last executing test programs: 1m21.749595936s ago: executing program 0 (id=122): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) (fail_nth: 9) 1m21.551207998s ago: executing program 0 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffbf008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) socket$kcm(0x2, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1m20.752783799s ago: executing program 0 (id=138): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x7}, 0x8}, [{0x0, 0x1, 0x0, 0x0, 0x10001}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x40000000}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffff80, 0x0, 0x0, 0x0, 0x90000000}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x81}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x1ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x20000000, 0x1}, {}, {0x50000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x8}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m20.645079371s ago: executing program 0 (id=139): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000005c0)={r9, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x1}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xdc, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x17c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_ACT={0x148}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r0, &(0x7f0000000340), 0x0, 0x4040041) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "4caa358623b8a8572eb94c84c265229946d35015647faa6b14816331b4dba964", 0x400, 0x1, 0x5f, 0x5}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ptrace(0x10, r11) 1m20.175631338s ago: executing program 0 (id=142): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000800)=ANY=[], 0x381, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x8}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x3, 0x1}}, 0x14) read(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), 0x0, 0x1}, 0x20) 1m19.869719552s ago: executing program 0 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000e4be05592b088afe3030000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x24) openat2(r7, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x509001, 0xa8327f318edd15ed, 0x23}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 1m4.619328183s ago: executing program 32 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) unshare(0x6060600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000e4be05592b088afe3030000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xf0588357b60851c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x24) openat2(r7, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x509001, 0xa8327f318edd15ed, 0x23}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 3.721109568s ago: executing program 2 (id=1058): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) waitid(0x1, r0, &(0x7f0000000400), 0x20000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005"], 0x60}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x7, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002000000854c4fe778edf5b876f050ec34403ff138728e224d4ee4610981878eaac5dc3c760daa17e371d003ed7e260f8f637c79f6ee95ee9db7e1cf9f59fb831ce3d12bc0acc95cf6b01976ede6e1b7a6aee501baf6b2a7b296a7f36d26910b19ba79e4d4fdaef0928011e4042a2f800790282fe93ebdf0ecd8c14d94eebc212f4a5ea6b9384c91fc0b86adf217467227a2fd9cceda07cabcc9da71d0ee57d401097718a1b9b279958c71f044746d71329a0e000798251a309ee7888fc7127f035aabdf7361f5"], 0x20}}, 0x0) 3.720387988s ago: executing program 2 (id=1059): io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x69bd, 0x400}) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0004000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) r2 = getpid() ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000280)={&(0x7f0000000400)=""/4096, 0x1000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000006}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x2, {0x18}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) getitimer(0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x18) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 2.936364699s ago: executing program 1 (id=1064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="8be8fa", 0x3}], 0x1, 0x8, 0x401, 0x13) 2.928868019s ago: executing program 1 (id=1065): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) unshare(0x28020480) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000124c18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff4, @void, @value}, 0x94) socketpair(0x2a, 0x2, 0xe, &(0x7f0000000580)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1fffffffffffffa5, &(0x7f00000008c0)=ANY=[@ANYBLOB="39560594d3d493fd382b2975fa141ec0a39406c1056afc0baddfdaf9da402d979261d3871b8806a24fa31214bd94eeee4a29077f7bd24dc87d53a1ec197b81cde5c6c6eb8fc64a41f21d8d3f4ea5c2127dce7509a270687a1a22ebf28fc86806e48324be5c2d9708a3d0fc0b7ec1f6a9", @ANYRESHEX, @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x1b, 0x4, 0x3, "988d8c"}}) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) getpeername$packet(r8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000001500000000800000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095c0d99047fc6241f3e15c00800cb5ccaf650ebd711dae55438896562d6eee0734f3a880b25b9bb2e10d83058e614963cc1ed85ec14f772744972eced290b195e9d0738290ac22047adecbe756c633389c8314d57d9deafbaaf700000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 2.83482267s ago: executing program 1 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000006000)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f0000001140)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002280)=[{0x0}], 0x1}}], 0x2, 0x20008055) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="e8256eb42e6ff1fe700331577b4e2da913c45a58604b25e382494dfa2ef8c5224e2cabc5acd0972f5251e79ff5ff49830b45296e9cdfe19f3f05806b15e45a61e94845dd62bf9286cc7154b6cc41040e5613766d45af2f74ee27c95f600dc9bc56f6ffb9606a9b10491d3b534dddd13cb4b44271824346306778e16f67eaeae969f89e0aac6646d229099c55", 0x8c}, {&(0x7f0000000680)="495b8c555ee930abd38e306fb0201093e75aae4c51bbb2ff19a9f0e8100f339303f2b4f591f66e3d2834f6c0e1587570942aa30897f38f1023546dfc07f4f1bf44e0f2e1075503b0b45e76f7a2b4a06507176e5a18fb7a74140df1c796e116ef53ff01eca895f00cd71046470e7de8ffac12bb94b527889106c226", 0x7b}, {&(0x7f0000000780)="f8ddf61a244f4e76f9c76d67905c9049f036c400603c25e841ac213e4bc54152c0abdaccf9251f4c6c28d80c83cb3638316dc5e90cb74f979625c2d94eccbc786cc8edd333c78478f615e537a6c9d296a290ada1079ba389f12a816fc34cf68b9d8d63c181d593cc58250cffa1b2d52c77c5279bf613bfae725647e51bb3b18cf3489941a01e5ea769b4", 0x8a}, {&(0x7f0000000840)="1627014aa8ce529f1e7655f6fc4faf9e6d38d971ffed85973b436f9a0c262a3beedf7250bad3e3b14f801026b479d61ff8c73ce1909124be9010c5bb2cac3a1bb99e209973eeeb8807289a037b1271fb86c07deb05800124846ac7d5211fe2ef2b1b1029c5568a866e5ae8ebcca6f5010ef6da47001b4f6d601828e2637fd9616b6ae89079490bff7eb138bf3fa5d02722e35cbb44ec9141644b7bfcb81a67ed7b39307a8a0b3adac2", 0xa9}, {&(0x7f0000000300)="6be239771fdc80556cc113c6ddf4044bd996451c94fd23f04e3854be1eb1ee70951f929dec9bfba03fe56cbdfde5ff1547896b9f6e1f84bb0d3e84d115bdee7ba477", 0x42}], 0x5) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000b00)=""/201, 0xbb}], 0x47, 0x46, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.229370789s ago: executing program 2 (id=1071): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x18) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r3, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="010000006000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00e723dcfd7b8ae0860100"/25], 0x48}}, 0x81) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x1207, 0x8, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x3b0]}, 0x8, 0x80800) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r7, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) 2.090780181s ago: executing program 4 (id=1073): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.057318012s ago: executing program 5 (id=1075): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="8be8fa", 0x3}], 0x1, 0x8, 0x401, 0x13) 1.981247222s ago: executing program 5 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRES8=0x0, @ANYRESDEC=r0], &(0x7f00000003c0)='GPL\x00', 0x2000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) unshare(0x60480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="b9cc3def8211c9d812b4e9e953a7860dc2c5a53a65dc06e69cfa231a76920432d88f7ef8a64eb44b486343a21670f6e4fce8cd7b3c290b0b5ce509dc70bbb1598afae02c837e2da5970cb6854c2291cb21f9470a8021f62a4f75fbc1ceb00e9ba273"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x0) r9 = socket$caif_stream(0x25, 0x1, 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r10, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) msgget$private(0x0, 0x0) unshare(0x8000080) setsockopt(r9, 0x7, 0x7f, &(0x7f0000001cc0)="c5e6", 0x2) 1.962901633s ago: executing program 1 (id=1077): syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000340), &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUO+G8YJe1srHQWiWVTRA7o6WkCTaKYBU1RWwEDRYGCy1WdmcT4mZFzSY7kvl8YDJvMvPm94ad79ttZjdAY51LciFJkWQhSWfU3ndvtZwbba7Mb1xJ+v2nfimGx1Xblb1+Z5P0kjySZL0s8ko7WVp7bvu3zSceePtG5/4P156dn+lFjuxsbz25+8Gltz65+PDSV9/8dKnIhXT/cl3Hr5jwv3aR3HYSxf4ninbdI+DfuPzGx9+2ktye5L5h/jspU71471y/ab2Th97/u77v/vz1nbMcK3D8+v3O4D2w1wcap0zSTVEuJqnaZbm4WH2G/651pnz12vXXF16+duPqS3XPVMBx6SZbj3829+nZsfz/2KryD5xeg/w/fXn1+0F7tzW2sz9Xz6CAk3VXtRrkf+GF5QczKf/AqSb/0FzyD80l/9Bc8g/NJf/QXPIPp1hnr9GbuFv+obnkH5pL/qG5DuYfAGiW/lzdTyADdal7/gEAAAAAAAAAAAAAAAAAAA5bmd+4srfMquYX7yU7jyVpT6rfGv4ecXLz8O+ZX4vBYfuKqttUnr9nyhNM6aOan76+5Yd66395d731l68mvTeTnG+3D99/xej+O7pb/2F/58UpC/xHxdj2o8/Mtv64P1brrX9xM/l8MP+cnzT/lLljuJ48/3QPfsXyEb32+5QnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGb+DAAA//9/e27Q") 1.874083964s ago: executing program 5 (id=1078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10}], 0x2c, 0xffffffffffbffff8) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r11, &(0x7f00000002c0), 0x0}, 0x20) r12 = dup2(r9, r10) fcntl$setown(r12, 0x8, r8) tkill(r8, 0x13) 1.873481054s ago: executing program 4 (id=1079): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) unshare(0x28020480) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000124c18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff4, @void, @value}, 0x94) socketpair(0x2a, 0x2, 0xe, &(0x7f0000000580)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1fffffffffffffa5, &(0x7f00000008c0)=ANY=[@ANYBLOB="39560594d3d493fd382b2975fa141ec0a39406c1056afc0baddfdaf9da402d979261d3871b8806a24fa31214bd94eeee4a29077f7bd24dc87d53a1ec197b81cde5c6c6eb8fc64a41f21d8d3f4ea5c2127dce7509a270687a1a22ebf28fc86806e48324be5c2d9708a3d0fc0b7ec1f6a9", @ANYRESHEX, @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x1b, 0x4, 0x3, "988d8c"}}) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) getpeername$packet(r8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000001500000000800000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095c0d99047fc6241f3e15c00800cb5ccaf650ebd711dae55438896562d6eee0734f3a880b25b9bb2e10d83058e614963cc1ed85ec14f772744972eced290b195e9d0738290ac22047adecbe756c633389c8314d57d9deafbaaf700000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 1.726035626s ago: executing program 5 (id=1080): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000065c0)={0x28, 0x1e, 0x1, 0x0, 0x2, "", [@nested={0x18, 0xe7, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic]}]}, 0x28}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kvm_fpu\x00', r1, 0x0, 0x1}, 0x18) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005000000050019009500"/33], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.701991256s ago: executing program 4 (id=1081): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x1}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xdc, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x17c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_ACT={0x148}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 1.675404767s ago: executing program 4 (id=1082): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x2, 0x0) poll(&(0x7f0000000240)=[{r0, 0x3680}], 0x1, 0x3ff) shutdown(r0, 0x1) 1.355431591s ago: executing program 2 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x1100, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) 1.271298612s ago: executing program 2 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_delete(0x0) getpid() ioperm(0x7, 0x449, 0x7ff) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009db31d73cdee04fd88f2dbe308bf0758d09521c4b68c4e725be8b65b2322218d4e833c20517b6aa0d9f887f61627bdccfe57218628857ae238224fcf88d4a89ec52932f65d8ed895117b442c5ed5bb17feb151b189809a380a7d65725f05442d68511302b78f1171ae36482fedc5d3c739ae42c3ac96a0a7ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x0, 0x0) 1.123413774s ago: executing program 3 (id=1085): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) socket$kcm(0x2, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 1.045451715s ago: executing program 1 (id=1086): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000065c0)={0x14, 0x1e, 0x1, 0x0, 0x2, "", [@nested={0x4, 0xe7, 0x0, 0x1, [@generic]}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 860.771828ms ago: executing program 5 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000006000)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f0000001140)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002280)=[{0x0}], 0x1}}], 0x2, 0x20008055) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="e8256eb42e6ff1fe700331577b4e2da913c45a58604b25e382494dfa2ef8c5224e2cabc5acd0972f5251e79ff5ff49830b45296e9cdfe19f3f05806b15e45a61e94845dd62bf9286cc7154b6cc41040e5613766d45af2f74ee27c95f600dc9bc56f6ffb9606a9b10491d3b534dddd13cb4b44271824346306778e16f67eaeae969f89e0aac6646d229099c55", 0x8c}, {&(0x7f0000000680)="495b8c555ee930abd38e306fb0201093e75aae4c51bbb2ff19a9f0e8100f339303f2b4f591f66e3d2834f6c0e1587570942aa30897f38f1023546dfc07f4f1bf44e0f2e1075503b0b45e76f7a2b4a06507176e5a18fb7a74140df1c796e116ef53ff01eca895f00cd71046470e7de8ffac12bb94b527889106c226", 0x7b}, {&(0x7f0000000780)="f8ddf61a244f4e76f9c76d67905c9049f036c400603c25e841ac213e4bc54152c0abdaccf9251f4c6c28d80c83cb3638316dc5e90cb74f979625c2d94eccbc786cc8edd333c78478f615e537a6c9d296a290ada1079ba389f12a816fc34cf68b9d8d63c181d593cc58250cffa1b2d52c77c5279bf613bfae725647e51bb3b18cf3489941a01e5ea769b4", 0x8a}, {&(0x7f0000000840)="1627014aa8ce529f1e7655f6fc4faf9e6d38d971ffed85973b436f9a0c262a3beedf7250bad3e3b14f801026b479d61ff8c73ce1909124be9010c5bb2cac3a1bb99e209973eeeb8807289a037b1271fb86c07deb05800124846ac7d5211fe2ef2b1b1029c5568a866e5ae8ebcca6f5010ef6da47001b4f6d601828e2637fd9616b6ae89079490bff7eb138bf3fa5d02722e35cbb44ec9141644b7bfcb81a67ed7b39307a8a0b3adac2", 0xa9}, {&(0x7f0000000300)="6be239771fdc80556cc113c6ddf4044bd996451c94fd23f04e3854be1eb1ee70951f929dec9bfba03fe56cbdfde5ff1547896b9f6e1f84bb0d3e84d115bdee7ba477", 0x42}], 0x5) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000b00)=""/201, 0xbb}], 0x47, 0x46, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 826.284368ms ago: executing program 4 (id=1088): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 329.375676ms ago: executing program 4 (id=1089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRES8=0x0, @ANYRESDEC=r0], &(0x7f00000003c0)='GPL\x00', 0x2000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) unshare(0x60480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB="b9cc3def8211c9d812b4e9e953a7860dc2c5a53a65dc06e69cfa231a76920432d88f7ef8a64eb44b486343a21670f6e4fce8cd7b3c290b0b5ce509dc70bbb1598afae02c837e2da5970cb6854c2291cb21f9470a8021f62a4f75fbc1ceb00e9ba273"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x0) r9 = socket$caif_stream(0x25, 0x1, 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r10, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) msgget$private(0x0, 0x0) unshare(0x8000080) setsockopt(r9, 0x7, 0x7f, &(0x7f0000001cc0)="c5e6", 0x2) 328.899525ms ago: executing program 3 (id=1090): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="8be8fa", 0x3}], 0x1, 0x8, 0x401, 0x13) 328.440485ms ago: executing program 3 (id=1091): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) unshare(0x28020480) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000124c18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff4, @void, @value}, 0x94) socketpair(0x2a, 0x2, 0xe, &(0x7f0000000580)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1fffffffffffffa5, &(0x7f00000008c0)=ANY=[@ANYBLOB="39560594d3d493fd382b2975fa141ec0a39406c1056afc0baddfdaf9da402d979261d3871b8806a24fa31214bd94eeee4a29077f7bd24dc87d53a1ec197b81cde5c6c6eb8fc64a41f21d8d3f4ea5c2127dce7509a270687a1a22ebf28fc86806e48324be5c2d9708a3d0fc0b7ec1f6a9", @ANYRESHEX, @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x1b, 0x4, 0x3, "988d8c"}}) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0xa, 0x300) getpeername$packet(r8, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000001500000000800000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095c0d99047fc6241f3e15c00800cb5ccaf650ebd711dae55438896562d6eee0734f3a880b25b9bb2e10d83058e614963cc1ed85ec14f772744972eced290b195e9d0738290ac22047adecbe756c633389c8314d57d9deafbaaf700000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 327.924625ms ago: executing program 3 (id=1092): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) fcntl$notify(r0, 0x402, 0x10) 327.628325ms ago: executing program 3 (id=1093): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0x0, 0x1}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x160, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xdc, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x17c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_ACT={0x148}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 327.338165ms ago: executing program 3 (id=1094): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x18) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r3, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="010000006000"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00e723dcfd7b8ae0860100"/25], 0x48}}, 0x81) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x1207, 0x8, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x3b0]}, 0x8, 0x80800) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x21, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', r7, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x1000004}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) 327.055495ms ago: executing program 2 (id=1095): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000800050004000000094000000a"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 187.680527ms ago: executing program 1 (id=1096): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000065c0)={0x14, 0x1e, 0x1, 0x0, 0x2, "", [@nested={0x4, 0xe7, 0x0, 0x1, [@generic]}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 0s ago: executing program 5 (id=1097): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000065c0)={0x28, 0x1e, 0x1, 0x0, 0x2, "", [@nested={0x18, 0xe7, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic]}]}, 0x28}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kvm_fpu\x00', r1, 0x0, 0x1}, 0x18) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005000000050019009500"/33], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ected capacity change from 0 to 2048 [ 53.634848][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 54.369301][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 54.369319][ T29] audit: type=1400 audit(1750733066.883:874): avc: denied { mounton } for pid=4227 comm="syz.3.227" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.524679][ T4247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.533707][ T4247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.728046][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.738122][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.803925][ T29] audit: type=1400 audit(1750733068.313:875): avc: denied { bind } for pid=4258 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.958503][ T4266] loop1: detected capacity change from 0 to 1024 [ 55.965541][ T4266] EXT4-fs: Ignoring removed bh option [ 55.971672][ T4266] EXT4-fs: Mount option(s) incompatible with ext2 [ 56.220608][ T4270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.229246][ T4270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.290798][ T4274] netlink: 112 bytes leftover after parsing attributes in process `syz.4.243'. [ 56.953341][ T4290] loop3: detected capacity change from 0 to 512 [ 56.994366][ T4292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.251'. [ 57.012025][ T4294] loop3: detected capacity change from 0 to 512 [ 57.019304][ T4294] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.026903][ T4294] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.038082][ T4294] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.252: iget: bad extended attribute block 1 [ 57.052509][ T4294] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.252: couldn't read orphan inode 15 (err -117) [ 57.070140][ T4294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.278971][ T29] audit: type=1400 audit(1750733069.793:876): avc: denied { create } for pid=4293 comm="syz.3.252" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.458464][ T29] audit: type=1400 audit(1750733069.793:877): avc: denied { read append open } for pid=4293 comm="syz.3.252" path="/48/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.173924][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.218298][ T29] audit: type=1326 audit(1750733070.733:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.241775][ T29] audit: type=1326 audit(1750733070.733:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.265237][ T29] audit: type=1326 audit(1750733070.743:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.288838][ T29] audit: type=1326 audit(1750733070.743:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.312870][ T29] audit: type=1326 audit(1750733070.743:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.336272][ T29] audit: type=1326 audit(1750733070.743:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 58.479075][ T4324] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 59.178650][ T4340] syzkaller0: entered promiscuous mode [ 59.184314][ T4340] syzkaller0: entered allmulticast mode [ 60.836253][ T4363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.845313][ T4363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.032020][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 61.084019][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 61.084038][ T29] audit: type=1400 audit(1750733073.593:889): avc: denied { bind } for pid=4371 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.391610][ T4380] netlink: 'syz.1.283': attribute type 1 has an invalid length. [ 61.518209][ T4381] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.527223][ T4381] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.536292][ T4381] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.545758][ T4381] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.604744][ T4381] bond0: (slave geneve2): making interface the new active one [ 61.612914][ T4381] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 61.626163][ T4389] can0: slcan on ttyS3. [ 61.674397][ T4391] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 62.616044][ T4385] can0 (unregistered): slcan off ttyS3. [ 62.774296][ T29] audit: type=1400 audit(1750733075.203:890): avc: denied { mounton } for pid=4407 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.982076][ T4412] loop3: detected capacity change from 0 to 512 [ 63.012560][ T4412] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 63.117445][ T4412] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 63.325658][ T4407] chnl_net:caif_netlink_parms(): no params data found [ 63.434037][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.441382][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.450241][ T4407] bridge_slave_0: entered allmulticast mode [ 63.456927][ T4407] bridge_slave_0: entered promiscuous mode [ 63.463832][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.471048][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.478380][ T4407] bridge_slave_1: entered allmulticast mode [ 63.484951][ T4407] bridge_slave_1: entered promiscuous mode [ 63.536486][ T4407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.539067][ T4444] loop1: detected capacity change from 0 to 128 [ 63.557832][ T4407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.586253][ T4407] team0: Port device team_slave_0 added [ 63.602783][ T4407] team0: Port device team_slave_1 added [ 63.627542][ T4407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.634578][ T4407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.660658][ T4407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.688963][ T4407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.696007][ T4407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.722135][ T4407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.753909][ T4407] hsr_slave_0: entered promiscuous mode [ 63.761713][ T4407] hsr_slave_1: entered promiscuous mode [ 63.782027][ T4450] syzkaller1: entered promiscuous mode [ 63.787753][ T4450] syzkaller1: entered allmulticast mode [ 63.854061][ T4407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.862932][ T4407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.871703][ T4407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.880825][ T4407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.897105][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.904286][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.907998][ T29] audit: type=1400 audit(1750735654.424:891): avc: denied { bind } for pid=4457 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.911627][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.938284][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.967089][ T4407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.978594][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.987172][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.997625][ T4464] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 64.012785][ T4464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.022089][ T4407] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.030521][ T4464] bond1: entered promiscuous mode [ 64.048300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.055655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.068942][ T4467] loop3: detected capacity change from 0 to 512 [ 64.076115][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.083228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.091906][ T4467] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 64.165191][ T4407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.201837][ T3411] usb usb6-port1: attempt power cycle [ 64.302814][ T4407] veth0_vlan: entered promiscuous mode [ 64.311633][ T4407] veth1_vlan: entered promiscuous mode [ 64.326442][ T4407] veth0_macvtap: entered promiscuous mode [ 64.333839][ T4407] veth1_macvtap: entered promiscuous mode [ 64.344129][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.354804][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.364575][ T4407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.373706][ T4407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.383034][ T4407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.391894][ T4407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.411619][ T29] audit: type=1400 audit(1750735654.924:892): avc: denied { mount } for pid=4407 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.433931][ T29] audit: type=1400 audit(1750735654.924:893): avc: denied { mounton } for pid=4407 comm="syz-executor" path="/root/syzkaller.uqh3Jf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.462275][ T29] audit: type=1400 audit(1750735654.954:894): avc: denied { mount } for pid=4407 comm="syz-executor" name="/" dev="gadgetfs" ino=4240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.126187][ T29] audit: type=1400 audit(1750735656.644:895): avc: denied { listen } for pid=4525 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.364908][ T3411] usb usb6-port1: unable to enumerate USB device [ 66.372178][ T4384] vhci_hcd: invalid port number 96 [ 66.372970][ T4544] netlink: 60 bytes leftover after parsing attributes in process `syz.1.325'. [ 66.377872][ T4384] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 66.847315][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 67.046334][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.049566][ T4575] netlink: 'syz.3.336': attribute type 13 has an invalid length. [ 67.055231][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.120728][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.128038][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.176752][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.189491][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.238741][ T4575] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.247321][ T4575] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.255892][ T4575] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.264346][ T4575] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.353332][ T4597] syzkaller1: entered promiscuous mode [ 67.359083][ T4597] syzkaller1: entered allmulticast mode [ 67.392648][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.401188][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.955529][ T29] audit: type=1400 audit(1750735658.474:896): avc: denied { read write } for pid=4615 comm="syz.4.345" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.979375][ T29] audit: type=1400 audit(1750735658.474:897): avc: denied { open } for pid=4615 comm="syz.4.345" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.003556][ T29] audit: type=1400 audit(1750735658.474:898): avc: denied { ioctl } for pid=4615 comm="syz.4.345" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x45ef scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.251672][ T29] audit: type=1400 audit(1750735658.764:899): avc: denied { listen } for pid=4631 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.296446][ T29] audit: type=1400 audit(1750735658.814:900): avc: denied { ioctl } for pid=4636 comm="syz.3.353" path="socket:[8061]" dev="sockfs" ino=8061 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.529437][ T4643] bridge0: port 3(erspan0) entered blocking state [ 68.536093][ T4643] bridge0: port 3(erspan0) entered disabled state [ 68.544437][ T4643] erspan0: entered allmulticast mode [ 68.550416][ T4643] erspan0: entered promiscuous mode [ 68.556151][ T3411] usb usb6-port1: attempt power cycle [ 68.562243][ T4643] bridge0: port 3(erspan0) entered blocking state [ 68.568748][ T4643] bridge0: port 3(erspan0) entered forwarding state [ 68.576991][ T4643] erspan0: left allmulticast mode [ 68.582089][ T4643] erspan0: left promiscuous mode [ 68.587302][ T4643] bridge0: port 3(erspan0) entered disabled state [ 68.719858][ T4649] batadv_slave_1: entered promiscuous mode [ 68.727266][ T4649] batadv_slave_1: left promiscuous mode [ 69.685466][ T29] audit: type=1400 audit(1750735660.205:901): avc: denied { connect } for pid=4663 comm="syz.5.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.928346][ T29] audit: type=1400 audit(1750735660.445:902): avc: denied { read } for pid=4679 comm="syz.4.366" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.374267][ T29] audit: type=1400 audit(1750735660.845:903): avc: denied { connect } for pid=4686 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.442334][ T29] audit: type=1400 audit(1750735660.955:904): avc: denied { connect } for pid=4694 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.788401][ T4706] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 70.826414][ T4708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.836110][ T4708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.892615][ T4712] loop1: detected capacity change from 0 to 128 [ 71.552043][ T4733] vlan2: entered allmulticast mode [ 71.557259][ T4733] bond0: entered allmulticast mode [ 71.562471][ T4733] bond_slave_0: entered allmulticast mode [ 71.568264][ T4733] bond_slave_1: entered allmulticast mode [ 71.575648][ T4733] bridge0: port 3(vlan2) entered blocking state [ 71.581930][ T4733] bridge0: port 3(vlan2) entered disabled state [ 71.589592][ T4733] vlan2: entered promiscuous mode [ 71.594787][ T4733] bond0: entered promiscuous mode [ 71.599833][ T4733] bond_slave_0: entered promiscuous mode [ 71.605804][ T4733] bond_slave_1: entered promiscuous mode [ 71.611856][ T4733] bridge0: port 3(vlan2) entered blocking state [ 71.618148][ T4733] bridge0: port 3(vlan2) entered forwarding state [ 71.625042][ T3411] usb usb6-port1: unable to enumerate USB device [ 71.837906][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 71.837924][ T29] audit: type=1400 audit(1750735662.355:909): avc: denied { create } for pid=4745 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.840670][ T4747] netlink: 'syz.3.389': attribute type 9 has an invalid length. [ 71.844220][ T29] audit: type=1400 audit(1750735662.355:910): avc: denied { getopt } for pid=4745 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.890420][ T29] audit: type=1400 audit(1750735662.355:911): avc: denied { create } for pid=4745 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.909667][ T29] audit: type=1400 audit(1750735662.355:912): avc: denied { write } for pid=4745 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.036331][ T29] audit: type=1400 audit(1750735662.555:913): avc: denied { execute_no_trans } for pid=4748 comm="syz.4.390" path=2F6D656D66643AAE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.350391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119f20600: rx timeout, send abort [ 72.358951][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119f20600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 73.022947][ T4768] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.369129][ T29] audit: type=1400 audit(1750735663.885:914): avc: denied { create } for pid=4775 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.413822][ T29] audit: type=1400 audit(1750735663.925:915): avc: denied { write } for pid=4775 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.459921][ T4779] loop1: detected capacity change from 0 to 1024 [ 73.487828][ T4779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.507186][ T4779] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.521543][ T4789] loop5: detected capacity change from 0 to 128 [ 73.647992][ T51] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 393: padding at end of block bitmap is not set [ 73.680772][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 73.693519][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 73.693519][ T51] [ 73.704045][ T29] audit: type=1400 audit(1750735664.205:916): avc: denied { name_connect } for pid=4795 comm="syz.2.407" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 73.758050][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.859274][ T4808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.867919][ T4808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.985393][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.007509][ T3411] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.147346][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.157049][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.238776][ T4826] loop2: detected capacity change from 0 to 1024 [ 74.247590][ T4826] EXT4-fs: test_dummy_encryption option not supported [ 74.782794][ T4838] tmpfs: Unknown parameter 'quota' [ 74.897524][ T29] audit: type=1400 audit(1750735665.415:917): avc: denied { setopt } for pid=4852 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.917332][ T29] audit: type=1400 audit(1750735665.415:918): avc: denied { bind } for pid=4852 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.002982][ T4856] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 76.152548][ T4885] netlink: 'syz.3.436': attribute type 10 has an invalid length. [ 76.161322][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.169559][ T4885] bond0: (slave team0): Enslaving as an active interface with an up link [ 76.266266][ T4892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.274822][ T4892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.821058][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.829846][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.863646][ T4907] veth1_to_bond: entered allmulticast mode [ 76.870402][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 76.883827][ T4907] bond0: (slave bond_slave_1): Releasing backup interface [ 76.894497][ T4907] veth1_to_bond (unregistering): left allmulticast mode [ 77.284201][ T4916] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 77.340670][ T4916] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.349152][ T4916] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.357574][ T4916] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.365936][ T4916] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.375870][ T4916] bond2: (slave geneve2): making interface the new active one [ 77.384881][ T4916] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 77.400047][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.448'. [ 77.416276][ T4916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.425472][ T4928] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 77.432177][ T4928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.439731][ T4928] vhci_hcd vhci_hcd.0: Device attached [ 77.461509][ T4928] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 77.461588][ T4932] netlink: 'syz.4.455': attribute type 10 has an invalid length. [ 77.468159][ T4928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.468242][ T4928] vhci_hcd vhci_hcd.0: Device attached [ 77.487761][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.508139][ T4928] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 77.510582][ T4932] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.514876][ T4928] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.514985][ T4928] vhci_hcd vhci_hcd.0: Device attached [ 77.558846][ T4928] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 77.560624][ T4939] loop3: detected capacity change from 0 to 512 [ 77.565496][ T4928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.565565][ T4928] vhci_hcd vhci_hcd.0: Device attached [ 77.593112][ T4928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.663344][ T4946] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.699567][ T4939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.712724][ T4939] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.763330][ T3411] vhci_hcd: vhci_device speed not set [ 77.801422][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 77.801436][ T29] audit: type=1400 audit(1750735668.316:925): avc: denied { write } for pid=4943 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.827592][ T4928] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(19) [ 77.834218][ T4928] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 77.842002][ T4928] vhci_hcd vhci_hcd.0: Device attached [ 77.870158][ T3411] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 78.089428][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.101603][ T4961] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 78.108319][ T4961] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.115816][ T4961] vhci_hcd vhci_hcd.0: Device attached [ 78.174484][ T29] audit: type=1400 audit(1750735668.406:926): avc: denied { mount } for pid=4953 comm="syz.1.459" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 78.205550][ T4962] vhci_hcd: connection closed [ 78.205757][ T51] vhci_hcd: stop threads [ 78.205996][ T4937] vhci_hcd: connection closed [ 78.210551][ T51] vhci_hcd: release socket [ 78.210569][ T51] vhci_hcd: disconnect device [ 78.219529][ T4952] vhci_hcd: connection closed [ 78.229609][ T4933] vhci_hcd: connection closed [ 78.236329][ T4929] vhci_hcd: connection reset by peer [ 78.247080][ T4941] vhci_hcd: connection closed [ 78.255489][ T51] vhci_hcd: stop threads [ 78.264606][ T51] vhci_hcd: release socket [ 78.269190][ T51] vhci_hcd: disconnect device [ 78.283472][ T51] vhci_hcd: stop threads [ 78.287840][ T51] vhci_hcd: release socket [ 78.292277][ T51] vhci_hcd: disconnect device [ 78.313400][ T51] vhci_hcd: stop threads [ 78.317778][ T51] vhci_hcd: release socket [ 78.322329][ T51] vhci_hcd: disconnect device [ 78.343467][ T51] vhci_hcd: stop threads [ 78.347847][ T51] vhci_hcd: release socket [ 78.352451][ T51] vhci_hcd: disconnect device [ 78.374477][ T51] vhci_hcd: stop threads [ 78.378798][ T51] vhci_hcd: release socket [ 78.383488][ T51] vhci_hcd: disconnect device [ 78.717097][ T4974] bridge0: port 3(vlan2) entered disabled state [ 78.723671][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.731120][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.340050][ T29] audit: type=1400 audit(1750735669.316:927): avc: denied { setopt } for pid=4976 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.382666][ T4974] bridge_slave_0: left allmulticast mode [ 79.388419][ T4974] bridge_slave_0: left promiscuous mode [ 79.394242][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.427629][ T4974] bridge_slave_1: left allmulticast mode [ 79.433482][ T4974] bridge_slave_1: left promiscuous mode [ 79.439291][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.469113][ T4974] bond0: (slave bond_slave_0): Releasing backup interface [ 79.477667][ T4974] bond_slave_0: left promiscuous mode [ 79.483246][ T4974] bond_slave_0: left allmulticast mode [ 79.493602][ T4974] bond0: (slave bond_slave_1): Releasing backup interface [ 79.503677][ T4974] bond_slave_1: left promiscuous mode [ 79.509329][ T4974] bond_slave_1: left allmulticast mode [ 79.519352][ T4974] team0: Port device team_slave_0 removed [ 79.559808][ T4974] team0: Port device team_slave_1 removed [ 79.587198][ T4974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.605304][ T4974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.623894][ T4974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.632942][ T4974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.678246][ T4998] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.471'. [ 79.693486][ T4974] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.702449][ T4974] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.711686][ T4974] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.720681][ T4974] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.783825][ T4974] vlan2: left allmulticast mode [ 79.788911][ T4974] bond0: left allmulticast mode [ 79.793831][ T4974] vlan2: left promiscuous mode [ 79.798744][ T4974] bond0: left promiscuous mode [ 79.803759][ T4974] bridge0: port 3(vlan2) entered disabled state [ 79.830924][ T5000] vhci_hcd: invalid port number 23 [ 79.859881][ T29] audit: type=1326 audit(1750735670.356:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 79.883546][ T29] audit: type=1326 audit(1750735670.356:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 79.907563][ T29] audit: type=1326 audit(1750735670.366:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 79.931086][ T29] audit: type=1326 audit(1750735670.366:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 79.954736][ T29] audit: type=1326 audit(1750735670.366:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 79.978320][ T29] audit: type=1326 audit(1750735670.366:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 80.004578][ T29] audit: type=1326 audit(1750735670.446:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.4.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 80.696673][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.706222][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.776398][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 80.800533][ T5038] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.484'. [ 80.900987][ T5041] loop3: detected capacity change from 0 to 512 [ 80.901328][ T5041] EXT4-fs: Ignoring removed orlov option [ 80.914455][ T5041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.925226][ T5041] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.932356][ T5041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.485: bg 0: block 248: padding at end of block bitmap is not set [ 80.954560][ T5041] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.485: Failed to acquire dquot type 1 [ 80.968420][ T5041] EXT4-fs (loop3): 1 truncate cleaned up [ 80.975940][ T5041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.369107][ T5061] geneve2: entered promiscuous mode [ 81.374440][ T5061] geneve2: entered allmulticast mode [ 81.469130][ T5070] vhci_hcd: invalid port number 23 [ 81.491570][ T5072] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.495'. [ 81.658190][ T5041] syz.3.485 (5041) used greatest stack depth: 9224 bytes left [ 81.684100][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.326454][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.326525][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.509334][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 82.537323][ T5109] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.507'. [ 82.594239][ T5113] netlink: 'syz.3.509': attribute type 12 has an invalid length. [ 82.608463][ T5115] vhci_hcd: invalid port number 23 [ 82.657152][ T5116] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.509'. [ 82.933213][ T3411] usb 5-1: enqueue for inactive port 0 [ 82.933241][ T3411] usb 5-1: enqueue for inactive port 0 [ 83.003472][ T3411] vhci_hcd: vhci_device speed not set [ 83.016754][ T5129] vhci_hcd: invalid port number 23 [ 83.106775][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 83.106793][ T29] audit: type=1326 audit(1750735673.616:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5130 comm="syz.5.515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 83.477607][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 83.495383][ T5149] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.519'. [ 83.513822][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 83.537037][ T29] audit: type=1326 audit(1750735674.046:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 83.561329][ T29] audit: type=1326 audit(1750735674.046:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.584938][ T29] audit: type=1326 audit(1750735674.046:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.608602][ T29] audit: type=1326 audit(1750735674.046:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.632162][ T29] audit: type=1326 audit(1750735674.046:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.655766][ T29] audit: type=1326 audit(1750735674.046:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.679229][ T29] audit: type=1326 audit(1750735674.046:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.702708][ T29] audit: type=1326 audit(1750735674.046:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.726352][ T29] audit: type=1326 audit(1750735674.046:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcccb63e929 code=0x7ffc0000 [ 83.771987][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.780673][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.958406][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 84.009872][ T3431] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x12 [ 84.356090][ T5181] loop4: detected capacity change from 0 to 512 [ 84.363018][ T5181] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 84.363120][ T5181] FAT-fs (loop4): Filesystem has been set read-only [ 84.402341][ T5183] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.530'. [ 84.443191][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 84.451102][ T5188] bond_slave_1: entered promiscuous mode [ 84.458988][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 84.462654][ T5188] bond0: (slave bond_slave_1): Releasing backup interface [ 84.463974][ T5188] bond_slave_1 (unregistering): left promiscuous mode [ 84.501043][ T5190] syzkaller0: entered promiscuous mode [ 84.501074][ T5190] syzkaller0: entered allmulticast mode [ 84.610124][ T5195] vhci_hcd: invalid port number 23 [ 84.790723][ T5172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.833855][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.842753][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.423355][ T5225] bond_slave_1: entered promiscuous mode [ 85.429893][ T5225] bond_slave_1 (unregistering): left promiscuous mode [ 85.458688][ T5227] loop3: detected capacity change from 0 to 764 [ 85.465906][ T5227] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.962684][ T5242] loop4: detected capacity change from 0 to 128 [ 86.030490][ T5242] syz.4.550: attempt to access beyond end of device [ 86.030490][ T5242] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 86.030608][ T5242] syz.4.550: attempt to access beyond end of device [ 86.030608][ T5242] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 86.090015][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.090205][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.398574][ T5256] vhci_hcd: invalid port number 23 [ 86.665609][ T5286] loop1: detected capacity change from 0 to 164 [ 86.674177][ T5286] syz.1.564: attempt to access beyond end of device [ 86.674177][ T5286] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.688817][ T5286] syz.1.564: attempt to access beyond end of device [ 86.688817][ T5286] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 87.407875][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.407948][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.408668][ T5317] SELinux: policydb version 405435769 does not match my version range 15-34 [ 87.408747][ T5317] SELinux: failed to load policy [ 87.526537][ T5321] lo speed is unknown, defaulting to 1000 [ 87.543341][ T5321] lo speed is unknown, defaulting to 1000 [ 87.543532][ T5321] lo speed is unknown, defaulting to 1000 [ 87.543967][ T5321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.544610][ T5321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.562846][ T5321] lo speed is unknown, defaulting to 1000 [ 87.563305][ T5321] lo speed is unknown, defaulting to 1000 [ 87.563599][ T5321] lo speed is unknown, defaulting to 1000 [ 87.563892][ T5321] lo speed is unknown, defaulting to 1000 [ 87.564292][ T5321] lo speed is unknown, defaulting to 1000 [ 87.564582][ T5321] lo speed is unknown, defaulting to 1000 [ 87.685976][ T5328] netem: incorrect ge model size [ 87.685992][ T5328] netem: change failed [ 87.739489][ T5330] vhci_hcd: invalid port number 23 [ 88.004674][ T5346] __nla_validate_parse: 10 callbacks suppressed [ 88.004694][ T5346] netlink: 174136 bytes leftover after parsing attributes in process `syz.5.583'. [ 88.258164][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 88.289023][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 88.349083][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 88.349102][ T29] audit: type=1326 audit(1750735678.857:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5359 comm="syz.2.588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 88.460690][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 88.572406][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.581086][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.897708][ T5383] netlink: 174136 bytes leftover after parsing attributes in process `syz.5.596'. [ 88.983209][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 89.004013][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 89.056596][ T5396] geneve0: entered allmulticast mode [ 89.086817][ T29] audit: type=1400 audit(1750735679.597:1070): avc: denied { bind } for pid=5397 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.086847][ T29] audit: type=1400 audit(1750735679.597:1071): avc: denied { write } for pid=5397 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.163558][ T5398] lo speed is unknown, defaulting to 1000 [ 89.217920][ T29] audit: type=1326 audit(1750735679.727:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.2.604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 89.338603][ T29] audit: type=1326 audit(1750735679.847:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.5.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 89.415958][ T5418] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.607'. [ 89.481588][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 89.509338][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 89.650749][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.659423][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.999846][ T29] audit: type=1326 audit(1750735680.507:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76dfa7e929 code=0x0 [ 90.058499][ T5437] geneve0: entered allmulticast mode [ 90.203072][ T5447] loop4: detected capacity change from 0 to 2048 [ 90.214270][ T5447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.217993][ T29] audit: type=1400 audit(1750735680.727:1075): avc: denied { write } for pid=5446 comm="syz.4.618" path="/129/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.553619][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.578284][ T29] audit: type=1326 audit(1750735681.087:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.4.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4766cce929 code=0x0 [ 90.869478][ T5498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.869554][ T5498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.988399][ T29] audit: type=1326 audit(1750735681.497:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.2.631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 91.312206][ T29] audit: type=1400 audit(1750735681.827:1078): avc: denied { shutdown } for pid=5521 comm="syz.5.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.830498][ T5561] FAULT_INJECTION: forcing a failure. [ 91.830498][ T5561] name failslab, interval 1, probability 0, space 0, times 0 [ 91.830533][ T5561] CPU: 1 UID: 0 PID: 5561 Comm: syz.1.649 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 91.830573][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.830632][ T5561] Call Trace: [ 91.830637][ T5561] [ 91.830644][ T5561] __dump_stack+0x1d/0x30 [ 91.830670][ T5561] dump_stack_lvl+0xe8/0x140 [ 91.830693][ T5561] dump_stack+0x15/0x1b [ 91.830724][ T5561] should_fail_ex+0x265/0x280 [ 91.830814][ T5561] should_failslab+0x8c/0xb0 [ 91.830843][ T5561] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.830885][ T5561] ? __alloc_skb+0x101/0x320 [ 91.830952][ T5561] __alloc_skb+0x101/0x320 [ 91.830989][ T5561] netlink_ack+0xfd/0x500 [ 91.831024][ T5561] netlink_rcv_skb+0x192/0x220 [ 91.831097][ T5561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.831128][ T5561] rtnetlink_rcv+0x1c/0x30 [ 91.831152][ T5561] netlink_unicast+0x59e/0x670 [ 91.831273][ T5561] netlink_sendmsg+0x58b/0x6b0 [ 91.831299][ T5561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.831325][ T5561] __sock_sendmsg+0x142/0x180 [ 91.831358][ T5561] ____sys_sendmsg+0x31e/0x4e0 [ 91.831423][ T5561] ___sys_sendmsg+0x17b/0x1d0 [ 91.831486][ T5561] __x64_sys_sendmsg+0xd4/0x160 [ 91.831537][ T5561] x64_sys_call+0x2999/0x2fb0 [ 91.831569][ T5561] do_syscall_64+0xd2/0x200 [ 91.831621][ T5561] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.831657][ T5561] ? clear_bhb_loop+0x40/0x90 [ 91.831686][ T5561] ? clear_bhb_loop+0x40/0x90 [ 91.831716][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.831744][ T5561] RIP: 0033:0x7f76dfa7e929 [ 91.831767][ T5561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.831790][ T5561] RSP: 002b:00007f76de0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.831816][ T5561] RAX: ffffffffffffffda RBX: 00007f76dfca5fa0 RCX: 00007f76dfa7e929 [ 91.831833][ T5561] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 91.831920][ T5561] RBP: 00007f76de0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.831937][ T5561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.831954][ T5561] R13: 0000000000000000 R14: 00007f76dfca5fa0 R15: 00007ffd26886758 [ 91.831980][ T5561] [ 91.862365][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.092325][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.279129][ T5578] FAULT_INJECTION: forcing a failure. [ 92.279129][ T5578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.292431][ T5578] CPU: 1 UID: 0 PID: 5578 Comm: syz.4.655 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 92.292458][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.292470][ T5578] Call Trace: [ 92.292477][ T5578] [ 92.292484][ T5578] __dump_stack+0x1d/0x30 [ 92.292508][ T5578] dump_stack_lvl+0xe8/0x140 [ 92.292597][ T5578] dump_stack+0x15/0x1b [ 92.292612][ T5578] should_fail_ex+0x265/0x280 [ 92.292653][ T5578] should_fail+0xb/0x20 [ 92.292815][ T5578] should_fail_usercopy+0x1a/0x20 [ 92.292910][ T5578] strncpy_from_user+0x25/0x230 [ 92.292986][ T5578] strncpy_from_bpfptr+0x43/0x50 [ 92.293015][ T5578] bpf_prog_load+0x884/0x1070 [ 92.293069][ T5578] ? security_bpf+0x2b/0x90 [ 92.293090][ T5578] __sys_bpf+0x51d/0x790 [ 92.293125][ T5578] __x64_sys_bpf+0x41/0x50 [ 92.293155][ T5578] x64_sys_call+0x2478/0x2fb0 [ 92.293190][ T5578] do_syscall_64+0xd2/0x200 [ 92.293290][ T5578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.293359][ T5578] ? clear_bhb_loop+0x40/0x90 [ 92.293385][ T5578] ? clear_bhb_loop+0x40/0x90 [ 92.293408][ T5578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.293434][ T5578] RIP: 0033:0x7f4766cce929 [ 92.293454][ T5578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.293475][ T5578] RSP: 002b:00007f4765337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.293570][ T5578] RAX: ffffffffffffffda RBX: 00007f4766ef5fa0 RCX: 00007f4766cce929 [ 92.293592][ T5578] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 92.293653][ T5578] RBP: 00007f4765337090 R08: 0000000000000000 R09: 0000000000000000 [ 92.293666][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.293681][ T5578] R13: 0000000000000000 R14: 00007f4766ef5fa0 R15: 00007ffeb347b628 [ 92.293705][ T5578] [ 92.590531][ T5601] loop4: detected capacity change from 0 to 512 [ 92.602764][ T5601] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.662: invalid block [ 92.614446][ T5601] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.662: Bad quota inode: 4, type: 1 [ 92.625799][ T5601] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.640874][ T5601] EXT4-fs (loop4): mount failed [ 92.676096][ T5601] netlink: '+}[@': attribute type 13 has an invalid length. [ 92.734064][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.741528][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.787907][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.799656][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.845290][ T5601] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.854277][ T5601] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.863648][ T5601] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.872843][ T5601] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.088848][ T5624] __nla_validate_parse: 11 callbacks suppressed [ 93.088869][ T5624] netlink: 174136 bytes leftover after parsing attributes in process `syz.5.667'. [ 93.206827][ T5638] FAULT_INJECTION: forcing a failure. [ 93.206827][ T5638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.206868][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz.5.671 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 93.206898][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.206913][ T5638] Call Trace: [ 93.206922][ T5638] [ 93.206931][ T5638] __dump_stack+0x1d/0x30 [ 93.207013][ T5638] dump_stack_lvl+0xe8/0x140 [ 93.207035][ T5638] dump_stack+0x15/0x1b [ 93.207106][ T5638] should_fail_ex+0x265/0x280 [ 93.207145][ T5638] should_fail+0xb/0x20 [ 93.207180][ T5638] should_fail_usercopy+0x1a/0x20 [ 93.207220][ T5638] _copy_from_iter+0xcf/0xe40 [ 93.207295][ T5638] ? __schedule+0x6a8/0xb30 [ 93.207318][ T5638] ? __cond_resched+0x4e/0x90 [ 93.207344][ T5638] file_tty_write+0x32f/0x670 [ 93.207378][ T5638] ? __pfx_tty_write+0x10/0x10 [ 93.207476][ T5638] tty_write+0x25/0x30 [ 93.207636][ T5638] vfs_write+0x49d/0x8e0 [ 93.207693][ T5638] ksys_write+0xda/0x1a0 [ 93.207730][ T5638] __x64_sys_write+0x40/0x50 [ 93.207753][ T5638] x64_sys_call+0x2cdd/0x2fb0 [ 93.207844][ T5638] do_syscall_64+0xd2/0x200 [ 93.207869][ T5638] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.207905][ T5638] ? clear_bhb_loop+0x40/0x90 [ 93.207933][ T5638] ? clear_bhb_loop+0x40/0x90 [ 93.207997][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.208026][ T5638] RIP: 0033:0x7f8a59c9e929 [ 93.208047][ T5638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.208079][ T5638] RSP: 002b:00007f8a58307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.208104][ T5638] RAX: ffffffffffffffda RBX: 00007f8a59ec5fa0 RCX: 00007f8a59c9e929 [ 93.208145][ T5638] RDX: 00000000fffffedf RSI: 0000200000000000 RDI: 0000000000000004 [ 93.208162][ T5638] RBP: 00007f8a58307090 R08: 0000000000000000 R09: 0000000000000000 [ 93.208177][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.208194][ T5638] R13: 0000000000000000 R14: 00007f8a59ec5fa0 R15: 00007ffff81c85f8 [ 93.208220][ T5638] [ 93.270167][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 93.458391][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.458476][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.606813][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 93.606830][ T29] audit: type=1326 audit(1750735684.118:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.1.677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76dfa7e929 code=0x0 [ 93.697707][ T5658] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.678'. [ 93.726958][ T29] audit: type=1400 audit(1750735684.238:1085): avc: denied { ioctl } for pid=5661 comm="syz.2.679" path="socket:[10913]" dev="sockfs" ino=10913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.758423][ T29] audit: type=1400 audit(1750735684.268:1086): avc: denied { validate_trans } for pid=5661 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 93.759037][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 93.947195][ T5672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.959632][ T29] audit: type=1326 audit(1750735684.478:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.4.684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4766cce929 code=0x0 [ 94.003753][ T5676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 94.073628][ T29] audit: type=1326 audit(1750735684.588:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5682 comm="syz.5.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 94.304580][ T5695] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.690'. [ 94.528011][ T5707] netlink: 'syz.1.695': attribute type 3 has an invalid length. [ 94.528040][ T5707] FAULT_INJECTION: forcing a failure. [ 94.528040][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 94.528078][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: syz.1.695 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 94.528157][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.528173][ T5707] Call Trace: [ 94.528180][ T5707] [ 94.528188][ T5707] __dump_stack+0x1d/0x30 [ 94.528213][ T5707] dump_stack_lvl+0xe8/0x140 [ 94.528231][ T5707] dump_stack+0x15/0x1b [ 94.528246][ T5707] should_fail_ex+0x265/0x280 [ 94.528335][ T5707] should_failslab+0x8c/0xb0 [ 94.528364][ T5707] __kmalloc_node_noprof+0xa9/0x410 [ 94.528458][ T5707] ? crypto_create_tfm_node+0x5c/0x250 [ 94.528491][ T5707] crypto_create_tfm_node+0x5c/0x250 [ 94.528513][ T5707] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 94.528536][ T5707] crypto_alloc_tfm_node+0xdc/0x2b0 [ 94.528570][ T5707] crypto_alloc_aead+0x2d/0x40 [ 94.528679][ T5707] macsec_validate_attr+0x109/0x640 [ 94.528739][ T5707] rtnl_newlink+0x85c/0x12d0 [ 94.528792][ T5707] ? bpf_trace_run2+0x124/0x1c0 [ 94.528831][ T5707] ? css_rstat_updated+0xcd/0x5b0 [ 94.528926][ T5707] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 94.528963][ T5707] ? __memcg_slab_free_hook+0x135/0x230 [ 94.529020][ T5707] ? __kfree_skb+0x109/0x150 [ 94.529146][ T5707] ? __rcu_read_unlock+0x4f/0x70 [ 94.529175][ T5707] ? avc_has_perm_noaudit+0x1b1/0x200 [ 94.529215][ T5707] ? selinux_capable+0x1f9/0x270 [ 94.529261][ T5707] ? security_capable+0x83/0x90 [ 94.529296][ T5707] ? ns_capable+0x7d/0xb0 [ 94.529403][ T5707] ? __pfx_rtnl_newlink+0x10/0x10 [ 94.529432][ T5707] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 94.529468][ T5707] netlink_rcv_skb+0x120/0x220 [ 94.529513][ T5707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.529551][ T5707] rtnetlink_rcv+0x1c/0x30 [ 94.529576][ T5707] netlink_unicast+0x59e/0x670 [ 94.529618][ T5707] netlink_sendmsg+0x58b/0x6b0 [ 94.529647][ T5707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.529745][ T5707] __sock_sendmsg+0x142/0x180 [ 94.529779][ T5707] ____sys_sendmsg+0x31e/0x4e0 [ 94.529907][ T5707] ___sys_sendmsg+0x17b/0x1d0 [ 94.529970][ T5707] __x64_sys_sendmsg+0xd4/0x160 [ 94.530021][ T5707] x64_sys_call+0x2999/0x2fb0 [ 94.530050][ T5707] do_syscall_64+0xd2/0x200 [ 94.530083][ T5707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.530180][ T5707] ? clear_bhb_loop+0x40/0x90 [ 94.530209][ T5707] ? clear_bhb_loop+0x40/0x90 [ 94.530243][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.530299][ T5707] RIP: 0033:0x7f76dfa7e929 [ 94.530319][ T5707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.530343][ T5707] RSP: 002b:00007f76de0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.530369][ T5707] RAX: ffffffffffffffda RBX: 00007f76dfca5fa0 RCX: 00007f76dfa7e929 [ 94.530387][ T5707] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 94.530421][ T5707] RBP: 00007f76de0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.530438][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.530455][ T5707] R13: 0000000000000000 R14: 00007f76dfca5fa0 R15: 00007ffd26886758 [ 94.530482][ T5707] [ 94.593423][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.886151][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.899035][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 94.942552][ T5724] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.702'. [ 94.952365][ T29] audit: type=1326 audit(1750735685.468:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.5.703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 95.235504][ T5739] lo speed is unknown, defaulting to 1000 [ 95.542121][ T29] audit: type=1326 audit(1750735686.028:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.1.708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76dfa7e929 code=0x0 [ 95.572253][ T5750] loop3: detected capacity change from 0 to 512 [ 95.579448][ T5750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.603233][ T5750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.616066][ T5750] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.628680][ T29] audit: type=1400 audit(1750735686.138:1091): avc: denied { read } for pid=5741 comm="syz.3.707" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.651235][ T29] audit: type=1400 audit(1750735686.138:1092): avc: denied { open } for pid=5741 comm="syz.3.707" path="/147/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.685154][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.702688][ T5758] FAULT_INJECTION: forcing a failure. [ 95.702688][ T5758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.716083][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: syz.3.709 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 95.716108][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.716131][ T5758] Call Trace: [ 95.716136][ T5758] [ 95.716143][ T5758] __dump_stack+0x1d/0x30 [ 95.716162][ T5758] dump_stack_lvl+0xe8/0x140 [ 95.716178][ T5758] dump_stack+0x15/0x1b [ 95.716250][ T5758] should_fail_ex+0x265/0x280 [ 95.716278][ T5758] should_fail_alloc_page+0xf2/0x100 [ 95.716314][ T5758] __alloc_frozen_pages_noprof+0xff/0x360 [ 95.716361][ T5758] alloc_pages_mpol+0xb3/0x250 [ 95.716394][ T5758] alloc_pages_noprof+0x90/0x130 [ 95.716444][ T5758] pgd_alloc+0x51/0x2e0 [ 95.716533][ T5758] mm_init+0x37c/0x850 [ 95.716551][ T5758] ? kmem_cache_alloc_noprof+0x220/0x310 [ 95.716573][ T5758] ? mm_alloc+0x2b/0xa0 [ 95.716627][ T5758] mm_alloc+0x81/0xa0 [ 95.716644][ T5758] alloc_bprm+0x20e/0x350 [ 95.716671][ T5758] do_execveat_common+0x12e/0x750 [ 95.716848][ T5758] __x64_sys_execve+0x5c/0x70 [ 95.716919][ T5758] x64_sys_call+0x13ab/0x2fb0 [ 95.716938][ T5758] do_syscall_64+0xd2/0x200 [ 95.716954][ T5758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.716976][ T5758] ? clear_bhb_loop+0x40/0x90 [ 95.716995][ T5758] ? clear_bhb_loop+0x40/0x90 [ 95.717024][ T5758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.717042][ T5758] RIP: 0033:0x7fcccb63e929 [ 95.717064][ T5758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.717143][ T5758] RSP: 002b:00007fccc9ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 95.717160][ T5758] RAX: ffffffffffffffda RBX: 00007fcccb865fa0 RCX: 00007fcccb63e929 [ 95.717171][ T5758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 95.717182][ T5758] RBP: 00007fccc9ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.717243][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.717253][ T5758] R13: 0000000000000000 R14: 00007fcccb865fa0 R15: 00007fff243b28c8 [ 95.717270][ T5758] [ 95.988360][ T29] audit: type=1326 audit(1750735686.498:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5759 comm="syz.2.710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 96.017140][ T5764] FAULT_INJECTION: forcing a failure. [ 96.017140][ T5764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.030395][ T5764] CPU: 0 UID: 0 PID: 5764 Comm: syz.5.712 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 96.030432][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.030446][ T5764] Call Trace: [ 96.030453][ T5764] [ 96.030462][ T5764] __dump_stack+0x1d/0x30 [ 96.030500][ T5764] dump_stack_lvl+0xe8/0x140 [ 96.030582][ T5764] dump_stack+0x15/0x1b [ 96.030600][ T5764] should_fail_ex+0x265/0x280 [ 96.030637][ T5764] should_fail+0xb/0x20 [ 96.030712][ T5764] should_fail_usercopy+0x1a/0x20 [ 96.030748][ T5764] _copy_from_iter+0xcf/0xe40 [ 96.030781][ T5764] ? __build_skb_around+0x1a0/0x200 [ 96.030856][ T5764] ? __alloc_skb+0x223/0x320 [ 96.030892][ T5764] netlink_sendmsg+0x471/0x6b0 [ 96.030939][ T5764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.030961][ T5764] __sock_sendmsg+0x142/0x180 [ 96.030990][ T5764] ____sys_sendmsg+0x31e/0x4e0 [ 96.031057][ T5764] ___sys_sendmsg+0x17b/0x1d0 [ 96.031159][ T5764] __x64_sys_sendmsg+0xd4/0x160 [ 96.031202][ T5764] x64_sys_call+0x2999/0x2fb0 [ 96.031227][ T5764] do_syscall_64+0xd2/0x200 [ 96.031247][ T5764] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.031278][ T5764] ? clear_bhb_loop+0x40/0x90 [ 96.031349][ T5764] ? clear_bhb_loop+0x40/0x90 [ 96.031375][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.031401][ T5764] RIP: 0033:0x7f8a59c9e929 [ 96.031419][ T5764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.031469][ T5764] RSP: 002b:00007f8a58307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.031514][ T5764] RAX: ffffffffffffffda RBX: 00007f8a59ec5fa0 RCX: 00007f8a59c9e929 [ 96.031525][ T5764] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 96.031537][ T5764] RBP: 00007f8a58307090 R08: 0000000000000000 R09: 0000000000000000 [ 96.031550][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.031564][ T5764] R13: 0000000000000000 R14: 00007f8a59ec5fa0 R15: 00007ffff81c85f8 [ 96.031587][ T5764] [ 96.284246][ T5770] netlink: 174136 bytes leftover after parsing attributes in process `syz.5.714'. [ 96.306707][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.715'. [ 96.397464][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.397560][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.893355][ T5794] sctp: [Deprecated]: syz.2.721 (pid 5794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.893355][ T5794] Use struct sctp_sack_info instead [ 96.921875][ T5795] lo speed is unknown, defaulting to 1000 [ 97.050820][ T5799] loop4: detected capacity change from 0 to 512 [ 97.140549][ T5824] loop4: detected capacity change from 0 to 1024 [ 97.148022][ T5824] EXT4-fs: Ignoring removed orlov option [ 97.155962][ T5824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.170329][ T5824] bridge_slave_1: left allmulticast mode [ 97.176187][ T5824] bridge_slave_1: left promiscuous mode [ 97.182117][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.190109][ T5824] bridge_slave_0: left allmulticast mode [ 97.195856][ T5824] bridge_slave_0: left promiscuous mode [ 97.201658][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.323076][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.340703][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.350650][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.794750][ T5849] pim6reg: entered allmulticast mode [ 97.796233][ T5848] pim6reg: left allmulticast mode [ 98.020459][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.020524][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.020605][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.020688][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.020745][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.021677][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.021733][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.021868][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.021991][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.022124][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.022194][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.022257][ T5862] tmpfs: Unknown parameter 'defcontextC' [ 98.172905][ T5872] __nla_validate_parse: 7 callbacks suppressed [ 98.172921][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 98.317728][ T5881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.326311][ T5881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.810289][ T5888] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.749'. [ 98.902641][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 98.902659][ T29] audit: type=1326 audit(1750735689.418:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5896 comm="syz.5.753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 98.933184][ T29] audit: type=1326 audit(1750735689.448:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.2.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd871d2e929 code=0x0 [ 99.144896][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 99.240680][ T5914] bridge0: port 3(erspan0) entered blocking state [ 99.240722][ T5914] bridge0: port 3(erspan0) entered disabled state [ 99.240870][ T5914] erspan0: entered allmulticast mode [ 99.241433][ T5914] erspan0: entered promiscuous mode [ 99.762790][ T5921] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.761'. [ 99.794344][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.806189][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.848660][ T29] audit: type=1400 audit(1750735690.358:1179): avc: denied { execute } for pid=5930 comm="+}[@" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 99.892882][ T29] audit: type=1400 audit(1750735690.388:1180): avc: denied { ioctl } for pid=5930 comm="+}[@" path="socket:[12458]" dev="sockfs" ino=12458 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.919191][ T29] audit: type=1326 audit(1750735690.428:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.1.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76dfa7e929 code=0x0 [ 99.942305][ T5934] loop4: detected capacity change from 0 to 2048 [ 99.952714][ T5934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.028634][ T29] audit: type=1400 audit(1750735690.538:1182): avc: denied { map } for pid=5918 comm="syz.4.760" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.148956][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 100.208543][ T5950] netlink: 'syz.3.770': attribute type 32 has an invalid length. [ 100.223997][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 100.243587][ T5950] netlink: 'syz.3.770': attribute type 13 has an invalid length. [ 100.385417][ T5950] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 100.394855][ T5950] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 100.403816][ T5950] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 100.412873][ T5950] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 100.445846][ T29] audit: type=1326 audit(1750735690.958:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.5.772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 100.489431][ T29] audit: type=1326 audit(1750735690.998:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.3.773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcccb63e929 code=0x0 [ 100.682008][ T5964] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.774'. [ 101.368381][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 101.489954][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.507777][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.593744][ T5976] loop5: detected capacity change from 0 to 512 [ 101.603040][ T5976] EXT4-fs: Ignoring removed orlov option [ 101.609673][ T5976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.630917][ T4594] usb usb6-port1: attempt power cycle [ 101.647765][ T5976] EXT4-fs (loop5): 1 orphan inode deleted [ 101.654953][ T5976] EXT4-fs (loop5): 1 truncate cleaned up [ 101.669231][ T5995] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.785'. [ 101.673411][ T5976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.706536][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.5.779'. [ 101.709110][ T29] audit: type=1400 audit(1750735692.209:1185): avc: denied { create } for pid=5975 comm="syz.5.779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.736154][ T29] audit: type=1400 audit(1750735692.219:1186): avc: denied { read write } for pid=5975 comm="syz.5.779" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 101.829284][ T4407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.141608][ T6037] FAULT_INJECTION: forcing a failure. [ 103.141608][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 103.141638][ T6037] CPU: 1 UID: 0 PID: 6037 Comm: syz.3.797 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 103.141665][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.141677][ T6037] Call Trace: [ 103.141719][ T6037] [ 103.141727][ T6037] __dump_stack+0x1d/0x30 [ 103.141753][ T6037] dump_stack_lvl+0xe8/0x140 [ 103.141776][ T6037] dump_stack+0x15/0x1b [ 103.141813][ T6037] should_fail_ex+0x265/0x280 [ 103.141848][ T6037] ? nfc_allocate_device+0xbd/0x2e0 [ 103.141926][ T6037] should_failslab+0x8c/0xb0 [ 103.142055][ T6037] __kmalloc_cache_noprof+0x4c/0x320 [ 103.142094][ T6037] ? __pfx_nci_transceive+0x10/0x10 [ 103.142145][ T6037] nfc_allocate_device+0xbd/0x2e0 [ 103.142192][ T6037] nci_allocate_device+0x13b/0x200 [ 103.142220][ T6037] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 103.142258][ T6037] virtual_ncidev_open+0x55/0x140 [ 103.142293][ T6037] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 103.142367][ T6037] misc_open+0x1d3/0x200 [ 103.142399][ T6037] chrdev_open+0x2eb/0x3a0 [ 103.142428][ T6037] do_dentry_open+0x649/0xa20 [ 103.142460][ T6037] ? __pfx_chrdev_open+0x10/0x10 [ 103.142528][ T6037] vfs_open+0x37/0x1e0 [ 103.142561][ T6037] path_openat+0x1c5e/0x2170 [ 103.142615][ T6037] do_filp_open+0x109/0x230 [ 103.142691][ T6037] do_sys_openat2+0xa6/0x110 [ 103.142856][ T6037] __x64_sys_openat+0xf2/0x120 [ 103.142928][ T6037] x64_sys_call+0x1af/0x2fb0 [ 103.143012][ T6037] do_syscall_64+0xd2/0x200 [ 103.143035][ T6037] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.143071][ T6037] ? clear_bhb_loop+0x40/0x90 [ 103.143099][ T6037] ? clear_bhb_loop+0x40/0x90 [ 103.143142][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.143170][ T6037] RIP: 0033:0x7fcccb63e929 [ 103.143190][ T6037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.143216][ T6037] RSP: 002b:00007fccc9ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.143242][ T6037] RAX: ffffffffffffffda RBX: 00007fcccb865fa0 RCX: 00007fcccb63e929 [ 103.143259][ T6037] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 103.143343][ T6037] RBP: 00007fccc9ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.143361][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.143376][ T6037] R13: 0000000000000000 R14: 00007fcccb865fa0 R15: 00007fff243b28c8 [ 103.143404][ T6037] [ 103.199207][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.252847][ T5827] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 103.253596][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.257581][ T5827] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.519416][ T6052] __nla_validate_parse: 3 callbacks suppressed [ 103.519434][ T6052] netlink: 104 bytes leftover after parsing attributes in process `syz.1.802'. [ 103.535520][ T4594] usb usb6-port1: unable to enumerate USB device [ 103.544609][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.614036][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 103.784986][ T6070] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.808'. [ 103.851218][ T6074] FAULT_INJECTION: forcing a failure. [ 103.851218][ T6074] name failslab, interval 1, probability 0, space 0, times 0 [ 103.863939][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.3.809 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 103.863969][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.863983][ T6074] Call Trace: [ 103.863991][ T6074] [ 103.864000][ T6074] __dump_stack+0x1d/0x30 [ 103.864025][ T6074] dump_stack_lvl+0xe8/0x140 [ 103.864046][ T6074] dump_stack+0x15/0x1b [ 103.864069][ T6074] should_fail_ex+0x265/0x280 [ 103.864105][ T6074] should_failslab+0x8c/0xb0 [ 103.864134][ T6074] kmem_cache_alloc_noprof+0x50/0x310 [ 103.864159][ T6074] ? __mpol_dup+0x42/0x1b0 [ 103.864187][ T6074] __mpol_dup+0x42/0x1b0 [ 103.864214][ T6074] vma_dup_policy+0x29/0x70 [ 103.864240][ T6074] __split_vma+0x266/0x650 [ 103.864262][ T6074] ? __mpol_equal+0x2e/0x1e0 [ 103.864289][ T6074] ? can_vma_merge_right+0x105/0x2e0 [ 103.864308][ T6074] vma_modify+0x21e/0xc80 [ 103.864330][ T6074] vma_modify_policy+0x101/0x130 [ 103.864355][ T6074] mbind_range+0x1b8/0x440 [ 103.864372][ T6074] __se_sys_set_mempolicy_home_node+0x351/0x530 [ 103.864403][ T6074] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 103.864429][ T6074] x64_sys_call+0x117c/0x2fb0 [ 103.864447][ T6074] do_syscall_64+0xd2/0x200 [ 103.864463][ T6074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.864485][ T6074] ? clear_bhb_loop+0x40/0x90 [ 103.864504][ T6074] ? clear_bhb_loop+0x40/0x90 [ 103.864522][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.864540][ T6074] RIP: 0033:0x7fcccb63e929 [ 103.864554][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.864569][ T6074] RSP: 002b:00007fccc9ca7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 103.864585][ T6074] RAX: ffffffffffffffda RBX: 00007fcccb865fa0 RCX: 00007fcccb63e929 [ 103.864596][ T6074] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000fff000 [ 103.864607][ T6074] RBP: 00007fccc9ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.864617][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.864627][ T6074] R13: 0000000000000000 R14: 00007fcccb865fa0 R15: 00007fff243b28c8 [ 103.864650][ T6074] [ 104.094571][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 104.094589][ T29] audit: type=1326 audit(1750735694.609:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6075 comm="syz.3.810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcccb63e929 code=0x0 [ 104.233530][ T29] audit: type=1326 audit(1750735694.749:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.256994][ T29] audit: type=1326 audit(1750735694.749:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.280397][ T29] audit: type=1326 audit(1750735694.749:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.303973][ T29] audit: type=1326 audit(1750735694.749:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.327353][ T29] audit: type=1326 audit(1750735694.749:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.350776][ T29] audit: type=1326 audit(1750735694.749:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.374291][ T29] audit: type=1326 audit(1750735694.749:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.397629][ T29] audit: type=1326 audit(1750735694.749:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.421041][ T29] audit: type=1326 audit(1750735694.749:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd871d2e929 code=0x7ffc0000 [ 104.502517][ T6087] vcan0: entered allmulticast mode [ 104.536845][ T6087] syzkaller0: entered promiscuous mode [ 104.536868][ T6087] syzkaller0: entered allmulticast mode [ 104.545151][ T6086] vcan0: left allmulticast mode [ 104.778562][ T6100] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.819'. [ 104.799094][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.807837][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.962975][ T6104] syz.3.821 (6104): /proc/6103/oom_adj is deprecated, please use /proc/6103/oom_score_adj instead. [ 105.520333][ T6136] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.830'. [ 106.095785][ T6152] FAULT_INJECTION: forcing a failure. [ 106.095785][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 106.108602][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: syz.3.834 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 106.108637][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.108649][ T6152] Call Trace: [ 106.108658][ T6152] [ 106.108668][ T6152] __dump_stack+0x1d/0x30 [ 106.108743][ T6152] dump_stack_lvl+0xe8/0x140 [ 106.108766][ T6152] dump_stack+0x15/0x1b [ 106.108781][ T6152] should_fail_ex+0x265/0x280 [ 106.108816][ T6152] should_failslab+0x8c/0xb0 [ 106.108908][ T6152] kmem_cache_alloc_node_noprof+0x57/0x320 [ 106.108944][ T6152] ? __alloc_skb+0x101/0x320 [ 106.108983][ T6152] __alloc_skb+0x101/0x320 [ 106.109027][ T6152] ? audit_log_start+0x365/0x6c0 [ 106.109078][ T6152] audit_log_start+0x380/0x6c0 [ 106.109112][ T6152] audit_seccomp+0x48/0x100 [ 106.109139][ T6152] ? __seccomp_filter+0x68c/0x10d0 [ 106.109207][ T6152] __seccomp_filter+0x69d/0x10d0 [ 106.109243][ T6152] ? _raw_spin_unlock+0x26/0x50 [ 106.109278][ T6152] __secure_computing+0x82/0x150 [ 106.109319][ T6152] syscall_trace_enter+0xcf/0x1e0 [ 106.109351][ T6152] do_syscall_64+0xac/0x200 [ 106.109379][ T6152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.109453][ T6152] ? clear_bhb_loop+0x40/0x90 [ 106.109481][ T6152] ? clear_bhb_loop+0x40/0x90 [ 106.109519][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.109540][ T6152] RIP: 0033:0x7fcccb63d33c [ 106.109555][ T6152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.109573][ T6152] RSP: 002b:00007fccc9ca7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.109649][ T6152] RAX: ffffffffffffffda RBX: 00007fcccb865fa0 RCX: 00007fcccb63d33c [ 106.109742][ T6152] RDX: 000000000000000f RSI: 00007fccc9ca70a0 RDI: 0000000000000003 [ 106.109757][ T6152] RBP: 00007fccc9ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.109815][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.109878][ T6152] R13: 0000000000000000 R14: 00007fcccb865fa0 R15: 00007fff243b28c8 [ 106.109903][ T6152] [ 106.343765][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.369119][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.836517][ T6172] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.842'. [ 107.243896][ T6184] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 107.759348][ T6206] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.853'. [ 107.788976][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.797628][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.193608][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.859'. [ 108.205194][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.859'. [ 108.710832][ T6242] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.866'. [ 109.187855][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 109.197114][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.870'. [ 109.210588][ T6257] xt_hashlimit: size too large, truncated to 1048576 [ 109.233456][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 109.233475][ T29] audit: type=1400 audit(1750735699.749:1328): avc: denied { write } for pid=6258 comm="syz.5.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.260868][ T6260] C: renamed from lo [ 109.266737][ T6260] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 109.285038][ T6260] vhci_hcd: invalid port number 65 [ 109.290256][ T6260] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 109.320224][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.328948][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.608895][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 109.641250][ T6275] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.878'. [ 109.858958][ T29] audit: type=1326 audit(1750735700.370:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6281 comm="syz.5.881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 110.112131][ T29] audit: type=1400 audit(1750735700.630:1330): avc: denied { create } for pid=6295 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 110.320346][ T29] audit: type=1326 audit(1750735700.840:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.1.887" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76dfa7e929 code=0x0 [ 110.553184][ T6314] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.889'. [ 110.580785][ T6316] FAULT_INJECTION: forcing a failure. [ 110.580785][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 110.593666][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.2.890 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 110.593756][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.593797][ T6316] Call Trace: [ 110.593803][ T6316] [ 110.593811][ T6316] __dump_stack+0x1d/0x30 [ 110.593829][ T6316] dump_stack_lvl+0xe8/0x140 [ 110.593850][ T6316] dump_stack+0x15/0x1b [ 110.594033][ T6316] should_fail_ex+0x265/0x280 [ 110.594069][ T6316] should_failslab+0x8c/0xb0 [ 110.594091][ T6316] __kmalloc_noprof+0xa5/0x3e0 [ 110.594213][ T6316] ? __list_lru_init+0x72/0x2e0 [ 110.594296][ T6316] __list_lru_init+0x72/0x2e0 [ 110.594326][ T6316] alloc_super+0x4df/0x570 [ 110.594353][ T6316] sget_fc+0x24e/0x6e0 [ 110.594420][ T6316] ? __pfx_set_anon_super_fc+0x10/0x10 [ 110.594448][ T6316] ? __pfx_ramfs_fill_super+0x10/0x10 [ 110.594496][ T6316] get_tree_nodev+0x2a/0x100 [ 110.594533][ T6316] ramfs_get_tree+0x1c/0x30 [ 110.594634][ T6316] vfs_get_tree+0x54/0x1d0 [ 110.594650][ T6316] vfs_cmd_create+0x8a/0x140 [ 110.594742][ T6316] vfs_fsconfig_locked+0x6f/0x210 [ 110.594770][ T6316] __se_sys_fsconfig+0x648/0x770 [ 110.594830][ T6316] __x64_sys_fsconfig+0x67/0x80 [ 110.594848][ T6316] x64_sys_call+0x3b8/0x2fb0 [ 110.594995][ T6316] do_syscall_64+0xd2/0x200 [ 110.595011][ T6316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.595034][ T6316] ? clear_bhb_loop+0x40/0x90 [ 110.595117][ T6316] ? clear_bhb_loop+0x40/0x90 [ 110.595137][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.595156][ T6316] RIP: 0033:0x7fd871d2e929 [ 110.595171][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.595261][ T6316] RSP: 002b:00007fd870397038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 110.595279][ T6316] RAX: ffffffffffffffda RBX: 00007fd871f55fa0 RCX: 00007fd871d2e929 [ 110.595290][ T6316] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 110.595300][ T6316] RBP: 00007fd870397090 R08: 0000000000000000 R09: 0000000000000000 [ 110.595384][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.595395][ T6316] R13: 0000000000000000 R14: 00007fd871f55fa0 R15: 00007ffd46228e58 [ 110.595417][ T6316] [ 110.864218][ T29] audit: type=1326 audit(1750735701.380:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.5.891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 110.864709][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.897569][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.905708][ T29] audit: type=1400 audit(1750735701.410:1333): avc: denied { getopt } for pid=6321 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.925389][ T29] audit: type=1400 audit(1750735701.430:1334): avc: denied { bind } for pid=6321 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.961719][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 110.995114][ T6328] pim6reg1: entered promiscuous mode [ 111.000558][ T6328] pim6reg1: entered allmulticast mode [ 111.483502][ T6338] erspan1: entered allmulticast mode [ 111.713694][ T6347] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.904'. [ 111.716498][ T6349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=276 sclass=netlink_tcpdiag_socket pid=6349 comm=syz.5.903 [ 111.822442][ T6349] sctp: [Deprecated]: syz.5.903 (pid 6349) Use of int in max_burst socket option deprecated. [ 111.822442][ T6349] Use struct sctp_assoc_value instead [ 111.872712][ T29] audit: type=1326 audit(1750735702.390:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 111.987027][ T6364] loop4: detected capacity change from 0 to 1024 [ 111.988031][ T6364] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.005142][ T6364] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.007308][ T6364] JBD2: no valid journal superblock found [ 112.007321][ T6364] EXT4-fs (loop4): Could not load journal inode [ 112.057097][ T29] audit: type=1326 audit(1750735702.570:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 112.080586][ T29] audit: type=1326 audit(1750735702.570:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.4.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4766cce929 code=0x7ffc0000 [ 112.159903][ T6365] lo speed is unknown, defaulting to 1000 [ 112.188209][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.197939][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.412121][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 112.610906][ T6390] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.916'. [ 112.789569][ T6398] loop5: detected capacity change from 0 to 512 [ 112.796248][ T6398] EXT4-fs: dax option not supported [ 112.852683][ T6403] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 112.893644][ T6407] loop4: detected capacity change from 0 to 512 [ 112.902141][ T6407] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.923: bg 0: block 16: invalid block bitmap [ 112.915276][ T6407] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 112.924302][ T6407] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.923: invalid indirect mapped block 5 (level 0) [ 112.940044][ T6407] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.923: invalid indirect mapped block 4294967295 (level 1) [ 112.940239][ T6407] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.923: invalid indirect mapped block 4294967295 (level 2) [ 112.940438][ T6407] EXT4-fs (loop4): 1 truncate cleaned up [ 112.940904][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.042458][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.195542][ T6417] bridge0: port 1(gretap0) entered blocking state [ 113.195643][ T6417] bridge0: port 1(gretap0) entered disabled state [ 113.195819][ T6417] gretap0: entered allmulticast mode [ 113.196368][ T6417] gretap0: entered promiscuous mode [ 113.302818][ T6421] loop2: detected capacity change from 0 to 512 [ 113.303491][ T6421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.304967][ T6421] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.926: bad orphan inode 11 [ 113.339711][ T6421] ext4_test_bit(bit=10, block=4) = 1 [ 113.339733][ T6421] is_bad_inode(inode)=0 [ 113.339759][ T6421] NEXT_ORPHAN(inode)=2080374784 [ 113.339769][ T6421] max_ino=32 [ 113.339777][ T6421] i_nlink=0 [ 113.339855][ T6421] EXT4-fs (loop2): 1 truncate cleaned up [ 113.340219][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.359131][ T6421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.926: bg 0: block 393: padding at end of block bitmap is not set [ 113.526268][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.526340][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.876384][ T6441] __nla_validate_parse: 3 callbacks suppressed [ 113.876403][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 113.910759][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.919329][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.149319][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.208722][ T6456] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.939'. [ 114.244458][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 114.244476][ T29] audit: type=1400 audit(1750735704.760:1433): avc: denied { write } for pid=6460 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.270465][ T29] audit: type=1400 audit(1750735704.760:1434): avc: denied { connect } for pid=6460 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.322480][ T29] audit: type=1400 audit(1750735704.760:1435): avc: denied { name_connect } for pid=6460 comm="syz.2.941" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.354530][ T29] audit: type=1400 audit(1750735704.850:1436): avc: denied { read write } for pid=6460 comm="syz.2.941" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.378980][ T29] audit: type=1400 audit(1750735704.850:1437): avc: denied { open } for pid=6460 comm="syz.2.941" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 114.411435][ T29] audit: type=1400 audit(1750735704.930:1438): avc: denied { name_bind } for pid=6460 comm="syz.2.941" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.468159][ T29] audit: type=1400 audit(1750735704.980:1439): avc: denied { create } for pid=6458 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.489830][ T29] audit: type=1400 audit(1750735705.000:1440): avc: denied { setopt } for pid=6458 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.518128][ T29] audit: type=1400 audit(1750735705.030:1441): avc: denied { bind } for pid=6458 comm="syz.5.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.536020][ T6459] bond1: entered promiscuous mode [ 114.542494][ T6459] bond1: entered allmulticast mode [ 114.547875][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.557089][ T6459] bond1 (unregistering): Released all slaves [ 114.570709][ T29] audit: type=1400 audit(1750735705.090:1442): avc: denied { ioctl } for pid=6458 comm="syz.5.940" path="socket:[13904]" dev="sockfs" ino=13904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.686716][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.686785][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.912378][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 115.007190][ T6484] FAULT_INJECTION: forcing a failure. [ 115.007190][ T6484] name failslab, interval 1, probability 0, space 0, times 0 [ 115.007258][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.4.948 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 115.007292][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.007305][ T6484] Call Trace: [ 115.007311][ T6484] [ 115.007317][ T6484] __dump_stack+0x1d/0x30 [ 115.007337][ T6484] dump_stack_lvl+0xe8/0x140 [ 115.007356][ T6484] dump_stack+0x15/0x1b [ 115.007377][ T6484] should_fail_ex+0x265/0x280 [ 115.007417][ T6484] should_failslab+0x8c/0xb0 [ 115.007493][ T6484] __kvmalloc_node_noprof+0x123/0x4e0 [ 115.007529][ T6484] ? alloc_netdev_mqs+0x5ac/0xab0 [ 115.007567][ T6484] alloc_netdev_mqs+0x5ac/0xab0 [ 115.007733][ T6484] rtnl_create_link+0x239/0x710 [ 115.007889][ T6484] rtnl_newlink_create+0x14c/0x620 [ 115.007923][ T6484] ? security_capable+0x83/0x90 [ 115.007958][ T6484] rtnl_newlink+0xf29/0x12d0 [ 115.008027][ T6484] ? xa_load+0xb1/0xe0 [ 115.008052][ T6484] ? __rcu_read_unlock+0x4f/0x70 [ 115.008079][ T6484] ? avc_has_perm_noaudit+0x1b1/0x200 [ 115.008170][ T6484] ? selinux_capable+0x1f9/0x270 [ 115.008219][ T6484] ? security_capable+0x83/0x90 [ 115.008333][ T6484] ? ns_capable+0x7d/0xb0 [ 115.008438][ T6484] ? __pfx_rtnl_newlink+0x10/0x10 [ 115.008467][ T6484] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 115.008523][ T6484] ? avc_has_perm_noaudit+0x1b1/0x200 [ 115.008642][ T6484] netlink_rcv_skb+0x120/0x220 [ 115.008685][ T6484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.008722][ T6484] rtnetlink_rcv+0x1c/0x30 [ 115.008802][ T6484] netlink_unicast+0x59e/0x670 [ 115.008843][ T6484] netlink_sendmsg+0x58b/0x6b0 [ 115.008873][ T6484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.008898][ T6484] __sock_sendmsg+0x142/0x180 [ 115.008957][ T6484] ____sys_sendmsg+0x31e/0x4e0 [ 115.009071][ T6484] ___sys_sendmsg+0x17b/0x1d0 [ 115.009187][ T6484] __x64_sys_sendmsg+0xd4/0x160 [ 115.009236][ T6484] x64_sys_call+0x2999/0x2fb0 [ 115.009310][ T6484] do_syscall_64+0xd2/0x200 [ 115.009332][ T6484] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.009366][ T6484] ? clear_bhb_loop+0x40/0x90 [ 115.009520][ T6484] ? clear_bhb_loop+0x40/0x90 [ 115.009581][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.009612][ T6484] RIP: 0033:0x7f4766cce929 [ 115.009654][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.009681][ T6484] RSP: 002b:00007f4765337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.009707][ T6484] RAX: ffffffffffffffda RBX: 00007f4766ef5fa0 RCX: 00007f4766cce929 [ 115.009723][ T6484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 115.009740][ T6484] RBP: 00007f4765337090 R08: 0000000000000000 R09: 0000000000000000 [ 115.009831][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.009848][ T6484] R13: 0000000000000000 R14: 00007f4766ef5fa0 R15: 00007ffeb347b628 [ 115.009874][ T6484] [ 115.128463][ T6489] loop4: detected capacity change from 0 to 1024 [ 115.245434][ T6496] loop5: detected capacity change from 0 to 1024 [ 115.248760][ T6489] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.255390][ T6496] EXT4-fs: quotafile must be on filesystem root [ 115.269868][ T6489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2040c018, mo2=0002] [ 115.324532][ T6496] 9pnet: Unknown protocol version 9p2000.CuÄô›R~þÞÜÅùƒíòbØB!§;Ý8)?7“"A‹uÞ/oƒ¦Ý^zrOÛkï#î}*k÷qZżö½¤¯b¶ü“qÏ6%  [ 115.328800][ T6489] System zones: 0-1, 3-12 [ 115.329421][ T6489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.356137][ T6496] lo speed is unknown, defaulting to 1000 [ 115.447670][ T6502] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.952'. [ 115.460479][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.781434][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 115.969205][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.977735][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.376903][ T6533] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.408138][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 116.510318][ T6541] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.966'. [ 116.563314][ T6547] loop2: detected capacity change from 0 to 128 [ 116.563635][ T6547] vfat: Bad value for 'uni_xlate' [ 117.264166][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 117.289920][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.300006][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.447985][ T6578] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.978'. [ 117.477298][ T6580] SELinux: syz.2.979 (6580) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 117.494236][ T6582] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 117.524970][ T6580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.560767][ T6580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.577500][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 117.611781][ T6580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.699834][ T6580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.747873][ T6580] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.752227][ T6580] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.767995][ T6580] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.772244][ T6580] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.959589][ T6602] FAULT_INJECTION: forcing a failure. [ 117.959589][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 117.959653][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.4.987 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 117.959682][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.959694][ T6602] Call Trace: [ 117.959700][ T6602] [ 117.959719][ T6602] __dump_stack+0x1d/0x30 [ 117.959740][ T6602] dump_stack_lvl+0xe8/0x140 [ 117.959764][ T6602] dump_stack+0x15/0x1b [ 117.959786][ T6602] should_fail_ex+0x265/0x280 [ 117.959865][ T6602] ? call_usermodehelper_setup+0x72/0x190 [ 117.959957][ T6602] should_failslab+0x8c/0xb0 [ 117.959986][ T6602] ? __pfx_free_modprobe_argv+0x10/0x10 [ 117.960015][ T6602] __kmalloc_cache_noprof+0x4c/0x320 [ 117.960057][ T6602] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 117.960095][ T6602] ? __pfx_free_modprobe_argv+0x10/0x10 [ 117.960124][ T6602] call_usermodehelper_setup+0x72/0x190 [ 117.960156][ T6602] __request_module+0x264/0x3e0 [ 117.960207][ T6602] rtnl_newlink+0x658/0x12d0 [ 117.960230][ T6602] ? __rcu_read_unlock+0x4f/0x70 [ 117.960253][ T6602] ? xas_load+0x413/0x430 [ 117.960291][ T6602] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 117.960375][ T6602] ? __rcu_read_unlock+0x4f/0x70 [ 117.960430][ T6602] ? __rcu_read_unlock+0x4f/0x70 [ 117.960596][ T6602] ? avc_has_perm_noaudit+0x1b1/0x200 [ 117.960635][ T6602] ? selinux_capable+0x1f9/0x270 [ 117.960756][ T6602] ? security_capable+0x83/0x90 [ 117.960806][ T6602] ? ns_capable+0x7d/0xb0 [ 117.960829][ T6602] ? __pfx_rtnl_newlink+0x10/0x10 [ 117.960858][ T6602] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 117.960927][ T6602] ? avc_has_perm_noaudit+0x1b1/0x200 [ 117.960968][ T6602] netlink_rcv_skb+0x120/0x220 [ 117.961010][ T6602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.961119][ T6602] rtnetlink_rcv+0x1c/0x30 [ 117.961196][ T6602] netlink_unicast+0x59e/0x670 [ 117.961238][ T6602] netlink_sendmsg+0x58b/0x6b0 [ 117.961265][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.961324][ T6602] __sock_sendmsg+0x142/0x180 [ 117.961357][ T6602] ____sys_sendmsg+0x31e/0x4e0 [ 117.961390][ T6602] ___sys_sendmsg+0x17b/0x1d0 [ 117.961498][ T6602] __x64_sys_sendmsg+0xd4/0x160 [ 117.961554][ T6602] x64_sys_call+0x2999/0x2fb0 [ 117.961629][ T6602] do_syscall_64+0xd2/0x200 [ 117.961652][ T6602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.961687][ T6602] ? clear_bhb_loop+0x40/0x90 [ 117.961759][ T6602] ? clear_bhb_loop+0x40/0x90 [ 117.961869][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.961969][ T6602] RIP: 0033:0x7f4766cce929 [ 117.961988][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.962015][ T6602] RSP: 002b:00007f4765337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.962040][ T6602] RAX: ffffffffffffffda RBX: 00007f4766ef5fa0 RCX: 00007f4766cce929 [ 117.962078][ T6602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 117.962094][ T6602] RBP: 00007f4765337090 R08: 0000000000000000 R09: 0000000000000000 [ 117.962109][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.962191][ T6602] R13: 0000000000000000 R14: 00007f4766ef5fa0 R15: 00007ffeb347b628 [ 117.962214][ T6602] [ 118.223996][ T6604] loop2: detected capacity change from 0 to 1024 [ 118.224366][ T6604] EXT4-fs: Ignoring removed bh option [ 118.224840][ T6604] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.229788][ T6604] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.229943][ T6604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.229969][ T6604] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.988: iget: bad i_size value: 1407392063428608 [ 118.230146][ T6604] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.988: Bad quota inode: 3, type: 0 [ 118.230295][ T6604] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.230328][ T6604] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 118.230795][ T6604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.323724][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.463871][ T6619] loop3: detected capacity change from 0 to 512 [ 118.490382][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.555665][ T6619] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.629404][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.675232][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.683952][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.916691][ T6652] __nla_validate_parse: 3 callbacks suppressed [ 118.916706][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 118.934912][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1001'. [ 119.047735][ T6652] lo speed is unknown, defaulting to 1000 [ 119.262059][ T6663] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.1005'. [ 119.291307][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 119.308686][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 119.308727][ T29] audit: type=1400 audit(1750735709.831:1546): avc: denied { create } for pid=6666 comm="syz.2.1007" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.315603][ T29] audit: type=1400 audit(1750735709.831:1547): avc: denied { mounton } for pid=6666 comm="syz.2.1007" path="/212/file0" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.432663][ T29] audit: type=1400 audit(1750735709.951:1548): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.491854][ T29] audit: type=1400 audit(1750735710.011:1549): avc: denied { write } for pid=6675 comm="syz.1.1010" name="rt_cache" dev="proc" ino=4026532765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.492320][ T4580] kernel write not supported for file /575/net/rt_cache (pid: 4580 comm: kworker/0:11) [ 119.494650][ T29] audit: type=1400 audit(1750735710.011:1550): avc: denied { create } for pid=6675 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.495250][ T29] audit: type=1400 audit(1750735710.011:1551): avc: denied { write } for pid=6675 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.495483][ T6676] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1010'. [ 119.495599][ T29] audit: type=1400 audit(1750735710.011:1552): avc: denied { nlmsg_write } for pid=6675 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.497201][ T29] audit: type=1400 audit(1750735710.011:1553): avc: denied { setattr } for pid=6675 comm="syz.1.1010" name="NETLINK" dev="sockfs" ino=15394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.745572][ T29] audit: type=1400 audit(1750735710.261:1554): avc: denied { create } for pid=6671 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.805062][ T29] audit: type=1400 audit(1750735710.301:1555): avc: denied { shutdown } for pid=6675 comm="syz.1.1010" laddr=::ac14:14aa lport=55179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.086891][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.095514][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.370115][ T6678] syz.1.1010 (6678) used greatest stack depth: 9160 bytes left [ 120.406521][ T6705] netlink: 174136 bytes leftover after parsing attributes in process `syz.2.1017'. [ 120.435925][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 120.439753][ T6709] loop2: detected capacity change from 0 to 128 [ 120.940733][ T6735] loop4: detected capacity change from 0 to 128 [ 120.947616][ T6735] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.959760][ T6735] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.002460][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.020056][ T4594] kernel write not supported for file /541/net/rt_cache (pid: 4594 comm: kworker/1:17) [ 121.031726][ T6737] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1028'. [ 121.103530][ T6742] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.1030'. [ 121.130247][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 121.345474][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.354146][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.470116][ T6761] loop5: detected capacity change from 0 to 1024 [ 121.479471][ T6761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.496669][ T6761] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 121.562202][ T6761] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 121.574553][ T6761] EXT4-fs (loop5): This should not happen!! Data will be lost [ 121.574553][ T6761] [ 121.584343][ T6761] EXT4-fs (loop5): Total free blocks count 0 [ 121.590389][ T6761] EXT4-fs (loop5): Free/Dirty block details [ 121.596315][ T6761] EXT4-fs (loop5): free_blocks=16 [ 121.601357][ T6761] EXT4-fs (loop5): dirty_blocks=0 [ 121.606548][ T6761] EXT4-fs (loop5): Block reservation details [ 121.612599][ T6761] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 121.648264][ T4407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.912651][ T4591] kernel write not supported for file /596/net/rt_cache (pid: 4591 comm: kworker/1:14) [ 122.905249][ T6799] loop4: detected capacity change from 0 to 1024 [ 122.919711][ T6799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.934996][ T6799] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 122.953232][ T6799] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 122.965464][ T6799] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.965464][ T6799] [ 122.975170][ T6799] EXT4-fs (loop4): Total free blocks count 0 [ 122.981337][ T6799] EXT4-fs (loop4): Free/Dirty block details [ 122.987344][ T6799] EXT4-fs (loop4): free_blocks=16 [ 122.992487][ T6799] EXT4-fs (loop4): dirty_blocks=0 [ 122.997556][ T6799] EXT4-fs (loop4): Block reservation details [ 123.003609][ T6799] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 123.023617][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.035859][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.044391][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.055719][ T4591] kernel write not supported for file /562/net/rt_cache (pid: 4591 comm: kworker/1:14) [ 123.492197][ T6832] netlink: 'syz.2.1059': attribute type 4 has an invalid length. [ 123.492296][ T6832] netlink: 'syz.2.1059': attribute type 6 has an invalid length. [ 124.094386][ T6843] loop4: detected capacity change from 0 to 1024 [ 124.112827][ T6843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.116600][ T6843] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 124.169629][ T6843] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 124.169736][ T6843] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.169736][ T6843] [ 124.169752][ T6843] EXT4-fs (loop4): Total free blocks count 0 [ 124.169844][ T6843] EXT4-fs (loop4): Free/Dirty block details [ 124.169856][ T6843] EXT4-fs (loop4): free_blocks=16 [ 124.169867][ T6843] EXT4-fs (loop4): dirty_blocks=0 [ 124.169878][ T6843] EXT4-fs (loop4): Block reservation details [ 124.169889][ T6843] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 124.223617][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.318448][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 124.318470][ T29] audit: type=1326 audit(1750735714.841:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6852 comm="syz.5.1066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a59c9e929 code=0x0 [ 124.352222][ T6851] __nla_validate_parse: 7 callbacks suppressed [ 124.352262][ T6851] netlink: 174136 bytes leftover after parsing attributes in process `syz.1.1065'. [ 124.494295][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 124.595096][ T29] audit: type=1400 audit(1750735715.111:1592): avc: denied { write } for pid=6865 comm="syz.3.1069" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.620091][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.630504][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.952669][ T29] audit: type=1400 audit(1750735715.471:1593): avc: denied { bind } for pid=6831 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.143648][ T6880] loop4: detected capacity change from 0 to 1024 [ 125.171696][ T6880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.185663][ T29] audit: type=1326 audit(1750735715.691:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.1074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcccb63e929 code=0x0 [ 125.212937][ T6880] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 125.237178][ T6880] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 125.249530][ T6880] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.249530][ T6880] [ 125.249607][ T6880] EXT4-fs (loop4): Total free blocks count 0 [ 125.249619][ T6880] EXT4-fs (loop4): Free/Dirty block details [ 125.249630][ T6880] EXT4-fs (loop4): free_blocks=16 [ 125.249641][ T6880] EXT4-fs (loop4): dirty_blocks=0 [ 125.249652][ T6880] EXT4-fs (loop4): Block reservation details [ 125.249662][ T6880] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 125.277182][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.365865][ T29] audit: type=1326 audit(1750735715.881:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.389421][ T29] audit: type=1326 audit(1750735715.881:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.413110][ T29] audit: type=1326 audit(1750735715.881:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.421033][ T6898] netlink: 174136 bytes leftover after parsing attributes in process `syz.4.1079'. [ 125.436590][ T29] audit: type=1326 audit(1750735715.881:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.469404][ T29] audit: type=1326 audit(1750735715.881:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.493228][ T29] audit: type=1326 audit(1750735715.881:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6895 comm="syz.5.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8a59c9e929 code=0x7ffc0000 [ 125.529182][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 125.654215][ T6909] loop1: detected capacity change from 0 to 128 [ 125.662529][ T6909] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 126.107194][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.115934][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.155919][ T6918] xt_hashlimit: max too large, truncated to 1048576 [ 126.163626][ T6918] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.406780][ T6927] loop4: detected capacity change from 0 to 1024 [ 126.418727][ T6927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.434785][ T6927] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 126.538316][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.679702][ T6939] netlink: 174136 bytes leftover after parsing attributes in process `syz.3.1091'. [ 126.724971][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 127.287432][ T6948] ================================================================== [ 127.295575][ T6948] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 127.305441][ T6948] [ 127.307779][ T6948] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 127.315960][ T6948] tick_do_update_jiffies64+0x113/0x1c0 [ 127.321534][ T6948] tick_nohz_handler+0x7f/0x2d0 [ 127.326408][ T6948] __hrtimer_run_queues+0x20f/0x5a0 [ 127.331629][ T6948] hrtimer_interrupt+0x21a/0x460 [ 127.336593][ T6948] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 127.342519][ T6948] sysvec_apic_timer_interrupt+0x6f/0x80 [ 127.348178][ T6948] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.354205][ T6948] _raw_spin_unlock_irq+0x2f/0x50 [ 127.359253][ T6948] evict_folios+0x27ca/0x33d0 [ 127.363965][ T6948] try_to_shrink_lruvec+0x45a/0x7e0 [ 127.369185][ T6948] shrink_lruvec+0x22e/0x1b40 [ 127.373881][ T6948] shrink_node+0x686/0x2120 [ 127.378403][ T6948] do_try_to_free_pages+0x3f6/0xcd0 [ 127.383619][ T6948] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 127.389725][ T6948] try_charge_memcg+0x358/0x9e0 [ 127.394636][ T6948] obj_cgroup_charge_pages+0xa6/0x150 [ 127.400031][ T6948] __memcg_kmem_charge_page+0x9f/0x170 [ 127.405510][ T6948] __alloc_frozen_pages_noprof+0x188/0x360 [ 127.411343][ T6948] alloc_pages_mpol+0xb3/0x250 [ 127.416311][ T6948] alloc_pages_noprof+0x90/0x130 [ 127.421287][ T6948] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 127.427116][ T6948] bpf_map_area_alloc+0xfa/0x150 [ 127.432084][ T6948] prealloc_init+0xd3/0x490 [ 127.436953][ T6948] htab_map_alloc+0x4ba/0x6d0 [ 127.441648][ T6948] map_create+0x843/0xb90 [ 127.446000][ T6948] __sys_bpf+0x5ab/0x790 [ 127.450266][ T6948] __x64_sys_bpf+0x41/0x50 [ 127.454701][ T6948] x64_sys_call+0x2478/0x2fb0 [ 127.459392][ T6948] do_syscall_64+0xd2/0x200 [ 127.463904][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.469833][ T6948] [ 127.472180][ T6948] read to 0xffffffff868099c0 of 8 bytes by task 6948 on cpu 1: [ 127.479735][ T6948] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 127.485996][ T6948] count_shadow_nodes+0x6a/0x230 [ 127.491126][ T6948] do_shrink_slab+0x63/0x680 [ 127.495738][ T6948] shrink_slab+0x448/0x760 [ 127.500179][ T6948] shrink_node+0x6c3/0x2120 [ 127.504784][ T6948] do_try_to_free_pages+0x3f6/0xcd0 [ 127.509999][ T6948] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 127.515907][ T6948] try_charge_memcg+0x358/0x9e0 [ 127.520859][ T6948] charge_memcg+0x51/0xc0 [ 127.525215][ T6948] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 127.531228][ T6948] __read_swap_cache_async+0x1df/0x350 [ 127.536713][ T6948] swap_cluster_readahead+0x277/0x3e0 [ 127.542110][ T6948] swapin_readahead+0xde/0x6f0 [ 127.546985][ T6948] do_swap_page+0x301/0x2430 [ 127.551592][ T6948] handle_mm_fault+0x9a5/0x2be0 [ 127.556494][ T6948] do_user_addr_fault+0x636/0x1090 [ 127.561668][ T6948] exc_page_fault+0x62/0xa0 [ 127.566206][ T6948] asm_exc_page_fault+0x26/0x30 [ 127.571069][ T6948] [ 127.573415][ T6948] value changed: 0x00000000ffffbc4b -> 0x00000000ffffbc4c [ 127.580530][ T6948] [ 127.582877][ T6948] Reported by Kernel Concurrency Sanitizer on: [ 127.589035][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.2.1095 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 127.601562][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.611635][ T6948] ==================================================================