last executing test programs: 1m46.923321401s ago: executing program 2 (id=2079): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xf4, 0x2, [@TCA_BPF_ACT={0xb8, 0x1, [@m_gact={0xb4, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x6d, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m46.890326462s ago: executing program 2 (id=2081): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000380)={0x0, 0x936, 0x0, 0xfffffffc, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 1m46.857366243s ago: executing program 2 (id=2084): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa0242, 0x5c) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040), 0x0, 0xe4, 0xa, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffe8a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x5, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r6, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, 0xffffffffffffffff, 0x40000000000000) 1m46.725379199s ago: executing program 2 (id=2086): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000d80)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@uid_eq}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x58a, &(0x7f0000001380)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2zj03Oeebe8/NOfcmvQEMrKPpP7mIVyPimyRiZF1ZPrLCo6vrLT++PpU+klhZ+fT3JM5seK0k+384y7wSEb98FXEit6nafG1xabZUqZTnswVj9bkrY7XFpZOX5koz5Zny5YnJydNvT0689+47PYv1zfN/fv/JvQ9Pf31s+bufHx66ncTZOJiVpXH1oIob6zNHS/9kqUKc3bDieA8q202SfjeAHRnK+nkh0mPASAxlvR548X0ZESvAgEr0fxhQzXFAc27fo3nw/8ajD1YnQJvjz6+eG4l9jbnRgeXkqZlROt8d7UH9aR2jD+7cvvvgzu3ofB5if5c8wLbcuBkRp/L5zce/JDv+7dypxsnjzjbWMWifP9BP99LxT3IjYlP/z62Nf6LF+Ge4Rd/die79P/ewB9W0lY7/3m85/l07dI0OZbmXGmO+QnLxUqV8KiJejojjUdib5jtdzzm9fH+lXVka/91s/Jc+0vqbY8GsHQ/ze59+znSpXnqWmNd7dDPitZbj32Rt+ycttn/6fpzfYh1Hyndeb1fWPf7na+WniDdabv8nV7SSztcnxxr7w1hzr9jsj1tHfm1Xf7/jT7f/gc7xj6apteu1te3X8eO+v8rtyna6/+9JPmuk92TLrpXq9fnxiD3Jx/nhjcsnnjy3mW+un8Z//Fjr/t9p/08nX59vMf5bh2+1XbVr/H+vm6Q/5eYWa+8sjX96W9t/+4n7H33xw47jb2z/txqp49mSrRz/ttrAZ3nvAAAAAAAAYLfJRcTBSHLFtXQuVywWGmWH40CuUq3VT1ysLlyejsZvZUejkGte6R5Z932I8ez7sM38xIb8ZEQciohvh/Y38sWpamW638EDAAAAAAAAAAAAAAAAAADALjHc8vf/q2W/DfW7dcBz17ixwd5+twLoh663/O/FnZ6AXalr/wdeWNvv/84MwIvC5z8MLv0fBpf+D4Nrq/2/MPKcGwL853z+w+DS/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87lz5Wlh9fn0rz01cXF2arV09Ol2uzxbmFqeJUdf5KcaZanamUi1PVuW6vV6lWr4xPxMK1sXq5Vh+rLS5dmKsuXK5fuDRXmilfKBf8sWEAAAAAAAAAAAAAAAAAAADYpLa4NFuqVMrzEm0TZ6KXL5jsvnf+TNakHT09v1uikOhpoo8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY4N8AAAD//8gIM7I=") pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x2a, &(0x7f0000001980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xb}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b00)='syzkaller\x00', 0xb42c, 0xce, &(0x7f0000001b40)=""/206, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x5, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d00)=[r0, r1, r0, r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340), 0x224902, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000001940)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb5", 0x5}, {&(0x7f0000000240)="a43b2eaab400000000008000655880", 0xf}], 0x3) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280100001700010000000000000000007f000001000000000000000000000000000004d600000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff00006bfe1fd90000377500004e2300000000800000000080000000004c6148f01ff75b7cdb3be5779961ff77051cea9f1170445c215cbde07ce57be9314edb6eb3ee36ef56f219ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000020200000000f9ffffff0200"/128], 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10) ptrace(0x10, r8) ptrace$getregs(0xe, r8, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45) syz_open_procfs(r8, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) 1m46.602369264s ago: executing program 2 (id=2089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r4 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfffffffffffffe95}, 0xdb31}], 0x1, 0x40002042, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") rename(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./bus\x00') 1m46.336924096s ago: executing program 2 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') 1m46.335669616s ago: executing program 32 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') 1.950665606s ago: executing program 0 (id=4489): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000ac0)=0x9, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@noblock_validity}, {}, {@oldalloc}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@auto_da_alloc}, {@journal_checksum}, {@nomblk_io_submit}], [{@smackfsdef={'smackfsdef', 0x3d, '\xc8}#^'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x3, 0x571, &(0x7f0000001140)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/zoneinfo\x00', 0x0, 0x0) r9 = open(&(0x7f0000000580)='./file1\x00', 0x494801, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = inotify_init() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000980)=0xe8) getgroups(0x8, &(0x7f00000009c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) sendmsg$netlink(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)={0x10, 0x23, 0x2, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000000640)={0xe0, 0x20, 0x520, 0x70bd27, 0x25dfdbfd, "", [@nested={0xd0, 0x43, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @pid=r7}, @nested={0x4, 0xe5}, @typed={0x8, 0x14c, 0x0, 0x0, @u32}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x108}, @generic="d2d64666a1b37a90d1412047375ca17fa2c013a8987e827641181348b9e919d6407fd2f38429172d64e8bc7f17615773657a97292dda65281d8d63ef6c083e3101b049532507e836f7328e24abbe59ad33b75eb94860099d3f7c8991d87844cfc2465a25d8299b9ea170c08d7030a4eff04b852d41c6fc65df5f57547040dc90115e640f3dd0d17cd4271552177b9ba1a8cfd41a86eb97e6388ad4557f2ab1ecfada50b7219c5de0adf1faff"]}]}, 0xe0}, {&(0x7f0000001b40)={0x113c, 0x27, 0x800, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}, @generic="3580e64a7c71fea75563cfb8a9b4541a65ca89d75ee973e7fcb875d96ff1639abba971f11796e59eba2de90dfd60b853af5ab522738aa934999ba3e38596d457617e702185b75275acda6a3a1efb700345fa671a2061dd5723fec51929ef7ec04a692c36d6169a2e24f8623f85809060b1a95fe86d10872ee07322d56bb1ac29f558d2d0f1868145448dc3ac700fe206eb2ba53efe3ce587b1da7048ffdd8a7647eeda429d379d8ea0202d872ac37b757b57057b43486f9be2b2c209d6d5bc124881c467fa932e8d8b587c19", @generic="e8c6678d16b61d57df202a6b6c1d3d09fee620b1ebdad2ece7725b1854bfb85bfd2c268b171739ad", @nested={0x8, 0x66, 0x0, 0x1, [@nested={0x4, 0x130}]}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@private0}, @nested={0x1014, 0x37, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @fd=r0}, @generic="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", @nested={0x4, 0x44}, @nested={0x4, 0x130}]}]}, 0x113c}, {&(0x7f0000000740)={0xc4, 0x10, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0xb1, 0x83, 0x0, 0x1, [@nested={0x4, 0x125}, @nested={0x4, 0xce}, @nested={0x4, 0x9}, @typed={0x8, 0x1a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@multicast2}, @generic="5152a4c64a6b1624ea744d8991ce3d87ec2f85692bc7b0fc5fdb643bd818b8d5e2672dba9da37fbf843027df274cd5ade5961e2eaed805c0338039e052a97548a9b04c8c0bc1388619ae9face3b3634e6cf6180511", @generic="90f27a93b6b70adc046f17f3e225a29f3a8dd20a8f2fb0540eefc2c1b51f5c94fee17401221404122c77d463ea060d5078682c01", @typed={0x8, 0x6d, 0x0, 0x0, @fd=r3}]}]}, 0xc4}], 0x4, &(0x7f0000000a00)=[@rights={{0x2c, 0x1, 0x1, [r8, r1, r4, r9, r10, r0, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x50, 0x636dbe61e5278a1b}, 0x20000800) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r15}, 0x10) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x18, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r17 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r17, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.892531348s ago: executing program 0 (id=4490): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa"], 0x48) 1.892001879s ago: executing program 0 (id=4491): gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffb]}, &(0x7f0000000bc0), 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000800)="c7", 0x1}], 0x1) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r3, 0x20) poll(&(0x7f0000000040)=[{r3, 0x29}], 0x1, 0x400) shutdown(r3, 0x0) getresuid(0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom(r4, 0x0, 0x0, 0x60, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) dup(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@random="cd1c43650b3c", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x2f, 0xff, @private0, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000007940)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000680)=""/181, 0xb5}], 0x8, &(0x7f0000000400)=""/26, 0x1a}, 0x9}, {{&(0x7f0000000880)=@ax25={{0x3, @bcast}, [@default, @rose, @default, @netrom, @null, @remote, @netrom, @rose]}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000a00)=""/14, 0xe}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x6, &(0x7f0000002d40)=""/225, 0xe1}, 0x8}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000002e40)=""/187, 0xbb}, {&(0x7f0000002f00)=""/235, 0xeb}, {&(0x7f0000003000)=""/87, 0x57}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/24, 0x18}, {&(0x7f00000040c0)=""/57, 0x39}, {&(0x7f0000004100)=""/99, 0x63}, {&(0x7f0000004180)=""/179, 0xb3}, {&(0x7f0000004240)=""/91, 0x5b}], 0x9, &(0x7f0000004380)=""/203, 0xcb}, 0x7}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000004480)=""/140, 0x8c}, {&(0x7f0000004540)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006540)=""/211, 0xd3}, {&(0x7f0000006640)=""/24, 0x18}], 0x5, &(0x7f0000006700)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000007700)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007780)=""/4, 0x4}, {&(0x7f00000077c0)=""/97, 0x61}], 0x2, &(0x7f0000007880)=""/166, 0xa6}, 0x7}], 0x5, 0x2, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.245787646s ago: executing program 5 (id=4508): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x110, r0, 0x1b15a000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd14", 0x3}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0xfffffffd, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x2}, {0x3, 0x8, 0xc, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x6, 0x4, 0x5, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0x100, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0xfffffffd}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x4, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x3, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0xffffffc0, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0xa, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000500)="503b5a23449a65fa719de09d8534c20c20c62a139ceaef145c3109da292e3bbd5d8530914de8d5e2c654f2f08cdf56ce410687b15d74265995ed22cce37cfdf480dcf36e762cb28a4735f63eb0fe971cc385d349491f0bb5b7b5c806a2df3bd6a2565ae3f69c4011e93c31a36d848d5c2fb095734bfabd1d4c0c1d9b7ce88f10a155a333a22b626694905b459c347672ef1adb4fe02bb4774a105bbd6ad1ec414235433694ad1708c9", 0xa9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r10, 0x0, 0xfffe}, 0x38) 1.185523699s ago: executing program 5 (id=4510): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x4, 0x1, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_pts(r7, 0x141601) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r7, 0x540b, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0xc0, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xa1, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x9, @void, @val, @void, @void, @void, @val={0x5, 0x75, {0x3, 0xbb, 0x3, "b85d0c6052924ca34d709d6e57b588efc77bb9e80344b70c183372ac4cef8518fe6c1608804e31051dd559179840f35f13c868dbe82183145e088745363dcb6dcf216c7a1ab70a8d7df88acc45fd7dfb947d44df3aa6df16af3e189334f4ab6cfbdfde63d0047659745b83b39c1049c90caf"}}, @void, @void, @void, @void, @void, @void, @void}}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt(r9, 0x4, 0x1, &(0x7f0000000380)="0944b16ba0e71b603608f89bd056c5deb674c90fd1c9b5807464039f3d884a611d3c6ca12b2b9f5462ed2712f3a3e4541640f9798ee1453efd509d4c0f9ef5b5099247394f2bd16745db2de09a75a449fb65853f2c499ce9c170bde443437ac7d6b057db3de966bdf211a1eb787de6ddd041be6083dedeecfeec81fac91ca274896cd9779f57107628375859ad66477edfa91a5a8083a23e475f25f5520b80b0e4dcb2896652136b85538e968b4baa04ef60c0433d74b35d0887792142a892863a6415e8bd2665", 0xc7) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x2}, 0x18) fgetxattr(r3, &(0x7f0000000200)=@random={'btrfs.', 'wlan1\x00'}, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readahead(r6, 0x1, 0x8) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1400c000) 1.074158643s ago: executing program 5 (id=4515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.035783355s ago: executing program 0 (id=4517): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2c, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x80300) 1.010579637s ago: executing program 5 (id=4518): r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 997.912137ms ago: executing program 5 (id=4519): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = inotify_init() r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000008af8ff0800000000000000000000007b8af0ff00000000bfa10000000000000701000000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x50004, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/1, 0x1}, 0x2000003}], 0x2, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000440)=ANY=[@ANYRES64=r7], 0x69) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x4, 0x80, 0x4, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@minixdf}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(r10, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="a97100dfe19d699adce09cd65190c66ef22aa4a10714af90aac40ec33d2b2fd59a78b995c1654fbd7222dc27f6e13502b24d7568d4f55460157ac8d61d591e932c436acff02ddc04c0af783bd43320c750753a94b86efd352f35514c7d7a33d6fa8927d4226d84181bafd21bf5d7f52ee9a83028d52ff9f92a9eda20f9dc0a23c3b8c6e50f4cee94edf02c8d3ea34122ecf722b56ed58e73e3d7d7417bfd19972030bb4611", 0xa5}, {&(0x7f0000000180)="59dbf95cb345361f7c564ad62c7d4745c3e960da918a56e0faadcb27d49e1f5b67edf31b6599ed9aef8ed7b204ba14561805de90defcaf5b186acbf70d34b92b76b799014404deb4bf48795213a71c87da8e346308a1ffbc37d6319daa51aade9b64afce4b900933d061a5631b58c22ae9e320d9bdd259f9432967b1051b2bab76c6a6bfbad60e2d06398fabae289df1ffeb3b45716e6fe65137a3613be154efb99473145c96d9a22ea3eddf434967f9ecd50ada70", 0xb5}, {&(0x7f0000000f80)="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", 0xffe}, {&(0x7f0000000240)="1411d844e4814e22db860966d97a2b60e06185695fb619ac78b441560c11b5b08b73303f5be6122e5c", 0x29}, {&(0x7f0000000300)}], 0x5, &(0x7f00000003c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0x40, 0x1}}, @init={0x18, 0x84, 0x0, {0x7f, 0xd2, 0x282, 0x7f}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0x60, 0x8008001}, 0x400c0) 952.103059ms ago: executing program 4 (id=4520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c071}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 949.529019ms ago: executing program 3 (id=4521): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x110, r0, 0x1b15a000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd14", 0x3}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0xfffffffd, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x2}, {0x3, 0x8, 0xc, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x6, 0x4, 0x5, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0x100, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0xfffffffd}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x4, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x3, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0xffffffc0, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0xa, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000500)="503b5a23449a65fa719de09d8534c20c20c62a139ceaef145c3109da292e3bbd5d8530914de8d5e2c654f2f08cdf56ce410687b15d74265995ed22cce37cfdf480dcf36e762cb28a4735f63eb0fe971cc385d349491f0bb5b7b5c806a2df3bd6a2565ae3f69c4011e93c31a36d848d5c2fb095734bfabd1d4c0c1d9b7ce88f10a155a333a22b626694905b459c347672ef1adb4fe02bb4774a105bbd6ad1ec414235433694ad1708c9", 0xa9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r10, 0x0, 0xfffe}, 0x38) 865.732143ms ago: executing program 3 (id=4522): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) statx(r1, &(0x7f0000000080)='./file0\x00', 0x4000, 0x2, &(0x7f0000000140)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c20000000800450077d857eb01000017c10008907800"/42], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r5, 0x0, 0xffff}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 812.636775ms ago: executing program 4 (id=4523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x600) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r1}, 0x5a, 0x101, 0xda}) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs_stats\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, 0x33, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b80)={0xa10, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x328, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6ca3f72403306e5377a85d359707ffd6f3ba79b41046f19d63e842704a56aa7a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x248, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @loopback, 0xfff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xb, @loopback, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c266016ca1558f20582a4fb8d0eb0fdb3424bd3ddb43ac356277fbb925b387c9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x698, 0x8, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @remote, 0x8000}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @loopback, 0x100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8f9c75eec2b81e7a91d4cbf342390eb609b63c1011300cc45a00eb47c9d1135"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5fc10005a99db6c9b3f0a4da365bf48d27dd11ba61396b0c5b850c3be1af6267"}]}, {0x304, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c16c48fe2cc03b6c7eccf41727dacf2d5da02f14a6f188c0b61f1f7764989aa3"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @local, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3640}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xa10}, 0x1, 0x0, 0x0, 0x20000800}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) 811.820535ms ago: executing program 5 (id=4524): syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1e, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) socket(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400207900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000a00000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 765.920377ms ago: executing program 4 (id=4525): syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x4008800) 765.724447ms ago: executing program 4 (id=4526): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) eventfd2(0x1, 0x80000) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@chain) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 760.113927ms ago: executing program 1 (id=4527): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 759.710767ms ago: executing program 3 (id=4528): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18005c0003000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 529.251087ms ago: executing program 1 (id=4529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 481.540959ms ago: executing program 3 (id=4530): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81f, &(0x7f00000009c0)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_continue}, {@bsdgroups}, {@errors_continue}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 474.970019ms ago: executing program 1 (id=4531): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="aa"], 0x48) 364.473214ms ago: executing program 1 (id=4532): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x110, r0, 0x1b15a000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1e, 0x80}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd14", 0x3}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0xfffffffd, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x2}, {0x3, 0x8, 0xc, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x6, 0x4, 0x5, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0x100, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0xfffffffd}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x4, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x3, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0xffffffc0, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0xa, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000500)="503b5a23449a65fa719de09d8534c20c20c62a139ceaef145c3109da292e3bbd5d8530914de8d5e2c654f2f08cdf56ce410687b15d74265995ed22cce37cfdf480dcf36e762cb28a4735f63eb0fe971cc385d349491f0bb5b7b5c806a2df3bd6a2565ae3f69c4011e93c31a36d848d5c2fb095734bfabd1d4c0c1d9b7ce88f10a155a333a22b626694905b459c347672ef1adb4fe02bb4774a105bbd6ad1ec414235433694ad1708c9", 0xa9) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b5", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) unshare(0x2a020400) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r10, 0x0, 0xfffe}, 0x38) socket$nl_route(0x10, 0x3, 0x0) 347.497715ms ago: executing program 3 (id=4533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c071}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 306.229537ms ago: executing program 4 (id=4534): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 8) 302.694357ms ago: executing program 1 (id=4535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000300), 0xf, 0xc340) 280.364767ms ago: executing program 1 (id=4536): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") (async, rerun: 64) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (rerun: 64) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@private0, 0x0}, &(0x7f0000000480)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0xa2, 0x5e6, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x2, 0x3}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0xd0, 0x3, 0x10, @local, @mcast2, 0x80, 0x80, 0xffff8001, 0x800}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x194, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x9}, 0x4004000) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@remote, 0x0}, &(0x7f0000000140)=0x14) (async, rerun: 32) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @loopback}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x10, 0x7, 0x2, 0x2, {{0x40, 0x4, 0x1, 0x32, 0x100, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@noop, @lsrr={0x83, 0x23, 0xc5, [@multicast2, @local, @multicast2, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0xc, [{@broadcast}, {@local, 0x13}]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x1, 0x7, "dc0e4ca5b2"}, {0x0, 0xd, "81fee59895662b6e08bc02"}, {0x6, 0xc, "a8e643b412f24dda8f99"}, {0x7, 0x2}, {0x1, 0x4, "b87e"}, {0x0, 0x12, "8d101d92e4b2dc5b2179557d84efc067"}, {0x6, 0xc, "6cadec7a7bf68b51c5bb"}]}, @rr={0x7, 0x1b, 0x77, [@loopback, @broadcast, @local, @multicast1, @multicast2, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x8}, {@broadcast, 0x7}, {@private=0xa010100, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "119a1665528f8ecaf7"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x97, 0x7, 0x6, @local, @private1, 0x8000, 0x80, 0xbb3e, 0x8}}) (async, rerun: 64) getpeername$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0xdb, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000009c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x2b, 0x1, 0x0, 0xe63, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x8090, 0x1000}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001b40)={0x1cc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x10000090}, 0x240080c4) 69.883927ms ago: executing program 0 (id=4537): syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x4008800) 48.429497ms ago: executing program 3 (id=4538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_cancel(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) io_destroy(0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r2 = socket(0x1d, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff97b6d7628942543ebc0000000081000006414797f510bd5af95119f8feee16849e786d1a34a96358be1ebd2392d50c8a56024e15459efe54a85d5dd6d3ad48bd54f57b8df0513b818b7d3f926e7385f4a35930d91dc4fd175ad92b2fea84e32f282d3cdb9ae330bb666caecd3caec981d13121bdaec1f6855d75ec2bea6a47e495078734d3000000000000000000000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000280)={[{@journal_path={'journal_path', 0x3d, './file1'}}, {@user_xattr}, {@nodelalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@data_err_ignore}]}, 0x1, 0x507, &(0x7f0000000f40)="$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") utimes(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x6, 0x4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f0000000140)='N', 0x1}], 0x1, 0x5, 0xfac) 5.97632ms ago: executing program 0 (id=4539): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x3e) 0s ago: executing program 4 (id=4540): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): comm="syz.3.3865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f293f42f749 code=0x0 [ 184.692967][T14178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.705425][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 184.714650][ T29] audit: type=1400 audit(1764695424.260:3360): avc: denied { write } for pid=2969 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45326 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.740815][T14178] bond2 (unregistering): Released all slaves [ 184.848783][T14264] binfmt_misc: register: failed to install interpreter file ./file2 [ 184.861309][ T29] audit: type=1326 audit(1764695424.460:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14265 comm="syz.5.3868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f590806f749 code=0x0 [ 184.984686][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.002623][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.028684][ T29] audit: type=1400 audit(1764695424.630:3362): avc: denied { read } for pid=14270 comm="syz.4.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.029904][T14275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14275 comm=syz.4.3870 [ 185.049373][T14273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.084555][ T29] audit: type=1326 audit(1764695424.690:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14277 comm="syz.1.3871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f936f9ff749 code=0x0 [ 185.450067][T14289] serio: Serial port ttyS3 [ 185.553748][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.564867][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.584650][T14300] bridge9: entered promiscuous mode [ 185.589915][T14300] bridge9: entered allmulticast mode [ 185.596467][T14300] team0: Port device bridge9 added [ 185.845553][T14320] FAULT_INJECTION: forcing a failure. [ 185.845553][T14320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.858778][T14320] CPU: 0 UID: 0 PID: 14320 Comm: syz.5.3882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.858816][T14320] Tainted: [W]=WARN [ 185.858825][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.858913][T14320] Call Trace: [ 185.858921][T14320] [ 185.858930][T14320] __dump_stack+0x1d/0x30 [ 185.859011][T14320] dump_stack_lvl+0xe8/0x140 [ 185.859043][T14320] dump_stack+0x15/0x1b [ 185.859066][T14320] should_fail_ex+0x265/0x280 [ 185.859133][T14320] should_fail+0xb/0x20 [ 185.859166][T14320] should_fail_usercopy+0x1a/0x20 [ 185.859253][T14320] strncpy_from_user+0x25/0x230 [ 185.859287][T14320] ? kmem_cache_alloc_noprof+0x242/0x480 [ 185.859305][T14320] ? getname_flags+0x80/0x3b0 [ 185.859325][T14320] getname_flags+0xae/0x3b0 [ 185.859361][T14320] user_path_at+0x28/0x130 [ 185.859392][T14320] __se_sys_mount+0x25b/0x2e0 [ 185.859420][T14320] ? fput+0x8f/0xc0 [ 185.859442][T14320] __x64_sys_mount+0x67/0x80 [ 185.859501][T14320] x64_sys_call+0x2cca/0x3000 [ 185.859578][T14320] do_syscall_64+0xd8/0x2a0 [ 185.859609][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.859629][T14320] RIP: 0033:0x7f590806f749 [ 185.859641][T14320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.859656][T14320] RSP: 002b:00007f5906ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.859726][T14320] RAX: ffffffffffffffda RBX: 00007f59082c5fa0 RCX: 00007f590806f749 [ 185.859737][T14320] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 185.859747][T14320] RBP: 00007f5906ad7090 R08: 0000200000000000 R09: 0000000000000000 [ 185.859757][T14320] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 185.859770][T14320] R13: 00007f59082c6038 R14: 00007f59082c5fa0 R15: 00007fff264ef918 [ 185.859856][T14320] [ 186.056660][T14270] syz.4.3870 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 186.067762][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.4.3870 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.067792][T14270] Tainted: [W]=WARN [ 186.067798][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.067811][T14270] Call Trace: [ 186.067817][T14270] [ 186.067825][T14270] __dump_stack+0x1d/0x30 [ 186.067849][T14270] dump_stack_lvl+0xe8/0x140 [ 186.067982][T14270] dump_stack+0x15/0x1b [ 186.068058][T14270] dump_header+0x81/0x220 [ 186.068144][T14270] oom_kill_process+0x342/0x400 [ 186.068175][T14270] out_of_memory+0x979/0xb80 [ 186.068222][T14270] try_charge_memcg+0x610/0xa10 [ 186.068271][T14270] charge_memcg+0x51/0xc0 [ 186.068412][T14270] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 186.068445][T14270] __read_swap_cache_async+0x17b/0x2d0 [ 186.068478][T14270] swap_cluster_readahead+0x262/0x3c0 [ 186.068524][T14270] swapin_readahead+0xde/0x800 [ 186.068553][T14270] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 186.068584][T14270] ? __rcu_read_unlock+0x34/0x70 [ 186.068669][T14270] ? __rcu_read_unlock+0x4f/0x70 [ 186.068708][T14270] ? swap_cache_get_folio+0x277/0x280 [ 186.068811][T14270] do_swap_page+0x2ae/0x2370 [ 186.068852][T14270] ? css_rstat_updated+0xb7/0x240 [ 186.068987][T14270] ? __pfx_default_wake_function+0x10/0x10 [ 186.069026][T14270] handle_mm_fault+0x9a5/0x2be0 [ 186.069090][T14270] do_user_addr_fault+0x630/0x1080 [ 186.069123][T14270] ? switch_fpu_return+0xe/0x20 [ 186.069160][T14270] exc_page_fault+0x62/0xa0 [ 186.069224][T14270] asm_exc_page_fault+0x26/0x30 [ 186.069250][T14270] RIP: 0033:0x7fdfb8feef94 [ 186.069269][T14270] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d 0d 8e 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 186.069327][T14270] RSP: 002b:00007ffdffdd0a30 EFLAGS: 00010282 [ 186.069340][T14270] RAX: ffffffff81edd247 RBX: 00007fdfb9e95720 RCX: 0000000000000008 [ 186.069354][T14270] RDX: ffffffff81f9f789 RSI: 0000000000000008 RDI: 00007fdfb9e95720 [ 186.069382][T14270] RBP: ffffffff81edd909 R08: 00007fdfb9366038 R09: 00007fdfb9352000 [ 186.069396][T14270] R10: 00007fdfb8b77008 R11: 000000000000000d R12: 000000000000000d [ 186.069410][T14270] R13: 0000000000000008 R14: ffffffff81edd247 R15: 0000000000000008 [ 186.069424][T14270] ? _copy_from_user+0x17/0xb0 [ 186.069447][T14270] ? __genradix_ptr+0x79/0x110 [ 186.069520][T14270] ? _copy_from_user+0x17/0xb0 [ 186.069613][T14270] ? should_fail_usercopy+0x9/0x20 [ 186.069641][T14270] [ 186.069692][T14270] memory: usage 307200kB, limit 307200kB, failcnt 440 [ 186.101808][T14322] team0: Device ip6gre0 is of different type [ 186.105867][T14270] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 186.176890][T14324] loop5: detected capacity change from 0 to 8192 [ 186.180159][T14270] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 186.180175][T14270] Memory cgroup stats for /syz4: [ 186.181470][T14270] cache 0 [ 186.274445][T14327] loop3: detected capacity change from 0 to 1024 [ 186.282172][T14270] rss 4096 [ 186.364008][T14270] shmem 0 [ 186.366927][T14270] mapped_file 0 [ 186.370369][T14270] dirty 0 [ 186.373330][T14270] writeback 0 [ 186.376596][T14270] workingset_refault_anon 49 [ 186.381167][T14270] workingset_refault_file 417 [ 186.385841][T14270] swap 204800 [ 186.389111][T14270] swapcached 8192 [ 186.392773][T14270] pgpgin 144600 [ 186.396219][T14270] pgpgout 144594 [ 186.399764][T14270] pgfault 172978 [ 186.403307][T14270] pgmajfault 40 [ 186.406748][T14270] inactive_anon 8192 [ 186.410628][T14270] active_anon 0 [ 186.414115][T14270] inactive_file 16384 [ 186.418096][T14270] active_file 0 [ 186.421565][T14270] unevictable 0 [ 186.425027][T14270] hierarchical_memory_limit 314572800 [ 186.430386][T14270] hierarchical_memsw_limit 9223372036854771712 [ 186.436614][T14270] total_cache 0 [ 186.440118][T14270] total_rss 4096 [ 186.443658][T14270] total_shmem 0 [ 186.447097][T14270] total_mapped_file 0 [ 186.451057][T14270] total_dirty 0 [ 186.454589][T14270] total_writeback 0 [ 186.458398][T14270] total_workingset_refault_anon 49 [ 186.463511][T14270] total_workingset_refault_file 417 [ 186.468739][T14270] total_swap 204800 [ 186.472625][T14270] total_swapcached 8192 [ 186.476764][T14270] total_pgpgin 144600 [ 186.480724][T14270] total_pgpgout 144594 [ 186.484866][T14270] total_pgfault 172978 [ 186.488917][T14270] total_pgmajfault 40 [ 186.492961][T14270] total_inactive_anon 8192 [ 186.497360][T14270] total_active_anon 0 [ 186.501394][T14270] total_inactive_file 16384 [ 186.505920][T14270] total_active_file 0 [ 186.509891][T14270] total_unevictable 0 [ 186.513888][T14270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3870,pid=14270,uid=0 [ 186.513991][T14327] bridge8: entered promiscuous mode [ 186.514008][T14327] bridge8: entered allmulticast mode [ 186.515712][T14327] team0: Port device bridge8 added [ 186.528622][T14270] Memory cgroup out of memory: Killed process 14270 (syz.4.3870) total-vm:96148kB, anon-rss:1264kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 186.547706][T14335] binfmt_misc: register: failed to install interpreter file ./file2 [ 186.595178][T14339] loop3: detected capacity change from 0 to 512 [ 186.602432][T14339] EXT4-fs: old and new quota format mixing [ 186.608471][T14324] loop5: p1 < > p2 < > p3 p4 < > [ 186.612040][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 186.613654][T14324] loop5: partition table partially beyond EOD, truncated [ 186.631750][T14324] loop5: p1 start 67108864 is beyond EOD, truncated [ 186.638402][T14324] loop5: p2 start 4278190080 is beyond EOD, truncated [ 186.645253][T14324] loop5: p3 start 100859904 is beyond EOD, truncated [ 186.655024][T14342] 9pnet: Unknown protocol version 9p20\++} [ 186.707307][T14356] bridge11: entered promiscuous mode [ 186.712749][T14356] bridge11: entered allmulticast mode [ 186.723116][T14356] team0: Port device bridge11 added [ 186.735956][T14362] loop5: detected capacity change from 0 to 512 [ 186.743035][T14362] EXT4-fs: old and new quota format mixing [ 186.782581][T14370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.790993][T14370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.810376][T14376] team0: Device ip6gre0 is of different type [ 186.961354][ T29] audit: type=1326 audit(1764695426.560:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f42f749 code=0x7ffc0000 [ 186.986409][ T29] audit: type=1326 audit(1764695426.560:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f42f749 code=0x7ffc0000 [ 187.009904][ T29] audit: type=1326 audit(1764695426.590:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f293f42f749 code=0x7ffc0000 [ 187.033416][ T29] audit: type=1326 audit(1764695426.590:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f42f749 code=0x7ffc0000 [ 187.056928][ T29] audit: type=1326 audit(1764695426.590:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14390 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f42f749 code=0x7ffc0000 [ 187.167221][T14405] loop3: detected capacity change from 0 to 512 [ 187.187263][T14405] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.230319][T14405] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3905: Failed to acquire dquot type 0 [ 187.323716][T14415] team0: Device ip6gre0 is of different type [ 187.843997][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3914'. [ 187.867767][T14439] FAULT_INJECTION: forcing a failure. [ 187.867767][T14439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.880892][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.3.3916 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.880998][T14439] Tainted: [W]=WARN [ 187.881003][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.881061][T14439] Call Trace: [ 187.881066][T14439] [ 187.881072][T14439] __dump_stack+0x1d/0x30 [ 187.881089][T14439] dump_stack_lvl+0xe8/0x140 [ 187.881104][T14439] dump_stack+0x15/0x1b [ 187.881117][T14439] should_fail_ex+0x265/0x280 [ 187.881172][T14439] should_fail+0xb/0x20 [ 187.881191][T14439] should_fail_usercopy+0x1a/0x20 [ 187.881213][T14439] _copy_from_user+0x1c/0xb0 [ 187.881252][T14439] dev_ethtool+0x52/0x1670 [ 187.881267][T14439] ? full_name_hash+0x92/0xe0 [ 187.881346][T14439] ? strcmp+0x22/0x50 [ 187.881367][T14439] dev_ioctl+0x2e0/0x960 [ 187.881382][T14439] sock_do_ioctl+0x197/0x220 [ 187.881407][T14439] sock_ioctl+0x41b/0x610 [ 187.881483][T14439] ? __pfx_sock_ioctl+0x10/0x10 [ 187.881505][T14439] __se_sys_ioctl+0xce/0x140 [ 187.881533][T14439] __x64_sys_ioctl+0x43/0x50 [ 187.881614][T14439] x64_sys_call+0x14b0/0x3000 [ 187.881630][T14439] do_syscall_64+0xd8/0x2a0 [ 187.881653][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.881721][T14439] RIP: 0033:0x7f293f42f749 [ 187.881733][T14439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.881751][T14439] RSP: 002b:00007f293de97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.881771][T14439] RAX: ffffffffffffffda RBX: 00007f293f685fa0 RCX: 00007f293f42f749 [ 187.881785][T14439] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 187.881841][T14439] RBP: 00007f293de97090 R08: 0000000000000000 R09: 0000000000000000 [ 187.881851][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.881860][T14439] R13: 00007f293f686038 R14: 00007f293f685fa0 R15: 00007ffe6a6aea88 [ 187.881876][T14439] [ 188.155220][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.164147][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.219432][T14460] tipc: Enabled bearer , priority 0 [ 188.229082][T14460] syzkaller0: entered promiscuous mode [ 188.234667][T14460] syzkaller0: entered allmulticast mode [ 188.253409][T14460] tipc: Resetting bearer [ 188.254036][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.267665][T14458] tipc: Resetting bearer [ 188.269235][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.281812][T14458] tipc: Disabling bearer [ 188.339107][T14468] syzkaller1: entered promiscuous mode [ 188.344681][T14468] syzkaller1: entered allmulticast mode [ 188.405909][T14479] loop4: detected capacity change from 0 to 512 [ 188.412792][T14479] EXT4-fs: old and new quota format mixing [ 188.437798][T14484] team0: Device ip6gre0 is of different type [ 188.648506][T14491] loop5: detected capacity change from 0 to 512 [ 188.656140][T14491] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.670028][T14489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3929'. [ 188.694875][T14491] EXT4-fs (loop5): 1 truncate cleaned up [ 189.133702][T14517] loop5: detected capacity change from 0 to 512 [ 189.140508][T14517] EXT4-fs: old and new quota format mixing [ 189.163438][T14522] FAULT_INJECTION: forcing a failure. [ 189.163438][T14522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.176643][T14522] CPU: 0 UID: 0 PID: 14522 Comm: syz.5.3937 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.176672][T14522] Tainted: [W]=WARN [ 189.176678][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.176688][T14522] Call Trace: [ 189.176695][T14522] [ 189.176702][T14522] __dump_stack+0x1d/0x30 [ 189.176782][T14522] dump_stack_lvl+0xe8/0x140 [ 189.176802][T14522] dump_stack+0x15/0x1b [ 189.176817][T14522] should_fail_ex+0x265/0x280 [ 189.176874][T14522] should_fail+0xb/0x20 [ 189.176956][T14522] should_fail_usercopy+0x1a/0x20 [ 189.176987][T14522] _copy_to_user+0x20/0xa0 [ 189.177011][T14522] simple_read_from_buffer+0xb5/0x130 [ 189.177104][T14522] proc_fail_nth_read+0x10e/0x150 [ 189.177126][T14522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.177164][T14522] vfs_read+0x1a8/0x770 [ 189.177229][T14522] ? __rcu_read_unlock+0x4f/0x70 [ 189.177331][T14522] ? __fget_files+0x184/0x1c0 [ 189.177348][T14522] ? mutex_lock+0x58/0x90 [ 189.177367][T14522] ksys_read+0xda/0x1a0 [ 189.177388][T14522] __x64_sys_read+0x40/0x50 [ 189.177416][T14522] x64_sys_call+0x2889/0x3000 [ 189.177449][T14522] do_syscall_64+0xd8/0x2a0 [ 189.177482][T14522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.177500][T14522] RIP: 0033:0x7f590806e15c [ 189.177513][T14522] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.177609][T14522] RSP: 002b:00007f5906ad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.177629][T14522] RAX: ffffffffffffffda RBX: 00007f59082c5fa0 RCX: 00007f590806e15c [ 189.177643][T14522] RDX: 000000000000000f RSI: 00007f5906ad70a0 RDI: 0000000000000004 [ 189.177658][T14522] RBP: 00007f5906ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.177708][T14522] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 189.177718][T14522] R13: 00007f59082c6038 R14: 00007f59082c5fa0 R15: 00007fff264ef918 [ 189.177747][T14522] [ 189.650720][T14534] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3942'. [ 189.660057][T14534] netlink: zone id is out of range [ 189.665191][T14534] netlink: zone id is out of range [ 189.670426][T14534] netlink: zone id is out of range [ 189.675758][T14534] netlink: zone id is out of range [ 189.680998][T14534] netlink: zone id is out of range [ 189.694609][T14534] netlink: set zone limit has 8 unknown bytes [ 189.718301][T14541] team0: Device ip6gre0 is of different type [ 189.947835][T14551] loop4: detected capacity change from 0 to 512 [ 189.954824][T14551] EXT4-fs: old and new quota format mixing [ 190.034839][T14557] loop4: detected capacity change from 0 to 512 [ 190.054262][T14557] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.067864][T14557] __quota_error: 19 callbacks suppressed [ 190.067947][T14557] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 190.083905][T14557] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 190.094033][T14557] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3948: Failed to acquire dquot type 0 [ 190.230386][T14564] loop4: detected capacity change from 0 to 512 [ 190.242516][T14564] EXT4-fs (loop4): too many log groups per flexible block group [ 190.250688][T14564] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 190.257760][T14564] EXT4-fs (loop4): mount failed [ 190.283871][ T29] audit: type=1400 audit(1764695429.890:3386): avc: denied { connect } for pid=14572 comm="syz.5.3951" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.304618][ T29] audit: type=1400 audit(1764695429.890:3387): avc: denied { write } for pid=14572 comm="syz.5.3951" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.454415][T14581] x_tables: unsorted entry at hook 1 [ 190.463911][T14583] x_tables: unsorted entry at hook 1 [ 190.475743][ T29] audit: type=1400 audit(1764695430.080:3388): avc: denied { connect } for pid=14572 comm="syz.5.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.476222][T14573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3951'. [ 190.504681][T14573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.512364][T14573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.594730][ T29] audit: type=1400 audit(1764695430.200:3389): avc: denied { watch watch_reads } for pid=14589 comm="syz.1.3957" path="/236" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.612389][T14593] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 190.651179][ T29] audit: type=1326 audit(1764695430.250:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14599 comm="syz.5.3960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f590806f749 code=0x0 [ 190.680093][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.689039][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.698970][ T29] audit: type=1400 audit(1764695430.300:3391): avc: denied { bind } for pid=14601 comm="syz.0.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.719077][ T29] audit: type=1400 audit(1764695430.330:3392): avc: denied { listen } for pid=14601 comm="syz.0.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.264773][T14623] bridge10: entered promiscuous mode [ 191.270175][T14623] bridge10: entered allmulticast mode [ 191.276800][T14623] team0: Port device bridge10 added [ 191.460878][T14642] tipc: Enabled bearer , priority 0 [ 191.471332][T14642] syzkaller0: entered promiscuous mode [ 191.476896][T14642] syzkaller0: entered allmulticast mode [ 191.482947][ T29] audit: type=1400 audit(1764695431.070:3393): avc: denied { getopt } for pid=14646 comm="syz.0.3973" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.513076][T14642] tipc: Resetting bearer [ 191.524098][T14641] tipc: Resetting bearer [ 191.549171][T14641] tipc: Disabling bearer [ 191.604303][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.613236][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.672063][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.680795][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.813982][T14686] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.844552][T14689] team0: Device ip6gre0 is of different type [ 192.040622][T14697] loop4: detected capacity change from 0 to 1024 [ 192.092209][T14697] EXT4-fs mount: 40 callbacks suppressed [ 192.092230][T14697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.144193][T14697] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.197888][ T1035] Process accounting resumed [ 192.203643][ T1710] EXT4-fs error (device loop4): ext4_map_blocks:813: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.238585][ T1710] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 192.250989][ T1710] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.250989][ T1710] [ 192.262095][T14697] EXT4-fs (loop4): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 192.285541][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.393853][T14713] loop4: detected capacity change from 0 to 128 [ 192.402047][T14713] FAULT_INJECTION: forcing a failure. [ 192.402047][T14713] name failslab, interval 1, probability 0, space 0, times 0 [ 192.414736][T14713] CPU: 0 UID: 0 PID: 14713 Comm: syz.4.3991 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.414799][T14713] Tainted: [W]=WARN [ 192.414806][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.414820][T14713] Call Trace: [ 192.414827][T14713] [ 192.414835][T14713] __dump_stack+0x1d/0x30 [ 192.414857][T14713] dump_stack_lvl+0xe8/0x140 [ 192.414873][T14713] dump_stack+0x15/0x1b [ 192.414956][T14713] should_fail_ex+0x265/0x280 [ 192.414986][T14713] should_failslab+0x8c/0xb0 [ 192.415003][T14713] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 192.415021][T14713] ? __d_alloc+0x37/0x340 [ 192.415058][T14713] __d_alloc+0x37/0x340 [ 192.415124][T14713] d_alloc_parallel+0x58/0xc70 [ 192.415152][T14713] ? __d_lookup_rcu_op_compare+0x23b/0x270 [ 192.415253][T14713] ? security_inode_permission+0x4a/0xb0 [ 192.415275][T14713] ? lockref_get_not_dead+0x120/0x1c0 [ 192.415298][T14713] ? __rcu_read_unlock+0x4f/0x70 [ 192.415383][T14713] __lookup_slow+0x8c/0x250 [ 192.415410][T14713] lookup_slow+0x3c/0x60 [ 192.415439][T14713] path_lookupat+0x2f7/0x500 [ 192.415486][T14713] filename_lookup+0x147/0x340 [ 192.415519][T14713] user_path_at+0x3e/0x130 [ 192.415618][T14713] do_sys_truncate+0x5c/0x130 [ 192.415639][T14713] __x64_sys_truncate+0x31/0x40 [ 192.415660][T14713] x64_sys_call+0x1864/0x3000 [ 192.415685][T14713] do_syscall_64+0xd8/0x2a0 [ 192.415796][T14713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.415819][T14713] RIP: 0033:0x7fdfb910f749 [ 192.415834][T14713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.415850][T14713] RSP: 002b:00007fdfb7b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 192.415902][T14713] RAX: ffffffffffffffda RBX: 00007fdfb9365fa0 RCX: 00007fdfb910f749 [ 192.415913][T14713] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000200000000080 [ 192.415924][T14713] RBP: 00007fdfb7b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.415937][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.415975][T14713] R13: 00007fdfb9366038 R14: 00007fdfb9365fa0 R15: 00007ffdffdd09a8 [ 192.415991][T14713] [ 192.718150][T14733] netlink: 'syz.3.3998': attribute type 13 has an invalid length. [ 192.762806][T14730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 192.769346][T14730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.776856][T14730] vhci_hcd vhci_hcd.0: Device attached [ 192.782124][T14733] random: crng reseeded on system resumption [ 192.792889][T14739] vhci_hcd: connection closed [ 192.792998][ T3599] vhci_hcd: stop threads [ 192.796892][T14733] loop3: detected capacity change from 0 to 512 [ 192.797691][ T3599] vhci_hcd: release socket [ 192.812628][ T3599] vhci_hcd: disconnect device [ 192.823527][T14733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.836167][T14733] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.847497][T14733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.925010][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 193.065315][T14778] loop3: detected capacity change from 0 to 128 [ 193.073553][T14778] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 193.081373][T14778] FAT-fs (loop3): Filesystem has been set read-only [ 193.261572][T14798] loop3: detected capacity change from 0 to 512 [ 193.280013][T14798] EXT4-fs: old and new quota format mixing [ 193.290039][T14803] loop4: detected capacity change from 0 to 512 [ 193.298186][T14803] EXT4-fs: old and new quota format mixing [ 193.391335][T14820] netlink: 'syz.1.4013': attribute type 13 has an invalid length. [ 193.475044][T14820] random: crng reseeded on system resumption [ 193.685921][T14831] syzkaller1: entered promiscuous mode [ 193.691495][T14831] syzkaller1: entered allmulticast mode [ 193.699041][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4015'. [ 194.181159][T14855] loop3: detected capacity change from 0 to 512 [ 194.198973][T14855] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.214998][T14855] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 194.235542][T14870] team0: Device ip6gre0 is of different type [ 194.242288][T14855] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 248: padding at end of block bitmap is not set [ 194.261512][T14855] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm wg1: Failed to acquire dquot type 1 [ 194.282125][T14855] EXT4-fs (loop3): 1 truncate cleaned up [ 194.289129][T14855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 194.290095][T14872] bridge12: entered promiscuous mode [ 194.307004][T14872] bridge12: entered allmulticast mode [ 194.315199][T14872] team0: Port device bridge12 added [ 194.333236][T11461] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 194.404894][T14887] loop3: detected capacity change from 0 to 8192 [ 194.414608][T14887] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.425826][T14887] FAULT_INJECTION: forcing a failure. [ 194.425826][T14887] name failslab, interval 1, probability 0, space 0, times 0 [ 194.427278][T14896] loop4: detected capacity change from 0 to 1024 [ 194.438465][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.3.4029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.438500][T14887] Tainted: [W]=WARN [ 194.438508][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.438524][T14887] Call Trace: [ 194.438532][T14887] [ 194.438541][T14887] __dump_stack+0x1d/0x30 [ 194.438580][T14887] dump_stack_lvl+0xe8/0x140 [ 194.438609][T14887] dump_stack+0x15/0x1b [ 194.438635][T14887] should_fail_ex+0x265/0x280 [ 194.438696][T14887] should_failslab+0x8c/0xb0 [ 194.438765][T14887] __kmalloc_noprof+0xa5/0x570 [ 194.438796][T14887] ? alloc_pipe_info+0x1c9/0x340 [ 194.438867][T14887] alloc_pipe_info+0x1c9/0x340 [ 194.438894][T14887] splice_direct_to_actor+0x592/0x680 [ 194.438941][T14887] ? kstrtouint_from_user+0x9f/0xf0 [ 194.438983][T14887] ? __pfx_direct_splice_actor+0x10/0x10 [ 194.439093][T14887] ? __rcu_read_unlock+0x4f/0x70 [ 194.439136][T14887] ? get_pid_task+0x96/0xd0 [ 194.439179][T14887] ? avc_policy_seqno+0x15/0x30 [ 194.439269][T14887] ? selinux_file_permission+0x1e4/0x320 [ 194.439304][T14887] do_splice_direct+0xda/0x150 [ 194.439354][T14887] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 194.439466][T14887] do_sendfile+0x380/0x650 [ 194.439535][T14887] __x64_sys_sendfile64+0x105/0x150 [ 194.439567][T14887] x64_sys_call+0x2db1/0x3000 [ 194.439636][T14887] do_syscall_64+0xd8/0x2a0 [ 194.439673][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.439700][T14887] RIP: 0033:0x7f293f42f749 [ 194.439719][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.439741][T14887] RSP: 002b:00007f293de97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 194.439828][T14887] RAX: ffffffffffffffda RBX: 00007f293f685fa0 RCX: 00007f293f42f749 [ 194.439845][T14887] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 194.439859][T14887] RBP: 00007f293de97090 R08: 0000000000000000 R09: 0000000000000000 [ 194.439875][T14887] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 194.439890][T14887] R13: 00007f293f686038 R14: 00007f293f685fa0 R15: 00007ffe6a6aea88 [ 194.439915][T14887] [ 194.676240][T14896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.700148][T14896] bridge7: entered promiscuous mode [ 194.705530][T14896] bridge7: entered allmulticast mode [ 194.712795][T14896] team0: Port device bridge7 added [ 194.724926][T14906] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4035'. [ 194.756289][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 194.800388][T14908] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4036'. [ 194.816564][T14910] bridge16: entered promiscuous mode [ 194.821904][T14910] bridge16: entered allmulticast mode [ 194.828922][T14910] team0: Port device bridge16 added [ 194.852414][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.885697][T14923] FAULT_INJECTION: forcing a failure. [ 194.885697][T14923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.898873][T14923] CPU: 1 UID: 0 PID: 14923 Comm: syz.1.4042 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.898904][T14923] Tainted: [W]=WARN [ 194.898910][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.898925][T14923] Call Trace: [ 194.898931][T14923] [ 194.898939][T14923] __dump_stack+0x1d/0x30 [ 194.898966][T14923] dump_stack_lvl+0xe8/0x140 [ 194.899067][T14923] dump_stack+0x15/0x1b [ 194.899088][T14923] should_fail_ex+0x265/0x280 [ 194.899121][T14923] should_fail+0xb/0x20 [ 194.899242][T14923] should_fail_usercopy+0x1a/0x20 [ 194.899350][T14923] strncpy_from_user+0x25/0x230 [ 194.899371][T14923] ? kmem_cache_alloc_noprof+0x242/0x480 [ 194.899411][T14923] ? getname_flags+0x80/0x3b0 [ 194.899504][T14923] getname_flags+0xae/0x3b0 [ 194.899527][T14923] do_sys_openat2+0x60/0x150 [ 194.899558][T14923] __x64_sys_openat+0xf2/0x120 [ 194.899604][T14923] x64_sys_call+0x2b07/0x3000 [ 194.899625][T14923] do_syscall_64+0xd8/0x2a0 [ 194.899657][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.899679][T14923] RIP: 0033:0x7f936f9ff749 [ 194.899770][T14923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.899784][T14923] RSP: 002b:00007f936e45f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.899804][T14923] RAX: ffffffffffffffda RBX: 00007f936fc55fa0 RCX: 00007f936f9ff749 [ 194.899818][T14923] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 194.899831][T14923] RBP: 00007f936e45f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.899851][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.899876][T14923] R13: 00007f936fc56038 R14: 00007f936fc55fa0 R15: 00007ffeb823d848 [ 194.899893][T14923] [ 195.107193][T14937] syzkaller1: entered promiscuous mode [ 195.112785][T14937] syzkaller1: entered allmulticast mode [ 195.232313][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.240972][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.306700][T14957] loop4: detected capacity change from 0 to 1024 [ 195.322296][T14957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.336688][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 195.336703][ T29] audit: type=1326 audit(1764695434.940:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.341012][T14957] bridge8: entered promiscuous mode [ 195.342867][ T29] audit: type=1326 audit(1764695434.940:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.366427][T14957] bridge8: entered allmulticast mode [ 195.371584][ T29] audit: type=1326 audit(1764695434.940:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.403102][T14957] team0: Port device bridge8 added [ 195.423883][ T29] audit: type=1326 audit(1764695434.940:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.459870][ T29] audit: type=1326 audit(1764695434.940:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.483356][ T29] audit: type=1326 audit(1764695434.940:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.506865][ T29] audit: type=1326 audit(1764695434.940:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.530262][ T29] audit: type=1326 audit(1764695434.940:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.553859][ T29] audit: type=1326 audit(1764695434.940:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.577289][ T29] audit: type=1326 audit(1764695435.030:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14956 comm="syz.4.4051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb910f749 code=0x7ffc0000 [ 195.692382][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.773806][T14988] loop4: detected capacity change from 0 to 512 [ 195.782059][T14988] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.789071][T14988] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4062: error while reading EA inode 32 err=-116 [ 195.801859][T14988] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.815021][T14988] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4062: error while reading EA inode 32 err=-116 [ 195.827806][T14988] EXT4-fs (loop4): 1 orphan inode deleted [ 195.835942][T14988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.848570][T14988] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.874886][T15001] team0: Device ip6gre0 is of different type [ 195.905310][T15003] loop4: detected capacity change from 0 to 1024 [ 195.915744][T15003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.934147][T15003] bridge9: entered promiscuous mode [ 195.939372][T15003] bridge9: entered allmulticast mode [ 195.945910][T15003] team0: Port device bridge9 added [ 195.959182][T15015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4070'. [ 196.012117][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.043799][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4071'. [ 196.054222][T15026] bridge9: entered promiscuous mode [ 196.059430][T15026] bridge9: entered allmulticast mode [ 196.066451][T15026] team0: Port device bridge9 added [ 196.135801][T15033] loop4: detected capacity change from 0 to 8192 [ 196.143147][T15033] vfat: Unknown parameter '184467440737095516150xffffffffffffffff' [ 196.339413][T15053] tipc: Enabled bearer , priority 0 [ 196.346350][T15053] syzkaller0: entered promiscuous mode [ 196.351852][T15053] syzkaller0: entered allmulticast mode [ 196.363283][T15052] tipc: Resetting bearer [ 196.386174][T15052] tipc: Disabling bearer [ 196.415237][T15062] team0: Device ip6gre0 is of different type [ 196.496188][T15066] bridge13: entered promiscuous mode [ 196.501608][T15066] bridge13: entered allmulticast mode [ 196.508149][T15066] team0: Port device bridge13 added [ 196.611183][T15074] FAULT_INJECTION: forcing a failure. [ 196.611183][T15074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.624463][T15074] CPU: 1 UID: 0 PID: 15074 Comm: syz.1.4083 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.624552][T15074] Tainted: [W]=WARN [ 196.624557][T15074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.624567][T15074] Call Trace: [ 196.624572][T15074] [ 196.624595][T15074] __dump_stack+0x1d/0x30 [ 196.624613][T15074] dump_stack_lvl+0xe8/0x140 [ 196.624649][T15074] dump_stack+0x15/0x1b [ 196.624669][T15074] should_fail_ex+0x265/0x280 [ 196.624733][T15074] should_fail+0xb/0x20 [ 196.624893][T15074] should_fail_usercopy+0x1a/0x20 [ 196.624920][T15074] _copy_to_user+0x20/0xa0 [ 196.624945][T15074] simple_read_from_buffer+0xb5/0x130 [ 196.625035][T15074] proc_fail_nth_read+0x10e/0x150 [ 196.625109][T15074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.625136][T15074] vfs_read+0x1a8/0x770 [ 196.625182][T15074] ? __rcu_read_unlock+0x4f/0x70 [ 196.625383][T15074] ? __fget_files+0x184/0x1c0 [ 196.625402][T15074] ? mutex_lock+0x58/0x90 [ 196.625459][T15074] ksys_read+0xda/0x1a0 [ 196.625527][T15074] __x64_sys_read+0x40/0x50 [ 196.625542][T15074] x64_sys_call+0x2889/0x3000 [ 196.625561][T15074] do_syscall_64+0xd8/0x2a0 [ 196.625647][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.625664][T15074] RIP: 0033:0x7f936f9fe15c [ 196.625677][T15074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.625707][T15074] RSP: 002b:00007f936e45f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.625722][T15074] RAX: ffffffffffffffda RBX: 00007f936fc55fa0 RCX: 00007f936f9fe15c [ 196.625732][T15074] RDX: 000000000000000f RSI: 00007f936e45f0a0 RDI: 0000000000000006 [ 196.625742][T15074] RBP: 00007f936e45f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.625770][T15074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.625854][T15074] R13: 00007f936fc56038 R14: 00007f936fc55fa0 R15: 00007ffeb823d848 [ 196.625873][T15074] [ 196.847587][T15079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4084'. [ 196.967655][T15100] tipc: Started in network mode [ 196.972599][T15100] tipc: Node identity 5eb48f625ba5, cluster identity 4711 [ 196.979789][T15100] tipc: Enabled bearer , priority 0 [ 196.991814][T15100] syzkaller0: entered promiscuous mode [ 196.997397][T15100] syzkaller0: entered allmulticast mode [ 197.018756][T15099] tipc: Resetting bearer [ 197.033876][T15099] tipc: Disabling bearer [ 197.148728][T15132] bridge10: entered promiscuous mode [ 197.154113][T15132] bridge10: entered allmulticast mode [ 197.160718][T15132] team0: Port device bridge10 added [ 197.177503][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4102'. [ 197.196556][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 197.300876][T15158] FAULT_INJECTION: forcing a failure. [ 197.300876][T15158] name failslab, interval 1, probability 0, space 0, times 0 [ 197.313672][T15158] CPU: 1 UID: 0 PID: 15158 Comm: gtp Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.313697][T15158] Tainted: [W]=WARN [ 197.313703][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.313720][T15158] Call Trace: [ 197.313725][T15158] [ 197.313731][T15158] __dump_stack+0x1d/0x30 [ 197.313748][T15158] dump_stack_lvl+0xe8/0x140 [ 197.313764][T15158] dump_stack+0x15/0x1b [ 197.313777][T15158] should_fail_ex+0x265/0x280 [ 197.313879][T15158] should_failslab+0x8c/0xb0 [ 197.313895][T15158] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 197.313913][T15158] ? __get_vm_area_node+0x106/0x1d0 [ 197.314041][T15158] __get_vm_area_node+0x106/0x1d0 [ 197.314219][T15158] __vmalloc_node_range_noprof+0x28c/0xed0 [ 197.314256][T15158] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 197.314283][T15158] ? cred_has_capability+0x210/0x280 [ 197.314360][T15158] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 197.314380][T15158] __vmalloc_noprof+0x83/0xc0 [ 197.314459][T15158] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 197.314478][T15158] bpf_prog_alloc_no_stats+0x47/0x390 [ 197.314496][T15158] ? bpf_prog_alloc+0x2a/0x150 [ 197.314515][T15158] bpf_prog_alloc+0x3c/0x150 [ 197.314626][T15158] bpf_prog_load+0x506/0x1100 [ 197.314666][T15158] ? security_bpf+0x2b/0x90 [ 197.314685][T15158] __sys_bpf+0x469/0x7c0 [ 197.314774][T15158] __x64_sys_bpf+0x41/0x50 [ 197.314791][T15158] x64_sys_call+0x28e1/0x3000 [ 197.314814][T15158] do_syscall_64+0xd8/0x2a0 [ 197.314860][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.314877][T15158] RIP: 0033:0x7ffb26a4f749 [ 197.314888][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.314963][T15158] RSP: 002b:00007ffb254af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.314977][T15158] RAX: ffffffffffffffda RBX: 00007ffb26ca5fa0 RCX: 00007ffb26a4f749 [ 197.314987][T15158] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 197.314997][T15158] RBP: 00007ffb254af090 R08: 0000000000000000 R09: 0000000000000000 [ 197.315006][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.315071][T15158] R13: 00007ffb26ca6038 R14: 00007ffb26ca5fa0 R15: 00007ffddc025978 [ 197.315086][T15158] [ 197.315092][T15158] gtp: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 197.555280][T15158] CPU: 1 UID: 0 PID: 15158 Comm: gtp Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.555305][T15158] Tainted: [W]=WARN [ 197.555311][T15158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.555326][T15158] Call Trace: [ 197.555334][T15158] [ 197.555344][T15158] __dump_stack+0x1d/0x30 [ 197.555443][T15158] dump_stack_lvl+0xe8/0x140 [ 197.555529][T15158] dump_stack+0x15/0x1b [ 197.555542][T15158] warn_alloc+0x12b/0x1a0 [ 197.555577][T15158] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 197.555674][T15158] ? cred_has_capability+0x210/0x280 [ 197.555695][T15158] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 197.555716][T15158] __vmalloc_noprof+0x83/0xc0 [ 197.555763][T15158] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 197.555783][T15158] bpf_prog_alloc_no_stats+0x47/0x390 [ 197.555869][T15158] ? bpf_prog_alloc+0x2a/0x150 [ 197.555888][T15158] bpf_prog_alloc+0x3c/0x150 [ 197.555933][T15158] bpf_prog_load+0x506/0x1100 [ 197.555960][T15158] ? security_bpf+0x2b/0x90 [ 197.556042][T15158] __sys_bpf+0x469/0x7c0 [ 197.556067][T15158] __x64_sys_bpf+0x41/0x50 [ 197.556154][T15158] x64_sys_call+0x28e1/0x3000 [ 197.556172][T15158] do_syscall_64+0xd8/0x2a0 [ 197.556259][T15158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.556276][T15158] RIP: 0033:0x7ffb26a4f749 [ 197.556288][T15158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.556301][T15158] RSP: 002b:00007ffb254af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.556316][T15158] RAX: ffffffffffffffda RBX: 00007ffb26ca5fa0 RCX: 00007ffb26a4f749 [ 197.556326][T15158] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 197.556335][T15158] RBP: 00007ffb254af090 R08: 0000000000000000 R09: 0000000000000000 [ 197.556384][T15158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.556393][T15158] R13: 00007ffb26ca6038 R14: 00007ffb26ca5fa0 R15: 00007ffddc025978 [ 197.556456][T15158] [ 197.556462][T15158] Mem-Info: [ 197.757741][T15158] active_anon:5910 inactive_anon:0 isolated_anon:0 [ 197.757741][T15158] active_file:15389 inactive_file:2906 isolated_file:0 [ 197.757741][T15158] unevictable:0 dirty:586 writeback:0 [ 197.757741][T15158] slab_reclaimable:3609 slab_unreclaimable:204255 [ 197.757741][T15158] mapped:31799 shmem:1937 pagetables:1024 [ 197.757741][T15158] sec_pagetables:0 bounce:0 [ 197.757741][T15158] kernel_misc_reclaimable:0 [ 197.757741][T15158] free:1699559 free_pcp:8831 free_cma:0 [ 197.802799][T15158] Node 0 active_anon:23640kB inactive_anon:0kB active_file:61556kB inactive_file:11624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127196kB dirty:2344kB writeback:0kB shmem:7748kB kernel_stack:4176kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.830204][T15158] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.859874][T15158] lowmem_reserve[]: 0 2880 7859 7859 [ 197.865202][T15158] Node 0 DMA32 free:2946372kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949900kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 197.896343][T15158] lowmem_reserve[]: 0 0 4978 4978 [ 197.901522][T15158] Node 0 Normal free:3836504kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23640kB inactive_anon:0kB active_file:61556kB inactive_file:11624kB unevictable:0kB writepending:2344kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:31812kB local_pcp:15272kB free_cma:0kB [ 197.934741][T15158] lowmem_reserve[]: 0 0 0 0 [ 197.939296][T15158] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.952302][T15158] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 5*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2946372kB [ 197.968618][T15158] Node 0 Normal: 1460*4kB (UME) 1471*8kB (UM) 493*16kB (M) 442*32kB (UM) 472*64kB (UME) 387*128kB (UME) 430*256kB (UME) 333*512kB (UM) 280*1024kB (UME) 122*2048kB (UM) 708*4096kB (UM) = 3836504kB [ 197.988241][T15158] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 197.997606][T15158] 20213 total pagecache pages [ 198.002336][T15158] 1 pages in swap cache [ 198.006477][T15158] Free swap = 124988kB [ 198.010622][T15158] Total swap = 124996kB [ 198.014831][T15158] 2097051 pages RAM [ 198.018630][T15158] 0 pages HighMem/MovableOnly [ 198.023335][T15158] 81176 pages reserved [ 198.080178][T15171] tipc: Enabled bearer , priority 0 [ 198.090318][T15171] tipc: Resetting bearer [ 198.108888][T15170] tipc: Disabling bearer [ 198.180306][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.189393][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.280846][T15201] loop4: detected capacity change from 0 to 8192 [ 198.295937][T15206] bridge11: entered promiscuous mode [ 198.301377][T15206] bridge11: entered allmulticast mode [ 198.307996][T15206] team0: Port device bridge11 added [ 198.322039][T15201] loop4: p1 < > p2 < > p3 p4 < > [ 198.327134][T15201] loop4: partition table partially beyond EOD, truncated [ 198.343163][T15201] loop4: p1 start 67108864 is beyond EOD, truncated [ 198.349797][T15201] loop4: p2 start 4278190080 is beyond EOD, truncated [ 198.350910][T15213] loop3: detected capacity change from 0 to 128 [ 198.356726][T15201] loop4: p3 start 100859904 is beyond EOD, truncated [ 198.379190][T15213] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 198.494158][T15230] loop4: detected capacity change from 0 to 512 [ 198.556118][T15230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.570157][T15237] program syz.1.4125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.590855][T15237] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 198.607250][T15230] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.640999][T15230] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4127: Failed to acquire dquot type 0 [ 198.702607][T15242] tipc: Enabled bearer , priority 0 [ 198.718181][T15242] tipc: Resetting bearer [ 198.743579][T15241] tipc: Disabling bearer [ 198.920696][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.975790][T15266] bridge10: entered promiscuous mode [ 198.981132][T15266] bridge10: entered allmulticast mode [ 198.994444][T15262] loop5: detected capacity change from 0 to 512 [ 199.006374][T15266] team0: Port device bridge10 added [ 199.019848][T15262] EXT4-fs (loop5): orphan cleanup on readonly fs [ 199.057623][T15275] netlink: 'syz.1.4137': attribute type 13 has an invalid length. [ 199.067383][T15262] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4134: error while reading EA inode 32 err=-116 [ 199.101151][T15262] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4134: error while reading EA inode 32 err=-116 [ 199.114275][T15262] EXT4-fs (loop5): 1 orphan inode deleted [ 199.120557][T15262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.133449][T15262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.162162][T15282] team0: Device ip6gre0 is of different type [ 199.163010][T15275] random: crng reseeded on system resumption [ 199.224656][T15288] tipc: Enabled bearer , priority 0 [ 199.251070][T15288] tipc: Resetting bearer [ 199.274894][T15287] tipc: Disabling bearer [ 199.345642][T15311] loop3: detected capacity change from 0 to 512 [ 199.352723][T15311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.407526][T15311] EXT4-fs (loop3): 1 truncate cleaned up [ 199.414734][T15311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.452049][T11461] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.812581][T15337] netlink: 'syz.4.4152': attribute type 13 has an invalid length. [ 199.926540][T15341] FAULT_INJECTION: forcing a failure. [ 199.926540][T15341] name failslab, interval 1, probability 0, space 0, times 0 [ 199.939417][T15341] CPU: 1 UID: 0 PID: 15341 Comm: syz.4.4153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.939450][T15341] Tainted: [W]=WARN [ 199.939458][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.939470][T15341] Call Trace: [ 199.939476][T15341] [ 199.939482][T15341] __dump_stack+0x1d/0x30 [ 199.939551][T15341] dump_stack_lvl+0xe8/0x140 [ 199.939693][T15341] dump_stack+0x15/0x1b [ 199.939838][T15341] should_fail_ex+0x265/0x280 [ 199.939864][T15341] should_failslab+0x8c/0xb0 [ 199.939885][T15341] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 199.939908][T15341] ? sidtab_sid2str_get+0xa0/0x130 [ 199.939950][T15341] kmemdup_noprof+0x2b/0x70 [ 199.939967][T15341] sidtab_sid2str_get+0xa0/0x130 [ 199.940029][T15341] security_sid_to_context_core+0x1eb/0x2e0 [ 199.940053][T15341] security_sid_to_context+0x27/0x40 [ 199.940142][T15341] selinux_lsmprop_to_secctx+0x67/0xf0 [ 199.940166][T15341] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 199.940264][T15341] audit_log_subj_ctx+0xa4/0x3e0 [ 199.940353][T15341] ? skb_put+0xa9/0xf0 [ 199.940387][T15341] audit_log_task_context+0x48/0x70 [ 199.940419][T15341] audit_log_task+0xf4/0x250 [ 199.940441][T15341] ? kstrtouint+0x76/0xc0 [ 199.940545][T15341] audit_seccomp+0x61/0x100 [ 199.940570][T15341] ? __seccomp_filter+0x82d/0x1250 [ 199.940596][T15341] __seccomp_filter+0x83e/0x1250 [ 199.940613][T15341] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.940662][T15341] ? vfs_write+0x7e8/0x960 [ 199.940677][T15341] ? __cond_resched+0x4e/0x90 [ 199.940696][T15341] __secure_computing+0x82/0x150 [ 199.940711][T15341] syscall_trace_enter+0xcf/0x1e0 [ 199.940746][T15341] do_syscall_64+0xb2/0x2a0 [ 199.940789][T15341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.940808][T15341] RIP: 0033:0x7fdfb910df90 [ 199.940872][T15341] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 199.940891][T15341] RSP: 002b:00007fdfb7b6ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 199.940908][T15341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdfb910df90 [ 199.940918][T15341] RDX: 0000000000000000 RSI: 00007fdfb919407e RDI: 00000000ffffff9c [ 199.940928][T15341] RBP: 00007fdfb919407e R08: 0000000000000000 R09: 0000000000000000 [ 199.940938][T15341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 199.940948][T15341] R13: 00007fdfb9366038 R14: 00007fdfb9365fa0 R15: 00007ffdffdd09a8 [ 199.941035][T15341] [ 200.341648][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 200.341663][ T29] audit: type=1326 audit(1764695439.950:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15302 comm="syz.1.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.390859][T15345] gtp0: entered promiscuous mode [ 200.396035][T15345] gtp0: entered allmulticast mode [ 200.401068][T15345] team0: Device gtp0 is of different type [ 200.407448][ T29] audit: type=1326 audit(1764695439.980:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15302 comm="syz.1.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.441872][ T29] audit: type=1400 audit(1764695440.040:4144): avc: denied { write } for pid=15344 comm="syz.4.4155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.502453][T15358] syzkaller0: entered promiscuous mode [ 200.507951][T15358] syzkaller0: entered allmulticast mode [ 200.528530][ T29] audit: type=1400 audit(1764695440.130:4145): avc: denied { connect } for pid=15363 comm="syz.4.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.612079][T15374] syzkaller1: entered promiscuous mode [ 200.617637][T15374] syzkaller1: entered allmulticast mode [ 200.679082][T15381] x_tables: duplicate underflow at hook 3 [ 200.687262][ T29] audit: type=1400 audit(1764695440.290:4146): avc: denied { create } for pid=15380 comm="syz.0.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.709785][ T29] audit: type=1400 audit(1764695440.290:4147): avc: denied { write } for pid=15380 comm="syz.0.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 200.774404][T15410] team0: Device ip6gre0 is of different type [ 200.806892][ T10] IPVS: starting estimator thread 0... [ 200.813509][T15414] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 200.824139][ T29] audit: type=1326 audit(1764695440.430:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.851259][ T29] audit: type=1326 audit(1764695440.430:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.875053][ T29] audit: type=1326 audit(1764695440.460:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.898559][ T29] audit: type=1326 audit(1764695440.460:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936f9ff749 code=0x7ffc0000 [ 200.931538][T15415] IPVS: using max 2256 ests per chain, 112800 per kthread [ 200.962991][T15417] loop3: detected capacity change from 0 to 512 [ 200.976009][T15421] xt_l2tp: invalid flags combination: c [ 200.984672][T15417] EXT4-fs: old and new quota format mixing [ 201.067048][T15457] loop3: detected capacity change from 0 to 512 [ 201.074609][T15457] EXT4-fs: old and new quota format mixing [ 201.100139][T15462] loop3: detected capacity change from 0 to 512 [ 201.108382][T15462] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.115912][T15462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4175: error while reading EA inode 32 err=-116 [ 201.129844][T15462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4175: error while reading EA inode 32 err=-116 [ 201.142761][T15462] EXT4-fs (loop3): 1 orphan inode deleted [ 201.149063][T15462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 201.162939][T15462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.190748][T15471] loop3: detected capacity change from 0 to 1024 [ 201.203503][T15471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.215561][T15471] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.228941][ T3500] Process accounting resumed [ 201.234229][T14243] EXT4-fs error (device loop3): ext4_map_blocks:813: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 201.248101][T14243] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 201.260421][T14243] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.260421][T14243] [ 201.270885][T15471] EXT4-fs (loop3): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 201.290415][T11461] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.331898][T15483] team0: Device ip6gre0 is of different type [ 201.385942][T15490] loop5: detected capacity change from 0 to 1024 [ 201.395991][T15490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.415000][T15490] bridge17: entered promiscuous mode [ 201.420326][T15490] bridge17: entered allmulticast mode [ 201.427063][T15490] team0: Port device bridge17 added [ 201.471369][T15518] team0: left allmulticast mode [ 201.476360][T15518] team_slave_0: left allmulticast mode [ 201.481905][T15518] team_slave_1: left allmulticast mode [ 201.487368][T15518] team0: left promiscuous mode [ 201.492183][T15518] team_slave_0: left promiscuous mode [ 201.497653][T15518] team_slave_1: left promiscuous mode [ 201.504131][T15518] bridge0: port 3(team0) entered disabled state [ 201.512925][T15518] bridge_slave_0: left allmulticast mode [ 201.518609][T15518] bridge_slave_0: left promiscuous mode [ 201.521999][T15519] netlink: 'syz.4.4182': attribute type 10 has an invalid length. [ 201.524465][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.532107][T15519] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4182'. [ 201.549996][T15518] bridge_slave_1: left allmulticast mode [ 201.555685][T15518] bridge_slave_1: left promiscuous mode [ 201.561388][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.568960][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.579269][T15518] bond0: (slave bond_slave_0): Releasing backup interface [ 201.588362][T15518] bond0: (slave bond_slave_1): Releasing backup interface [ 201.595336][T15523] loop5: detected capacity change from 0 to 1024 [ 201.604519][T15518] team0: Failed to send options change via netlink (err -105) [ 201.604824][T15523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.612474][T15518] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 201.634751][T15518] team0: Port device team_slave_0 removed [ 201.641593][T15518] team0: Failed to send options change via netlink (err -105) [ 201.649189][T15518] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 201.658676][T15518] team0: Port device team_slave_1 removed [ 201.665123][T15518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.672684][T15518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.680228][T15518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.698809][T15519] team0: entered promiscuous mode [ 201.705990][T15519] bridge0: port 1(team0) entered blocking state [ 201.712378][T15519] bridge0: port 1(team0) entered disabled state [ 201.719040][T15519] team0: entered allmulticast mode [ 201.734545][T15523] bridge18: entered promiscuous mode [ 201.739941][T15523] bridge18: entered allmulticast mode [ 201.746283][T15523] team0: Port device bridge18 added [ 201.819102][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.837112][T15538] FAULT_INJECTION: forcing a failure. [ 201.837112][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 201.849891][T15538] CPU: 0 UID: 0 PID: 15538 Comm: syz.5.4184 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.849946][T15538] Tainted: [W]=WARN [ 201.849954][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.849968][T15538] Call Trace: [ 201.849975][T15538] [ 201.849983][T15538] __dump_stack+0x1d/0x30 [ 201.850008][T15538] dump_stack_lvl+0xe8/0x140 [ 201.850032][T15538] dump_stack+0x15/0x1b [ 201.850051][T15538] should_fail_ex+0x265/0x280 [ 201.850085][T15538] should_failslab+0x8c/0xb0 [ 201.850108][T15538] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 201.850168][T15538] ? sidtab_sid2str_get+0xa0/0x130 [ 201.850200][T15538] kmemdup_noprof+0x2b/0x70 [ 201.850221][T15538] sidtab_sid2str_get+0xa0/0x130 [ 201.850296][T15538] security_sid_to_context_core+0x1eb/0x2e0 [ 201.850323][T15538] security_sid_to_context+0x27/0x40 [ 201.850349][T15538] selinux_lsmprop_to_secctx+0x67/0xf0 [ 201.850403][T15538] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 201.850509][T15538] audit_log_subj_ctx+0xa4/0x3e0 [ 201.850532][T15538] ? skb_put+0xa9/0xf0 [ 201.850567][T15538] audit_log_task_context+0x48/0x70 [ 201.850597][T15538] audit_log_task+0xf4/0x250 [ 201.850671][T15538] ? kstrtouint+0x76/0xc0 [ 201.850694][T15538] audit_seccomp+0x61/0x100 [ 201.850812][T15538] ? __seccomp_filter+0x82d/0x1250 [ 201.850905][T15538] __seccomp_filter+0x83e/0x1250 [ 201.850925][T15538] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.850947][T15538] ? vfs_write+0x7e8/0x960 [ 201.850964][T15538] ? __rcu_read_unlock+0x4f/0x70 [ 201.851053][T15538] ? __fget_files+0x184/0x1c0 [ 201.851074][T15538] __secure_computing+0x82/0x150 [ 201.851090][T15538] syscall_trace_enter+0xcf/0x1e0 [ 201.851145][T15538] do_syscall_64+0xb2/0x2a0 [ 201.851175][T15538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.851197][T15538] RIP: 0033:0x7f590806f749 [ 201.851246][T15538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.851260][T15538] RSP: 002b:00007f5906ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 201.851277][T15538] RAX: ffffffffffffffda RBX: 00007f59082c5fa0 RCX: 00007f590806f749 [ 201.851304][T15538] RDX: 000000000000007e RSI: 0000000000000002 RDI: 0000000000000000 [ 201.851378][T15538] RBP: 00007f5906ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.851389][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.851411][T15538] R13: 00007f59082c6038 R14: 00007f59082c5fa0 R15: 00007fff264ef918 [ 201.851433][T15538] [ 202.385808][T15560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4189'. [ 202.400945][T15560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=15560 comm=+}[@ [ 202.464425][T15575] team0: Device ip6gre0 is of different type [ 202.517756][T15581] 9p: Unknown access argument : -22 [ 202.570312][T15582] netlink: 'syz.1.4194': attribute type 19 has an invalid length. [ 202.696520][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 202.723145][ T3599] Bluetooth: hci1: Frame reassembly failed (-84) [ 202.730364][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.739347][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.815585][T15607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4202'. [ 202.858302][T15618] team0: Device ip6gre0 is of different type [ 202.865322][T15620] netlink: 'syz.1.4205': attribute type 13 has an invalid length. [ 202.895507][T15624] syzkaller0: entered promiscuous mode [ 202.901092][T15624] syzkaller0: entered allmulticast mode [ 202.929653][T15620] random: crng reseeded on system resumption [ 202.989166][T15635] bridge14: entered promiscuous mode [ 202.994653][T15635] bridge14: entered allmulticast mode [ 203.001295][T15635] team0: Port device bridge14 added [ 203.026916][T15639] syzkaller0: entered promiscuous mode [ 203.032518][T15639] syzkaller0: entered allmulticast mode [ 203.069013][T15645] loop5: detected capacity change from 0 to 1024 [ 203.083097][T15645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.095699][T15645] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.109247][ T3408] Process accounting resumed [ 203.114109][ T12] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.127723][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.140004][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.140004][ T12] [ 203.150330][T15645] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 203.168656][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.239042][T15658] netlink: 'syz.1.4214': attribute type 13 has an invalid length. [ 203.300188][T15670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4218'. [ 203.310201][T15658] random: crng reseeded on system resumption [ 203.315868][T15668] loop5: detected capacity change from 0 to 512 [ 203.324215][T15668] EXT4-fs (loop5): orphan cleanup on readonly fs [ 203.331028][T15668] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4217: error while reading EA inode 32 err=-116 [ 203.343788][T15668] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4217: error while reading EA inode 32 err=-116 [ 203.356713][T15668] EXT4-fs (loop5): 1 orphan inode deleted [ 203.363241][T15668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.376875][T15668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.417673][T15681] syzkaller0: entered promiscuous mode [ 203.423396][T15681] syzkaller0: entered allmulticast mode [ 203.434147][T15685] loop5: detected capacity change from 0 to 1024 [ 203.452940][T15685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.465445][T15685] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.479005][T15689] bridge12: entered promiscuous mode [ 203.483117][T15696] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 203.484499][T15689] bridge12: entered allmulticast mode [ 203.498982][T15689] team0: Port device bridge12 added [ 203.505529][ T10] Process accounting resumed [ 203.510572][T14243] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.535852][T14243] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 203.540299][T15698] bridge15: entered promiscuous mode [ 203.548319][T14243] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.548319][T14243] [ 203.553642][T15698] bridge15: entered allmulticast mode [ 203.554976][T15698] team0: Port device bridge15 added [ 203.578643][T15685] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 203.598744][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.669099][T15714] loop5: detected capacity change from 0 to 8192 [ 203.708675][T15724] 9p: Unknown access argument : -22 [ 203.714451][T15714] loop5: p1 < > p2 < > p3 p4 < > [ 203.719476][T15714] loop5: partition table partially beyond EOD, truncated [ 203.726740][T15714] loop5: p1 start 67108864 is beyond EOD, truncated [ 203.733440][T15714] loop5: p2 start 4278190080 is beyond EOD, truncated [ 203.740256][T15714] loop5: p3 start 100859904 is beyond EOD, truncated [ 203.836900][T15739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.846496][T15739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.914088][T15747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.922892][T15747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.781861][ T3680] Bluetooth: hci1: command 0x1003 tx timeout [ 204.788345][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 204.984931][T15767] loop5: detected capacity change from 0 to 8192 [ 205.041684][T15767] loop5: p1 < > p2 < > p3 p4 < > [ 205.046847][T15767] loop5: partition table partially beyond EOD, truncated [ 205.054057][T15767] loop5: p1 start 67108864 is beyond EOD, truncated [ 205.060685][T15767] loop5: p2 start 4278190080 is beyond EOD, truncated [ 205.067519][T15767] loop5: p3 start 100859904 is beyond EOD, truncated [ 205.358355][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 205.358373][ T29] audit: type=1400 audit(1764695444.960:4549): avc: denied { write } for pid=15785 comm="syz.4.4247" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.388227][ T29] audit: type=1326 audit(1764695444.960:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb26a465e7 code=0x7ffc0000 [ 205.411766][ T29] audit: type=1326 audit(1764695444.960:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb269eb829 code=0x7ffc0000 [ 205.421516][T15790] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 205.435322][ T29] audit: type=1326 audit(1764695444.960:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 205.435353][ T29] audit: type=1326 audit(1764695444.970:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb26a465e7 code=0x7ffc0000 [ 205.481573][ T3500] IPVS: starting estimator thread 0... [ 205.489468][ T29] audit: type=1326 audit(1764695444.970:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb269eb829 code=0x7ffc0000 [ 205.518288][ T29] audit: type=1326 audit(1764695444.970:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 205.541788][ T29] audit: type=1326 audit(1764695444.980:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb26a465e7 code=0x7ffc0000 [ 205.565212][ T29] audit: type=1326 audit(1764695444.980:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb269eb829 code=0x7ffc0000 [ 205.588667][ T29] audit: type=1326 audit(1764695444.980:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 205.590854][T15791] IPVS: using max 2208 ests per chain, 110400 per kthread [ 205.636193][T15799] netlink: 'syz.3.4250': attribute type 13 has an invalid length. [ 205.672096][T15805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.681303][T15805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.716943][T15799] random: crng reseeded on system resumption [ 205.741747][T15799] loop3: detected capacity change from 0 to 512 [ 205.753403][T15799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.766103][T15799] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.777913][T15799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.789951][T15818] loop5: detected capacity change from 0 to 512 [ 205.819835][T15818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.858119][T15818] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.894582][T15818] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4254: Failed to acquire dquot type 0 [ 206.029593][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.217781][T15858] loop4: detected capacity change from 0 to 512 [ 206.225792][T15858] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.232741][T15858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4265: error while reading EA inode 32 err=-116 [ 206.245421][T15858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4265: error while reading EA inode 32 err=-116 [ 206.258151][T15858] EXT4-fs (loop4): 1 orphan inode deleted [ 206.264348][T15858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.278912][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.288489][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.288525][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.314300][T15868] team0: Device ip6gre0 is of different type [ 206.339189][T15870] loop4: detected capacity change from 0 to 512 [ 206.347225][T15870] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.354278][T15870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4268: error while reading EA inode 32 err=-116 [ 206.366826][T15870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4268: error while reading EA inode 32 err=-116 [ 206.379550][T15870] EXT4-fs (loop4): 1 orphan inode deleted [ 206.385810][T15870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.408886][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.680988][T15889] loop4: detected capacity change from 0 to 512 [ 206.701852][T15889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.714676][T15889] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.727052][T15889] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4273: Failed to acquire dquot type 0 [ 206.794681][T15894] netlink: 'syz.3.4274': attribute type 13 has an invalid length. [ 206.819754][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.829053][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.856737][T15894] random: crng reseeded on system resumption [ 206.875269][T15894] loop3: detected capacity change from 0 to 512 [ 206.882885][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.905841][T15894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.918621][T15894] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.929886][T15894] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.962527][T15917] loop5: detected capacity change from 0 to 512 [ 206.970959][T15917] EXT4-fs: old and new quota format mixing [ 207.052794][T15927] loop4: detected capacity change from 0 to 1024 [ 207.060506][T15927] EXT4-fs: inline encryption not supported [ 207.071826][T15935] loop5: detected capacity change from 0 to 512 [ 207.079894][T15935] EXT4-fs (loop5): orphan cleanup on readonly fs [ 207.087056][T15935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4283: error while reading EA inode 32 err=-116 [ 207.091982][T15927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.104230][T15935] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4283: error while reading EA inode 32 err=-116 [ 207.125186][T15935] EXT4-fs (loop5): 1 orphan inode deleted [ 207.131665][T15935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.145610][T15927] 9p: Unknown access argument : -22 [ 207.160638][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.191566][T15944] tmpfs: Unknown parameter 'nr_inodes, priority 0 [ 208.127206][T16021] tipc: Resetting bearer [ 208.134849][T16020] tipc: Disabling bearer [ 208.163037][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.171587][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.256625][T16031] team0: Device ip6gre0 is of different type [ 208.291049][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.306130][T16035] loop5: detected capacity change from 0 to 512 [ 208.313210][T16035] EXT4-fs: old and new quota format mixing [ 208.374968][T16051] loop5: detected capacity change from 0 to 1024 [ 208.381757][T16051] EXT4-fs: Ignoring removed bh option [ 208.387321][T16051] EXT4-fs: inline encryption not supported [ 208.394033][T16051] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.405395][T16051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 208.415380][T16051] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #3: block 2: comm syz.5.4310: lblock 2 mapped to illegal pblock 2 (length 1) [ 208.429790][T16051] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #3: block 48: comm syz.5.4310: lblock 0 mapped to illegal pblock 48 (length 1) [ 208.444979][T16051] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4310: Failed to acquire dquot type 0 [ 208.457053][T16051] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6309: Corrupt filesystem [ 208.466829][T16051] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.4310: mark_inode_dirty error [ 208.478546][T16051] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 208.492190][T16051] EXT4-fs (loop5): 1 orphan inode deleted [ 208.498432][T16051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.512135][T10380] EXT4-fs error (device loop5): ext4_map_blocks:777: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 208.531953][T10380] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 208.535776][T16065] netlink: 'syz.3.4315': attribute type 13 has an invalid length. [ 208.552115][T16051] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 208.569821][ T8975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.588784][T16073] loop5: detected capacity change from 0 to 512 [ 208.595600][T16073] EXT4-fs: old and new quota format mixing [ 208.614537][T16065] random: crng reseeded on system resumption [ 208.627253][T16065] loop3: detected capacity change from 0 to 512 [ 208.643282][T16065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.655928][T16065] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.666973][T16065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.708066][T16089] netlink: 'syz.3.4319': attribute type 13 has an invalid length. [ 208.748346][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 208.757363][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 208.769734][T16089] random: crng reseeded on system resumption [ 208.783305][T16089] loop3: detected capacity change from 0 to 512 [ 208.793197][T16089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.805759][T16089] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.816638][T16089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.106205][T16124] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 209.142014][T16126] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 209.199879][T16130] netlink: 'syz.1.4329': attribute type 13 has an invalid length. [ 209.262655][T16130] random: crng reseeded on system resumption [ 209.291078][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.299691][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.415066][T16141] loop4: detected capacity change from 0 to 128 [ 209.421837][T16141] ext4: Unknown parameter 'euid' [ 209.434759][T16141] loop4: detected capacity change from 0 to 2048 [ 209.452837][T16141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.467052][T16141] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.482155][T16141] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 209.494603][T16141] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.494603][T16141] [ 209.504359][T16141] EXT4-fs (loop4): Total free blocks count 0 [ 209.510359][T16141] EXT4-fs (loop4): Free/Dirty block details [ 209.516267][T16141] EXT4-fs (loop4): free_blocks=2415919104 [ 209.522004][T16141] EXT4-fs (loop4): dirty_blocks=48 [ 209.527193][T16141] EXT4-fs (loop4): Block reservation details [ 209.533194][T16141] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 209.550831][T11583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.583199][T16153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4333'. [ 209.618252][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4334'. [ 209.627262][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4334'. [ 209.683120][T16169] tipc: Enabled bearer , priority 0 [ 209.690546][T16169] +: renamed from syzkaller0 [ 209.696745][T16169] tipc: Disabling bearer [ 209.704065][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 209.729136][T16177] bridge13: entered promiscuous mode [ 209.734613][T16177] bridge13: entered allmulticast mode [ 209.743145][T16177] team0: Port device bridge13 added [ 209.752568][T16181] loop5: detected capacity change from 0 to 164 [ 209.760385][T16181] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.774998][T16184] loop3: detected capacity change from 0 to 512 [ 209.782335][T16184] EXT4-fs: old and new quota format mixing [ 209.793506][T16181] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.802538][T16181] Symlink component flag not implemented [ 209.808196][T16181] Symlink component flag not implemented [ 209.815083][T16189] program syz.4.4340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.825568][T16191] team0: left allmulticast mode [ 209.830520][T16191] team_slave_0: left allmulticast mode [ 209.836027][T16191] team_slave_1: left allmulticast mode [ 209.841538][T16191] team0: left promiscuous mode [ 209.846396][T16191] team_slave_0: left promiscuous mode [ 209.851994][T16191] team_slave_1: left promiscuous mode [ 209.857545][T16181] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.859006][T16191] bridge0: port 3(team0) entered disabled state [ 209.876978][T16181] rock: directory entry would overflow storage [ 209.883191][T16181] rock: sig=0x4f50, size=4, remaining=3 [ 209.886615][T16194] netlink: 'syz.3.4341': attribute type 10 has an invalid length. [ 209.888797][T16181] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 209.904252][T16194] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4341'. [ 209.922039][T16191] bridge_slave_0: left allmulticast mode [ 209.927740][T16191] bridge_slave_0: left promiscuous mode [ 209.933446][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.942089][T16191] bridge_slave_1: left allmulticast mode [ 209.947762][T16191] bridge_slave_1: left promiscuous mode [ 209.953527][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.962564][T16191] bond0: (slave bond_slave_0): Releasing backup interface [ 209.962850][T16200] loop5: detected capacity change from 0 to 1024 [ 209.978652][T16191] bond0: (slave bond_slave_1): Releasing backup interface [ 209.989655][T16204] loop4: detected capacity change from 0 to 512 [ 210.000499][T16191] team0: Port device team_slave_0 removed [ 210.009542][T16191] team0: Port device team_slave_1 removed [ 210.016300][T16191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.024089][T16204] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.035834][T16191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.043610][T16191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.062603][T16204] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4343: Failed to acquire dquot type 0 [ 210.089200][T16194] team0: entered promiscuous mode [ 210.097022][T16194] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.110015][T16194] bridge0: port 1(team0) entered blocking state [ 210.116367][T16194] bridge0: port 1(team0) entered disabled state [ 210.128356][T16194] team0: entered allmulticast mode [ 210.138777][T16200] bridge20: entered promiscuous mode [ 210.144232][T16200] bridge20: entered allmulticast mode [ 210.154205][T16200] team0: Port device bridge20 added [ 210.175452][T16213] syzkaller1: entered promiscuous mode [ 210.180939][T16213] syzkaller1: entered allmulticast mode [ 210.270048][T16225] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4347'. [ 210.314138][T16238] bridge11: entered promiscuous mode [ 210.319457][T16238] bridge11: entered allmulticast mode [ 210.326729][T16238] team0: Port device bridge11 added [ 210.333852][T16242] FAULT_INJECTION: forcing a failure. [ 210.333852][T16242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.346977][T16242] CPU: 1 UID: 0 PID: 16242 Comm: syz.3.4351 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.347010][T16242] Tainted: [W]=WARN [ 210.347087][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.347098][T16242] Call Trace: [ 210.347105][T16242] [ 210.347113][T16242] __dump_stack+0x1d/0x30 [ 210.347138][T16242] dump_stack_lvl+0xe8/0x140 [ 210.347161][T16242] dump_stack+0x15/0x1b [ 210.347180][T16242] should_fail_ex+0x265/0x280 [ 210.347262][T16242] should_fail+0xb/0x20 [ 210.347287][T16242] should_fail_usercopy+0x1a/0x20 [ 210.347330][T16242] strncpy_from_user+0x25/0x230 [ 210.347352][T16242] ? kmem_cache_alloc_noprof+0x242/0x480 [ 210.347373][T16242] ? getname_flags+0x80/0x3b0 [ 210.347400][T16242] getname_flags+0xae/0x3b0 [ 210.347422][T16242] __se_sys_quotactl+0x16a/0x670 [ 210.347443][T16242] ? fput+0x8f/0xc0 [ 210.347485][T16242] __x64_sys_quotactl+0x55/0x70 [ 210.347506][T16242] x64_sys_call+0x19a4/0x3000 [ 210.347579][T16242] do_syscall_64+0xd8/0x2a0 [ 210.347604][T16242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.347697][T16242] RIP: 0033:0x7f293f42f749 [ 210.347726][T16242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.347743][T16242] RSP: 002b:00007f293de97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 210.347763][T16242] RAX: ffffffffffffffda RBX: 00007f293f685fa0 RCX: 00007f293f42f749 [ 210.347783][T16242] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000801 [ 210.347805][T16242] RBP: 00007f293de97090 R08: 0000000000000000 R09: 0000000000000000 [ 210.347815][T16242] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 210.347826][T16242] R13: 00007f293f686038 R14: 00007f293f685fa0 R15: 00007ffe6a6aea88 [ 210.347844][T16242] [ 210.563894][T16244] loop4: detected capacity change from 0 to 512 [ 210.571475][T16244] EXT4-fs: old and new quota format mixing [ 210.637116][T16259] loop4: detected capacity change from 0 to 1024 [ 210.649137][T16259] bridge12: entered promiscuous mode [ 210.654519][T16259] bridge12: entered allmulticast mode [ 210.677053][T16259] team0: Port device bridge12 added [ 210.711287][T16265] tipc: Enabling of bearer rejected, failed to enable media [ 210.720470][T16276] team0: left allmulticast mode [ 210.725533][T16276] team_slave_0: left allmulticast mode [ 210.731118][T16276] team_slave_1: left allmulticast mode [ 210.736629][T16276] team0: left promiscuous mode [ 210.740400][T16285] loop3: detected capacity change from 0 to 1024 [ 210.741439][T16276] team_slave_0: left promiscuous mode [ 210.753246][T16276] team_slave_1: left promiscuous mode [ 210.760161][T16276] bridge0: port 3(team0) entered disabled state [ 210.764735][T16286] netlink: 'syz.5.4361': attribute type 10 has an invalid length. [ 210.775737][T16276] bridge_slave_0: left allmulticast mode [ 210.781381][T16276] bridge_slave_0: left promiscuous mode [ 210.787184][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.795352][T16276] bridge_slave_1: left allmulticast mode [ 210.801003][T16276] bridge_slave_1: left promiscuous mode [ 210.806798][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.834098][T16276] bond0: (slave bond_slave_0): Releasing backup interface [ 210.841863][T16285] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.852849][T16276] bond0: (slave bond_slave_1): Releasing backup interface [ 210.863844][T16276] team0: Port device team_slave_0 removed [ 210.870120][ T2969] Process accounting resumed [ 210.875373][ T2250] EXT4-fs error (device loop3): ext4_map_blocks:813: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 210.889250][T16276] team0: Port device team_slave_1 removed [ 210.895526][T16276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.911536][ T2250] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 210.923866][ T2250] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.923866][ T2250] [ 210.942082][T16286] team0: entered promiscuous mode [ 210.949204][T16285] EXT4-fs (loop3): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 210.958735][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.970278][T16286] bridge0: port 1(team0) entered blocking state [ 210.976722][T16286] bridge0: port 1(team0) entered disabled state [ 210.984064][T16286] team0: entered allmulticast mode [ 210.993129][T16289] syzkaller1: entered promiscuous mode [ 210.998710][T16289] syzkaller1: entered allmulticast mode [ 211.051814][T16322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.062784][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 211.062798][ T29] audit: type=1326 audit(1764695450.670:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16329 comm="syz.4.4371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfb910f749 code=0x0 [ 211.071701][T16322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.205666][T16349] team0: Device ip6gre0 is of different type [ 211.240860][T16351] 9pnet: Could not find request transport: r [ 211.252995][T16353] program syz.1.4373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.480075][T16351] serio: Serial port ptm0 [ 211.591546][T16387] tipc: Enabling of bearer rejected, failed to enable media [ 211.624928][T16347] netlink: 'syz.4.4371': attribute type 3 has an invalid length. [ 212.105710][T16409] team0: Device ip6gre0 is of different type [ 212.200169][T16415] loop5: detected capacity change from 0 to 1024 [ 212.222278][ T29] audit: type=1326 audit(1764695451.830:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.246617][ T29] audit: type=1326 audit(1764695451.850:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.253246][T16415] bridge21: entered promiscuous mode [ 212.275577][T16415] bridge21: entered allmulticast mode [ 212.275956][ T29] audit: type=1326 audit(1764695451.850:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.304422][ T29] audit: type=1326 audit(1764695451.850:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.309736][T16415] team0: Port device bridge21 added [ 212.327911][ T29] audit: type=1326 audit(1764695451.850:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.327945][ T29] audit: type=1326 audit(1764695451.850:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.328002][ T29] audit: type=1326 audit(1764695451.850:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.328025][ T29] audit: type=1326 audit(1764695451.850:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.426987][ T29] audit: type=1326 audit(1764695451.850:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16414 comm="syz.5.4383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590806f749 code=0x7ffc0000 [ 212.449477][T16428] __nla_validate_parse: 10 callbacks suppressed [ 212.449500][T16428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4386'. [ 212.491950][T16434] 9p: Unknown access argument : -22 [ 212.561053][T16441] tipc: Enabling of bearer rejected, failed to enable media [ 212.621311][T16449] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4391'. [ 212.648842][T16457] team0: Device ip6gre0 is of different type [ 212.671823][T16458] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4393'. [ 212.695829][T16465] netlink: 'syz.4.4397': attribute type 13 has an invalid length. [ 212.792523][T16465] random: crng reseeded on system resumption [ 212.805465][T16465] loop4: detected capacity change from 0 to 512 [ 212.834288][T16465] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.039021][T16499] tipc: Enabling of bearer rejected, failed to enable media [ 213.145273][T16511] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4406'. [ 213.174463][T16513] team0: Device ip6gre0 is of different type [ 213.475077][T16535] bridge11: entered promiscuous mode [ 213.480454][T16535] bridge11: entered allmulticast mode [ 213.505752][ T10] IPVS: starting estimator thread 0... [ 213.512253][T16539] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 213.595471][T16540] IPVS: using max 2640 ests per chain, 132000 per kthread [ 214.077144][T16564] team0: Device ip6gre0 is of different type [ 214.106437][T16568] loop5: detected capacity change from 0 to 1024 [ 214.121299][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 214.181075][T16572] vlan2: entered allmulticast mode [ 214.186290][T16572] bridge_slave_0: entered allmulticast mode [ 214.197318][T16582] loop3: detected capacity change from 0 to 1024 [ 214.203979][T16583] 9pnet: Could not find request transport: r [ 214.205453][T16582] EXT4-fs: inline encryption not supported [ 214.226844][T16568] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.244019][ T3408] Process accounting resumed [ 214.249368][T16555] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: comm kworker/u8:25: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.263508][T16555] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 214.264267][T16582] 9p: Unknown access argument : -22 [ 214.275869][T16555] EXT4-fs (loop5): This should not happen!! Data will be lost [ 214.275869][T16555] [ 214.276843][T16568] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 214.333123][T16626] loop4: detected capacity change from 0 to 164 [ 214.340383][T16626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 214.350776][T16626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 214.359436][T16626] Symlink component flag not implemented [ 214.365284][T16626] Symlink component flag not implemented [ 214.416194][T16643] team0: Device ip6gre0 is of different type [ 214.469580][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.478208][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.593242][T16663] FAULT_INJECTION: forcing a failure. [ 214.593242][T16663] name fail_futex, interval 1, probability 0, space 0, times 1 [ 214.606158][T16663] CPU: 0 UID: 0 PID: 16663 Comm: syz.3.4438 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.606182][T16663] Tainted: [W]=WARN [ 214.606188][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.606210][T16663] Call Trace: [ 214.606215][T16663] [ 214.606222][T16663] __dump_stack+0x1d/0x30 [ 214.606239][T16663] dump_stack_lvl+0xe8/0x140 [ 214.606254][T16663] dump_stack+0x15/0x1b [ 214.606293][T16663] should_fail_ex+0x265/0x280 [ 214.606316][T16663] should_fail+0xb/0x20 [ 214.606335][T16663] should_fail_futex+0x49/0x50 [ 214.606404][T16663] futex_lock_pi_atomic+0xfe/0x860 [ 214.606424][T16663] ? _raw_spin_lock+0x52/0xa0 [ 214.606455][T16663] futex_lock_pi+0x17a/0x780 [ 214.606489][T16663] ? __pfx_futex_wake_mark+0x10/0x10 [ 214.606575][T16663] do_futex+0x21f/0x380 [ 214.606593][T16663] __se_sys_futex+0x2ed/0x360 [ 214.606609][T16663] ? mutex_unlock+0x4f/0x90 [ 214.606627][T16663] __x64_sys_futex+0x78/0x90 [ 214.606723][T16663] x64_sys_call+0x2bc2/0x3000 [ 214.606754][T16663] do_syscall_64+0xd8/0x2a0 [ 214.606804][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.606826][T16663] RIP: 0033:0x7f293f42f749 [ 214.606837][T16663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.606851][T16663] RSP: 002b:00007f293de97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.606907][T16663] RAX: ffffffffffffffda RBX: 00007f293f685fa0 RCX: 00007f293f42f749 [ 214.606917][T16663] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 214.606927][T16663] RBP: 00007f293de97090 R08: 0000000000000000 R09: 00000000fffffffc [ 214.606936][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.606945][T16663] R13: 00007f293f686038 R14: 00007f293f685fa0 R15: 00007ffe6a6aea88 [ 214.606960][T16663] [ 214.928146][T16668] loop3: detected capacity change from 0 to 1024 [ 214.973880][T16668] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.993130][ T3408] Process accounting resumed [ 214.998600][T16547] EXT4-fs error (device loop3): ext4_map_blocks:813: inode #15: comm kworker/u8:17: lblock 0 mapped to illegal pblock 0 (length 1) [ 215.018508][T16547] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 215.030940][T16547] EXT4-fs (loop3): This should not happen!! Data will be lost [ 215.030940][T16547] [ 215.042689][T16668] EXT4-fs (loop3): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 215.134766][T16674] netlink: 'syz.0.4440': attribute type 13 has an invalid length. [ 215.228881][T16678] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 215.236416][ T10] IPVS: starting estimator thread 0... [ 215.238499][T16674] random: crng reseeded on system resumption [ 215.275243][T16684] 9p: Unknown access argument : -22 [ 215.331525][T16679] IPVS: using max 2304 ests per chain, 115200 per kthread [ 215.408337][T16704] 9p: Unknown access argument : -22 [ 215.415064][T16706] loop3: detected capacity change from 0 to 512 [ 215.422253][T16706] EXT4-fs: old and new quota format mixing [ 215.478330][T16724] loop5: detected capacity change from 0 to 1024 [ 215.493096][T16724] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.506454][ T3408] Process accounting resumed [ 215.511854][T16555] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: comm kworker/u8:25: lblock 0 mapped to illegal pblock 0 (length 1) [ 215.513448][T16728] team0: left allmulticast mode [ 215.530510][T16728] bridge0: port 1(team0) entered disabled state [ 215.537235][T16555] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 215.549624][T16555] EXT4-fs (loop5): This should not happen!! Data will be lost [ 215.549624][T16555] [ 215.561558][T16724] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 215.570888][T16728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.596533][T16733] netlink: 'syz.0.4455': attribute type 13 has an invalid length. [ 215.624689][T16741] loop5: detected capacity change from 0 to 512 [ 215.632772][T16741] EXT4-fs (loop5): orphan cleanup on readonly fs [ 215.639635][T16741] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4457: error while reading EA inode 32 err=-116 [ 215.656268][T16741] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4457: error while reading EA inode 32 err=-116 [ 215.669745][T16741] EXT4-fs (loop5): 1 orphan inode deleted [ 215.683759][T16733] random: crng reseeded on system resumption [ 215.710220][T16754] team0: Device ip6gre0 is of different type [ 215.729128][T16756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4460'. [ 215.812687][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4466'. [ 215.869585][T16790] netlink: 'syz.5.4470': attribute type 13 has an invalid length. [ 215.977637][T16790] random: crng reseeded on system resumption [ 215.990252][T16790] loop5: detected capacity change from 0 to 512 [ 216.001821][T16807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4474'. [ 216.010042][T16790] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.048365][T16818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.060207][T16818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.091767][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 216.091779][ T29] audit: type=1400 audit(1764695455.680:5199): avc: denied { ioctl } for pid=16821 comm="syz.0.4478" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.164584][ T29] audit: type=1326 audit(1764695455.740:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.188253][ T29] audit: type=1326 audit(1764695455.740:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.211882][ T29] audit: type=1326 audit(1764695455.740:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.235566][ T29] audit: type=1326 audit(1764695455.740:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.247188][T16832] bridge12: entered promiscuous mode [ 216.259128][ T29] audit: type=1326 audit(1764695455.740:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.264427][T16832] bridge12: entered allmulticast mode [ 216.266232][T16832] team0: Port device bridge12 added [ 216.287939][ T29] audit: type=1326 audit(1764695455.740:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.322166][ T29] audit: type=1326 audit(1764695455.740:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.345747][ T29] audit: type=1326 audit(1764695455.740:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.369312][ T29] audit: type=1326 audit(1764695455.740:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.0.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb26a4f749 code=0x7ffc0000 [ 216.569159][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4487'. [ 216.693397][T16869] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4492'. [ 216.707129][T16869] loop3: detected capacity change from 0 to 736 [ 216.721666][T16869] rock: directory entry would overflow storage [ 216.727859][T16869] rock: sig=0x3b10, size=4, remaining=3 [ 216.817935][T16880] netlink: 'syz.3.4495': attribute type 13 has an invalid length. [ 216.880600][T16880] random: crng reseeded on system resumption [ 216.892605][T16880] loop3: detected capacity change from 0 to 512 [ 216.903440][T16880] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.946989][T16894] loop3: detected capacity change from 0 to 164 [ 216.954079][T16894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 216.965332][T16894] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 216.985065][T16894] Symlink component flag not implemented [ 216.990758][T16894] Symlink component flag not implemented [ 217.046825][T16905] team0: Device ip6gre0 is of different type [ 217.225931][T16917] netlink: 'syz.3.4506': attribute type 13 has an invalid length. [ 217.286579][T16922] random: crng reseeded on system resumption [ 217.296450][T16924] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 217.304648][T16917] loop3: detected capacity change from 0 to 512 [ 217.323409][T16917] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.438607][T16938] xfrm1: entered allmulticast mode [ 217.445643][T16953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.480945][T16957] bridge22: entered promiscuous mode [ 217.486340][T16957] bridge22: entered allmulticast mode [ 217.504294][T16957] team0: Port device bridge22 added [ 217.519174][T16953] wireguard0: entered promiscuous mode [ 217.524703][T16953] wireguard0: entered allmulticast mode [ 217.550670][T16971] netlink: 'syz.5.4519': attribute type 13 has an invalid length. [ 217.565598][T16969] loop9: detected capacity change from 0 to 7 [ 217.572872][T16969] buffer_io_error: 3996 callbacks suppressed [ 217.572883][T16969] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.590872][T16969] Buffer I/O error on dev loop9, logical block 0, async page read [ 217.598165][T16978] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 217.598901][T16969] loop9: unable to read partition table [ 217.612073][ T3500] IPVS: starting estimator thread 0... [ 217.612148][T16969] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 217.612148][T16969] ) failed (rc=-5) [ 217.642723][T16976] tipc: Enabled bearer , priority 0 [ 217.650570][T16976] tipc: Resetting bearer [ 217.657831][T16975] tipc: Disabling bearer [ 217.664974][T16971] random: crng reseeded on system resumption [ 217.677730][T16971] loop5: detected capacity change from 0 to 512 [ 217.694259][T16971] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.711678][T16979] IPVS: using max 2208 ests per chain, 110400 per kthread [ 217.770373][T17015] loop4: detected capacity change from 0 to 512 [ 217.780610][T17015] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.4526: EA inode hash validation failed [ 217.794140][T17015] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 217.807395][T17015] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.4526: corrupted inode contents [ 217.814014][T17019] __nla_validate_parse: 3 callbacks suppressed [ 217.814030][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 217.834408][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 217.843642][T17015] EXT4-fs error (device loop4): ext4_dirty_inode:6513: inode #15: comm syz.4.4526: mark_inode_dirty error [ 217.856361][T17015] EXT4-fs error (device loop4): ext4_do_update_inode:5628: inode #15: comm syz.4.4526: corrupted inode contents [ 217.868537][T17015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.4526: mark_inode_dirty error [ 217.868548][T17021] team0: left allmulticast mode [ 217.868703][T17015] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.4526: mark inode dirty (error -117) [ 217.880599][T17021] bridge0: port 1(team0) entered disabled state [ 217.898689][T17015] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 217.905228][T17029] netlink: 'syz.5.4524': attribute type 10 has an invalid length. [ 217.913545][T17015] EXT4-fs (loop4): 1 orphan inode deleted [ 217.921011][T17029] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4524'. [ 217.936577][T17021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.956141][T17029] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.963425][T17029] bridge0: port 1(team0) entered blocking state [ 217.969736][T17029] bridge0: port 1(team0) entered disabled state [ 217.976225][T17029] team0: entered allmulticast mode [ 218.023743][T17036] bridge16: entered promiscuous mode [ 218.029185][T17036] bridge16: entered allmulticast mode [ 218.036926][T17036] team0: Port device bridge16 added [ 218.072686][T17043] loop3: detected capacity change from 0 to 512 [ 218.091028][T17043] EXT4-fs (loop3): orphan cleanup on readonly fs [ 218.116642][T17043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4530: error while reading EA inode 32 err=-116 [ 218.130068][T17043] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 218.144401][T17043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4530: error while reading EA inode 32 err=-116 [ 218.157732][T17043] EXT4-fs (loop3): 1 orphan inode deleted [ 218.183084][T17057] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 218.209741][T17061] tipc: Enabled bearer , priority 0 [ 218.219077][T17061] tipc: Resetting bearer [ 218.226204][T17060] tipc: Disabling bearer [ 218.247214][T17071] FAULT_INJECTION: forcing a failure. [ 218.247214][T17071] name failslab, interval 1, probability 0, space 0, times 0 [ 218.259946][T17071] CPU: 0 UID: 0 PID: 17071 Comm: syz.4.4534 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.259986][T17071] Tainted: [W]=WARN [ 218.259992][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.260003][T17071] Call Trace: [ 218.260008][T17071] [ 218.260014][T17071] __dump_stack+0x1d/0x30 [ 218.260033][T17071] dump_stack_lvl+0xe8/0x140 [ 218.260050][T17071] dump_stack+0x15/0x1b [ 218.260083][T17071] should_fail_ex+0x265/0x280 [ 218.260118][T17071] should_failslab+0x8c/0xb0 [ 218.260142][T17071] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 218.260166][T17071] ? __alloc_skb+0x101/0x320 [ 218.260268][T17071] __alloc_skb+0x101/0x320 [ 218.260416][T17071] netlink_alloc_large_skb+0xbf/0xf0 [ 218.260449][T17071] netlink_sendmsg+0x3cf/0x6b0 [ 218.260494][T17071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.260551][T17071] __sock_sendmsg+0x145/0x180 [ 218.260636][T17071] ____sys_sendmsg+0x345/0x4a0 [ 218.260674][T17071] ___sys_sendmsg+0x17b/0x1d0 [ 218.260722][T17071] __sys_sendmmsg+0x178/0x300 [ 218.260793][T17071] __x64_sys_sendmmsg+0x57/0x70 [ 218.260841][T17071] x64_sys_call+0x1e28/0x3000 [ 218.260866][T17071] do_syscall_64+0xd8/0x2a0 [ 218.260899][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.260922][T17071] RIP: 0033:0x7fdfb910f749 [ 218.261006][T17071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.261085][T17071] RSP: 002b:00007fdfb7b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.261107][T17071] RAX: ffffffffffffffda RBX: 00007fdfb9365fa0 RCX: 00007fdfb910f749 [ 218.261122][T17071] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 218.261136][T17071] RBP: 00007fdfb7b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 218.261150][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.261179][T17071] R13: 00007fdfb9366038 R14: 00007fdfb9365fa0 R15: 00007ffdffdd09a8 [ 218.261254][T17071] [ 218.513081][T17079] can: request_module (can-proto-0) failed. [ 218.533769][T17079] loop3: detected capacity change from 0 to 512 [ 218.540838][T17079] journal_path: Non-blockdev passed as './file1' [ 218.547294][T17079] EXT4-fs: error: could not find journal device path [ 218.556471][T16555] ================================================================== [ 218.564558][T16555] BUG: KCSAN: data-race in copy_process / free_pid [ 218.571065][T16555] [ 218.573382][T16555] read-write to 0xffffffff8685ffd8 of 4 bytes by task 17087 on cpu 0: [ 218.581519][T16555] free_pid+0xb9/0x1d0 [ 218.585586][T16555] free_pids+0x7a/0xb0 [ 218.589647][T16555] release_task+0x9b1/0xb70 [ 218.594144][T16555] do_exit+0xd89/0x15d0 [ 218.598291][T16555] call_usermodehelper_exec_async+0x247/0x250 [ 218.604360][T16555] ret_from_fork+0x13f/0x270 [ 218.608949][T16555] ret_from_fork_asm+0x1a/0x30 [ 218.613719][T16555] [ 218.616033][T16555] read to 0xffffffff8685ffd8 of 4 bytes by task 16555 on cpu 1: [ 218.623654][T16555] copy_process+0x17f6/0x2000 [ 218.628339][T16555] kernel_clone+0x16c/0x5c0 [ 218.632838][T16555] user_mode_thread+0x7d/0xb0 [ 218.637503][T16555] call_usermodehelper_exec_work+0x41/0x160 [ 218.643388][T16555] process_scheduled_works+0x4ce/0x9d0 [ 218.648842][T16555] worker_thread+0x582/0x770 [ 218.653432][T16555] kthread+0x489/0x510 [ 218.657503][T16555] ret_from_fork+0x13f/0x270 [ 218.662089][T16555] ret_from_fork_asm+0x1a/0x30 [ 218.666852][T16555] [ 218.669172][T16555] value changed: 0x8000011a -> 0x80000119 [ 218.674882][T16555] [ 218.677192][T16555] Reported by Kernel Concurrency Sanitizer on: [ 218.683337][T16555] CPU: 1 UID: 0 PID: 16555 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.694961][T16555] Tainted: [W]=WARN [ 218.698758][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.708816][T16555] Workqueue: events_unbound call_usermodehelper_exec_work [ 218.715933][T16555] ================================================================== [ 218.727564][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'. [ 218.736603][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'.