, 0x0, 0x0, 0x11d}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x0, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(r1, 0xc54, 0xc993, 0x1, 0x0, 0x0) (fail_nth: 5) 1.153361982s ago: executing program 8 (id=10119): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200000, &(0x7f0000000400)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@mblk_io_submit}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @broadcast, 0x4e20, 0x1, 'lblcr\x00', 0x10, 0x6, 0x4b}, {@multicast2, 0x4e20, 0x4, 0x0, 0x8, 0x7}}, 0x44) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x2}, {}]}, 0x34, 0x0) 968.470375ms ago: executing program 8 (id=10122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x5000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 913.352796ms ago: executing program 8 (id=10123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x17) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 897.570826ms ago: executing program 9 (id=10124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 893.003236ms ago: executing program 7 (id=10125): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 10) 887.094367ms ago: executing program 8 (id=10126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) sync() sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x3, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc0, 0x33}, {@in=@rand_addr=0x1, 0x19, 0x32}, @in6=@mcast2, {0x200000, 0x6, 0x0, 0x5, 0x1, 0x20}, {0x100000, 0x0, 0xfffffffffffffffc, 0x2}, {0x401, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x7}}, 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 624.30696ms ago: executing program 9 (id=10127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80100002100010027bd7000fedbdf2502"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) (fail_nth: 6) 568.400851ms ago: executing program 7 (id=10128): preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0x9, 0x7fc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(r2, 0x0, 0x0) 568.109801ms ago: executing program 7 (id=10129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 542.494212ms ago: executing program 7 (id=10130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd2(0xffffffff, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) 477.381682ms ago: executing program 7 (id=10131): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 382.361614ms ago: executing program 8 (id=10132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x5c3, &(0x7f0000000500)={0x0, 0x67a4, 0x0, 0x0, 0x11d}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0xa, 0x0, @fd_index=0x9, 0xc, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(r1, 0xc54, 0xc993, 0x1, 0x0, 0x2000) 316.327435ms ago: executing program 4 (id=10133): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) 301.143155ms ago: executing program 9 (id=10134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x57f, 0x40, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x3808004, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="abed3528f0"], 0x4, 0x7d2, &(0x7f0000001ec0)="$eJzs3U9sHOXZAPBnnJgEI+VDfJ/yoSiESaBSkMCs12DqcoBlPbYH1rvW7rpKVFU0AgdZcYBCUUsuEFWCtmpV9dQj5cqtN6pKrdRD21OlcuilNyROFZX6T1QVkquZXcd/13aCE/7k97O87+zsM+/7zHo9z87a+24AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUpyqVsSQa+TcXzqSD1afarbkdbl/t79cbmg0e3zBuRFJ8x+HD8dE/euv+b+3mo8XFqTjeu3Y8DhfN4bh029HbH/3fg0Or2++Q0LU6uce4JOL1IqkL55aXF1+6DoncQD/45VVv8u+V4nIma+adVj5Xm8nSvNNKJycmKg/OTnfS6byRdc52utlcWm9ntW6rnZ6u35eOTU6Op9no2dZCc2aq1shWVz7yQLVSmUifHJ3Pau1Oq/ngk9Gpz+aNRt6cKWOqlW9HEfNI8UB8Ku+m3aw2l6bnl5YXx9dllWyXahE0tt0NB3qPn+P33v7BK+//fWmxeEAO2t+k/8Csjo1Vq2MTD08+/EilcrBaqW5cUdkkrkTEUEQRcV0etHyO7O8BHD6BoX79j0bk0YyFOBPppq/hiBiOekxFO1oxV6z70/CWqL7V+v+lB//6h53GXV//V6v8nWs3H4uy/p/oXTsxqP5vyWLHr+Grit7T18vxalyKC3EulmM5FuOl/e3/0L5nPPRJe0g2XJuJLJqRRydakcdc1Mo1aX9NGpMxERNRiadjNqajE2lMRx6NyKITZ6MT3cjKR1Q92pFFLbrRinakcTrqcV+kMRaTMRnjkUYWo3E2WrEQzZiJB6JW9nI+lsr7fXxTlkdvjV8898cP3iqWrwSN7bRbxZO5IuhvOwRtKfcD6v9wFJcrK8Xzhc0R6v/N7jocxeHarKzWfwAAAOALKylffU/Kl/jvKpem80b2tT1s2T14A9IDAAAA9kH5l//jRTNcLN0VSXH+X9km8r0bnhsAAACwP5LyPXZJRIzE3b2l87EUr8dibPciAAAAAPA5VP79/0TRjES8Vq5YnS7F+T8AAAB8QXxv0Bz776/OsduZP5T8qpwDOLk8f+be5GKtiKtdPNDbrt989UqP3eljyZF+J2UzcfDSbUlEHKxnx5PV2S8/PtRrPywvj63NJTBorv+k3d4xgdg5gfJa/DBO9mJOPttrn+3fkvRGGZnOG9lovdV4tJwSsfjuvvL80nciitG/35w7ksT5peXF0WdeWH62zOVy0cvli/0JFDfMo7jyPzvmstK/B+Ku7fd4uHwjRn/ckd64lfX7P1Ru/Z+Vcp7ZgfufrB/zjTjVizk10mtHVm/pjXm4GHNs9NGxqNWODHWzM91XVtbtfT+Lsd32fJefwhtxTy/mntP39JptsqhuyOL5rVlU12fRuy9iaJ+yeOvka2f+9dtWko3vlsX4VWSxciBicxYAn5bz5aw/a1Xo1rIKFUWlUNT/TXX31tUt93Cs/efaKL1nGR/3u42IdbXuYGyu7mt97626r0TviH66F3O693zi4LFt6kplmyP6i0sv/q5/RH/onZ/+7Osnfv/zctxrqm7vxH29mH4Td/xmQI0t9vlHm6rq28UWb287bvEcrNOoJnE54sC3Lr4YR19+9dIDSxfPPbf43OLz1er4ROWhSuXhagyXTxX6zQ6ZAnDz2v0zdgZG3NLvInlo0Fl1v+LdceVfCkbjmXghlqN4BnB3L/bureO+W5yJr/s3hPt3OWsdWfcJL/fvcm65FlvdGpvEgNjxdffY//+kbD66Lj8OALghTu1Qh3ep/1demb9/l/PujbV809lxDK7l2/nydb03AODmkLU/TEa6bybtdj7/9Njk5FitO5ul7Vb9qbSdT81kad7sZu36bK05k6Xz7Va3VV994Xgq66Sdhfn5VrubTrfaaQx18jPlJ7+n/Y9+72RztWY3r3fmG1mtk6X1VrNbq3fTqbxTT+cXnmjkndmsXW7cmc/q+XRer3XzVjPttBba9Ww0TTtZti4wn8qa3Xw6Lxab6Xw7n6u1L0dEY2EuS6eyTr2dz3dbvQ5Xx8qb0632XNnt6Nbd/8uNvr8B4LPg5VcvXTi3vLz40rUt/HkvwZ/2PgIAG6nSAAAAAAAAAAAAAADw2bf17XrF2k/wjsCrWzgU132Im2jhK/0pGXtriqXPSGKf3sI3HnvswqCYJ167c3Zv/Wz/m7LdW13fPBJxy7s/7q15fHDwd/u/f/uzp+9FxDVsvpLsELPhMHHLDT4sAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC2/hsAAP//vbRp5A==") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r4 = io_uring_setup(0x391f, &(0x7f0000000180)={0x0, 0x2a308, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x2, {0x26, 0xba7b}, 0x2}, 0x1) 290.662116ms ago: executing program 7 (id=10135): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000004c0)=[{0x4, 0x0, [0x40, 0x800, 0x7ff, 0x7, 0x5, 0x2, 0x5, 0x5, 0xfd7e, 0x2d73, 0x4, 0x0, 0x200, 0x3, 0x6, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40408c0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e80)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000040000008500000000f1f893e9"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12093f0004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0x27e}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r6) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000006c0)={0x60, 0x2, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff, &(0x7f00000003c0)=[{0x100, 0x7fffffffffffffff, 0xff}, {0x5, 0x5, 0xfffffffffffffff8}, {0x4, 0x400, 0xec}, {0x68c, 0x3, 0x4}, {0x8, 0x4, 0x9}, {0xe26, 0xd7, 0x10000}, {0xfffffffffffffff8, 0xffffffffffffffff, 0x1}], 0x7, 0x591, 0x2a, 0x40, 0x20, 0x28}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f0000000740)=@buf="bc30bb6ae56906fb4fe0e608cecda6db20d1f4527be77666021857573b7da0f210ab26811c63f3508a1b392a2f246fc638c984f7fe1c"}, 0x20) write(r3, &(0x7f0000000480)='M', 0xffffff1f) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000780)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r8, @in={{0x2, 0x4e24, @multicast1}}, 0x8, 0x4}, &(0x7f00000008c0)=0x90) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 284.856356ms ago: executing program 5 (id=10136): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000150a0102"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x0, 0x4, 0x2, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x2000, 0x0, @mcast2, 0x2}}, 0x0, 0x1, [{{0xa, 0x1, 0x9, @empty}}]}, 0x110) unshare(0x24060400) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 0s ago: executing program 9 (id=10137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)=r2}, 0x53) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) kernel console output (not intermixed with test programs): 4.805148][T28457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.863864][T20118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.980084][T28472] loop7: detected capacity change from 0 to 512 [ 494.998281][T28472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.999959][T28474] FAULT_INJECTION: forcing a failure. [ 494.999959][T28474] name failslab, interval 1, probability 0, space 0, times 0 [ 495.024766][T28474] CPU: 0 UID: 0 PID: 28474 Comm: syz.9.9394 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 495.024875][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.024891][T28474] Call Trace: [ 495.024898][T28474] [ 495.024906][T28474] dump_stack_lvl+0xf6/0x150 [ 495.024933][T28474] dump_stack+0x15/0x1a [ 495.025057][T28474] should_fail_ex+0x261/0x270 [ 495.025111][T28474] should_failslab+0x8f/0xb0 [ 495.025149][T28474] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 495.025184][T28474] ? sidtab_sid2str_get+0xb8/0x140 [ 495.025211][T28474] ? vsnprintf+0x84d/0x8a0 [ 495.025289][T28474] kmemdup_noprof+0x2b/0x70 [ 495.025316][T28474] sidtab_sid2str_get+0xb8/0x140 [ 495.025344][T28474] security_sid_to_context_core+0x1eb/0x2f0 [ 495.025382][T28474] security_sid_to_context+0x27/0x30 [ 495.025489][T28474] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 495.025534][T28474] security_lsmprop_to_secctx+0x40/0x80 [ 495.025573][T28474] audit_log_task_context+0x7a/0x180 [ 495.025606][T28474] audit_log_task+0xfb/0x250 [ 495.025633][T28474] audit_seccomp+0x68/0x130 [ 495.025718][T28474] __seccomp_filter+0x694/0x10e0 [ 495.025767][T28474] ? vfs_write+0x669/0x950 [ 495.025881][T28474] __secure_computing+0x7e/0x160 [ 495.025917][T28474] syscall_trace_enter+0xcf/0x1f0 [ 495.025956][T28474] do_syscall_64+0xaa/0x1c0 [ 495.025999][T28474] ? clear_bhb_loop+0x25/0x80 [ 495.026023][T28474] ? clear_bhb_loop+0x25/0x80 [ 495.026168][T28474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.026190][T28474] RIP: 0033:0x7f353a54e169 [ 495.026208][T28474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.026231][T28474] RSP: 002b:00007f3538bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 495.026251][T28474] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54e169 [ 495.026266][T28474] RDX: 00000000000000cc RSI: 0000200000000180 RDI: 0000000000000009 [ 495.026344][T28474] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 495.026356][T28474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.026376][T28474] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 495.026400][T28474] [ 495.277713][T28472] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.298307][T28470] netlink: 'syz.4.9392': attribute type 27 has an invalid length. [ 495.403973][T20118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.484795][T28492] netlink: 'syz.7.9401': attribute type 21 has an invalid length. [ 495.498738][T28493] __nla_validate_parse: 1 callbacks suppressed [ 495.498774][T28493] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 495.562004][T28496] veth1_to_bond: entered allmulticast mode [ 495.600496][T28500] loop8: detected capacity change from 0 to 2048 [ 495.609521][T28500] EXT4-fs: Ignoring removed bh option [ 495.622025][T28496] xt_CT: No such helper "syz0" [ 495.630275][T28496] veth1_to_bond: left allmulticast mode [ 495.661189][T28500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.727770][T28498] netem: change failed [ 495.791166][T28510] loop9: detected capacity change from 0 to 2048 [ 495.840932][T28510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.879465][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.935087][T28515] loop9: detected capacity change from 0 to 128 [ 495.949467][T28515] FAT-fs (loop9): bogus number of reserved sectors [ 495.956048][T28515] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 495.966112][T28515] FAT-fs (loop9): Can't find a valid FAT filesystem [ 496.093902][T28519] program syz.9.9409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.151208][ T6708] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 496.175742][ T6708] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 496.188034][ T6708] EXT4-fs (loop8): This should not happen!! Data will be lost [ 496.188034][ T6708] [ 496.198451][ T6708] EXT4-fs (loop8): Total free blocks count 0 [ 496.204462][ T6708] EXT4-fs (loop8): Free/Dirty block details [ 496.210754][ T6708] EXT4-fs (loop8): free_blocks=2415919104 [ 496.216490][ T6708] EXT4-fs (loop8): dirty_blocks=8224 [ 496.221843][ T6708] EXT4-fs (loop8): Block reservation details [ 496.228597][ T6708] EXT4-fs (loop8): i_reserved_data_blocks=514 [ 496.230848][T28521] loop9: detected capacity change from 0 to 2048 [ 496.246992][ T6719] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 496.270130][T28521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.341699][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.377071][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 496.377088][ T29] audit: type=1400 audit(1744787856.915:30566): avc: denied { write } for pid=28526 comm="syz.5.9414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 496.437085][T28529] FAULT_INJECTION: forcing a failure. [ 496.437085][T28529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.450937][T28529] CPU: 0 UID: 0 PID: 28529 Comm: syz.9.9413 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 496.450972][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 496.450988][T28529] Call Trace: [ 496.451071][T28529] [ 496.451080][T28529] dump_stack_lvl+0xf6/0x150 [ 496.451110][T28529] dump_stack+0x15/0x1a [ 496.451131][T28529] should_fail_ex+0x261/0x270 [ 496.451195][T28529] should_fail+0xb/0x10 [ 496.451223][T28529] should_fail_usercopy+0x1a/0x20 [ 496.451254][T28529] _copy_to_user+0x20/0xa0 [ 496.451297][T28529] simple_read_from_buffer+0xb2/0x130 [ 496.451336][T28529] proc_fail_nth_read+0x103/0x140 [ 496.451358][T28529] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.451376][T28529] vfs_read+0x1b2/0x710 [ 496.451447][T28529] ? kmem_cache_free+0xe4/0x2e0 [ 496.451468][T28529] ? __rcu_read_unlock+0x4e/0x70 [ 496.451501][T28529] ? __fget_files+0x186/0x1c0 [ 496.451528][T28529] ksys_read+0xeb/0x1b0 [ 496.451611][T28529] __x64_sys_read+0x42/0x50 [ 496.451698][T28529] x64_sys_call+0x2a3b/0x2e10 [ 496.451762][T28529] do_syscall_64+0xc9/0x1c0 [ 496.451872][T28529] ? clear_bhb_loop+0x25/0x80 [ 496.451893][T28529] ? clear_bhb_loop+0x25/0x80 [ 496.451918][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.451943][T28529] RIP: 0033:0x7f353a54cb7c [ 496.451962][T28529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.451983][T28529] RSP: 002b:00007f3538bb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.452010][T28529] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54cb7c [ 496.452022][T28529] RDX: 000000000000000f RSI: 00007f3538bb70a0 RDI: 0000000000000004 [ 496.452033][T28529] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 496.452054][T28529] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 496.452067][T28529] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 496.452131][T28529] [ 496.714569][T28535] loop8: detected capacity change from 0 to 512 [ 496.728463][T28537] loop9: detected capacity change from 0 to 2048 [ 496.774798][T28537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.814208][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.834084][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9421'. [ 496.843828][T28535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.881337][ T29] audit: type=1326 audit(1744787857.415:30567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 496.915500][T28535] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.946895][T28553] FAULT_INJECTION: forcing a failure. [ 496.946895][T28553] name failslab, interval 1, probability 0, space 0, times 0 [ 496.959697][T28553] CPU: 1 UID: 0 PID: 28553 Comm: syz.5.9423 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 496.959787][T28553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 496.959799][T28553] Call Trace: [ 496.959807][T28553] [ 496.959817][T28553] dump_stack_lvl+0xf6/0x150 [ 496.959846][T28553] dump_stack+0x15/0x1a [ 496.959868][T28553] should_fail_ex+0x261/0x270 [ 496.959902][T28553] should_failslab+0x8f/0xb0 [ 496.960003][T28553] kmem_cache_alloc_noprof+0x59/0x340 [ 496.960030][T28553] ? getname_flags+0x81/0x3b0 [ 496.960058][T28553] getname_flags+0x81/0x3b0 [ 496.960119][T28553] io_symlinkat_prep+0x11f/0x1d0 [ 496.960259][T28553] io_submit_sqes+0x607/0x1050 [ 496.960322][T28553] __se_sys_io_uring_enter+0x1ce/0x1c00 [ 496.960355][T28553] ? 0xffffffff81000000 [ 496.960373][T28553] ? get_pid_task+0x94/0xd0 [ 496.960416][T28553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 496.960441][T28553] ? vfs_write+0x669/0x950 [ 496.960546][T28553] ? putname+0xe1/0x100 [ 496.960570][T28553] ? __fget_files+0x186/0x1c0 [ 496.960596][T28553] ? fput+0x99/0xd0 [ 496.960651][T28553] ? ksys_write+0x180/0x1b0 [ 496.960687][T28553] __x64_sys_io_uring_enter+0x78/0x90 [ 496.960721][T28553] x64_sys_call+0x26cb/0x2e10 [ 496.960749][T28553] do_syscall_64+0xc9/0x1c0 [ 496.960790][T28553] ? clear_bhb_loop+0x25/0x80 [ 496.960858][T28553] ? clear_bhb_loop+0x25/0x80 [ 496.960885][T28553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.960911][T28553] RIP: 0033:0x7fe83d11e169 [ 496.960929][T28553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.960952][T28553] RSP: 002b:00007fe83b787038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 496.961044][T28553] RAX: ffffffffffffffda RBX: 00007fe83d345fa0 RCX: 00007fe83d11e169 [ 496.961061][T28553] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000005 [ 496.961075][T28553] RBP: 00007fe83b787090 R08: 0000000000000000 R09: 0000000000000000 [ 496.961090][T28553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.961105][T28553] R13: 0000000000000000 R14: 00007fe83d345fa0 R15: 00007fffad5e17d8 [ 496.961129][T28553] [ 497.080474][ T29] audit: type=1326 audit(1744787857.445:30568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 497.211489][ T29] audit: type=1326 audit(1744787857.445:30569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 497.235808][ T29] audit: type=1326 audit(1744787857.465:30570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28549 comm="syz.4.9421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 497.246330][T28535] EXT4-fs error (device loop8): ext4_empty_dir:3077: inode #12: comm syz.8.9410: invalid size [ 497.311087][T28535] EXT4-fs (loop8): Remounting filesystem read-only [ 497.321721][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9424'. [ 497.392840][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.408869][ T6722] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 497.419645][ T6722] Quota error (device loop8): write_blk: dquota write failed [ 497.427263][ T6722] Quota error (device loop8): free_dqentry: Can't write quota data block 5 [ 497.556447][T28581] loop9: detected capacity change from 0 to 2048 [ 497.631565][T28581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.678569][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.756978][T28590] loop9: detected capacity change from 0 to 512 [ 497.772771][T28590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.786152][T28590] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.812650][T28590] EXT4-fs error (device loop9): ext4_empty_dir:3077: inode #12: comm syz.9.9435: invalid size [ 497.856700][T28590] EXT4-fs (loop9): Remounting filesystem read-only [ 497.883896][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.894347][T28594] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9437'. [ 497.903637][ T6719] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 497.915562][ T6719] Quota error (device loop9): write_blk: dquota write failed [ 497.923011][ T6719] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 498.068210][ T29] audit: type=1400 audit(1744787858.595:30571): avc: denied { setopt } for pid=28597 comm="syz.9.9438" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 498.513836][T28616] bond1: entered promiscuous mode [ 498.519014][T28616] bond1: entered allmulticast mode [ 498.524445][T28616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.546087][T28616] bond1 (unregistering): Released all slaves [ 498.642312][T28621] loop8: detected capacity change from 0 to 512 [ 498.723754][T28621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.747531][T28621] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.811436][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9449'. [ 498.823619][T28621] EXT4-fs error (device loop8): ext4_empty_dir:3077: inode #12: comm syz.8.9447: invalid size [ 498.851478][T28621] EXT4-fs (loop8): Remounting filesystem read-only [ 498.992009][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.024765][ T6722] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 499.098576][T28638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9454'. [ 499.136429][T28643] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9455'. [ 499.617466][T28665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9463'. [ 500.894089][T28677] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9467'. [ 500.926194][T28678] SELinux: ebitmap: truncated map [ 500.949908][T28678] SELinux: failed to load policy [ 501.445087][T28699] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 501.481810][T28698] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 501.524863][T28700] bond1: entered promiscuous mode [ 501.530065][T28700] bond1: entered allmulticast mode [ 501.615912][T28700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.670157][T28700] bond1 (unregistering): Released all slaves [ 501.921742][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 501.921802][ T29] audit: type=1326 audit(1744787862.395:30730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 501.930066][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9476'. [ 501.954104][ T29] audit: type=1326 audit(1744787862.395:30731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 501.988345][ T29] audit: type=1326 audit(1744787862.395:30732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.011980][ T29] audit: type=1326 audit(1744787862.395:30733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.037076][ T29] audit: type=1326 audit(1744787862.395:30734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.061448][ T29] audit: type=1326 audit(1744787862.395:30735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.085726][ T29] audit: type=1326 audit(1744787862.395:30736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.110612][ T29] audit: type=1326 audit(1744787862.395:30737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.134297][ T29] audit: type=1326 audit(1744787862.405:30738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.159144][ T29] audit: type=1326 audit(1744787862.405:30739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28708 comm="syz.4.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 502.226555][T28723] loop9: detected capacity change from 0 to 512 [ 502.274399][T28723] EXT4-fs (loop9): 1 orphan inode deleted [ 502.284454][T28723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.304286][ T6718] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 502.338248][T28723] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.452967][T28723] vlan2: entered allmulticast mode [ 502.458908][T28723] bridge_slave_0: entered allmulticast mode [ 502.459553][T28736] loop8: detected capacity change from 0 to 512 [ 502.595640][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.648042][T28736] EXT4-fs error (device loop8): ext4_orphan_get:1390: inode #15: comm syz.8.9480: casefold flag without casefold feature [ 502.665722][T28736] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.9480: couldn't read orphan inode 15 (err -117) [ 502.706093][T28736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.731660][T28736] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9480'. [ 502.937936][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.001864][T28750] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 503.284185][T28757] netlink: 'syz.5.9488': attribute type 27 has an invalid length. [ 503.324017][T28761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9490'. [ 503.583719][T28765] bond1: entered promiscuous mode [ 503.588910][T28765] bond1: entered allmulticast mode [ 503.606811][T28765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.671886][T28765] bond1 (unregistering): Released all slaves [ 503.875713][T28777] FAULT_INJECTION: forcing a failure. [ 503.875713][T28777] name failslab, interval 1, probability 0, space 0, times 0 [ 503.889758][T28777] CPU: 1 UID: 0 PID: 28777 Comm: syz.8.9496 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 503.889792][T28777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.889868][T28777] Call Trace: [ 503.889875][T28777] [ 503.889884][T28777] dump_stack_lvl+0xf6/0x150 [ 503.889913][T28777] dump_stack+0x15/0x1a [ 503.889932][T28777] should_fail_ex+0x261/0x270 [ 503.890025][T28777] should_failslab+0x8f/0xb0 [ 503.890101][T28777] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 503.890129][T28777] ? shmem_alloc_inode+0x34/0x50 [ 503.890154][T28777] shmem_alloc_inode+0x34/0x50 [ 503.890233][T28777] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 503.890255][T28777] alloc_inode+0x40/0x170 [ 503.890293][T28777] new_inode+0x1e/0xe0 [ 503.890314][T28777] shmem_get_inode+0x24e/0x730 [ 503.890353][T28777] shmem_symlink+0x9b/0x3e0 [ 503.890449][T28777] ? selinux_inode_symlink+0x22/0x30 [ 503.890473][T28777] vfs_symlink+0xca/0x1d0 [ 503.890505][T28777] do_symlinkat+0xe3/0x370 [ 503.890537][T28777] __x64_sys_symlink+0x50/0x60 [ 503.890625][T28777] x64_sys_call+0x2a77/0x2e10 [ 503.890650][T28777] do_syscall_64+0xc9/0x1c0 [ 503.890684][T28777] ? clear_bhb_loop+0x25/0x80 [ 503.890708][T28777] ? clear_bhb_loop+0x25/0x80 [ 503.890733][T28777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.890761][T28777] RIP: 0033:0x7f6071fce169 [ 503.890779][T28777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.890831][T28777] RSP: 002b:00007f6070637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 503.890852][T28777] RAX: ffffffffffffffda RBX: 00007f60721f5fa0 RCX: 00007f6071fce169 [ 503.890867][T28777] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 503.890879][T28777] RBP: 00007f6070637090 R08: 0000000000000000 R09: 0000000000000000 [ 503.890891][T28777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.890917][T28777] R13: 0000000000000000 R14: 00007f60721f5fa0 R15: 00007ffcb721c2d8 [ 503.890936][T28777] [ 504.356251][T28791] TCP: out of memory -- consider tuning tcp_mem [ 507.127549][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 507.127567][ T29] audit: type=1326 audit(1744787867.635:30851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.158217][ T29] audit: type=1326 audit(1744787867.635:30852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.182104][ T29] audit: type=1326 audit(1744787867.645:30853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.206403][ T29] audit: type=1326 audit(1744787867.645:30854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.230854][ T29] audit: type=1326 audit(1744787867.645:30855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.254574][ T29] audit: type=1326 audit(1744787867.645:30856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.278984][ T29] audit: type=1326 audit(1744787867.645:30857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.302690][ T29] audit: type=1326 audit(1744787867.645:30858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.327031][ T29] audit: type=1326 audit(1744787867.645:30859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.327067][ T29] audit: type=1326 audit(1744787867.645:30860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.9.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 507.381242][T28856] loop9: detected capacity change from 0 to 2048 [ 507.501568][T28870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9528'. [ 507.763063][T28879] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 508.082779][T28890] loop8: detected capacity change from 0 to 512 [ 508.089897][T28890] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 508.126131][T28890] EXT4-fs (loop8): 1 truncate cleaned up [ 508.148513][T28902] loop9: detected capacity change from 0 to 512 [ 508.191177][T28902] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.229798][T28902] EXT4-fs error (device loop9): ext4_empty_dir:3077: inode #12: comm syz.9.9538: invalid size [ 508.246658][T28902] EXT4-fs (loop9): Remounting filesystem read-only [ 508.324889][ T6722] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 508.404563][T28916] netlink: 'syz.8.9543': attribute type 27 has an invalid length. [ 508.405077][T28932] loop9: detected capacity change from 0 to 512 [ 508.453625][T28934] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9552'. [ 508.463536][T28932] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 508.489805][T28932] EXT4-fs (loop9): 1 truncate cleaned up [ 508.666232][T28952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9558'. [ 509.155402][T28916] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.164435][T28916] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.174886][T28916] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.184138][T28916] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.199671][T28916] vlan2: left promiscuous mode [ 509.204489][T28916] bridge0: left promiscuous mode [ 509.211054][T28916] vlan2: left allmulticast mode [ 509.215991][T28916] bridge0: left allmulticast mode [ 509.231397][T28952] bridge_slave_1: left allmulticast mode [ 509.238655][T28952] bridge_slave_1: left promiscuous mode [ 509.244312][T28952] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.279471][T28952] bridge_slave_0: left allmulticast mode [ 509.285191][T28952] bridge_slave_0: left promiscuous mode [ 509.291114][T28952] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.357565][T28948] netem: change failed [ 509.381534][T28970] bond1: entered promiscuous mode [ 509.386660][T28970] bond1: entered allmulticast mode [ 509.403700][T28970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.416209][T28970] bond1 (unregistering): Released all slaves [ 509.434707][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9566'. [ 509.461126][T28980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9568'. [ 509.560169][T28991] SELinux: security policydb version 17 (MLS) not backwards compatible [ 509.577702][T28991] SELinux: failed to load policy [ 509.592744][T28993] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 510.290893][T29040] FAULT_INJECTION: forcing a failure. [ 510.290893][T29040] name failslab, interval 1, probability 0, space 0, times 0 [ 510.304446][T29040] CPU: 0 UID: 0 PID: 29040 Comm: syz.8.9587 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 510.304480][T29040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.304495][T29040] Call Trace: [ 510.304502][T29040] [ 510.304512][T29040] dump_stack_lvl+0xf6/0x150 [ 510.304553][T29040] dump_stack+0x15/0x1a [ 510.304570][T29040] should_fail_ex+0x261/0x270 [ 510.304600][T29040] should_failslab+0x8f/0xb0 [ 510.304638][T29040] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 510.304665][T29040] ? __alloc_skb+0x10d/0x320 [ 510.304716][T29040] __alloc_skb+0x10d/0x320 [ 510.304742][T29040] netlink_alloc_large_skb+0xad/0xe0 [ 510.304769][T29040] netlink_sendmsg+0x3da/0x720 [ 510.304813][T29040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.304844][T29040] __sock_sendmsg+0x140/0x180 [ 510.304886][T29040] ____sys_sendmsg+0x350/0x4e0 [ 510.304922][T29040] __sys_sendmsg+0x1a0/0x240 [ 510.305043][T29040] __x64_sys_sendmsg+0x46/0x50 [ 510.305076][T29040] x64_sys_call+0x26f3/0x2e10 [ 510.305102][T29040] do_syscall_64+0xc9/0x1c0 [ 510.305137][T29040] ? clear_bhb_loop+0x25/0x80 [ 510.305214][T29040] ? clear_bhb_loop+0x25/0x80 [ 510.305240][T29040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.305330][T29040] RIP: 0033:0x7f6071fce169 [ 510.305345][T29040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.305362][T29040] RSP: 002b:00007f6070637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.305445][T29040] RAX: ffffffffffffffda RBX: 00007f60721f5fa0 RCX: 00007f6071fce169 [ 510.305457][T29040] RDX: 00000000000008d0 RSI: 0000200000000500 RDI: 0000000000000006 [ 510.305517][T29040] RBP: 00007f6070637090 R08: 0000000000000000 R09: 0000000000000000 [ 510.305531][T29040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.305545][T29040] R13: 0000000000000000 R14: 00007f60721f5fa0 R15: 00007ffcb721c2d8 [ 510.305569][T29040] [ 510.595616][T29045] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 510.784008][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9598'. [ 510.835625][T29063] loop8: detected capacity change from 0 to 128 [ 511.632110][T29098] loop8: detected capacity change from 0 to 512 [ 511.716999][T29069] chnl_net:caif_netlink_parms(): no params data found [ 511.734814][T29098] EXT4-fs mount: 8 callbacks suppressed [ 511.734830][T29098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.811716][T29111] bond1: entered promiscuous mode [ 511.817512][T29111] bond1: entered allmulticast mode [ 511.833370][T29098] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.852703][T29098] EXT4-fs error (device loop8): ext4_empty_dir:3077: inode #12: comm syz.8.9606: invalid size [ 511.856959][T29111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.869776][T29098] EXT4-fs (loop8): Remounting filesystem read-only [ 511.899692][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.912543][ T6718] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 511.925378][T29111] bond1 (unregistering): Released all slaves [ 512.079185][T29069] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.086292][T29069] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.114668][T29124] xt_connbytes: Forcing CT accounting to be enabled [ 512.127986][T29124] Cannot find del_set index 1 as target [ 512.134137][T29069] bridge_slave_0: entered allmulticast mode [ 512.155758][T29069] bridge_slave_0: entered promiscuous mode [ 512.175724][T29069] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.183654][T29069] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.190795][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 512.190810][ T29] audit: type=1326 audit(1744787872.725:31464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.221635][ T29] audit: type=1326 audit(1744787872.725:31465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.233837][T29109] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 512.245546][ T29] audit: type=1326 audit(1744787872.725:31466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.277730][ T29] audit: type=1326 audit(1744787872.725:31467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.301611][ T29] audit: type=1326 audit(1744787872.725:31468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.325995][ T29] audit: type=1326 audit(1744787872.725:31469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.328640][T29069] bridge_slave_1: entered allmulticast mode [ 512.350495][ T29] audit: type=1326 audit(1744787872.725:31470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.350529][ T29] audit: type=1326 audit(1744787872.725:31471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.389178][T29132] loop8: detected capacity change from 0 to 2048 [ 512.413957][ T29] audit: type=1326 audit(1744787872.735:31472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.439128][ T29] audit: type=1326 audit(1744787872.735:31473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29104 comm="syz.9.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 512.468914][T29069] bridge_slave_1: entered promiscuous mode [ 512.486800][T29132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.522720][T29069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.543918][T29069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.576316][T29069] team0: Port device team_slave_0 added [ 512.587763][T29069] team0: Port device team_slave_1 added [ 512.618374][T29069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.625469][T29069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.652240][T29069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.664071][T29069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.671092][T29069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.697912][T29069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.841696][T29069] hsr_slave_0: entered promiscuous mode [ 512.851694][T29069] hsr_slave_1: entered promiscuous mode [ 512.858119][T29069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.866062][T29069] Cannot create hsr debugfs directory [ 513.079415][T29147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9620'. [ 513.766817][ T6707] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 513.924492][ T6707] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 513.937143][ T6707] EXT4-fs (loop8): This should not happen!! Data will be lost [ 513.937143][ T6707] [ 513.947576][ T6707] EXT4-fs (loop8): Total free blocks count 0 [ 513.953594][ T6707] EXT4-fs (loop8): Free/Dirty block details [ 513.959586][ T6707] EXT4-fs (loop8): free_blocks=2415919504 [ 513.965401][ T6707] EXT4-fs (loop8): dirty_blocks=6416 [ 513.970775][ T6707] EXT4-fs (loop8): Block reservation details [ 513.977754][ T6707] EXT4-fs (loop8): i_reserved_data_blocks=401 [ 513.987160][T29158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.995623][T29158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.315200][ T6707] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 514.343711][T29167] loop9: detected capacity change from 0 to 128 [ 514.364497][T29165] netlink: 'syz.5.9628': attribute type 27 has an invalid length. [ 514.417217][T29167] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 514.435787][T29167] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.514897][T26732] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.580156][T29174] loop9: detected capacity change from 0 to 512 [ 514.597073][T29174] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 514.598937][T29069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 514.628350][T29174] EXT4-fs (loop9): 1 truncate cleaned up [ 514.634620][T29174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.650996][T29177] bond2: entered promiscuous mode [ 514.656079][T29177] bond2: entered allmulticast mode [ 514.664749][T29177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.673718][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.691576][T29177] bond2 (unregistering): Released all slaves [ 514.701460][T29069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.711088][T29069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 514.721574][T29069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.803420][T29184] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 514.841889][T29069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.869594][T29069] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.889100][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.896289][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.920836][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.927998][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.960248][T29186] loop8: detected capacity change from 0 to 128 [ 515.082901][T29069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.133713][T29209] loop8: detected capacity change from 0 to 764 [ 515.166097][T29215] loop9: detected capacity change from 0 to 764 [ 515.280444][T29069] veth0_vlan: entered promiscuous mode [ 515.299751][T29069] veth1_vlan: entered promiscuous mode [ 515.329194][T29069] veth0_macvtap: entered promiscuous mode [ 515.335173][T29234] loop8: detected capacity change from 0 to 512 [ 515.346215][T29069] veth1_macvtap: entered promiscuous mode [ 515.347201][T29234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.359744][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.375636][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.379689][T29234] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 515.385534][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.406996][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.416875][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.427370][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.437873][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.448563][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.460443][T29069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.463623][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.470007][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.488084][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.498731][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.509275][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.519219][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.530287][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.540147][T29069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.550625][T29069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.583085][T29069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.611075][T29069] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.619995][T29069] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.628777][T29069] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.638918][T29069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.190225][T29263] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9659'. [ 516.235380][T29263] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 516.284574][T29267] loop7: detected capacity change from 0 to 512 [ 516.293710][T29267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.311133][T29267] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.355603][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.382267][T29275] loop9: detected capacity change from 0 to 128 [ 516.542636][T29286] FAULT_INJECTION: forcing a failure. [ 516.542636][T29286] name failslab, interval 1, probability 0, space 0, times 0 [ 516.555976][T29286] CPU: 0 UID: 0 PID: 29286 Comm: syz.8.9669 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 516.556007][T29286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 516.556020][T29286] Call Trace: [ 516.556027][T29286] [ 516.556074][T29286] dump_stack_lvl+0xf6/0x150 [ 516.556104][T29286] dump_stack+0x15/0x1a [ 516.556123][T29286] should_fail_ex+0x261/0x270 [ 516.556159][T29286] should_failslab+0x8f/0xb0 [ 516.556253][T29286] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 516.556279][T29286] ? p9_client_create+0x20e/0xbb0 [ 516.556304][T29286] kstrdup+0x3d/0xd0 [ 516.556350][T29286] p9_client_create+0x20e/0xbb0 [ 516.556378][T29286] v9fs_session_init+0xfb/0xdb0 [ 516.556402][T29286] ? obj_cgroup_charge+0xc9/0x170 [ 516.556444][T29286] ? __kmalloc_cache_noprof+0x292/0x320 [ 516.556468][T29286] ? v9fs_mount+0x56/0x580 [ 516.556534][T29286] v9fs_mount+0x6c/0x580 [ 516.556571][T29286] ? __pfx_v9fs_mount+0x10/0x10 [ 516.556603][T29286] legacy_get_tree+0x77/0xd0 [ 516.556684][T29286] vfs_get_tree+0x56/0x1e0 [ 516.556722][T29286] do_new_mount+0x246/0x6b0 [ 516.556764][T29286] path_mount+0x49b/0xb30 [ 516.556850][T29286] __se_sys_mount+0x28f/0x2e0 [ 516.556945][T29286] __x64_sys_mount+0x67/0x80 [ 516.556977][T29286] x64_sys_call+0xd11/0x2e10 [ 516.557000][T29286] do_syscall_64+0xc9/0x1c0 [ 516.557061][T29286] ? clear_bhb_loop+0x25/0x80 [ 516.557087][T29286] ? clear_bhb_loop+0x25/0x80 [ 516.557159][T29286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.557183][T29286] RIP: 0033:0x7f6071fce169 [ 516.557199][T29286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.557217][T29286] RSP: 002b:00007f6070637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 516.557236][T29286] RAX: ffffffffffffffda RBX: 00007f60721f5fa0 RCX: 00007f6071fce169 [ 516.557327][T29286] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 516.557343][T29286] RBP: 00007f6070637090 R08: 0000200000000080 R09: 0000000000000000 [ 516.557358][T29286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.557373][T29286] R13: 0000000000000000 R14: 00007f60721f5fa0 R15: 00007ffcb721c2d8 [ 516.557396][T29286] [ 516.838238][T29289] SET target dimension over the limit! [ 516.982221][T29299] bond2: entered promiscuous mode [ 516.987420][T29299] bond2: entered allmulticast mode [ 516.993168][T29299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.003442][T29304] loop8: detected capacity change from 0 to 512 [ 517.012468][T29299] bond2 (unregistering): Released all slaves [ 517.148382][T29277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.479010][T29304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.505469][T29304] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.558262][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 517.558276][ T29] audit: type=1400 audit(1744787878.095:31743): avc: denied { setopt } for pid=29312 comm="syz.5.9675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 517.621920][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.644931][T29313] netlink: 'syz.5.9675': attribute type 10 has an invalid length. [ 517.653600][T29313] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9675'. [ 517.668576][T29313] dummy0: entered promiscuous mode [ 517.674442][T29313] bridge0: port 1(dummy0) entered blocking state [ 517.681655][T29313] bridge0: port 1(dummy0) entered disabled state [ 517.695965][T29313] dummy0: entered allmulticast mode [ 517.708859][T29316] loop8: detected capacity change from 0 to 512 [ 517.715907][T29316] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 517.795099][T29316] EXT4-fs (loop8): 1 truncate cleaned up [ 517.802395][T29316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.823108][T29321] FAULT_INJECTION: forcing a failure. [ 517.823108][T29321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.837147][T29321] CPU: 0 UID: 0 PID: 29321 Comm: syz.9.9678 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 517.837181][T29321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.837197][T29321] Call Trace: [ 517.837205][T29321] [ 517.837214][T29321] dump_stack_lvl+0xf6/0x150 [ 517.837322][T29321] dump_stack+0x15/0x1a [ 517.837286][ T29] audit: type=1400 audit(1744787878.355:31744): avc: denied { bind } for pid=29317 comm="syz.5.9677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 517.837340][T29321] should_fail_ex+0x261/0x270 [ 517.837374][T29321] should_fail+0xb/0x10 [ 517.837448][T29321] should_fail_usercopy+0x1a/0x20 [ 517.837486][T29321] _copy_from_user+0x1c/0xa0 [ 517.837573][T29321] ____sys_sendmsg+0x1e0/0x4e0 [ 517.837615][T29321] __sys_sendmmsg+0x22a/0x4b0 [ 517.837708][T29321] __x64_sys_sendmmsg+0x57/0x70 [ 517.837743][T29321] x64_sys_call+0x2b53/0x2e10 [ 517.837783][T29321] do_syscall_64+0xc9/0x1c0 [ 517.837822][T29321] ? clear_bhb_loop+0x25/0x80 [ 517.837890][T29321] ? clear_bhb_loop+0x25/0x80 [ 517.837972][T29321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.838000][T29321] RIP: 0033:0x7f353a54e169 [ 517.838056][T29321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.838079][T29321] RSP: 002b:00007f3538bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.838103][T29321] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54e169 [ 517.838118][T29321] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 517.838133][T29321] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 517.838148][T29321] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.838222][T29321] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 517.838246][T29321] [ 518.037945][ T29] audit: type=1400 audit(1744787878.355:31745): avc: denied { create } for pid=29320 comm="syz.9.9678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 518.085477][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.112245][ T29] audit: type=1400 audit(1744787878.605:31746): avc: denied { bind } for pid=29324 comm="syz.9.9680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.131876][ T29] audit: type=1326 audit(1744787878.635:31747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.156524][ T29] audit: type=1326 audit(1744787878.635:31748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.180862][ T29] audit: type=1326 audit(1744787878.635:31749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.204630][ T29] audit: type=1326 audit(1744787878.635:31750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.229059][ T29] audit: type=1326 audit(1744787878.635:31751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.252734][ T29] audit: type=1326 audit(1744787878.635:31752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29326 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 518.288391][T29341] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9681'. [ 518.618245][T29345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.668210][T29345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.846130][T29365] loop8: detected capacity change from 0 to 512 [ 518.877868][T29365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 518.904996][T29365] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.935090][T29365] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 518.952854][ T3382] IPVS: starting estimator thread 0... [ 518.968395][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 519.068269][T29376] IPVS: using max 2304 ests per chain, 115200 per kthread [ 519.238393][T29402] loop8: detected capacity change from 0 to 512 [ 519.248142][T29401] bond2: entered promiscuous mode [ 519.253229][T29401] bond2: entered allmulticast mode [ 519.260078][T29401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.274239][T29401] bond2 (unregistering): Released all slaves [ 519.292397][T29402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.308055][T29402] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.336051][T29277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.343733][T29402] EXT4-fs error (device loop8): ext4_empty_dir:3077: inode #12: comm syz.8.9708: invalid size [ 519.365902][T29402] EXT4-fs (loop8): Remounting filesystem read-only [ 519.419355][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.434422][ T6722] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 519.470031][T29415] loop8: detected capacity change from 0 to 512 [ 519.489881][T29415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.516833][T29415] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.567613][T29415] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.9714: bg 0: block 217: padding at end of block bitmap is not set [ 519.627426][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.678835][T29423] loop8: detected capacity change from 0 to 128 [ 519.704087][T29277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.708763][T29423] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.727377][T29423] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.793739][T29277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.808367][T29434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9720'. [ 519.818179][T29425] netem: change failed [ 519.839569][T27648] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.884712][T29277] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.900674][T29277] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.918266][T29277] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.932745][T29277] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.095715][T29463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9732'. [ 520.229112][T29474] FAULT_INJECTION: forcing a failure. [ 520.229112][T29474] name failslab, interval 1, probability 0, space 0, times 0 [ 520.241870][T29474] CPU: 1 UID: 0 PID: 29474 Comm: syz.4.9737 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 520.241898][T29474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 520.241913][T29474] Call Trace: [ 520.241922][T29474] [ 520.241932][T29474] dump_stack_lvl+0xf6/0x150 [ 520.241959][T29474] dump_stack+0x15/0x1a [ 520.241975][T29474] should_fail_ex+0x261/0x270 [ 520.242003][T29474] should_failslab+0x8f/0xb0 [ 520.242040][T29474] kmem_cache_alloc_noprof+0x59/0x340 [ 520.242061][T29474] ? mas_alloc_nodes+0x1f4/0x4a0 [ 520.242093][T29474] mas_alloc_nodes+0x1f4/0x4a0 [ 520.242130][T29474] mas_preallocate+0x48d/0x6b0 [ 520.242172][T29474] __split_vma+0x23e/0x630 [ 520.242202][T29474] vms_gather_munmap_vmas+0x171/0x790 [ 520.242240][T29474] ? __rcu_read_unlock+0x4e/0x70 [ 520.242265][T29474] ? sysvec_irq_work+0xe/0x80 [ 520.242293][T29474] do_vmi_align_munmap+0x1a5/0x3c0 [ 520.242346][T29474] do_vmi_munmap+0x1eb/0x230 [ 520.242387][T29474] __se_sys_mremap+0x69d/0x1200 [ 520.242423][T29474] __x64_sys_mremap+0x67/0x80 [ 520.242452][T29474] x64_sys_call+0x29c3/0x2e10 [ 520.242478][T29474] do_syscall_64+0xc9/0x1c0 [ 520.242513][T29474] ? clear_bhb_loop+0x25/0x80 [ 520.242535][T29474] ? clear_bhb_loop+0x25/0x80 [ 520.242556][T29474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.242576][T29474] RIP: 0033:0x7f1ea2e0e169 [ 520.242591][T29474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.242612][T29474] RSP: 002b:00007f1ea1477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 520.242633][T29474] RAX: ffffffffffffffda RBX: 00007f1ea3035fa0 RCX: 00007f1ea2e0e169 [ 520.242645][T29474] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 520.242657][T29474] RBP: 00007f1ea1477090 R08: 00002000008b5000 R09: 0000000000000000 [ 520.242669][T29474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.242683][T29474] R13: 0000000000000000 R14: 00007f1ea3035fa0 R15: 00007ffd18ef7c38 [ 520.242706][T29474] [ 520.560130][T29482] loop7: detected capacity change from 0 to 764 [ 520.623226][T29490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9739'. [ 520.640949][T29492] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9743'. [ 520.649663][T29494] loop7: detected capacity change from 0 to 128 [ 520.669346][T29494] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 520.786900][T29494] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.154115][T29069] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.584215][T29553] loop8: detected capacity change from 0 to 512 [ 521.609648][T29553] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 521.623408][T29562] loop9: detected capacity change from 0 to 512 [ 521.637169][T29553] EXT4-fs (loop8): orphan cleanup on readonly fs [ 521.648386][T29563] loop7: detected capacity change from 0 to 512 [ 521.660838][T29553] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9768: invalid indirect mapped block 256 (level 2) [ 521.690260][T29563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.708087][T29553] EXT4-fs (loop8): 2 truncates cleaned up [ 521.708793][T29562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 521.713958][T29563] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.731649][T29562] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.747103][T29553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.789668][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.822456][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.039582][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 522.079640][T29581] loop8: detected capacity change from 0 to 764 [ 522.176439][T29594] loop7: detected capacity change from 0 to 2048 [ 522.191600][T29594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.208742][T29596] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9784'. [ 522.226445][T29599] loop9: detected capacity change from 0 to 2048 [ 522.271320][T29599] Alternate GPT is invalid, using primary GPT. [ 522.277738][T29599] loop9: p2 p3 p7 [ 522.356245][T29604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9786'. [ 522.767142][ T6719] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 522.783905][ T6719] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 522.796473][ T6719] EXT4-fs (loop7): This should not happen!! Data will be lost [ 522.796473][ T6719] [ 522.806306][ T6719] EXT4-fs (loop7): Total free blocks count 0 [ 522.813769][ T6719] EXT4-fs (loop7): Free/Dirty block details [ 522.814192][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 522.814208][ T29] audit: type=1404 audit(1744787883.345:32078): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 522.819691][ T6719] EXT4-fs (loop7): free_blocks=2415919504 [ 522.819711][ T6719] EXT4-fs (loop7): dirty_blocks=16400 [ 522.819725][ T6719] EXT4-fs (loop7): Block reservation details [ 522.819736][ T6719] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 522.842967][ T6722] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 522.848950][ T29] audit: type=1404 audit(1744787883.385:32079): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 522.916246][ T29] audit: type=1400 audit(1744787883.445:32080): avc: denied { recv } for pid=27763 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.1.42 dest=52056 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 522.966005][ T29] audit: type=1326 audit(1744787883.495:32081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29614 comm="syz.4.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 522.990456][ T29] audit: type=1326 audit(1744787883.495:32082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29614 comm="syz.4.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 523.026199][T29615] FAULT_INJECTION: forcing a failure. [ 523.026199][T29615] name failslab, interval 1, probability 0, space 0, times 0 [ 523.038993][T29615] CPU: 1 UID: 0 PID: 29615 Comm: syz.4.9791 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 523.039100][T29615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.039156][T29615] Call Trace: [ 523.039164][T29615] [ 523.039172][T29615] dump_stack_lvl+0xf6/0x150 [ 523.039196][T29615] dump_stack+0x15/0x1a [ 523.039212][T29615] should_fail_ex+0x261/0x270 [ 523.039244][T29615] should_failslab+0x8f/0xb0 [ 523.039298][T29615] kmem_cache_alloc_noprof+0x59/0x340 [ 523.039323][T29615] ? audit_log_start+0x37f/0x6e0 [ 523.039352][T29615] audit_log_start+0x37f/0x6e0 [ 523.039375][T29615] ? kstrtouint+0x7b/0xc0 [ 523.039424][T29615] audit_seccomp+0x4b/0x130 [ 523.039449][T29615] __seccomp_filter+0x694/0x10e0 [ 523.039487][T29615] ? vfs_write+0x669/0x950 [ 523.039526][T29615] ? putname+0xe1/0x100 [ 523.039603][T29615] __secure_computing+0x7e/0x160 [ 523.039636][T29615] syscall_trace_enter+0xcf/0x1f0 [ 523.039664][T29615] ? fpregs_assert_state_consistent+0x83/0xa0 [ 523.039752][T29615] do_syscall_64+0xaa/0x1c0 [ 523.039787][T29615] ? clear_bhb_loop+0x25/0x80 [ 523.039814][T29615] ? clear_bhb_loop+0x25/0x80 [ 523.039841][T29615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.039892][T29615] RIP: 0033:0x7f1ea2e0e169 [ 523.039907][T29615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.039924][T29615] RSP: 002b:00007f1ea1477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 523.039973][T29615] RAX: ffffffffffffffda RBX: 00007f1ea3035fa0 RCX: 00007f1ea2e0e169 [ 523.039989][T29615] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 523.040004][T29615] RBP: 00007f1ea1477090 R08: 0000000000000000 R09: 0000000000000000 [ 523.040019][T29615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.040088][T29615] R13: 0000000000000000 R14: 00007f1ea3035fa0 R15: 00007ffd18ef7c38 [ 523.040109][T29615] [ 523.040140][T29615] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 523.077440][ T29] audit: type=1326 audit(1744787883.555:32083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29614 comm="syz.4.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 523.080714][T29615] audit: out of memory in audit_log_start [ 523.084091][ T29] audit: type=1400 audit(1744787883.555:32084): avc: denied { open } for pid=29614 comm="syz.4.9791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 523.301018][ T29] audit: type=1400 audit(1744787883.555:32085): avc: denied { perfmon } for pid=29614 comm="syz.4.9791" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 523.375058][T29628] loop9: detected capacity change from 0 to 128 [ 523.381508][T29627] loop7: detected capacity change from 0 to 512 [ 523.403319][T29633] netlink: 'syz.5.9798': attribute type 10 has an invalid length. [ 523.411517][T29633] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9798'. [ 523.421473][T29633] FAULT_INJECTION: forcing a failure. [ 523.421473][T29633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.436235][T29633] CPU: 1 UID: 0 PID: 29633 Comm: syz.5.9798 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 523.436270][T29633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 523.436284][T29633] Call Trace: [ 523.436291][T29633] [ 523.436299][T29633] dump_stack_lvl+0xf6/0x150 [ 523.436323][T29633] dump_stack+0x15/0x1a [ 523.436384][T29633] should_fail_ex+0x261/0x270 [ 523.436418][T29633] should_fail_alloc_page+0xfd/0x110 [ 523.436454][T29633] __alloc_frozen_pages_noprof+0x11d/0x360 [ 523.436575][T29633] __alloc_pages_noprof+0x9/0x20 [ 523.436606][T29633] ___kmalloc_large_node+0x83/0x130 [ 523.436686][T29633] __kmalloc_large_noprof+0x1f/0xb0 [ 523.436713][T29633] geneve_sock_add+0x1da/0x5c0 [ 523.436740][T29633] ? __pfx_netconsole_netdev_event+0x10/0x10 [ 523.436767][T29633] ? __pfx_ndisc_netdev_event+0x10/0x10 [ 523.436852][T29633] ? ip6_route_dev_notify+0x62/0x5a0 [ 523.436902][T29633] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 523.436931][T29633] ? raw_notifier_call_chain+0x1ad/0x1d0 [ 523.436964][T29633] geneve_open+0x6d/0x100 [ 523.436985][T29633] __dev_open+0x2d9/0x540 [ 523.437054][T29633] netif_open+0x5c/0xf0 [ 523.437155][T29633] dev_open+0xca/0x180 [ 523.437179][T29633] team_add_slave+0x7b5/0x1930 [ 523.437292][T29633] ? console_unlock+0x310/0x350 [ 523.437325][T29633] ? _raw_spin_unlock_bh+0x36/0x40 [ 523.437350][T29633] ? dev_set_rx_mode+0x189/0x1a0 [ 523.437380][T29633] do_set_master+0x3c0/0x4a0 [ 523.437434][T29633] ? __pfx_team_add_slave+0x10/0x10 [ 523.437467][T29633] do_setlink+0xafe/0x2430 [ 523.437489][T29633] ? __perf_event_task_sched_out+0x13c/0xf00 [ 523.437525][T29633] ? _raw_spin_unlock+0x26/0x50 [ 523.437600][T29633] ? finish_task_switch+0xb5/0x2b0 [ 523.437633][T29633] ? __schedule+0x809/0xb70 [ 523.437655][T29633] ? __cond_resched+0x53/0x90 [ 523.437680][T29633] ? __cond_resched+0x53/0x90 [ 523.437733][T29633] rtnl_setlink+0x2fd/0x440 [ 523.437771][T29633] ? __rmqueue_pcplist+0x118c/0x1320 [ 523.437833][T29633] ? security_capable+0x81/0x90 [ 523.437865][T29633] ? ns_capable+0x7d/0xb0 [ 523.437906][T29633] ? __pfx_rtnl_setlink+0x10/0x10 [ 523.437971][T29633] rtnetlink_rcv_msg+0x65a/0x740 [ 523.438007][T29633] ? avc_has_perm_noaudit+0x203/0x210 [ 523.438074][T29633] netlink_rcv_skb+0x12f/0x230 [ 523.438102][T29633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 523.438149][T29633] rtnetlink_rcv+0x1c/0x30 [ 523.438237][T29633] netlink_unicast+0x605/0x6c0 [ 523.438293][T29633] netlink_sendmsg+0x609/0x720 [ 523.438331][T29633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.438360][T29633] __sock_sendmsg+0x140/0x180 [ 523.438444][T29633] ____sys_sendmsg+0x350/0x4e0 [ 523.438475][T29633] __sys_sendmsg+0x1a0/0x240 [ 523.438554][T29633] __x64_sys_sendmsg+0x46/0x50 [ 523.438582][T29633] x64_sys_call+0x26f3/0x2e10 [ 523.438682][T29633] do_syscall_64+0xc9/0x1c0 [ 523.438720][T29633] ? clear_bhb_loop+0x25/0x80 [ 523.438747][T29633] ? clear_bhb_loop+0x25/0x80 [ 523.438774][T29633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.438799][T29633] RIP: 0033:0x7fe83d11e169 [ 523.438814][T29633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.438831][T29633] RSP: 002b:00007fe83b787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.438849][T29633] RAX: ffffffffffffffda RBX: 00007fe83d345fa0 RCX: 00007fe83d11e169 [ 523.438861][T29633] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 523.438876][T29633] RBP: 00007fe83b787090 R08: 0000000000000000 R09: 0000000000000000 [ 523.438891][T29633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.438905][T29633] R13: 0000000000000000 R14: 00007fe83d345fa0 R15: 00007fffad5e17d8 [ 523.438953][T29633] [ 523.815975][T29627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 523.856498][T29638] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9800'. [ 523.873124][T29633] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 523.877226][T29628] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 523.895382][T29627] EXT4-fs (loop7): 1 truncate cleaned up [ 523.895787][T29627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.003499][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.046099][T29628] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.235577][T26732] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.415155][T29653] netlink: 'syz.5.9806': attribute type 10 has an invalid length. [ 524.424717][T29653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9806'. [ 524.439495][T29653] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.449358][T29653] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.457629][T29653] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.465840][T29653] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.485065][T29653] team0: Port device geneve1 added [ 524.632409][T29661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9809'. [ 524.663263][T29671] loop7: detected capacity change from 0 to 512 [ 524.673578][T29671] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 524.717392][T29671] EXT4-fs (loop7): 1 truncate cleaned up [ 524.723617][T29671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.768979][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.871731][T29687] bond1: entered promiscuous mode [ 524.876929][T29687] bond1: entered allmulticast mode [ 524.889469][T29687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.950888][T29687] bond1 (unregistering): Released all slaves [ 525.072519][T29700] loop7: detected capacity change from 0 to 512 [ 525.085297][T29700] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.123374][T29700] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 525.134257][T29700] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.9823: attempt to clear invalid blocks 2 len 1 [ 525.154269][T29700] EXT4-fs (loop7): Remounting filesystem read-only [ 525.178998][T29700] EXT4-fs (loop7): 1 truncate cleaned up [ 525.198024][T29700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.216821][T29700] FAULT_INJECTION: forcing a failure. [ 525.216821][T29700] name failslab, interval 1, probability 0, space 0, times 0 [ 525.229614][T29700] CPU: 0 UID: 0 PID: 29700 Comm: syz.7.9823 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 525.229648][T29700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.229664][T29700] Call Trace: [ 525.229672][T29700] [ 525.229682][T29700] dump_stack_lvl+0xf6/0x150 [ 525.229710][T29700] dump_stack+0x15/0x1a [ 525.229729][T29700] should_fail_ex+0x261/0x270 [ 525.229770][T29700] should_failslab+0x8f/0xb0 [ 525.229832][T29700] kmem_cache_alloc_noprof+0x59/0x340 [ 525.229858][T29700] ? getname_kernel+0x3d/0x1f0 [ 525.229885][T29700] getname_kernel+0x3d/0x1f0 [ 525.229979][T29700] kern_path+0x21/0x130 [ 525.230005][T29700] lookup_bdev+0x66/0x140 [ 525.230031][T29700] __se_sys_quotactl+0x1a6/0x650 [ 525.230139][T29700] __x64_sys_quotactl+0x55/0x70 [ 525.230168][T29700] x64_sys_call+0x265d/0x2e10 [ 525.230193][T29700] do_syscall_64+0xc9/0x1c0 [ 525.230223][T29700] ? clear_bhb_loop+0x25/0x80 [ 525.230244][T29700] ? clear_bhb_loop+0x25/0x80 [ 525.230333][T29700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.230354][T29700] RIP: 0033:0x7f513c8be169 [ 525.230372][T29700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.230394][T29700] RSP: 002b:00007f513af27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 525.230424][T29700] RAX: ffffffffffffffda RBX: 00007f513cae5fa0 RCX: 00007f513c8be169 [ 525.230504][T29700] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 525.230520][T29700] RBP: 00007f513af27090 R08: 0000000000000000 R09: 0000000000000000 [ 525.230574][T29700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.230586][T29700] R13: 0000000000000000 R14: 00007f513cae5fa0 R15: 00007ffc1513d848 [ 525.230615][T29700] [ 525.493323][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.513144][T29703] loop8: detected capacity change from 0 to 128 [ 525.539427][T29661] Set syz1 is full, maxelem 65536 reached [ 525.550159][T29706] loop7: detected capacity change from 0 to 512 [ 525.589762][T29706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.603176][T29706] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.618584][T29706] EXT4-fs error (device loop7): ext4_empty_dir:3077: inode #12: comm syz.7.9825: invalid size [ 525.633986][T29706] EXT4-fs (loop7): Remounting filesystem read-only [ 525.660034][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.673493][ T6719] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 525.738377][T29708] netem: change failed [ 525.837452][T29723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.846002][T29723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.747158][T29726] loop8: detected capacity change from 0 to 256 [ 526.753795][T29726] msdos: Bad value for 'umask' [ 526.775945][T29732] loop9: detected capacity change from 0 to 128 [ 526.799804][T29732] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 526.812634][T29732] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.875536][T26732] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.885360][T29742] x_tables: duplicate underflow at hook 2 [ 526.938122][T29726] netlink: 'syz.8.9831': attribute type 13 has an invalid length. [ 527.001588][T29750] loop9: detected capacity change from 0 to 512 [ 527.009323][T29750] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 527.019895][T29750] EXT4-fs (loop9): invalid journal inode [ 527.025789][T29750] EXT4-fs (loop9): can't get journal size [ 527.079051][T29753] loop8: detected capacity change from 0 to 512 [ 527.101105][T29750] EXT4-fs (loop9): 1 truncate cleaned up [ 527.115638][T29753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.136611][T29753] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.228434][T29750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.264897][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.424605][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.491538][T29768] loop8: detected capacity change from 0 to 512 [ 527.492929][T29765] bond1: entered promiscuous mode [ 527.503145][T29765] bond1: entered allmulticast mode [ 527.508647][T29765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.515805][T29768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.529377][T29768] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 527.540759][T29765] bond1 (unregistering): Released all slaves [ 527.559337][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.645897][T29779] FAULT_INJECTION: forcing a failure. [ 527.645897][T29779] name failslab, interval 1, probability 0, space 0, times 0 [ 527.658674][T29779] CPU: 0 UID: 0 PID: 29779 Comm: syz.8.9846 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 527.658703][T29779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 527.658718][T29779] Call Trace: [ 527.658726][T29779] [ 527.658734][T29779] dump_stack_lvl+0xf6/0x150 [ 527.658763][T29779] dump_stack+0x15/0x1a [ 527.658834][T29779] should_fail_ex+0x261/0x270 [ 527.658899][T29779] should_failslab+0x8f/0xb0 [ 527.658936][T29779] __kmalloc_cache_noprof+0x55/0x320 [ 527.659040][T29779] ? sel_netif_sid_slow+0x111/0x300 [ 527.659078][T29779] sel_netif_sid_slow+0x111/0x300 [ 527.659117][T29779] sel_netif_sid+0xb3/0x100 [ 527.659240][T29779] selinux_ip_postroute+0x9e5/0xc10 [ 527.659279][T29779] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 527.659307][T29779] ? iptable_mangle_hook+0x119/0x260 [ 527.659332][T29779] ? nf_nat_ipv4_out+0x250/0x300 [ 527.659423][T29779] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 527.659455][T29779] nf_hook_slow+0x89/0x1b0 [ 527.659481][T29779] ip_output+0x13f/0x190 [ 527.659513][T29779] ? __pfx_ip_finish_output+0x10/0x10 [ 527.659616][T29779] ? __pfx_ip_output+0x10/0x10 [ 527.659649][T29779] ip_send_skb+0x119/0x140 [ 527.659684][T29779] udp_send_skb+0x6c2/0xa10 [ 527.659795][T29779] udp_sendmsg+0x12b4/0x1350 [ 527.659896][T29779] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 527.659937][T29779] ? __pfx_udp_sendmsg+0x10/0x10 [ 527.659978][T29779] inet_sendmsg+0xaf/0xd0 [ 527.660003][T29779] __sock_sendmsg+0x102/0x180 [ 527.660022][T29779] ____sys_sendmsg+0x350/0x4e0 [ 527.660115][T29779] __sys_sendmmsg+0x22a/0x4b0 [ 527.660168][T29779] __x64_sys_sendmmsg+0x57/0x70 [ 527.660196][T29779] x64_sys_call+0x2b53/0x2e10 [ 527.660217][T29779] do_syscall_64+0xc9/0x1c0 [ 527.660321][T29779] ? clear_bhb_loop+0x25/0x80 [ 527.660342][T29779] ? clear_bhb_loop+0x25/0x80 [ 527.660363][T29779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.660383][T29779] RIP: 0033:0x7f6071fce169 [ 527.660399][T29779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.660416][T29779] RSP: 002b:00007f6070637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 527.660492][T29779] RAX: ffffffffffffffda RBX: 00007f60721f5fa0 RCX: 00007f6071fce169 [ 527.660505][T29779] RDX: 0000000000000002 RSI: 0000200000004540 RDI: 0000000000000003 [ 527.660517][T29779] RBP: 00007f6070637090 R08: 0000000000000000 R09: 0000000000000000 [ 527.660529][T29779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.660542][T29779] R13: 0000000000000000 R14: 00007f60721f5fa0 R15: 00007ffcb721c2d8 [ 527.660618][T29779] [ 527.985810][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 527.985828][ T29] audit: type=1326 audit(1744787888.515:32443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.016873][ T29] audit: type=1326 audit(1744787888.515:32444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.041234][ T29] audit: type=1326 audit(1744787888.515:32445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.065339][ T29] audit: type=1326 audit(1744787888.515:32446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.089790][ T29] audit: type=1326 audit(1744787888.515:32447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.113892][ T29] audit: type=1326 audit(1744787888.515:32448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.138266][ T29] audit: type=1326 audit(1744787888.515:32449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.138694][T29790] 9pnet_fd: Insufficient options for proto=fd [ 528.161994][ T29] audit: type=1326 audit(1744787888.515:32450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.162108][ T29] audit: type=1326 audit(1744787888.515:32451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.162141][ T29] audit: type=1326 audit(1744787888.515:32452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29786 comm="syz.9.9851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 528.658374][T29807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 528.880874][T29818] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.911213][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9863'. [ 529.118002][T29838] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9869'. [ 529.601859][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9873'. [ 529.621774][T29860] loop8: detected capacity change from 0 to 512 [ 529.644932][T29860] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 529.678517][T29860] EXT4-fs (loop8): 1 truncate cleaned up [ 529.687027][T29860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.718261][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.762308][T29881] loop9: detected capacity change from 0 to 512 [ 529.769169][T29878] xt_hashlimit: size too large, truncated to 1048576 [ 529.824943][T29887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9890'. [ 529.892116][T29881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.942236][T29881] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 530.024952][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.190664][T29920] loop7: detected capacity change from 0 to 512 [ 530.201928][T29911] loop9: detected capacity change from 0 to 512 [ 530.223677][T29894] Set syz1 is full, maxelem 65536 reached [ 530.225458][T29911] EXT4-fs (loop9): orphan cleanup on readonly fs [ 530.248074][T29911] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9894: bg 0: block 248: padding at end of block bitmap is not set [ 530.263970][T29920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.283879][T29911] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.9894: Failed to acquire dquot type 1 [ 530.287344][T29920] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 530.299767][T29911] EXT4-fs (loop9): 1 truncate cleaned up [ 530.314415][T29920] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9897: bg 0: block 217: padding at end of block bitmap is not set [ 530.329506][T29911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.405926][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.425225][T26732] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.511584][T29959] loop7: detected capacity change from 0 to 128 [ 530.516415][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9911'. [ 530.550774][T29959] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 530.563603][T29959] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.634234][T29069] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.662846][T29949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.680464][T29949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.738347][T29967] netem: change failed [ 530.747104][T29949] loop9: detected capacity change from 0 to 8192 [ 530.761825][T29949] syz.9.9909: attempt to access beyond end of device [ 530.761825][T29949] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 530.791495][T29949] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 530.800782][T29949] FAT-fs (loop9): Filesystem has been set read-only [ 530.812587][T29987] bond1: entered promiscuous mode [ 530.813152][T29949] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 530.818402][T29987] bond1: entered allmulticast mode [ 530.825782][T29949] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 530.845310][T29987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.860130][T29987] bond1 (unregistering): Released all slaves [ 530.867768][T29992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9925'. [ 530.877926][T29992] bridge_slave_1: left allmulticast mode [ 530.883649][T29992] bridge_slave_1: left promiscuous mode [ 530.889488][T29992] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.899581][T29992] bridge_slave_0: left allmulticast mode [ 530.905272][T29992] bridge_slave_0: left promiscuous mode [ 530.911616][T29992] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.962655][T29996] FAULT_INJECTION: forcing a failure. [ 530.962655][T29996] name failslab, interval 1, probability 0, space 0, times 0 [ 530.975442][T29996] CPU: 1 UID: 0 PID: 29996 Comm: syz.4.9926 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 530.975471][T29996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 530.975532][T29996] Call Trace: [ 530.975539][T29996] [ 530.975548][T29996] dump_stack_lvl+0xf6/0x150 [ 530.975641][T29996] dump_stack+0x15/0x1a [ 530.975661][T29996] should_fail_ex+0x261/0x270 [ 530.975690][T29996] should_failslab+0x8f/0xb0 [ 530.975749][T29996] kmem_cache_alloc_noprof+0x59/0x340 [ 530.975770][T29996] ? alloc_empty_file+0x78/0x200 [ 530.975799][T29996] alloc_empty_file+0x78/0x200 [ 530.975825][T29996] path_openat+0x6f/0x2000 [ 530.975918][T29996] ? mntput+0x49/0x70 [ 530.975996][T29996] ? terminate_walk+0x271/0x290 [ 530.976021][T29996] ? path_openat+0x1ab2/0x2000 [ 530.976049][T29996] ? _parse_integer_limit+0x167/0x180 [ 530.976123][T29996] do_filp_open+0x115/0x240 [ 530.976164][T29996] do_open_execat+0xd5/0x280 [ 530.976198][T29996] alloc_bprm+0x2a/0x680 [ 530.976225][T29996] ? __check_object_size+0x367/0x510 [ 530.976257][T29996] do_execveat_common+0x12b/0x7e0 [ 530.976358][T29996] __x64_sys_execve+0x5c/0x70 [ 530.976399][T29996] x64_sys_call+0x1362/0x2e10 [ 530.976435][T29996] do_syscall_64+0xc9/0x1c0 [ 530.976469][T29996] ? clear_bhb_loop+0x25/0x80 [ 530.976542][T29996] ? clear_bhb_loop+0x25/0x80 [ 530.976572][T29996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.976597][T29996] RIP: 0033:0x7f1ea2e0e169 [ 530.976612][T29996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.976630][T29996] RSP: 002b:00007f1ea1477038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 530.976652][T29996] RAX: ffffffffffffffda RBX: 00007f1ea3035fa0 RCX: 00007f1ea2e0e169 [ 530.976666][T29996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 530.976738][T29996] RBP: 00007f1ea1477090 R08: 0000000000000000 R09: 0000000000000000 [ 530.976752][T29996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.976764][T29996] R13: 0000000000000000 R14: 00007f1ea3035fa0 R15: 00007ffd18ef7c38 [ 530.976783][T29996] [ 531.371030][T29994] Set syz1 is full, maxelem 65536 reached [ 531.506190][T30020] FAULT_INJECTION: forcing a failure. [ 531.506190][T30020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.520037][T30020] CPU: 0 UID: 0 PID: 30020 Comm: syz.9.9937 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 531.520067][T30020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.520089][T30020] Call Trace: [ 531.520098][T30020] [ 531.520106][T30020] dump_stack_lvl+0xf6/0x150 [ 531.520164][T30020] dump_stack+0x15/0x1a [ 531.520185][T30020] should_fail_ex+0x261/0x270 [ 531.520218][T30020] should_fail+0xb/0x10 [ 531.520296][T30020] should_fail_usercopy+0x1a/0x20 [ 531.520385][T30020] strncpy_from_user+0x25/0x230 [ 531.520406][T30020] ? getname_flags+0x81/0x3b0 [ 531.520528][T30020] getname_flags+0xb0/0x3b0 [ 531.520593][T30020] user_path_create+0x26/0x130 [ 531.520624][T30020] bpf_obj_pin_user+0xce/0x260 [ 531.520673][T30020] bpf_obj_pin+0xd8/0xf0 [ 531.520698][T30020] __sys_bpf+0x725/0x800 [ 531.520735][T30020] __x64_sys_bpf+0x43/0x50 [ 531.520811][T30020] x64_sys_call+0x23da/0x2e10 [ 531.520833][T30020] do_syscall_64+0xc9/0x1c0 [ 531.520864][T30020] ? clear_bhb_loop+0x25/0x80 [ 531.520963][T30020] ? clear_bhb_loop+0x25/0x80 [ 531.520984][T30020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.521004][T30020] RIP: 0033:0x7f353a54e169 [ 531.521019][T30020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.521037][T30020] RSP: 002b:00007f3538bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.521090][T30020] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54e169 [ 531.521102][T30020] RDX: 0000000000000018 RSI: 0000200000000480 RDI: 0000000000000006 [ 531.521188][T30020] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 531.521199][T30020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.521211][T30020] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 531.521230][T30020] [ 532.182641][T30038] netlink: 176 bytes leftover after parsing attributes in process `syz.8.9940'. [ 532.427969][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9951'. [ 532.504248][T30072] loop7: detected capacity change from 0 to 512 [ 532.579092][T30072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.610654][T30072] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.671734][T30059] Set syz1 is full, maxelem 65536 reached [ 532.692721][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.946379][T30114] loop9: detected capacity change from 0 to 2048 [ 532.972657][T30119] loop7: detected capacity change from 0 to 764 [ 532.991418][ T29] kauditd_printk_skb: 716 callbacks suppressed [ 532.991433][ T29] audit: type=1326 audit(1744787893.525:33163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.5.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 533.033292][T30114] Alternate GPT is invalid, using primary GPT. [ 533.039669][T30114] loop9: p1 p2 p3 [ 533.061435][T30105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.068114][T30105] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 533.070626][T30126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.075957][T30105] audit: backlog limit exceeded [ 533.076812][ T29] audit: type=1326 audit(1744787893.525:33164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.5.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 533.082617][T30126] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 533.088252][ T29] audit: type=1326 audit(1744787893.525:33165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.5.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 533.088285][ T29] audit: type=1326 audit(1744787893.525:33166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.5.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe83d11e169 code=0x7ffc0000 [ 533.088361][ T29] audit: type=1326 audit(1744787893.525:33167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.5.9979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe83d11e1a3 code=0x7ffc0000 [ 533.208202][T30128] FAULT_INJECTION: forcing a failure. [ 533.208202][T30128] name failslab, interval 1, probability 0, space 0, times 0 [ 533.221035][T30128] CPU: 1 UID: 0 PID: 30128 Comm: syz.4.9978 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 533.221066][T30128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 533.221078][T30128] Call Trace: [ 533.221084][T30128] [ 533.221092][T30128] dump_stack_lvl+0xf6/0x150 [ 533.221178][T30128] dump_stack+0x15/0x1a [ 533.221195][T30128] should_fail_ex+0x261/0x270 [ 533.221222][T30128] should_failslab+0x8f/0xb0 [ 533.221291][T30128] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 533.221314][T30128] ? shmem_alloc_inode+0x34/0x50 [ 533.221334][T30128] shmem_alloc_inode+0x34/0x50 [ 533.221354][T30128] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 533.221381][T30128] alloc_inode+0x40/0x170 [ 533.221496][T30128] new_inode+0x1e/0xe0 [ 533.221518][T30128] shmem_get_inode+0x24e/0x730 [ 533.221563][T30128] __shmem_file_setup+0x127/0x1f0 [ 533.221598][T30128] shmem_file_setup+0x3b/0x50 [ 533.221654][T30128] __se_sys_memfd_create+0x2e1/0x5a0 [ 533.221687][T30128] __x64_sys_memfd_create+0x31/0x40 [ 533.221726][T30128] x64_sys_call+0x1163/0x2e10 [ 533.221753][T30128] do_syscall_64+0xc9/0x1c0 [ 533.221789][T30128] ? clear_bhb_loop+0x25/0x80 [ 533.221846][T30128] ? clear_bhb_loop+0x25/0x80 [ 533.221925][T30128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.221946][T30128] RIP: 0033:0x7f1ea2e0e169 [ 533.221961][T30128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.222029][T30128] RSP: 002b:00007f1ea1476d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 533.222047][T30128] RAX: ffffffffffffffda RBX: 00000000000005c8 RCX: 00007f1ea2e0e169 [ 533.222082][T30128] RDX: 00007f1ea1476dec RSI: 0000000000000000 RDI: 00007f1ea2e91404 [ 533.222096][T30128] RBP: 0000200000000000 R08: 00007f1ea1476b07 R09: 0000000000000000 [ 533.222107][T30128] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 533.222119][T30128] R13: 00007f1ea1476dec R14: 00007f1ea1476df0 R15: 00007ffd18ef7c38 [ 533.222141][T30128] [ 533.227583][T30134] FAULT_INJECTION: forcing a failure. [ 533.227583][T30134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.402366][T30137] loop8: detected capacity change from 0 to 512 [ 533.406790][T30134] CPU: 0 UID: 0 PID: 30134 Comm: syz.7.9982 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 533.406824][T30134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 533.406840][T30134] Call Trace: [ 533.406847][T30134] [ 533.406859][T30134] dump_stack_lvl+0xf6/0x150 [ 533.406946][T30134] dump_stack+0x15/0x1a [ 533.406967][T30134] should_fail_ex+0x261/0x270 [ 533.407003][T30134] should_fail+0xb/0x10 [ 533.407033][T30134] should_fail_usercopy+0x1a/0x20 [ 533.407069][T30134] _copy_to_user+0x20/0xa0 [ 533.407143][T30134] simple_read_from_buffer+0xb2/0x130 [ 533.407199][T30134] proc_fail_nth_read+0x103/0x140 [ 533.407225][T30134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.407250][T30134] vfs_read+0x1b2/0x710 [ 533.407283][T30134] ? __rcu_read_unlock+0x4e/0x70 [ 533.407318][T30134] ? __fget_files+0x186/0x1c0 [ 533.407406][T30134] ksys_read+0xeb/0x1b0 [ 533.407443][T30134] __x64_sys_read+0x42/0x50 [ 533.407511][T30134] x64_sys_call+0x2a3b/0x2e10 [ 533.407539][T30134] do_syscall_64+0xc9/0x1c0 [ 533.407603][T30134] ? clear_bhb_loop+0x25/0x80 [ 533.407631][T30134] ? clear_bhb_loop+0x25/0x80 [ 533.407664][T30134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.407692][T30134] RIP: 0033:0x7f513c8bcb7c [ 533.407712][T30134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 533.407736][T30134] RSP: 002b:00007f513af27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 533.407760][T30134] RAX: ffffffffffffffda RBX: 00007f513cae5fa0 RCX: 00007f513c8bcb7c [ 533.407776][T30134] RDX: 000000000000000f RSI: 00007f513af270a0 RDI: 0000000000000004 [ 533.407792][T30134] RBP: 00007f513af27090 R08: 0000000000000000 R09: 0000000000000000 [ 533.407807][T30134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.407827][T30134] R13: 0000000000000000 R14: 00007f513cae5fa0 R15: 00007ffc1513d848 [ 533.407852][T30134] [ 533.481819][T30143] loop7: detected capacity change from 0 to 512 [ 533.533560][T30137] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.576451][T30143] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.701539][T30140] loop9: detected capacity change from 0 to 128 [ 533.719873][T30143] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9986: bg 0: block 217: padding at end of block bitmap is not set [ 533.947441][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9989'. [ 533.984358][T30171] loop9: detected capacity change from 0 to 128 [ 534.043472][T30170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9989'. [ 534.103627][T30178] FAULT_INJECTION: forcing a failure. [ 534.103627][T30178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.118259][T30178] CPU: 1 UID: 0 PID: 30178 Comm: syz.7.9999 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 534.118360][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 534.118372][T30178] Call Trace: [ 534.118379][T30178] [ 534.118387][T30178] dump_stack_lvl+0xf6/0x150 [ 534.118439][T30178] dump_stack+0x15/0x1a [ 534.118459][T30178] should_fail_ex+0x261/0x270 [ 534.118489][T30178] should_fail+0xb/0x10 [ 534.118562][T30178] should_fail_usercopy+0x1a/0x20 [ 534.118597][T30178] _copy_from_iter+0xd8/0xd10 [ 534.118639][T30178] ? kmalloc_reserve+0x16e/0x190 [ 534.118664][T30178] ? __build_skb_around+0x199/0x1f0 [ 534.118693][T30178] ? __alloc_skb+0x227/0x320 [ 534.118719][T30178] ? __virt_addr_valid+0x1ed/0x250 [ 534.118788][T30178] ? __check_object_size+0x367/0x510 [ 534.118814][T30178] netlink_sendmsg+0x492/0x720 [ 534.118881][T30178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.118912][T30178] __sock_sendmsg+0x140/0x180 [ 534.118936][T30178] ____sys_sendmsg+0x350/0x4e0 [ 534.119047][T30178] __sys_sendmsg+0x1a0/0x240 [ 534.119101][T30178] __x64_sys_sendmsg+0x46/0x50 [ 534.119134][T30178] x64_sys_call+0x26f3/0x2e10 [ 534.119169][T30178] do_syscall_64+0xc9/0x1c0 [ 534.119204][T30178] ? clear_bhb_loop+0x25/0x80 [ 534.119244][T30178] ? clear_bhb_loop+0x25/0x80 [ 534.119270][T30178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.119291][T30178] RIP: 0033:0x7f513c8be169 [ 534.119309][T30178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.119332][T30178] RSP: 002b:00007f513af27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.119405][T30178] RAX: ffffffffffffffda RBX: 00007f513cae5fa0 RCX: 00007f513c8be169 [ 534.119417][T30178] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 534.119429][T30178] RBP: 00007f513af27090 R08: 0000000000000000 R09: 0000000000000000 [ 534.119443][T30178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.119458][T30178] R13: 0000000000000000 R14: 00007f513cae5fa0 R15: 00007ffc1513d848 [ 534.119480][T30178] [ 534.338056][T30179] dvmrp0: entered allmulticast mode [ 534.464826][T30189] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10002'. [ 534.566776][T30192] loop8: detected capacity change from 0 to 128 [ 534.591631][T30192] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.854483][T30204] loop8: detected capacity change from 0 to 764 [ 534.969096][T30214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10011'. [ 535.038481][T30221] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10010'. [ 535.084158][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10014'. [ 535.341970][T30231] loop7: detected capacity change from 0 to 128 [ 535.361382][T30235] loop8: detected capacity change from 0 to 764 [ 535.383760][T30231] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.536617][T30240] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10019'. [ 536.388768][T30255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 536.475824][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10028'. [ 536.516294][T30281] loop8: detected capacity change from 0 to 128 [ 536.553189][T30281] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.005054][T30294] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10036'. [ 537.266089][T30306] loop7: detected capacity change from 0 to 512 [ 537.359702][T30306] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 537.371746][T30306] EXT4-fs (loop7): orphan cleanup on readonly fs [ 537.395283][T30306] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.10041: invalid indirect mapped block 256 (level 2) [ 537.412303][T30306] EXT4-fs (loop7): 2 truncates cleaned up [ 537.686529][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10044'. [ 538.000785][T30344] x_tables: duplicate underflow at hook 2 [ 538.020860][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 538.020875][ T29] audit: type=1400 audit(1744787898.555:33739): avc: denied { ioctl } for pid=30330 comm="syz.5.10049" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 538.117226][T30343] netem: change failed [ 538.158536][ T29] audit: type=1400 audit(1744787898.595:33740): avc: denied { write } for pid=30342 comm="syz.9.10052" path="socket:[102769]" dev="sockfs" ino=102769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 538.212917][ T29] audit: type=1400 audit(1744787898.595:33741): avc: denied { read append } for pid=30342 comm="syz.9.10052" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 538.252937][ T29] audit: type=1400 audit(1744787898.595:33742): avc: denied { open } for pid=30342 comm="syz.9.10052" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 538.295408][ T29] audit: type=1400 audit(1744787898.595:33743): avc: denied { create } for pid=30342 comm="syz.9.10052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 538.331875][ T29] audit: type=1400 audit(1744787898.605:33744): avc: denied { getopt } for pid=30342 comm="syz.9.10052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 538.353745][ T29] audit: type=1400 audit(1744787898.665:33745): avc: denied { read } for pid=30342 comm="syz.9.10052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 538.959893][ T29] audit: type=1326 audit(1744787899.285:33746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30356 comm="syz.4.10057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 538.985174][ T29] audit: type=1326 audit(1744787899.285:33747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30356 comm="syz.4.10057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 539.010805][ T29] audit: type=1326 audit(1744787899.295:33748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30356 comm="syz.4.10057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea2e0e169 code=0x7ffc0000 [ 539.086945][T30361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.095407][T30361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.301743][T30368] loop9: detected capacity change from 0 to 128 [ 539.890303][T30371] loop7: detected capacity change from 0 to 256 [ 539.896906][T30371] msdos: Bad value for 'umask' [ 539.899458][T30373] bond1: entered promiscuous mode [ 539.906909][T30373] bond1: entered allmulticast mode [ 539.907997][T30368] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.922791][T30373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.940663][T30373] bond1 (unregistering): Released all slaves [ 539.975363][T30381] x_tables: duplicate underflow at hook 2 [ 539.984245][T30380] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 540.104876][T30388] __nla_validate_parse: 1 callbacks suppressed [ 540.104963][T30388] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10067'. [ 540.600798][T30407] loop7: detected capacity change from 0 to 256 [ 540.612328][T30406] loop8: detected capacity change from 0 to 128 [ 540.622893][T30407] msdos: Bad value for 'umask' [ 540.641859][T30406] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.709516][T30410] x_tables: duplicate underflow at hook 2 [ 540.829657][T30416] loop7: detected capacity change from 0 to 764 [ 540.926960][T30422] bond1: entered promiscuous mode [ 540.932055][T30422] bond1: entered allmulticast mode [ 540.939087][T30422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.949357][T30422] bond1 (unregistering): Released all slaves [ 540.966506][T30426] syzkaller1: entered promiscuous mode [ 540.972161][T30426] syzkaller1: entered allmulticast mode [ 541.030851][T30429] loop8: detected capacity change from 0 to 128 [ 541.199757][T30444] FAULT_INJECTION: forcing a failure. [ 541.199757][T30444] name failslab, interval 1, probability 0, space 0, times 0 [ 541.208976][T30445] loop8: detected capacity change from 0 to 512 [ 541.212573][T30444] CPU: 0 UID: 0 PID: 30444 Comm: syz.9.10087 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 541.212631][T30444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 541.212647][T30444] Call Trace: [ 541.212656][T30444] [ 541.212665][T30444] dump_stack_lvl+0xf6/0x150 [ 541.212696][T30444] dump_stack+0x15/0x1a [ 541.212725][T30444] should_fail_ex+0x261/0x270 [ 541.212808][T30444] should_failslab+0x8f/0xb0 [ 541.212864][T30444] kmem_cache_alloc_noprof+0x59/0x340 [ 541.212893][T30444] ? skb_clone+0x154/0x1f0 [ 541.212927][T30444] ? stack_depot_save_flags+0x7d0/0x8b0 [ 541.212959][T30444] skb_clone+0x154/0x1f0 [ 541.213079][T30444] __skb_tstamp_tx+0x2df/0x6e0 [ 541.213111][T30444] __dev_queue_xmit+0x1444/0x20b0 [ 541.213149][T30444] ? _raw_write_unlock_bh+0x1f/0x30 [ 541.213251][T30444] ? ___neigh_create+0x10a4/0x12a0 [ 541.213291][T30444] ? skb_push+0x61/0x90 [ 541.213372][T30444] neigh_resolve_output+0x3ea/0x460 [ 541.213417][T30444] ip_finish_output2+0x7a5/0x8b0 [ 541.213492][T30444] ? __rcu_read_unlock+0x4e/0x70 [ 541.213530][T30444] ip_finish_output+0x11d/0x2a0 [ 541.213600][T30444] ip_output+0xb7/0x190 [ 541.213634][T30444] ? __pfx_ip_finish_output+0x10/0x10 [ 541.213671][T30444] ? __pfx_ip_output+0x10/0x10 [ 541.213742][T30444] ip_send_skb+0x119/0x140 [ 541.213780][T30444] udp_send_skb+0x6c2/0xa10 [ 541.213819][T30444] udp_sendmsg+0x12b4/0x1350 [ 541.213856][T30444] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 541.213985][T30444] ? __pfx_udp_sendmsg+0x10/0x10 [ 541.214020][T30444] inet_sendmsg+0xaf/0xd0 [ 541.214091][T30444] __sock_sendmsg+0x102/0x180 [ 541.214115][T30444] ____sys_sendmsg+0x350/0x4e0 [ 541.214154][T30444] __sys_sendmmsg+0x22a/0x4b0 [ 541.214313][T30444] __x64_sys_sendmmsg+0x57/0x70 [ 541.214348][T30444] x64_sys_call+0x2b53/0x2e10 [ 541.214376][T30444] do_syscall_64+0xc9/0x1c0 [ 541.214414][T30444] ? clear_bhb_loop+0x25/0x80 [ 541.214477][T30444] ? clear_bhb_loop+0x25/0x80 [ 541.214504][T30444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.214531][T30444] RIP: 0033:0x7f353a54e169 [ 541.214550][T30444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.214623][T30444] RSP: 002b:00007f3538bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.214646][T30444] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54e169 [ 541.214662][T30444] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 541.214677][T30444] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 541.214692][T30444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.214715][T30444] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 541.214804][T30444] [ 541.508064][T30445] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 541.529075][T30445] EXT4-fs (loop8): 1 truncate cleaned up [ 541.566393][T30456] loop8: detected capacity change from 0 to 128 [ 541.866521][T30481] loop8: detected capacity change from 0 to 128 [ 541.914152][T30487] loop7: detected capacity change from 0 to 128 [ 541.934554][T30487] EXT4-fs mount: 18 callbacks suppressed [ 541.934572][T30487] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 541.959074][T30487] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.017042][T30501] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10113'. [ 542.054460][T29069] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.149722][T30518] loop8: detected capacity change from 0 to 1024 [ 542.160988][T30518] EXT4-fs: Ignoring removed mblk_io_submit option [ 542.167651][T30518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.200390][T30525] loop7: detected capacity change from 0 to 128 [ 542.204297][T30518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.244100][T30525] bond0: entered promiscuous mode [ 542.250000][T30525] bond_slave_0: entered promiscuous mode [ 542.255708][T30525] bond_slave_1: entered promiscuous mode [ 542.264024][T30525] veth1_to_bond: entered promiscuous mode [ 542.266524][T27648] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.273492][T30525] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 542.295937][T30525] Cannot create hsr debugfs directory [ 542.304563][T30525] batman_adv: batadv0: Adding interface: hsr1 [ 542.310720][T30525] batman_adv: batadv0: The MTU of interface hsr1 is too small (1494) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.337212][T30525] batman_adv: batadv0: Interface activated: hsr1 [ 542.400189][T30536] FAULT_INJECTION: forcing a failure. [ 542.400189][T30536] name failslab, interval 1, probability 0, space 0, times 0 [ 542.412939][T30536] CPU: 0 UID: 0 PID: 30536 Comm: syz.7.10125 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 542.412970][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.412983][T30536] Call Trace: [ 542.413049][T30536] [ 542.413067][T30536] dump_stack_lvl+0xf6/0x150 [ 542.413091][T30536] dump_stack+0x15/0x1a [ 542.413147][T30536] should_fail_ex+0x261/0x270 [ 542.413174][T30536] should_failslab+0x8f/0xb0 [ 542.413205][T30536] kmem_cache_alloc_bulk_noprof+0x60/0x4a0 [ 542.413303][T30536] ? bpf_test_run_xdp_live+0x74d/0x1050 [ 542.413408][T30536] bpf_test_run_xdp_live+0xd00/0x1050 [ 542.413450][T30536] ? synchronize_rcu_expedited+0x6d5/0x790 [ 542.413539][T30536] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 542.413577][T30536] ? bpf_test_run_xdp_live+0x2b3/0x1050 [ 542.413622][T30536] bpf_prog_test_run_xdp+0x526/0x8e0 [ 542.413725][T30536] ? __rcu_read_unlock+0x4e/0x70 [ 542.413755][T30536] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 542.413780][T30536] bpf_prog_test_run+0x20e/0x3a0 [ 542.413806][T30536] __sys_bpf+0x440/0x800 [ 542.413834][T30536] __x64_sys_bpf+0x43/0x50 [ 542.413912][T30536] x64_sys_call+0x23da/0x2e10 [ 542.413934][T30536] do_syscall_64+0xc9/0x1c0 [ 542.414021][T30536] ? clear_bhb_loop+0x25/0x80 [ 542.414042][T30536] ? clear_bhb_loop+0x25/0x80 [ 542.414063][T30536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.414108][T30536] RIP: 0033:0x7f513c8be169 [ 542.414122][T30536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.414140][T30536] RSP: 002b:00007f513af27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.414158][T30536] RAX: ffffffffffffffda RBX: 00007f513cae5fa0 RCX: 00007f513c8be169 [ 542.414170][T30536] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 542.414188][T30536] RBP: 00007f513af27090 R08: 0000000000000000 R09: 0000000000000000 [ 542.414252][T30536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.414297][T30536] R13: 0000000000000000 R14: 00007f513cae5fa0 R15: 00007ffc1513d848 [ 542.414316][T30536] [ 542.666405][T30541] FAULT_INJECTION: forcing a failure. [ 542.666405][T30541] name failslab, interval 1, probability 0, space 0, times 0 [ 542.679403][T30541] CPU: 0 UID: 0 PID: 30541 Comm: syz.9.10127 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 542.679438][T30541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.679510][T30541] Call Trace: [ 542.679589][T30541] [ 542.679598][T30541] dump_stack_lvl+0xf6/0x150 [ 542.679628][T30541] dump_stack+0x15/0x1a [ 542.679649][T30541] should_fail_ex+0x261/0x270 [ 542.679683][T30541] should_failslab+0x8f/0xb0 [ 542.679758][T30541] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 542.679789][T30541] ? sidtab_sid2str_get+0xb8/0x140 [ 542.679817][T30541] ? skb_put+0xba/0x100 [ 542.679847][T30541] kmemdup_noprof+0x2b/0x70 [ 542.679894][T30541] sidtab_sid2str_get+0xb8/0x140 [ 542.679924][T30541] security_sid_to_context_core+0x1eb/0x2f0 [ 542.679954][T30541] security_sid_to_context+0x27/0x30 [ 542.679979][T30541] avc_audit_post_callback+0x9f/0x540 [ 542.680049][T30541] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 542.680084][T30541] common_lsm_audit+0x1c6/0x230 [ 542.680153][T30541] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 542.680190][T30541] slow_avc_audit+0xff/0x140 [ 542.680226][T30541] avc_has_perm+0x124/0x150 [ 542.680262][T30541] selinux_socket_sendmsg+0x18a/0x1c0 [ 542.680336][T30541] security_socket_sendmsg+0x47/0x80 [ 542.680375][T30541] __sock_sendmsg+0x2d/0x180 [ 542.680407][T30541] ____sys_sendmsg+0x350/0x4e0 [ 542.680446][T30541] __sys_sendmsg+0x1a0/0x240 [ 542.680571][T30541] __x64_sys_sendmsg+0x46/0x50 [ 542.680605][T30541] x64_sys_call+0x26f3/0x2e10 [ 542.680631][T30541] do_syscall_64+0xc9/0x1c0 [ 542.680690][T30541] ? clear_bhb_loop+0x25/0x80 [ 542.680716][T30541] ? clear_bhb_loop+0x25/0x80 [ 542.680742][T30541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.680821][T30541] RIP: 0033:0x7f353a54e169 [ 542.680839][T30541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.680861][T30541] RSP: 002b:00007f3538bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.680885][T30541] RAX: ffffffffffffffda RBX: 00007f353a775fa0 RCX: 00007f353a54e169 [ 542.680899][T30541] RDX: 0000000004000050 RSI: 0000200000000100 RDI: 0000000000000005 [ 542.680913][T30541] RBP: 00007f3538bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 542.680992][T30541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.681004][T30541] R13: 0000000000000000 R14: 00007f353a775fa0 R15: 00007fffd359ae48 [ 542.681023][T30541] [ 542.681313][T30541] netlink: 404 bytes leftover after parsing attributes in process `syz.9.10127'. [ 543.008962][T30564] loop7: detected capacity change from 0 to 512 [ 543.023110][T30565] loop9: detected capacity change from 0 to 764 [ 543.029858][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 543.029874][ T29] audit: type=1400 audit(1744787903.565:34105): avc: denied { mounton } for pid=30563 comm="syz.7.10135" path="/79/bus" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 543.080025][T30564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.098249][ T29] audit: type=1326 audit(1744787903.615:34106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f353a54cdca code=0x7ffc0000 [ 543.121891][ T29] audit: type=1326 audit(1744787903.615:34107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f353a54cdca code=0x7ffc0000 [ 543.146728][ T29] audit: type=1326 audit(1744787903.615:34108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f353a54c9d7 code=0x7ffc0000 [ 543.171196][ T29] audit: type=1326 audit(1744787903.615:34109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f353a54f90a code=0x7ffc0000 [ 543.195734][ T29] audit: type=1400 audit(1744787903.625:34110): avc: denied { mount } for pid=30562 comm="syz.9.10134" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 543.214622][T30564] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.219981][ T29] audit: type=1326 audit(1744787903.625:34111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353a54cad0 code=0x7ffc0000 [ 543.253504][ T29] audit: type=1326 audit(1744787903.625:34112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f353a54ceb7 code=0x7ffc0000 [ 543.278188][T30564] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10135: bg 0: block 217: padding at end of block bitmap is not set [ 543.292855][ T29] audit: type=1326 audit(1744787903.625:34113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353a54cad0 code=0x7ffc0000 [ 543.318005][ T29] audit: type=1326 audit(1744787903.625:34114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30562 comm="syz.9.10134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353a54e169 code=0x7ffc0000 [ 543.341975][ T4574] ================================================================== [ 543.350078][ T4574] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 543.358785][ T4574] [ 543.361113][ T4574] read-write to 0xffff888100632af0 of 8 bytes by task 26732 on cpu 0: [ 543.369282][ T4574] delete_from_page_cache_batch+0x4fe/0x700 [ 543.375208][ T4574] truncate_inode_pages_range+0x1c7/0x6c0 [ 543.380957][ T4574] truncate_inode_pages+0x24/0x30 [ 543.385996][ T4574] blkdev_flush_mapping+0xa5/0x1a0 [ 543.391135][ T4574] bdev_release+0x2f9/0x420 [ 543.395701][ T4574] blkdev_release+0x15/0x20 [ 543.400218][ T4574] __fput+0x2ac/0x640 [ 543.404214][ T4574] ____fput+0x1c/0x30 [ 543.408207][ T4574] task_work_run+0x13c/0x1b0 [ 543.412840][ T4574] syscall_exit_to_user_mode+0xa8/0x120 [ 543.418404][ T4574] do_syscall_64+0xd6/0x1c0 [ 543.422923][ T4574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.428824][ T4574] [ 543.431148][ T4574] read to 0xffff888100632af0 of 8 bytes by task 4574 on cpu 1: [ 543.438710][ T4574] nr_blockdev_pages+0x7c/0xd0 [ 543.443477][ T4574] si_meminfo+0x87/0xd0 [ 543.447663][ T4574] update_defense_level+0x4b/0x5c0 [ 543.452792][ T4574] defense_work_handler+0x1f/0x80 [ 543.457846][ T4574] process_scheduled_works+0x4de/0xa20 [ 543.463325][ T4574] worker_thread+0x52c/0x710 [ 543.467920][ T4574] kthread+0x4b7/0x540 [ 543.471998][ T4574] ret_from_fork+0x4b/0x60 [ 543.476421][ T4574] ret_from_fork_asm+0x1a/0x30 [ 543.481204][ T4574] [ 543.483527][ T4574] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 543.490631][ T4574] [ 543.492953][ T4574] Reported by Kernel Concurrency Sanitizer on: [ 543.499195][ T4574] CPU: 1 UID: 0 PID: 4574 Comm: kworker/1:7 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 543.511706][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 543.521767][ T4574] Workqueue: events_long defense_work_handler [ 543.527854][ T4574] ================================================================== [ 543.583276][T29069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.