last executing test programs: 4.351664968s ago: executing program 4 (id=703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x21000000000000ff) dup2(r4, r5) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) fcntl$setown(r4, 0x8, r3) r10 = socket$netlink(0x10, 0x3, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000002c0), 0x4003) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0b0001808800"/20], 0x2c}], 0x1}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000280)=@v3={0x3000000, [{0x418, 0x2}, {0x8001, 0x8}]}, 0x18, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tkill(r3, 0x13) 1.731823839s ago: executing program 2 (id=781): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) epoll_create1(0x0) unshare(0x2040400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@errors_continue}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@noblock_validity}, {@nodiscard}]}, 0x1, 0x475, &(0x7f0000000780)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0xa4, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x9, 0x30, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "40bb95"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x4, 0xff}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4b, 0x8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x1, 0x7}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x5, 0x5c, 0x47, 0xe7d6185298b7107d, 0x2}, 0x47, &(0x7f0000000740)={0x5, 0xf, 0x47, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0x81, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "8e31245dc1c5bd34bc4f5f3fcc98427e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0x0, 0x8, 0x5, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0xfc, 0xff, 0xfffd, 0xc0}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x1, 0xfb, 0x9, 0x4}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x813}}, {0x26, &(0x7f00000004c0)=@string={0x26, 0x3, "c0d7869e672bd48de74c45c0ebac3a1d90e15e15b5e60046c586465feb4a0c4ef2ac4cb7"}}, {0xf8, &(0x7f00000007c0)=@string={0xf8, 0x3, "06dc0b7562e61a279d6c4482108b9531dd513ac147c988ec60058d2a5114a31184490bda84b4e5ae5601d123fb8e66762f644515e05f85c80e7d5a3efb8ec5983bdc2c5b8486c1c5c5edb0789dfc30d6b88ac7ab7df32aa4e2408781fe41243e09109f0739e82cda0e21fe8628550121c16d73d57201ddc09fe0d6513b3133ce71866e909c546f8150786dafc25d2c8f99405594250f4929fc0d9cf69605bb8c0eddc4de5f73dca7209b03cdf9d08b1a64de28fa5159f20ecc3890b20dde6a927e4707b60083fe5442fff6c28e6f1805f42cfb10936ca5e7bfcab40028d5bd29de757142f621977cd536ce37238664455f3265ea272d"}}]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) 1.442355384s ago: executing program 1 (id=785): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) eventfd(0xff9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f9d077e1952e012ea3be45ab8fc56ac67427474e05c7dc23", "c13732904dfb0f148d1f3bf246ae92b9fb5920d17da4d65bfdde7723e691ec5d"}}}}}}, 0x0) 1.441584454s ago: executing program 1 (id=786): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) capget(&(0x7f00000001c0)={0x19980330}, 0x0) 1.402980107s ago: executing program 1 (id=787): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x880) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_notify(r0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'gre0\x00', {0x2}, 0x59}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0xf, 0xa, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000f40050316d20000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000009}, 0x100210, 0x10000, 0x8, 0x1, 0x9, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2012000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 1.310619015s ago: executing program 4 (id=788): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) 1.310005475s ago: executing program 4 (id=789): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='net_dev_start_xmit\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.248482171s ago: executing program 4 (id=790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1.246981031s ago: executing program 2 (id=792): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200, 0x100}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x3, 0x0, 0xb, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r2}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='initcall_level\x00', r6, 0x0, 0x38000000000}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x10000001}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r11, 0x0, 0x1000}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffffffffffd]}, 0x8) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa41, 0x0) socket$unix(0x1, 0x1, 0x0) 1.191976886s ago: executing program 4 (id=793): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x88, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'bond0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000380)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x2, 0xa, 0x73) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x1600, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1400000, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.178196297s ago: executing program 1 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000440)={0x3, 0x1, 0x6, 0x2, 0x13, 0x7, &(0x7f0000000400)="1d0ed3c6974a179a9eca21296f8803d81c6000"}) mq_timedreceive(r2, &(0x7f000001d600)=""/102390, 0x18ff6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x8000000}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r3, 0x84, 0xd, 0xfffffffffffffffe, &(0x7f0000000040)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xf0, 0x0, 0x448, 0x448, 0xf0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, 0x32, 0x36, 0x3}}}, {{@ipv6={@mcast1, @loopback, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x5]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8001]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 1.125756592s ago: executing program 2 (id=795): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xf}, "d0"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.060094997s ago: executing program 2 (id=796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a1ab0000ffff000000003200000008001701"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.059520768s ago: executing program 2 (id=797): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) capget(&(0x7f00000001c0)={0x19980330}, 0x0) 1.000016783s ago: executing program 4 (id=798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) fcntl$setown(r4, 0x8, r3) r10 = socket$netlink(0x10, 0x3, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000002c0), 0x4003) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0b0001808800"/20], 0x2c}], 0x1}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f0000000280)=@v3={0x3000000, [{0x418, 0x2}, {0x8001, 0x8}]}, 0x18, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tkill(r3, 0x13) 997.283573ms ago: executing program 2 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="000000004de40000b7080000000800007b8af8ff00000000bfa200000000001007020000f8ffffff63a8ed5b9629d3acb704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 651.066103ms ago: executing program 0 (id=804): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x880) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_notify(r0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'gre0\x00', {0x2}, 0x59}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0xf, 0xa, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000f40050316d20000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000009}, 0x100210, 0x10000, 0x8, 0x1, 0x9, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2012000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 459.0805ms ago: executing program 3 (id=805): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x18, 0x1412, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000b, 0x10, r3, 0xbe0e8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@struct={0x10, 0x7, 0x0, 0x4, 0x1, 0x4, [{0xf, 0x0, 0xd}, {0xe, 0x2, 0x3}, {0x5, 0x2, 0x7}, {0x4, 0x4, 0x5}, {0x3, 0x5, 0x5}, {0x8, 0x2, 0x10000}, {0xf, 0x5, 0x1}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x6, 0x2}, {0xb, 0x5}]}, @float={0xb, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001940)=""/4096, 0xb7, 0x1000, 0x0, 0x8001, 0x10000, @value=r4}, 0x28) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)="7cff", 0x2, 0xbcff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="ff0000005100acb0000000000000000300004700230c000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x800}, 0x18) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000140)={0x1, 0x3, 0xe9b7}) sendto$inet6(r10, &(0x7f00000002c0)="e13053b468b7eab3fc729aec712753c21b820ba0ea8c98a82b3362057718ff9522856bae1c4f0e60fcd361bd7ed095c2eba47305df7367e20260ccbccb7d3b28da9ec01576cf7ebd77034391991e48f9f701de76a9060425c6fed5f34f2e477edd9b988e38ff70d3bc5a7a03bfdcba3b06413eef5b47", 0x76, 0x4000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x144, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="7bd3549cb0da1332d9f5866482325dff58c4b6134505c77295e3f479955e7acb0fdcac3386234655706d240b474d330fedd9f3f08bb47063dc1013e009c6125ee3e26d06c50d5b24b2f9fc5ee9700e246ac31d659bb19019aa04653a5e91766266f51c52f776f23e522da8bb17b77aac71850d5f721ed48e5e601f5793f3642f88ebeba0c56828d352bde01699d96d39ddec22ca026eb83c7a0f", 0x9a}, {&(0x7f0000000700)="aa810b113299e4c1a3be1913ebbdcfdeb65d98be07b52d77cf5cad432ac38c2f0fd81e80da469de6fb6b4c7881ab318206ff1b7717d59b5a2a93b989cfc3f8838bf5c37a08f7ca96fa40facaf40fd347a77c8ca534c8f41adeff35e9fa1f5f739f6b42579913703aede66faa7dcc665ae8dcb544b540c88a7da452119369c42fa67260baf27c67c622475a47cabb27db96546ab0c30629b35920e2669baed2d1525ea2af3ddc681b0e3e8b056a34f4d74c01147f98fa2a0513314802899b924773e7a387c9a06b425a4a017337289c616786d003f891b300a3bb2c0059fedeef91", 0xe1}, {&(0x7f0000000800)="b3f472c076fe114081eb15d42eeba32a89d184940718c103f5dcd4e9956a92972e1104dc5ea2b95e24d4dfcc49197549ed8009d2da", 0x35}, {&(0x7f0000000840)="dab345020c4a470d8e41d3903271635297fed936239182cb3144660144647e8b5f74e68ed4cbcafc725f76009e56b8ff934333585c8ceee574aa08a818012992583a6db36d329a66c88ca378659d3752bed55e0e89592df4ea335f92f4d2acdf58596c5dd9502cf24bec1e03c2ea143c3b2a93e076a9c1c569fb1eea8020950aa7554ed990a559bfb9e0deb68938f042a4019d3ea7df090e2453a2602c03c0a501585b181be77de8d334aa0418450a3e88ed1ec5a4723f673edde5700accdfe568b0befbdc3395adb02b17d746f82b9a2565462c23a06fa829a37f2730dada215461f4dbe68ccf85988f9692", 0xec}, {&(0x7f0000000a00)="ba0053c644f8bad455b593adb66d774cbdc45e327143ab7f6b653f787fc418811c9496cbfc7cb9bbcd1bedb4f264c0d0c471ef91cd9b531a6db6d109ce2918b73b6c750ec0fb0da8b71f3c62e5b9dbd1c86c3124ded9689d207e596bac673114144f2818241005f0a21bf50473d513e061154a046de6a8da073a871a5afd414b2d8a8adc725df4c743c7e74748977c73e40034ad1ed53923c9bc3391192a7aea89197a9df5561c4a8d88adfbbdb6be21ea6103743daae937a222948e90469cad3e7167b343f4d12b32289b", 0xcb}, {&(0x7f0000000b40)="6b579da74d1cc437052d31e4a5a308b86514a9a08f8c544f47e359b4dade71f8295fc748f736998ac550ad8491be8e65bbdf4556483941ddfb0c6780c294a9c3372f5455929b392c9b429ef520d607006feb83e660c09af714af77fd19401c3af119da1a73855c7e4bee6ec28dae2af0760052af87c3bfb93f7da33e3b6611e7ea1bac17405fa42a8da5d7c92419c087723af59c4bfe6df74fb18aa1872b46dc551defc8952a246e58", 0xa9}, {&(0x7f0000001340)="ef8636e53865785fef8128ff69740b4ba0895ebe7bccaaa27018b03e27f13aa23ee8e69f507b0727348c0aabc41f9873c5dbaa1a540c43c4872e0a28f083121a2c26615bed11dfbfbf12fe97d7dd21d681268263f27b0697ddc58c9420c3771f469f8112bea893c83a2e936ef8ca962d038f23294d6fbbffef691cfaa8079d3a929168aae86b03c9e636de7994d4740027f1eb912661e19db16154285ae3df9c2ac6adefce76b84273583fac6b03807bdb91e1d4e0545333a45b9cce8dc260a315f08615668b3f3f619fa8fdeef4171141b4de04ca9755b3a462aa4c88c51532d5ce553e", 0xe4}], 0x7}, 0x20000000) 357.764329ms ago: executing program 0 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 328.714342ms ago: executing program 3 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xa}, 'port0\x00', 0x46, 0xa04f2, 0x10000000, 0x5, 0x3, 0x8, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0xffffffff, 0x8000, 0xe1dd, 0x10fd, 0xff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d5dfc603611f400", @ANYRES32=r5, @ANYRESOCT=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r10) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/61, 0x11c, 0x3d, 0x1, 0x4d8, 0x10000, @value=r4}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002240)={r13, 0x20, &(0x7f0000002200)={&(0x7f0000002180)=""/51, 0x33, 0x0, &(0x7f00000021c0)}}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x8, 0x0, r14}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 249.977839ms ago: executing program 1 (id=808): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000"], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[], 0x18) 249.196459ms ago: executing program 3 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000040)={0x7, 'tunl0\x00', {0x6}, 0x3}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 210.151322ms ago: executing program 1 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="08002b000800000005002f00"], 0x4c}}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008ad9ffffff71121000000000009500001600000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16, @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x85, 0x0, &(0x7f00000010c0)) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2a002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCMIWAIT(r9, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r5, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x27, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x9f}], &(0x7f0000000040)='GPL\x00', 0x3, 0xac, &(0x7f0000000700)=""/172, 0x41100, 0x40, '\x00', r5, @fallback=0x19, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x1, 0x5, 0x8}, 0x10, 0x0, r1, 0x6, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r14], &(0x7f00000004c0)=[{0x1, 0x1, 0xa, 0xb}, {0x5, 0x1, 0x7, 0x9}, {0x0, 0x5, 0xc, 0x5}, {0x2, 0x4, 0x7, 0x3}, {0x2, 0x5, 0x7, 0x9}, {0x1, 0x5, 0x3, 0x9}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 183.129115ms ago: executing program 0 (id=811): syz_emit_ethernet(0x6a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f9d077e1952e012ea3be45ab8fc56ac67427474e05c7dc23", "c13732904dfb0f148d1f3bf246ae92b9fb5920d17da4d65bfdde7723e691ec5d"}}}}}}, 0x0) 182.461925ms ago: executing program 0 (id=812): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8a04c5, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0xffca, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000e5ce00004c0000000f00a8007365636f6e646e616d650000e8122b6fde20c4ad1b549aa48982aa1c12736536201c425f729610af320a05f126e2e48df7abbbddc80374be6c909a56b43257d82b920c0498e289ba364ea58be8a46e0aa1327b19e1939c780ca185a492ffb8b57ea29e2af4e987585c18bd8358954f1d540bdef8900e17afc22fe8120f2fcd9200"/161], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008520000002000000185a00000c0000000000000000000000852000000200000095f3000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000010000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 87.926093ms ago: executing program 3 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4, 0x0, 0x9}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) close(r2) 87.354793ms ago: executing program 3 (id=814): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000b045f29fc18df00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09f1ffffffffff54090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x800006, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1020, 0x40000000000007, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xcc7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000840)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000006000000b30000003600000005020000", @ANYRES32, @ANYBLOB="000000000000000000000000000000feff000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000003000000030000000500"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={&(0x7f00000000c0)="9823ebb979bfbc55801044f291797752d68dfe66836f8bc61b2aa0c29ca5ea3dd965a117701fa4310ecf82b9d2c867a955a689a708229fbb85adcb429493005143eca46036d0ab8e69ed066f17b0774bf4f15250183ddfc826cb751bf7f3881dcacfb5fbd25823a300a58f4b2e3a186066c7cacac776bd5a4afbce01d08d7ac629285d0b0161960eea76f6a2f905", &(0x7f0000000240)=""/202, &(0x7f0000000640)="9aaf08ccc87b0b070f7b76286a7d61b0dff51cfaabf011825dd244e47b913bd30f147d68d0a43c52c11fffc4643f88a59d349f9d66dbd75bb6eecc09adf4c1be9bf58100401eb6921637384d18b360bb141143656f450bdd", &(0x7f00000006c0)="3d32a9ff7ed74cf7dd293d7dd74e9c77a1ae5603f8f20a9aad4e6ad8fe960f517aa7b1d331862965caac3211085f06545c6fed8b50b441911b3865f38334c0a4cead81f41e298e8b79d16778ba77e40c95d35aa9f71059f88bbeddf3a05650bb05f2f09e1625a037544c8df1245c90bdf12c0109db1ac719cd3ba47a1120c685c45b016f32b07d33f09525dbeb56e98c5b120398fd694ab46912dab88efd65bbc7a5e7c1f39ab8033c717965dbcdd577a63e55d953d2c393216706130dd3a6967469abecd20dbdc01442", 0x7, r8, 0x4}, 0x38) pipe(&(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[]) r10 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x60, 0xf, 0x3, 0xff81, 0x0, 0x8, 0x0}) 66.782965ms ago: executing program 0 (id=815): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 1.18126ms ago: executing program 0 (id=816): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) eventfd(0xff9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="f1a2610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "f9d077e1952e012ea3be45ab8fc56ac67427474e05c7dc23", "c13732904dfb0f148d1f3bf246ae92b9fb5920d17da4d65bfdde7723e691ec5d"}}}}}}, 0x0) 0s ago: executing program 3 (id=817): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x2000000, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0xffffff35, 0x0, 0x0, 0x84, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x4, 0x2, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x0, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x2, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x3, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0xffffffff, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xd72, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x8667, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x80, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x100002, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) kernel console output (not intermixed with test programs): enied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.iEbTtk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.040714][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.062090][ T29] audit: type=1400 audit(1767154067.741:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.090968][ T29] audit: type=1400 audit(1767154067.741:94): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.iEbTtk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.117645][ T29] audit: type=1400 audit(1767154067.741:95): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.iEbTtk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.144984][ T29] audit: type=1400 audit(1767154067.741:96): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.165030][ T29] audit: type=1400 audit(1767154067.771:97): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.167484][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.187757][ T29] audit: type=1400 audit(1767154067.771:98): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=5250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.221700][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.232728][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.246371][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.261654][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.280173][ T29] audit: type=1400 audit(1767154068.051:99): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.305342][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.319317][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.327590][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.351744][ T3493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.360531][ T3493] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.382901][ T3493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.392143][ T3493] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.401020][ T3493] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.410563][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.419623][ T3496] loop0: detected capacity change from 0 to 1024 [ 30.427895][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.466335][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481421][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.498779][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507534][ T3496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 30.542724][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.552022][ T3496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.570578][ T3503] ref_ctr increment failed for inode: 0x12 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaf2c0 [ 30.574352][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.604645][ T3496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1: bg 0: block 88: padding at end of block bitmap is not set [ 30.621825][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.663906][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.674823][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.684023][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.733026][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.861286][ T3529] loop0: detected capacity change from 0 to 2048 [ 30.900395][ T3529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 30.934413][ T3529] mmap: syz.0.12 (3529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.995440][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 31.027754][ T3544] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 31.050431][ T3546] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17'. [ 31.070537][ T3544] 9pnet_fd: Insufficient options for proto=fd [ 31.081485][ T3544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 31.094845][ T3548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 31.102071][ T3548] IPv6: NLM_F_CREATE should be set when creating new route [ 31.120887][ T3546] loop1: detected capacity change from 0 to 1024 [ 31.129379][ T3546] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 31.147565][ T3554] loop4: detected capacity change from 0 to 512 [ 31.158410][ T3554] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.175927][ T3546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.189969][ T3554] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.19: Directory hole found for htree leaf block 0 [ 31.202368][ T3546] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.17: bg 0: block 88: padding at end of block bitmap is not set [ 31.203190][ T3554] EXT4-fs (loop4): Remounting filesystem read-only [ 31.244432][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.275705][ T3554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.287094][ T3559] No such timeout policy "syz0" [ 31.306558][ T3554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.331542][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 31.333538][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.357820][ T3554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.426463][ T3564] loop3: detected capacity change from 0 to 1024 [ 31.450592][ T3564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 31.468934][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.495950][ T3564] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.22: bg 0: block 88: padding at end of block bitmap is not set [ 31.566387][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.603947][ T3572] loop3: detected capacity change from 0 to 512 [ 31.639985][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.681475][ T3572] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.807187][ T3577] ref_ctr increment failed for inode: 0x2d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaaf40 [ 31.820955][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.967406][ T3587] Zero length message leads to an empty skb [ 31.981486][ T3585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 31.988734][ T3585] IPv6: NLM_F_CREATE should be set when creating new route [ 32.039364][ T3589] ref_ctr increment failed for inode: 0x33 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaaf40 [ 32.052162][ T3587] sd 0:0:1:0: device reset [ 32.141089][ T3596] loop1: detected capacity change from 0 to 1024 [ 32.160452][ T3596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 32.187798][ T3595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.204532][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.219331][ T3606] ref_ctr increment failed for inode: 0x39 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888100059440 [ 32.256953][ T3596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.32: bg 0: block 88: padding at end of block bitmap is not set [ 32.287636][ T3607] SELinux: ebitmap: empty map [ 32.294223][ T3607] SELinux: failed to load policy [ 32.321951][ T3610] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.356444][ T3613] loop0: detected capacity change from 0 to 512 [ 32.384730][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.406093][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.468344][ T3613] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.561840][ T3623] loop2: detected capacity change from 0 to 512 [ 32.585038][ T3623] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 32.596013][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.703110][ T3621] loop1: detected capacity change from 0 to 1024 [ 32.710451][ T3621] ======================================================= [ 32.710451][ T3621] WARNING: The mand mount option has been deprecated and [ 32.710451][ T3621] and is ignored by this kernel. Remove the mand [ 32.710451][ T3621] option from the mount to silence this warning. [ 32.710451][ T3621] ======================================================= [ 32.753937][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.775472][ T3632] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.815506][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.838976][ C1] hrtimer: interrupt took 27200 ns [ 32.891715][ T3640] syz.1.47 (3640) used greatest stack depth: 10464 bytes left [ 32.954231][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.961715][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.970815][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.978197][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.044144][ T3655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.126425][ T3667] 9pnet_fd: Insufficient options for proto=fd [ 33.152388][ T3595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.214429][ T3595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.271728][ T3595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.418143][ T582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.477353][ T582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.497662][ T582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.518263][ T582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.739936][ T3706] ref_ctr increment failed for inode: 0x5c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104ea9440 [ 33.907069][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.062850][ T3722] pim6reg: entered allmulticast mode [ 34.075461][ T3722] pim6reg: left allmulticast mode [ 34.151168][ T3322] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 34.254407][ T3742] ref_ctr increment failed for inode: 0x6a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd33600 [ 34.308350][ T3753] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.321452][ T3753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.342960][ T3753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 34.351184][ T3753] System zones: 1-12 [ 34.355600][ T3753] EXT4-fs (loop0): 1 truncate cleaned up [ 34.361953][ T3753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.376198][ T3753] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 34.434197][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.457205][ T3757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 34.477903][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.498040][ T3757] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.73: bg 0: block 88: padding at end of block bitmap is not set [ 34.575785][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.659271][ T3781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.666512][ T3781] IPv6: NLM_F_CREATE should be set when creating new route [ 34.701017][ T3782] batman_adv: batadv0: Adding interface: dummy0 [ 34.707273][ T3782] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.736407][ T3786] ref_ctr increment failed for inode: 0x52 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd35e80 [ 34.738514][ T3782] batman_adv: batadv0: Interface activated: dummy0 [ 34.810492][ T3793] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 34.826898][ T3793] SELinux: policydb magic number 0x7050006 does not match expected magic number 0xf97cff8c [ 34.828042][ T3789] batadv0: mtu less than device minimum [ 34.843580][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.851516][ T3793] SELinux: failed to load policy [ 34.854587][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.869778][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.880743][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.891834][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.902653][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.913679][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 34.924972][ T3789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 35.018159][ T3810] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 35.031470][ T3802] 9p: Bad value for 'source' [ 35.031483][ T29] kauditd_printk_skb: 1149 callbacks suppressed [ 35.031495][ T29] audit: type=1400 audit(1767154072.801:1249): avc: denied { mounton } for pid=3798 comm="syz.0.89" path="/24/bus" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.073608][ T29] audit: type=1326 audit(1767154072.841:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.098809][ T3809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.109395][ T3806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 35.117715][ T3809] EXT4-fs (loop3): 1 truncate cleaned up [ 35.117937][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.138894][ T3806] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.92: bg 0: block 88: padding at end of block bitmap is not set [ 35.142047][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.165629][ T29] audit: type=1326 audit(1767154072.841:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.188864][ T29] audit: type=1326 audit(1767154072.841:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.212186][ T29] audit: type=1326 audit(1767154072.841:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.235561][ T29] audit: type=1326 audit(1767154072.841:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.258799][ T29] audit: type=1326 audit(1767154072.841:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.282016][ T29] audit: type=1326 audit(1767154072.841:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.305310][ T29] audit: type=1326 audit(1767154072.841:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.328694][ T29] audit: type=1326 audit(1767154072.841:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a5814f749 code=0x7ffc0000 [ 35.378545][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.399845][ T3810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.428036][ T3815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.436568][ T3821] netlink: 'syz.0.97': attribute type 17 has an invalid length. [ 35.445985][ T3821] __nla_validate_parse: 16 callbacks suppressed [ 35.446004][ T3821] netlink: 148 bytes leftover after parsing attributes in process `syz.0.97'. [ 35.477789][ T3823] netlink: 152 bytes leftover after parsing attributes in process `syz.2.96'. [ 35.479982][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.498515][ T3821] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 35.522833][ T3815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.587955][ T3828] set_capacity_and_notify: 6 callbacks suppressed [ 35.588017][ T3828] loop2: detected capacity change from 0 to 128 [ 35.626059][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.653549][ T3815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.666909][ T3828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.723871][ T3815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.739486][ T3828] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.753493][ T3835] loop1: detected capacity change from 0 to 512 [ 35.782830][ T3835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.800226][ T3835] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.100: Unimplemented hash flags: 0x0001 [ 35.811680][ T3835] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.100: Corrupt directory, running e2fsck is recommended [ 35.857286][ T2496] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.877069][ T2496] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.896998][ T2496] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.905282][ T2496] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.930172][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.985784][ T3852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 35.998747][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.014324][ T3854] loop2: detected capacity change from 0 to 128 [ 36.031604][ T3854] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.064813][ T3856] loop1: detected capacity change from 0 to 128 [ 36.098691][ T3854] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.120894][ T3856] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.147763][ T3856] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.165343][ T3856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.109: bg 0: bad block bitmap checksum [ 36.202880][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.243779][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.254645][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 36.289075][ T3880] syz.2.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.376360][ T3888] loop2: detected capacity change from 0 to 512 [ 36.411136][ T3888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.426996][ T3888] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.466204][ T3895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.117'. [ 36.476963][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.486198][ T3898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.119'. [ 36.502326][ T3899] netlink: 'syz.4.120': attribute type 21 has an invalid length. [ 36.635081][ T3913] netlink: 108 bytes leftover after parsing attributes in process `syz.4.125'. [ 36.652347][ T3909] SELinux: ebitmap: empty map [ 36.669765][ T3909] SELinux: failed to load policy [ 36.733521][ T3922] loop4: detected capacity change from 0 to 512 [ 36.758585][ T3925] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 36.767302][ T3922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.793286][ T3922] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.821294][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.850104][ T3937] netlink: 152 bytes leftover after parsing attributes in process `syz.3.133'. [ 36.890294][ T3485] IPVS: starting estimator thread 0... [ 36.978368][ T3940] IPVS: using max 2448 ests per chain, 122400 per kthread [ 37.048047][ T3946] netlink: 108 bytes leftover after parsing attributes in process `syz.1.136'. [ 37.060560][ T3949] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 37.095594][ T3949] loop4: detected capacity change from 0 to 4096 [ 37.104920][ T3951] netlink: 56 bytes leftover after parsing attributes in process `syz.1.138'. [ 37.127145][ T3951] netlink: 'syz.1.138': attribute type 2 has an invalid length. [ 37.137697][ T3949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.151884][ T3949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.264398][ T3957] tmpfs: Bad value for 'nr_blocks' [ 37.383378][ T3960] bridge_slave_0: left allmulticast mode [ 37.389187][ T3960] bridge_slave_0: left promiscuous mode [ 37.394887][ T3960] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.426239][ T3960] bridge_slave_1: left allmulticast mode [ 37.432005][ T3960] bridge_slave_1: left promiscuous mode [ 37.437745][ T3960] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.471605][ T3960] bond0: (slave bond_slave_0): Releasing backup interface [ 37.492394][ T3960] bond0: (slave bond_slave_1): Releasing backup interface [ 37.505184][ T3968] loop4: detected capacity change from 0 to 1024 [ 37.513607][ T3960] team0: Port device team_slave_0 removed [ 37.523174][ T3960] team0: Port device team_slave_1 removed [ 37.532411][ T3960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.539905][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.550733][ T3968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.563718][ T3960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.571158][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.656354][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.720523][ T3977] process 'syz.2.145' launched '/dev/fd/4' with NULL argv: empty string added [ 37.786742][ T3985] ref_ctr increment failed for inode: 0xd5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd30d80 [ 37.847152][ T3994] loop4: detected capacity change from 0 to 512 [ 37.873381][ T3994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.888312][ T3994] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.899835][ T3999] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 37.925433][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.945299][ T4000] loop3: detected capacity change from 0 to 512 [ 37.952723][ T4000] EXT4-fs: dax option not supported [ 38.369148][ T4026] FAULT_INJECTION: forcing a failure. [ 38.369148][ T4026] name failslab, interval 1, probability 0, space 0, times 1 [ 38.381826][ T4026] CPU: 0 UID: 0 PID: 4026 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.381853][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.381866][ T4026] Call Trace: [ 38.381876][ T4026] [ 38.381897][ T4026] __dump_stack+0x1d/0x30 [ 38.381919][ T4026] dump_stack_lvl+0x95/0xd0 [ 38.381946][ T4026] dump_stack+0x15/0x1b [ 38.381965][ T4026] should_fail_ex+0x265/0x280 [ 38.381985][ T4026] should_failslab+0x8c/0xb0 [ 38.382003][ T4026] __kmalloc_cache_noprof+0x65/0x4c0 [ 38.382084][ T4026] ? audit_log_d_path+0x8d/0x150 [ 38.382180][ T4026] audit_log_d_path+0x8d/0x150 [ 38.382212][ T4026] audit_log_d_path_exe+0x42/0x70 [ 38.382235][ T4026] audit_log_task+0x1e9/0x250 [ 38.382261][ T4026] ? kstrtouint+0x76/0xc0 [ 38.382277][ T4026] audit_seccomp+0x61/0x100 [ 38.382322][ T4026] ? __seccomp_filter+0x832/0x1260 [ 38.382349][ T4026] __seccomp_filter+0x843/0x1260 [ 38.382377][ T4026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 38.382422][ T4026] ? vfs_write+0x7e8/0x960 [ 38.382438][ T4026] ? __rcu_read_unlock+0x4f/0x70 [ 38.382454][ T4026] ? __fget_files+0x184/0x1c0 [ 38.382481][ T4026] __secure_computing+0x82/0x150 [ 38.382537][ T4026] syscall_trace_enter+0xcf/0x1e0 [ 38.382635][ T4026] do_syscall_64+0xa4/0x2b0 [ 38.382669][ T4026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.382714][ T4026] RIP: 0033:0x7fc7d015f749 [ 38.382729][ T4026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.382747][ T4026] RSP: 002b:00007fc7cebbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b6 [ 38.382767][ T4026] RAX: ffffffffffffffda RBX: 00007fc7d03b5fa0 RCX: 00007fc7d015f749 [ 38.382780][ T4026] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 38.382848][ T4026] RBP: 00007fc7cebbf090 R08: 0000000000000000 R09: 0000000000000000 [ 38.382859][ T4026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.382941][ T4026] R13: 00007fc7d03b6038 R14: 00007fc7d03b5fa0 R15: 00007ffe6950eb88 [ 38.382957][ T4026] [ 38.666572][ T4029] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.686011][ T4029] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.748133][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.813619][ T4039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.820886][ T4039] IPv6: NLM_F_CREATE should be set when creating new route [ 39.140483][ T4042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.226287][ T4042] capability: warning: `syz.2.166' uses 32-bit capabilities (legacy support in use) [ 39.469047][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.511987][ T4048] net_ratelimit: 14 callbacks suppressed [ 39.512004][ T4048] Set syz1 is full, maxelem 65536 reached [ 39.631880][ T4062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.651908][ T4062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.702108][ T4062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.730834][ T4082] FAULT_INJECTION: forcing a failure. [ 39.730834][ T4082] name failslab, interval 1, probability 0, space 0, times 0 [ 39.743557][ T4082] CPU: 1 UID: 0 PID: 4082 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.743627][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.743639][ T4082] Call Trace: [ 39.743645][ T4082] [ 39.743653][ T4082] __dump_stack+0x1d/0x30 [ 39.743676][ T4082] dump_stack_lvl+0x95/0xd0 [ 39.743763][ T4082] dump_stack+0x15/0x1b [ 39.743781][ T4082] should_fail_ex+0x265/0x280 [ 39.743879][ T4082] should_failslab+0x8c/0xb0 [ 39.743900][ T4082] kmem_cache_alloc_noprof+0x69/0x4b0 [ 39.743922][ T4082] ? getname_flags+0x80/0x3b0 [ 39.743962][ T4082] getname_flags+0x80/0x3b0 [ 39.743985][ T4082] do_sys_openat2+0x60/0x150 [ 39.744083][ T4082] __x64_sys_openat+0xf2/0x120 [ 39.744110][ T4082] x64_sys_call+0x2b07/0x3000 [ 39.744174][ T4082] do_syscall_64+0xca/0x2b0 [ 39.744236][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.744253][ T4082] RIP: 0033:0x7ff7ef6fdf90 [ 39.744268][ T4082] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 39.744293][ T4082] RSP: 002b:00007ff7ee15eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 39.744313][ T4082] RAX: ffffffffffffffda RBX: 000000000000c300 RCX: 00007ff7ef6fdf90 [ 39.744325][ T4082] RDX: 000000000000c300 RSI: 00007ff7ee15ec10 RDI: 00000000ffffff9c [ 39.744336][ T4082] RBP: 00007ff7ee15ec10 R08: 0000000000000000 R09: 0000000000000000 [ 39.744377][ T4082] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 39.744389][ T4082] R13: 00007ff7ef956038 R14: 00007ff7ef955fa0 R15: 00007ffde56530e8 [ 39.744407][ T4082] [ 39.920168][ T4086] ref_ctr increment failed for inode: 0x11e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd36c00 [ 39.944163][ T4062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.007156][ T4096] EXT4-fs: inline encryption not supported [ 40.013046][ T4096] EXT4-fs: Ignoring removed i_version option [ 40.021044][ T4096] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.037689][ T1902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.046806][ T4096] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.187: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.049086][ T288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.069075][ T4096] __quota_error: 1373 callbacks suppressed [ 40.069086][ T4096] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 40.083348][ T4096] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.187: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.098386][ T4096] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 40.098943][ T1902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.107194][ T4096] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.187: Failed to acquire dquot type 0 [ 40.126862][ T4096] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 40.138182][ T1902] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.146484][ T4096] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.187: mark_inode_dirty error [ 40.157946][ T4096] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 40.168153][ T4096] EXT4-fs (loop4): 1 orphan inode deleted [ 40.174785][ T4096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.186956][ T582] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.201491][ T4104] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 40.215641][ T582] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 40.224113][ T582] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 40.225788][ T4104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.249343][ T4096] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 16: comm syz.4.187: lblock 0 mapped to illegal pblock 16 (length 1) [ 40.271173][ T29] audit: type=1400 audit(1767154078.021:2632): avc: denied { setopt } for pid=4108 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.290699][ T29] audit: type=1400 audit(1767154078.031:2633): avc: denied { write } for pid=4108 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.310002][ T29] audit: type=1400 audit(1767154078.031:2634): avc: denied { connect } for pid=4108 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.329450][ T29] audit: type=1400 audit(1767154078.031:2635): avc: denied { name_connect } for pid=4108 comm="syz.2.191" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 40.354884][ T4110] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 16: comm syz.4.187: lblock 0 mapped to illegal pblock 16 (length 1) [ 40.370004][ T4105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.377099][ T4105] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 40.388505][ T4105] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 40.438340][ T29] audit: type=1400 audit(1767154078.181:2636): avc: denied { shutdown } for pid=4108 comm="syz.2.191" lport=41858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.449428][ T4115] __nla_validate_parse: 21 callbacks suppressed [ 40.449440][ T4115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.192'. [ 40.466039][ T4104] gretap1: entered promiscuous mode [ 40.490641][ T4104] bond1: (slave gretap1): making interface the new active one [ 40.498189][ T29] audit: type=1400 audit(1767154078.211:2637): avc: denied { read } for pid=4114 comm="syz.2.192" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 40.508002][ T4104] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 40.521218][ T29] audit: type=1400 audit(1767154078.211:2638): avc: denied { open } for pid=4114 comm="syz.2.192" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 40.618558][ T4115] x_tables: duplicate underflow at hook 2 [ 40.645215][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.659860][ T3322] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.663241][ T4125] capability: warning: `syz.1.195' uses deprecated v2 capabilities in a way that may be insecure [ 40.683348][ T3322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 40.699068][ T3322] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 40.755230][ T4133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.198'. [ 40.767600][ T4134] bridge0: entered promiscuous mode [ 40.773003][ T4134] macsec1: entered promiscuous mode [ 40.778647][ T4137] ref_ctr increment failed for inode: 0xe0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd33cc0 [ 40.779487][ T4134] bridge0: port 3(macsec1) entered blocking state [ 40.796224][ T4134] bridge0: port 3(macsec1) entered disabled state [ 40.802853][ T4134] macsec1: entered allmulticast mode [ 40.808360][ T4134] bridge0: entered allmulticast mode [ 40.814255][ T4134] macsec1: left allmulticast mode [ 40.819362][ T4134] bridge0: left allmulticast mode [ 40.825121][ T4134] bridge0: left promiscuous mode [ 40.887242][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 40.940183][ T4154] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 41.053519][ T4164] SELinux: ebitmap: empty map [ 41.193007][ T4104] syz.0.190 (4104) used greatest stack depth: 10360 bytes left [ 41.202636][ T4164] SELinux: failed to load policy [ 41.944835][ T4182] ref_ctr increment failed for inode: 0xc3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd372c0 [ 42.028981][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 42.083361][ T4191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.092341][ T4191] netlink: 108 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.102650][ T4191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.162250][ T4191] netlink: 108 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.171288][ T4191] netlink: 84 bytes leftover after parsing attributes in process `syz.4.218'. [ 42.180664][ T4197] set_capacity_and_notify: 3 callbacks suppressed [ 42.180675][ T4197] loop3: detected capacity change from 0 to 512 [ 42.211009][ T4197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.214995][ T4202] loop4: detected capacity change from 0 to 512 [ 42.228116][ T4202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.249778][ T4197] EXT4-fs (loop3): 1 truncate cleaned up [ 42.255825][ T4202] EXT4-fs (loop4): 1 truncate cleaned up [ 42.266022][ T4197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.308957][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.658337][ T4218] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 42.674866][ T4214] SELinux: policydb magic number 0x7050006 does not match expected magic number 0xf97cff8c [ 42.733527][ T4214] SELinux: failed to load policy [ 42.988937][ T4223] SELinux: ebitmap: empty map [ 42.990344][ T4195] Set syz1 is full, maxelem 65536 reached [ 42.994789][ T4223] SELinux: failed to load policy [ 43.019394][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.040359][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.063294][ T4227] netlink: 256 bytes leftover after parsing attributes in process `syz.2.232'. [ 43.162279][ T4235] loop4: detected capacity change from 0 to 512 [ 43.198232][ T4235] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.240277][ T4235] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.247016][ T4235] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.231: Allocating blocks 41-42 which overlap fs metadata [ 43.275124][ T4172] IPVS: starting estimator thread 0... [ 43.282591][ T4235] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.231: Allocating blocks 41-42 which overlap fs metadata [ 43.296381][ T4247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.312337][ T4252] ref_ctr increment failed for inode: 0x15d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd34a40 [ 43.323708][ T4235] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.231: Failed to acquire dquot type 1 [ 43.337951][ T4235] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.354049][ T4235] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.231: corrupted inode contents [ 43.369040][ T4235] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.231: mark_inode_dirty error [ 43.378305][ T4249] IPVS: using max 2208 ests per chain, 110400 per kthread [ 43.388075][ T4235] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.231: corrupted inode contents [ 43.400055][ T4235] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.231: mark_inode_dirty error [ 43.413303][ T4235] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.231: corrupted inode contents [ 43.425321][ T4235] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 43.441911][ T4235] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.231: corrupted inode contents [ 43.453788][ T4235] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.231: mark_inode_dirty error [ 43.472303][ T4235] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 43.503016][ T4235] EXT4-fs (loop4): 1 truncate cleaned up [ 43.564590][ T4235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.577330][ T4235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.707001][ T4235] syz.4.231 (4235) used greatest stack depth: 9952 bytes left [ 43.829262][ T4266] veth2: entered allmulticast mode [ 43.970819][ T4254] Set syz1 is full, maxelem 65536 reached [ 44.059575][ T4276] Driver unsupported XDP return value 0 on prog (id 202) dev N/A, expect packet loss! [ 44.075048][ T4293] ref_ctr increment failed for inode: 0x147 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaaf40 [ 44.139562][ T4299] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 44.175706][ T4302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 44.250596][ T4304] SELinux: ebitmap: empty map [ 44.265727][ T4304] SELinux: failed to load policy [ 44.290310][ T4310] sd 0:0:1:0: device reset [ 44.377145][ T4332] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 44.634127][ T4354] ref_ctr increment failed for inode: 0x167 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaa1c0 [ 44.720493][ T4370] FAULT_INJECTION: forcing a failure. [ 44.720493][ T4370] name failslab, interval 1, probability 0, space 0, times 0 [ 44.733232][ T4370] CPU: 0 UID: 0 PID: 4370 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.733280][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.733292][ T4370] Call Trace: [ 44.733299][ T4370] [ 44.733305][ T4370] __dump_stack+0x1d/0x30 [ 44.733326][ T4370] dump_stack_lvl+0x95/0xd0 [ 44.733358][ T4370] dump_stack+0x15/0x1b [ 44.733376][ T4370] should_fail_ex+0x265/0x280 [ 44.733419][ T4370] should_failslab+0x8c/0xb0 [ 44.733441][ T4370] __kmalloc_cache_noprof+0x65/0x4c0 [ 44.733574][ T4370] ? audit_log_d_path+0x8d/0x150 [ 44.733593][ T4370] audit_log_d_path+0x8d/0x150 [ 44.733610][ T4370] audit_log_d_path_exe+0x42/0x70 [ 44.733652][ T4370] audit_log_task+0x1e9/0x250 [ 44.733682][ T4370] ? kstrtouint+0x76/0xc0 [ 44.733702][ T4370] audit_seccomp+0x61/0x100 [ 44.733729][ T4370] ? __seccomp_filter+0x832/0x1260 [ 44.733796][ T4370] __seccomp_filter+0x843/0x1260 [ 44.733822][ T4370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.733874][ T4370] ? vfs_write+0x7e8/0x960 [ 44.733897][ T4370] __secure_computing+0x82/0x150 [ 44.733969][ T4370] syscall_trace_enter+0xcf/0x1e0 [ 44.734042][ T4370] do_syscall_64+0xa4/0x2b0 [ 44.734116][ T4370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.734134][ T4370] RIP: 0033:0x7f9a5814f749 [ 44.734180][ T4370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.734197][ T4370] RSP: 002b:00007f9a56baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 44.734217][ T4370] RAX: ffffffffffffffda RBX: 00007f9a583a5fa0 RCX: 00007f9a5814f749 [ 44.734230][ T4370] RDX: 0000000000000000 RSI: 0000000000000480 RDI: 0000000000000000 [ 44.734241][ T4370] RBP: 00007f9a56baf090 R08: 0000000000000000 R09: 0000000000000000 [ 44.734276][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.734289][ T4370] R13: 00007f9a583a6038 R14: 00007f9a583a5fa0 R15: 00007ffd84cedf88 [ 44.734338][ T4370] [ 44.977109][ T4375] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 45.082654][ T29] kauditd_printk_skb: 896 callbacks suppressed [ 45.082666][ T29] audit: type=1326 audit(1767154082.851:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.125090][ T29] audit: type=1326 audit(1767154082.881:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.148431][ T29] audit: type=1326 audit(1767154082.881:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.171766][ T29] audit: type=1326 audit(1767154082.881:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.194979][ T29] audit: type=1326 audit(1767154082.881:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.218334][ T29] audit: type=1326 audit(1767154082.881:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.241683][ T29] audit: type=1326 audit(1767154082.881:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.265015][ T29] audit: type=1326 audit(1767154082.881:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.288324][ T29] audit: type=1326 audit(1767154082.881:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.311629][ T29] audit: type=1326 audit(1767154082.881:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 45.343422][ T4401] FAULT_INJECTION: forcing a failure. [ 45.343422][ T4401] name failslab, interval 1, probability 0, space 0, times 0 [ 45.356205][ T4401] CPU: 1 UID: 0 PID: 4401 Comm: syz.3.294 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.356236][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.356291][ T4401] Call Trace: [ 45.356298][ T4401] [ 45.356305][ T4401] __dump_stack+0x1d/0x30 [ 45.356329][ T4401] dump_stack_lvl+0x95/0xd0 [ 45.356383][ T4401] dump_stack+0x15/0x1b [ 45.356402][ T4401] should_fail_ex+0x265/0x280 [ 45.356481][ T4401] should_failslab+0x8c/0xb0 [ 45.356502][ T4401] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 45.356525][ T4401] ? __alloc_skb+0x2ff/0x4b0 [ 45.356548][ T4401] __alloc_skb+0x2ff/0x4b0 [ 45.356614][ T4401] ? __alloc_skb+0x228/0x4b0 [ 45.356704][ T4401] netlink_alloc_large_skb+0xbf/0xf0 [ 45.356730][ T4401] netlink_sendmsg+0x3cf/0x6b0 [ 45.356760][ T4401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.356829][ T4401] __sock_sendmsg+0x145/0x180 [ 45.356848][ T4401] ____sys_sendmsg+0x31e/0x4a0 [ 45.356977][ T4401] ___sys_sendmsg+0x17b/0x1d0 [ 45.357060][ T4401] ? __bpf_get_stackid+0x775/0x7d0 [ 45.357099][ T4401] __x64_sys_sendmsg+0xd4/0x160 [ 45.357162][ T4401] x64_sys_call+0x17ba/0x3000 [ 45.357185][ T4401] do_syscall_64+0xca/0x2b0 [ 45.357215][ T4401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.357288][ T4401] RIP: 0033:0x7f9a5814f749 [ 45.357304][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.357320][ T4401] RSP: 002b:00007f9a56baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.357339][ T4401] RAX: ffffffffffffffda RBX: 00007f9a583a5fa0 RCX: 00007f9a5814f749 [ 45.357352][ T4401] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000006 [ 45.357365][ T4401] RBP: 00007f9a56baf090 R08: 0000000000000000 R09: 0000000000000000 [ 45.357412][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.357425][ T4401] R13: 00007f9a583a6038 R14: 00007f9a583a5fa0 R15: 00007ffd84cedf88 [ 45.357451][ T4401] [ 45.399968][ T4393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.567181][ T4393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.993604][ T4457] pimreg: entered allmulticast mode [ 46.004584][ T4457] pimreg: left allmulticast mode [ 46.010824][ T4459] __nla_validate_parse: 25 callbacks suppressed [ 46.010836][ T4459] netlink: 256 bytes leftover after parsing attributes in process `syz.4.306'. [ 46.046171][ T4459] loop4: detected capacity change from 0 to 1024 [ 46.060198][ T4459] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 46.071208][ T4464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.079107][ T4459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.093158][ T4459] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.306: bg 0: block 88: padding at end of block bitmap is not set [ 46.143857][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.216379][ T4469] sd 0:0:1:0: device reset [ 46.300777][ T4487] FAULT_INJECTION: forcing a failure. [ 46.300777][ T4487] name failslab, interval 1, probability 0, space 0, times 0 [ 46.313465][ T4487] CPU: 0 UID: 0 PID: 4487 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.313488][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.313499][ T4487] Call Trace: [ 46.313505][ T4487] [ 46.313512][ T4487] __dump_stack+0x1d/0x30 [ 46.313606][ T4487] dump_stack_lvl+0x95/0xd0 [ 46.313657][ T4487] dump_stack+0x15/0x1b [ 46.313677][ T4487] should_fail_ex+0x265/0x280 [ 46.313700][ T4487] should_failslab+0x8c/0xb0 [ 46.313722][ T4487] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 46.313846][ T4487] ? __d_alloc+0x37/0x340 [ 46.313872][ T4487] __d_alloc+0x37/0x340 [ 46.313891][ T4487] ? mpol_shared_policy_init+0xbd/0x4c0 [ 46.313917][ T4487] d_alloc_pseudo+0x1e/0x80 [ 46.313978][ T4487] alloc_file_pseudo+0x71/0x160 [ 46.314076][ T4487] __shmem_file_setup+0x1de/0x210 [ 46.314097][ T4487] shmem_file_setup+0x3b/0x50 [ 46.314135][ T4487] __se_sys_memfd_create+0x2f7/0x6b0 [ 46.314162][ T4487] __x64_sys_memfd_create+0x31/0x40 [ 46.314256][ T4487] x64_sys_call+0x28cb/0x3000 [ 46.314276][ T4487] do_syscall_64+0xca/0x2b0 [ 46.314303][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.314325][ T4487] RIP: 0033:0x7f1c8865f749 [ 46.314384][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.314402][ T4487] RSP: 002b:00007f1c870c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 46.314423][ T4487] RAX: ffffffffffffffda RBX: 000000000000072d RCX: 00007f1c8865f749 [ 46.314436][ T4487] RDX: 00007f1c870c6ef0 RSI: 0000000000000000 RDI: 00007f1c886e4960 [ 46.314448][ T4487] RBP: 00002000000014c0 R08: 00007f1c870c6bb7 R09: 00007f1c870c6e40 [ 46.314525][ T4487] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 46.314536][ T4487] R13: 00007f1c870c6ef0 R14: 00007f1c870c6eb0 R15: 00002000000001c0 [ 46.314609][ T4487] [ 46.388121][ T4488] loop3: detected capacity change from 0 to 512 [ 46.575795][ T4488] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.311: EA inode hash validation failed [ 46.594628][ T4488] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.621134][ T4488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.311: corrupted inode contents [ 46.638451][ T4488] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.311: mark_inode_dirty error [ 46.653393][ T4488] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.311: corrupted inode contents [ 46.668121][ T4488] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.311: mark_inode_dirty error [ 46.681841][ T4488] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.311: mark inode dirty (error -117) [ 46.695478][ T4488] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 46.711264][ T4488] EXT4-fs (loop3): 1 orphan inode deleted [ 46.722399][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.736388][ T4516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.762693][ T4526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.318'. [ 46.841370][ T4523] sd 0:0:1:0: device reset [ 46.995924][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.328'. [ 46.998593][ T4558] netlink: 256 bytes leftover after parsing attributes in process `syz.0.329'. [ 47.005976][ T4556] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 47.063108][ T4562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.070348][ T4562] IPv6: NLM_F_CREATE should be set when creating new route [ 47.162617][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.201685][ T4582] FAULT_INJECTION: forcing a failure. [ 47.201685][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 47.214353][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.214378][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.214389][ T4582] Call Trace: [ 47.214394][ T4582] [ 47.214399][ T4582] __dump_stack+0x1d/0x30 [ 47.214418][ T4582] dump_stack_lvl+0x95/0xd0 [ 47.214434][ T4582] dump_stack+0x15/0x1b [ 47.214449][ T4582] should_fail_ex+0x265/0x280 [ 47.214467][ T4582] should_failslab+0x8c/0xb0 [ 47.214484][ T4582] __kmalloc_cache_noprof+0x65/0x4c0 [ 47.214502][ T4582] ? allocate_file_region_entries+0xd2/0x310 [ 47.214520][ T4582] allocate_file_region_entries+0xd2/0x310 [ 47.214539][ T4582] region_chg+0x232/0x2d0 [ 47.214564][ T4582] hugetlb_reserve_pages+0x189/0x9b0 [ 47.214593][ T4582] ? touch_atime+0x2a8/0x340 [ 47.214615][ T4582] hugetlbfs_file_mmap_prepare+0x203/0x2e0 [ 47.214640][ T4582] mmap_region+0x8e6/0x1410 [ 47.214656][ T4582] ? avc_has_perm+0xf7/0x180 [ 47.214690][ T4582] do_mmap+0x9b3/0xbe0 [ 47.214712][ T4582] __se_sys_remap_file_pages+0x537/0x5e0 [ 47.214736][ T4582] ? mutex_unlock+0x4f/0x90 [ 47.214755][ T4582] ? fput+0x8f/0xc0 [ 47.214775][ T4582] __x64_sys_remap_file_pages+0x67/0x80 [ 47.214797][ T4582] x64_sys_call+0x248c/0x3000 [ 47.214815][ T4582] do_syscall_64+0xca/0x2b0 [ 47.214840][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.214856][ T4582] RIP: 0033:0x7f9a5814f749 [ 47.214868][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.214881][ T4582] RSP: 002b:00007f9a56baf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 47.214896][ T4582] RAX: ffffffffffffffda RBX: 00007f9a583a5fa0 RCX: 00007f9a5814f749 [ 47.214906][ T4582] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 47.214915][ T4582] RBP: 00007f9a56baf090 R08: 0000000000010000 R09: 0000000000000000 [ 47.214925][ T4582] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 47.214934][ T4582] R13: 00007f9a583a6038 R14: 00007f9a583a5fa0 R15: 00007ffd84cedf88 [ 47.214949][ T4582] [ 47.492071][ T4591] netlink: 256 bytes leftover after parsing attributes in process `syz.0.342'. [ 47.535267][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 47.544217][ T4599] netlink: 108 bytes leftover after parsing attributes in process `syz.1.343'. [ 47.553563][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 47.562919][ T4599] netlink: 108 bytes leftover after parsing attributes in process `syz.1.343'. [ 47.571982][ T4599] netlink: 84 bytes leftover after parsing attributes in process `syz.1.343'. [ 47.607636][ T4597] sd 0:0:1:0: device reset [ 47.623213][ T4603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.856803][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.867187][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.896732][ T4635] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 48.169310][ T4646] netlink: 'syz.2.359': attribute type 13 has an invalid length. [ 48.427018][ T4660] loop4: detected capacity change from 0 to 2048 [ 48.441471][ T4660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.465384][ T4660] forcing mempool usage for bio_alloc_bioset+0x449/0xa50 [ 48.486062][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.612791][ T4680] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 48.628797][ T4681] sd 0:0:1:0: device reset [ 48.635819][ T4678] sd 0:0:1:0: device reset [ 48.697701][ T4688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.707450][ T4688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.737027][ T4690] loop4: detected capacity change from 0 to 1024 [ 48.752675][ T4690] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.763619][ T4690] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 48.779245][ T4690] JBD2: no valid journal superblock found [ 48.784994][ T4690] EXT4-fs (loop4): Could not load journal inode [ 48.806272][ T4699] SELinux: Context Ü is not valid (left unmapped). [ 48.822060][ T4699] loop3: detected capacity change from 0 to 2048 [ 48.922420][ T3311] Alternate GPT is invalid, using primary GPT. [ 48.928829][ T3311] loop3: p2 p3 p7 [ 48.944400][ T4699] Alternate GPT is invalid, using primary GPT. [ 48.947185][ T4709] loop7: detected capacity change from 0 to 16384 [ 48.950728][ T4699] loop3: p2 p3 p7 [ 48.978586][ T4709] loop7: detected capacity change from 16384 to 16383 [ 49.057855][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 49.059987][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.081694][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.123031][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 49.134163][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.145164][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 49.259152][ T4719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.341753][ T4728] SELinux: Context @ is not valid (left unmapped). [ 49.369190][ T4719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.436355][ T4733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4733 comm=syz.0.392 [ 49.448854][ T4733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4733 comm=syz.0.392 [ 49.472435][ T4719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.532423][ T4719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.676228][ T582] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.735126][ T582] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.756254][ T582] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.778349][ T582] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.874255][ T4751] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4751 comm=syz.1.399 [ 49.886763][ T4751] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4751 comm=syz.1.399 [ 50.004089][ T4758] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 50.088850][ T29] kauditd_printk_skb: 1430 callbacks suppressed [ 50.088863][ T29] audit: type=1326 audit(1767154087.861:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.153274][ T29] audit: type=1326 audit(1767154087.861:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.176678][ T29] audit: type=1326 audit(1767154087.861:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8865f749 code=0x7ffc0000 [ 50.200053][ T29] audit: type=1326 audit(1767154087.861:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8865f749 code=0x7ffc0000 [ 50.223404][ T29] audit: type=1326 audit(1767154087.861:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.246797][ T29] audit: type=1326 audit(1767154087.861:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.270196][ T29] audit: type=1326 audit(1767154087.861:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.293547][ T29] audit: type=1326 audit(1767154087.861:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.316926][ T29] audit: type=1326 audit(1767154087.861:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.340272][ T29] audit: type=1326 audit(1767154087.891:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7d0192005 code=0x7ffc0000 [ 50.363955][ T4722] syz.3.387 (4722) used greatest stack depth: 7264 bytes left [ 50.451796][ T4783] ref_ctr increment failed for inode: 0x1f4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaca40 [ 50.539815][ T4786] FAULT_INJECTION: forcing a failure. [ 50.539815][ T4786] name failslab, interval 1, probability 0, space 0, times 0 [ 50.552464][ T4786] CPU: 1 UID: 0 PID: 4786 Comm: Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.552486][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.552498][ T4786] Call Trace: [ 50.552505][ T4786] [ 50.552514][ T4786] __dump_stack+0x1d/0x30 [ 50.552539][ T4786] dump_stack_lvl+0x95/0xd0 [ 50.552671][ T4786] dump_stack+0x15/0x1b [ 50.552689][ T4786] should_fail_ex+0x265/0x280 [ 50.552768][ T4786] should_failslab+0x8c/0xb0 [ 50.552791][ T4786] kmem_cache_alloc_noprof+0x69/0x4b0 [ 50.552814][ T4786] ? getname_flags+0x80/0x3b0 [ 50.552842][ T4786] getname_flags+0x80/0x3b0 [ 50.552866][ T4786] io_openat2_prep+0x1a6/0x320 [ 50.552891][ T4786] io_submit_sqes+0x70f/0x11b0 [ 50.552932][ T4786] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 50.552972][ T4786] ? 0xffffffff81000000 [ 50.552986][ T4786] ? __rcu_read_unlock+0x4f/0x70 [ 50.553024][ T4786] ? proc_fail_nth_write+0x13b/0x160 [ 50.553052][ T4786] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.553154][ T4786] ? vfs_write+0x7e8/0x960 [ 50.553249][ T4786] ? __rcu_read_unlock+0x4f/0x70 [ 50.553270][ T4786] ? __fget_files+0x184/0x1c0 [ 50.553343][ T4786] ? mutex_unlock+0x4f/0x90 [ 50.553368][ T4786] ? fput+0x8f/0xc0 [ 50.553395][ T4786] __x64_sys_io_uring_enter+0x78/0x90 [ 50.553468][ T4786] x64_sys_call+0x27e4/0x3000 [ 50.553491][ T4786] do_syscall_64+0xca/0x2b0 [ 50.553518][ T4786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.553599][ T4786] RIP: 0033:0x7f1c8865f749 [ 50.553615][ T4786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.553629][ T4786] RSP: 002b:00007f1c870c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 50.553645][ T4786] RAX: ffffffffffffffda RBX: 00007f1c888b5fa0 RCX: 00007f1c8865f749 [ 50.553656][ T4786] RDX: 0000000000007723 RSI: 0000000000003516 RDI: 0000000000000005 [ 50.553666][ T4786] RBP: 00007f1c870c7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.553730][ T4786] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 50.553751][ T4786] R13: 00007f1c888b6038 R14: 00007f1c888b5fa0 R15: 00007ffc2058f848 [ 50.553770][ T4786] [ 50.798266][ T4808] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.844125][ T4815] FAULT_INJECTION: forcing a failure. [ 50.844125][ T4815] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.857509][ T4815] CPU: 1 UID: 0 PID: 4815 Comm: syz.1.412 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.857531][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.857541][ T4815] Call Trace: [ 50.857547][ T4815] [ 50.857554][ T4815] __dump_stack+0x1d/0x30 [ 50.857601][ T4815] dump_stack_lvl+0x95/0xd0 [ 50.857618][ T4815] dump_stack+0x15/0x1b [ 50.857635][ T4815] should_fail_ex+0x265/0x280 [ 50.857724][ T4815] should_fail_alloc_page+0xf2/0x100 [ 50.857748][ T4815] __alloc_frozen_pages_noprof+0x109/0x360 [ 50.857774][ T4815] alloc_pages_mpol+0xb3/0x260 [ 50.857872][ T4815] vma_alloc_folio_noprof+0x1aa/0x300 [ 50.857901][ T4815] do_wp_page+0xf60/0x2510 [ 50.857931][ T4815] ? __rcu_read_lock+0x37/0x50 [ 50.857950][ T4815] handle_mm_fault+0x7b0/0x2c60 [ 50.858053][ T4815] ? __rcu_read_unlock+0x4f/0x70 [ 50.858073][ T4815] ? mt_find+0x21b/0x330 [ 50.858148][ T4815] do_user_addr_fault+0x3fe/0x1080 [ 50.858175][ T4815] exc_page_fault+0x62/0xa0 [ 50.858243][ T4815] asm_exc_page_fault+0x26/0x30 [ 50.858261][ T4815] RIP: 0010:__put_user_4+0xd/0x20 [ 50.858370][ T4815] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 9f 01 00 90 90 90 90 90 90 90 90 90 90 [ 50.858408][ T4815] RSP: 0018:ffffc90000a37d70 EFLAGS: 00050202 [ 50.858425][ T4815] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 50.858438][ T4815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.858451][ T4815] RBP: 0000000000040000 R08: 0001c90000a37bf7 R09: 0000000000000000 [ 50.858464][ T4815] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000000000000001 [ 50.858475][ T4815] R13: 0000200000008000 R14: 0000200000007fc0 R15: 00000000000003ff [ 50.858491][ T4815] __sys_sendmmsg+0x19b/0x300 [ 50.858586][ T4815] __x64_sys_sendmmsg+0x57/0x70 [ 50.858613][ T4815] x64_sys_call+0x1e28/0x3000 [ 50.858649][ T4815] do_syscall_64+0xca/0x2b0 [ 50.858678][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.858697][ T4815] RIP: 0033:0x7ff7ef6ff749 [ 50.858782][ T4815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.858796][ T4815] RSP: 002b:00007ff7ee15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.858814][ T4815] RAX: ffffffffffffffda RBX: 00007ff7ef955fa0 RCX: 00007ff7ef6ff749 [ 50.858872][ T4815] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 50.858884][ T4815] RBP: 00007ff7ee15f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.858897][ T4815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.858909][ T4815] R13: 00007ff7ef956038 R14: 00007ff7ef955fa0 R15: 00007ffde56530e8 [ 50.858928][ T4815] [ 51.193806][ T4826] netlink: 'syz.3.416': attribute type 27 has an invalid length. [ 51.201881][ T4829] ref_ctr increment failed for inode: 0x180 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaf2c0 [ 51.214933][ T4828] __nla_validate_parse: 10 callbacks suppressed [ 51.214946][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 51.408117][ T4844] loop4: detected capacity change from 0 to 2048 [ 51.440727][ T4844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.469653][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.941229][ T4859] loop4: detected capacity change from 0 to 512 [ 51.962422][ T4859] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.977504][ T4859] EXT4-fs (loop4): mount failed [ 52.044054][ T4863] sd 0:0:1:0: device reset [ 52.062695][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 52.099030][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 52.111730][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 52.162809][ T4877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.172283][ T4877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.181687][ T4877] SELinux: failed to load policy [ 52.306504][ T4887] ref_ctr increment failed for inode: 0x24b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eabcc0 [ 52.401701][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 52.497324][ T4903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.436'. [ 52.979629][ T4914] netlink: 'syz.3.442': attribute type 12 has an invalid length. [ 52.995221][ T4913] loop4: detected capacity change from 0 to 512 [ 53.030412][ T4913] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.444: EA inode hash validation failed [ 53.045144][ T4913] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.444: corrupted inode contents [ 53.060111][ T4913] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.444: mark_inode_dirty error [ 53.075049][ T4913] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.444: corrupted inode contents [ 53.089458][ T4913] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.444: mark_inode_dirty error [ 53.102618][ T4913] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.444: mark inode dirty (error -117) [ 53.116852][ T4913] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 53.127242][ T4913] EXT4-fs (loop4): 1 orphan inode deleted [ 53.181548][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.201634][ T4918] netlink: 520 bytes leftover after parsing attributes in process `syz.1.445'. [ 53.233102][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.274841][ T4924] sd 0:0:1:0: device reset [ 53.281195][ T4922] FAULT_INJECTION: forcing a failure. [ 53.281195][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 53.293917][ T4922] CPU: 1 UID: 0 PID: 4922 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.294010][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.294022][ T4922] Call Trace: [ 53.294028][ T4922] [ 53.294035][ T4922] __dump_stack+0x1d/0x30 [ 53.294055][ T4922] dump_stack_lvl+0x95/0xd0 [ 53.294073][ T4922] dump_stack+0x15/0x1b [ 53.294100][ T4922] should_fail_ex+0x265/0x280 [ 53.294122][ T4922] should_failslab+0x8c/0xb0 [ 53.294209][ T4922] kmem_cache_alloc_noprof+0x69/0x4b0 [ 53.294227][ T4922] ? getname_kernel+0x3c/0x1f0 [ 53.294289][ T4922] ? kmalloc_reserve+0x84/0x190 [ 53.294315][ T4922] getname_kernel+0x3c/0x1f0 [ 53.294339][ T4922] kern_path+0x23/0x130 [ 53.294364][ T4922] unix_find_other+0xe9/0x700 [ 53.294458][ T4922] ? skb_set_owner_w+0x19b/0x200 [ 53.294561][ T4922] unix_stream_connect+0x31b/0xa00 [ 53.294592][ T4922] ? __pfx_unix_stream_connect+0x10/0x10 [ 53.294620][ T4922] __sys_connect+0x1f2/0x2b0 [ 53.294660][ T4922] __x64_sys_connect+0x3f/0x50 [ 53.294680][ T4922] x64_sys_call+0x2e09/0x3000 [ 53.294709][ T4922] do_syscall_64+0xca/0x2b0 [ 53.294743][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.294765][ T4922] RIP: 0033:0x7ff7ef6ff749 [ 53.294855][ T4922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.294973][ T4922] RSP: 002b:00007ff7ee15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 53.294994][ T4922] RAX: ffffffffffffffda RBX: 00007ff7ef955fa0 RCX: 00007ff7ef6ff749 [ 53.295007][ T4922] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000006 [ 53.295020][ T4922] RBP: 00007ff7ee15f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.295032][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.295043][ T4922] R13: 00007ff7ef956038 R14: 00007ff7ef955fa0 R15: 00007ffde56530e8 [ 53.295060][ T4922] [ 53.516905][ T4930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.541018][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 53.572731][ T4936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4936 comm=syz.3.451 [ 53.585154][ T4936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4936 comm=syz.3.451 [ 53.846041][ T4950] netlink: 312 bytes leftover after parsing attributes in process `syz.4.458'. [ 53.892379][ T4955] sd 0:0:1:0: device reset [ 53.929900][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 54.018477][ T4972] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 54.101157][ T4980] loop7: detected capacity change from 0 to 16384 [ 54.124011][ T4982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.149717][ T4980] loop7: detected capacity change from 16384 to 16383 [ 54.353822][ T4993] loop4: detected capacity change from 0 to 256 [ 54.376338][ T4993] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 54.474994][ T5017] x_tables: duplicate underflow at hook 1 [ 54.606321][ T5036] FAULT_INJECTION: forcing a failure. [ 54.606321][ T5036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.619532][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.619582][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.619593][ T5036] Call Trace: [ 54.619600][ T5036] [ 54.619608][ T5036] __dump_stack+0x1d/0x30 [ 54.619681][ T5036] dump_stack_lvl+0x95/0xd0 [ 54.619703][ T5036] dump_stack+0x15/0x1b [ 54.619723][ T5036] should_fail_ex+0x265/0x280 [ 54.619805][ T5036] should_fail+0xb/0x20 [ 54.619876][ T5036] should_fail_usercopy+0x1a/0x20 [ 54.619900][ T5036] _copy_to_user+0x20/0xa0 [ 54.619928][ T5036] simple_read_from_buffer+0xb5/0x130 [ 54.619999][ T5036] proc_fail_nth_read+0x10e/0x150 [ 54.620024][ T5036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.620045][ T5036] vfs_read+0x1a8/0x770 [ 54.620060][ T5036] ? __rcu_read_unlock+0x4f/0x70 [ 54.620103][ T5036] ? __fget_files+0x184/0x1c0 [ 54.620125][ T5036] ? mutex_lock+0x58/0x90 [ 54.620152][ T5036] ksys_read+0xda/0x1a0 [ 54.620214][ T5036] __x64_sys_read+0x40/0x50 [ 54.620229][ T5036] x64_sys_call+0x2889/0x3000 [ 54.620252][ T5036] do_syscall_64+0xca/0x2b0 [ 54.620281][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.620359][ T5036] RIP: 0033:0x7f1c8865e15c [ 54.620399][ T5036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.620452][ T5036] RSP: 002b:00007f1c870c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.620524][ T5036] RAX: ffffffffffffffda RBX: 00007f1c888b5fa0 RCX: 00007f1c8865e15c [ 54.620535][ T5036] RDX: 000000000000000f RSI: 00007f1c870c70a0 RDI: 0000000000000005 [ 54.620545][ T5036] RBP: 00007f1c870c7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.620556][ T5036] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 54.620567][ T5036] R13: 00007f1c888b6038 R14: 00007f1c888b5fa0 R15: 00007ffc2058f848 [ 54.620587][ T5036] [ 54.898586][ T5041] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 54.919795][ T5045] loop4: detected capacity change from 0 to 512 [ 55.037632][ T5045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.037821][ T5045] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.051463][ T5045] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.495: corrupted inode contents [ 55.074601][ T5058] binfmt_misc: register: failed to install interpreter file ./file0 [ 55.118121][ T5045] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.495: mark_inode_dirty error [ 55.129760][ T5045] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.495: corrupted inode contents [ 55.141749][ T5045] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.495: mark_inode_dirty error [ 55.153541][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 55.153553][ T29] audit: type=1400 audit(1767154092.921:5680): avc: denied { create } for pid=5044 comm="syz.4.495" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 55.180664][ T29] audit: type=1400 audit(1767154092.931:5681): avc: denied { read write } for pid=5044 comm="syz.4.495" name="file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 55.203281][ T29] audit: type=1400 audit(1767154092.931:5682): avc: denied { open } for pid=5044 comm="syz.4.495" path="/92/bus/file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 55.237333][ T5045] netlink: 'syz.4.495': attribute type 13 has an invalid length. [ 55.245698][ T29] audit: type=1326 audit(1767154093.001:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.269070][ T29] audit: type=1326 audit(1767154093.001:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.276648][ T5070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.292364][ T29] audit: type=1326 audit(1767154093.001:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.322928][ T29] audit: type=1326 audit(1767154093.001:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.346230][ T29] audit: type=1326 audit(1767154093.001:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.369502][ T29] audit: type=1326 audit(1767154093.001:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.392822][ T29] audit: type=1326 audit(1767154093.001:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.1.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 55.513947][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.521285][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.540107][ T5045] batman_adv: batadv0: Interface deactivated: dummy0 [ 55.648142][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.658569][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.728865][ T5106] ref_ctr increment failed for inode: 0x1ca offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104ea8d80 [ 55.828595][ T2496] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.851045][ T5123] ref_ctr increment failed for inode: 0x25e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eade80 [ 55.903660][ T2496] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.912987][ T2496] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.921590][ T2496] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.931067][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.987103][ T5135] loop3: detected capacity change from 0 to 1024 [ 56.015888][ T5135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 56.032627][ T5135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.052835][ T5135] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.518: bg 0: block 88: padding at end of block bitmap is not set [ 56.058363][ T5150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 56.097143][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.130902][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.153366][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.216949][ T5174] ref_ctr increment failed for inode: 0x1dc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd372c0 [ 56.257916][ T5182] __nla_validate_parse: 17 callbacks suppressed [ 56.257930][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 56.273113][ T5182] netlink: 108 bytes leftover after parsing attributes in process `syz.4.533'. [ 56.283252][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 56.294564][ T5182] netlink: 108 bytes leftover after parsing attributes in process `syz.4.533'. [ 56.303631][ T5182] netlink: 84 bytes leftover after parsing attributes in process `syz.4.533'. [ 56.483349][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 56.509705][ T5198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.539'. [ 56.518859][ T5198] unsupported nla_type 24929 [ 56.529180][ T5194] loop4: detected capacity change from 0 to 128 [ 56.656904][ T5216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.545'. [ 56.665841][ T5216] netlink: 108 bytes leftover after parsing attributes in process `syz.4.545'. [ 56.677912][ T5218] ref_ctr increment failed for inode: 0x287 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104eaf2c0 [ 56.678041][ T5216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.545'. [ 56.699655][ T5220] sd 0:0:1:0: device reset [ 56.857985][ T5219] loop3: detected capacity change from 0 to 32768 [ 56.939253][ T5219] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 56.955230][ T5219] loop3: p1 start 460800 is beyond EOD, truncated [ 56.961717][ T5219] loop3: p2 size 83886080 extends beyond EOD, truncated [ 56.993266][ T5219] loop3: p5 start 460800 is beyond EOD, truncated [ 56.999809][ T5219] loop3: p6 size 83886080 extends beyond EOD, truncated [ 57.273375][ T5242] loop3: detected capacity change from 0 to 2048 [ 57.329069][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 57.341705][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.353508][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.367096][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 57.445074][ T5242] loop3: p1 < > p3 p4 [ 57.523528][ T1595] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.562075][ T5242] loop3: p3 start 458752 is beyond EOD, truncated [ 57.568993][ T5242] loop3: p4 start 268435456 is beyond EOD, truncated [ 57.596704][ T1595] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.671717][ T1595] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.720922][ T3009] loop3: p1 < > p3 p4 [ 57.775786][ T3009] loop3: p3 start 458752 is beyond EOD, truncated [ 57.782337][ T3009] loop3: p4 start 268435456 is beyond EOD, truncated [ 57.793939][ T1595] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.924774][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.943353][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.959090][ T5268] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 58.019345][ T5282] FAULT_INJECTION: forcing a failure. [ 58.019345][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 58.032047][ T5282] CPU: 1 UID: 0 PID: 5282 Comm: syz.1.574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.032071][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.032115][ T5282] Call Trace: [ 58.032122][ T5282] [ 58.032129][ T5282] __dump_stack+0x1d/0x30 [ 58.032154][ T5282] dump_stack_lvl+0x95/0xd0 [ 58.032175][ T5282] dump_stack+0x15/0x1b [ 58.032195][ T5282] should_fail_ex+0x265/0x280 [ 58.032326][ T5282] should_failslab+0x8c/0xb0 [ 58.032349][ T5282] __kmalloc_cache_noprof+0x65/0x4c0 [ 58.032374][ T5282] ? sctp_add_bind_addr+0x71/0x1e0 [ 58.032399][ T5282] sctp_add_bind_addr+0x71/0x1e0 [ 58.032423][ T5282] sctp_copy_local_addr_list+0x199/0x220 [ 58.032498][ T5282] sctp_copy_one_addr+0x7f/0x280 [ 58.032520][ T5282] sctp_bind_addr_copy+0x79/0x290 [ 58.032540][ T5282] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 58.032564][ T5282] sctp_connect_new_asoc+0x1c3/0x3a0 [ 58.032741][ T5282] sctp_sendmsg+0xf10/0x18d0 [ 58.032772][ T5282] ? selinux_socket_sendmsg+0x161/0x1b0 [ 58.032861][ T5282] ? __pfx_sctp_sendmsg+0x10/0x10 [ 58.032883][ T5282] inet_sendmsg+0xc5/0xd0 [ 58.032951][ T5282] __sock_sendmsg+0x102/0x180 [ 58.032970][ T5282] ____sys_sendmsg+0x31e/0x4a0 [ 58.033136][ T5282] ___sys_sendmsg+0x17b/0x1d0 [ 58.033178][ T5282] __x64_sys_sendmsg+0xd4/0x160 [ 58.033314][ T5282] x64_sys_call+0x17ba/0x3000 [ 58.033335][ T5282] do_syscall_64+0xca/0x2b0 [ 58.033365][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.033449][ T5282] RIP: 0033:0x7ff7ef6ff749 [ 58.033462][ T5282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.033477][ T5282] RSP: 002b:00007ff7ee15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.033496][ T5282] RAX: ffffffffffffffda RBX: 00007ff7ef955fa0 RCX: 00007ff7ef6ff749 [ 58.033509][ T5282] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000006 [ 58.033522][ T5282] RBP: 00007ff7ee15f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.033566][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.033624][ T5282] R13: 00007ff7ef956038 R14: 00007ff7ef955fa0 R15: 00007ffde56530e8 [ 58.033639][ T5282] [ 58.263995][ T5280] vlan2: entered allmulticast mode [ 58.525786][ T1430] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.535992][ T1430] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.555902][ T1430] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.583395][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.657398][ T5328] sctp: [Deprecated]: syz.0.590 (pid 5328) Use of int in maxseg socket option. [ 58.657398][ T5328] Use struct sctp_assoc_value instead [ 58.676999][ T5331] sd 0:0:1:0: device reset [ 58.682380][ T5328] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 58.700584][ T5328] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 58.716592][ T5334] loop3: detected capacity change from 0 to 1024 [ 58.732590][ T5334] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 58.775634][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.789785][ T5344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29229 sclass=netlink_route_socket pid=5344 comm=syz.1.600 [ 58.802689][ T5334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.597: bg 0: block 88: padding at end of block bitmap is not set [ 58.849920][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.862539][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.875278][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.887861][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.900389][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.912949][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.925472][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.938095][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.950596][ T5350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5350 comm=syz.1.603 [ 58.964379][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.990660][ T5355] sd 0:0:1:0: device reset [ 59.112667][ T5368] loop3: detected capacity change from 0 to 512 [ 59.179311][ T5373] loop4: detected capacity change from 0 to 1024 [ 59.196212][ T5368] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.612: EA inode hash validation failed [ 59.247319][ T5373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 59.260714][ T5373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.273770][ T5368] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.612: corrupted inode contents [ 59.287425][ T5368] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.612: mark_inode_dirty error [ 59.287554][ T5373] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.614: bg 0: block 88: padding at end of block bitmap is not set [ 59.324943][ T5368] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.612: corrupted inode contents [ 59.325508][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.368220][ T5382] loop4: detected capacity change from 0 to 164 [ 59.368516][ T5368] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.612: mark_inode_dirty error [ 59.395665][ T5382] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.405393][ T5382] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.411650][ T5368] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.612: mark inode dirty (error -117) [ 59.414043][ T5382] Symlink component flag not implemented [ 59.414051][ T5382] Symlink component flag not implemented [ 59.414392][ T5382] Symlink component flag not implemented (7) [ 59.443849][ T5382] Symlink component flag not implemented (116) [ 59.463254][ T5368] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 59.474508][ T5368] EXT4-fs (loop3): 1 orphan inode deleted [ 59.484817][ T5368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.509784][ T5382] infiniband syz!: set down [ 59.514320][ T5382] infiniband syz!: added team_slave_0 [ 59.528167][ T5382] RDS/IB: syz!: added [ 59.532294][ T5382] smc: adding ib device syz! with port count 1 [ 59.538641][ T5382] smc: ib device syz! port 1 has no pnetid [ 59.551443][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.749549][ T5402] loop3: detected capacity change from 0 to 512 [ 59.764484][ T5402] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.778655][ T5402] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.623: Directory hole found for htree leaf block 0 [ 59.796612][ T5402] EXT4-fs (loop3): Remounting filesystem read-only [ 59.805668][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.814848][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.835534][ T5380] lo speed is unknown, defaulting to 1000 [ 59.841847][ T5380] lo speed is unknown, defaulting to 1000 [ 59.853315][ T5380] lo speed is unknown, defaulting to 1000 [ 59.874604][ T5380] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.935568][ T5380] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.959146][ T5380] lo speed is unknown, defaulting to 1000 [ 59.965333][ T5380] lo speed is unknown, defaulting to 1000 [ 59.971820][ T5380] lo speed is unknown, defaulting to 1000 [ 59.997915][ T5380] lo speed is unknown, defaulting to 1000 [ 60.017056][ T5380] lo speed is unknown, defaulting to 1000 [ 60.099515][ T5428] sd 0:0:1:0: device reset [ 60.126689][ T5430] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 60.212823][ T5439] sd 0:0:1:0: device reset [ 60.318848][ T5440] lo speed is unknown, defaulting to 1000 [ 60.338395][ T5442] nfs4: Bad value for 'source' [ 60.357925][ T3318] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 60.434912][ T29] kauditd_printk_skb: 933 callbacks suppressed [ 60.434927][ T29] audit: type=1326 audit(1767154098.201:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.465972][ T29] audit: type=1326 audit(1767154098.201:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.489384][ T29] audit: type=1326 audit(1767154098.201:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.513045][ T29] audit: type=1326 audit(1767154098.231:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.536425][ T29] audit: type=1326 audit(1767154098.231:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.559707][ T29] audit: type=1326 audit(1767154098.231:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.590272][ T29] audit: type=1326 audit(1767154098.231:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.613637][ T29] audit: type=1326 audit(1767154098.231:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.637000][ T29] audit: type=1326 audit(1767154098.231:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.660312][ T29] audit: type=1326 audit(1767154098.351:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.1.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ef6ff749 code=0x7ffc0000 [ 60.660487][ T5463] loop4: detected capacity change from 0 to 1024 [ 60.704946][ T5465] loop3: detected capacity change from 0 to 512 [ 60.721335][ T5467] netlink: 'syz.1.647': attribute type 4 has an invalid length. [ 60.740849][ T5465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.764740][ T5463] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.766149][ T5471] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 60.784000][ T5463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.816461][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.818858][ T5480] sd 0:0:1:0: device reset [ 60.836655][ T5463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 60.843646][ T5463] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.627: Failed to acquire dquot type 0 [ 60.855367][ T5463] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.627: Failed to acquire dquot type 0 [ 60.866634][ T5465] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.876098][ T5463] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.627: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.877796][ T5481] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 60.892342][ T5463] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.627: Failed to acquire dquot type 0 [ 60.910944][ T5463] EXT4-fs (loop4): 1 orphan inode deleted [ 60.917376][ T5463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.940845][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.949681][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.981212][ T5465] lo speed is unknown, defaulting to 1000 [ 61.030945][ T5481] random: crng reseeded on system resumption [ 61.047120][ T5414] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.181565][ T5465] netlink: 'syz.3.646': attribute type 6 has an invalid length. [ 61.472512][ T5505] __nla_validate_parse: 30 callbacks suppressed [ 61.472527][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 61.487828][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.495277][ T5505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.533166][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'. [ 61.577328][ T5507] netlink: 'syz.2.662': attribute type 1 has an invalid length. [ 61.585151][ T5507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.662'. [ 61.680845][ T5512] sd 0:0:1:0: device reset [ 61.964981][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.132738][ T5487] Set syz1 is full, maxelem 65536 reached [ 62.229730][ T5535] FAULT_INJECTION: forcing a failure. [ 62.229730][ T5535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.242930][ T5535] CPU: 1 UID: 0 PID: 5535 Comm: syz.2.671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.242956][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.242968][ T5535] Call Trace: [ 62.242975][ T5535] [ 62.243042][ T5535] __dump_stack+0x1d/0x30 [ 62.243139][ T5535] dump_stack_lvl+0x95/0xd0 [ 62.243156][ T5535] dump_stack+0x15/0x1b [ 62.243215][ T5535] should_fail_ex+0x265/0x280 [ 62.243315][ T5535] should_fail+0xb/0x20 [ 62.243369][ T5535] should_fail_usercopy+0x1a/0x20 [ 62.243394][ T5535] _copy_from_iter+0xcf/0xe70 [ 62.243417][ T5535] ? __alloc_skb+0x396/0x4b0 [ 62.243441][ T5535] ? __alloc_skb+0x228/0x4b0 [ 62.243513][ T5535] netlink_sendmsg+0x471/0x6b0 [ 62.243543][ T5535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.243586][ T5535] __sock_sendmsg+0x145/0x180 [ 62.243603][ T5535] ____sys_sendmsg+0x31e/0x4a0 [ 62.243634][ T5535] ___sys_sendmsg+0x17b/0x1d0 [ 62.243685][ T5535] __x64_sys_sendmsg+0xd4/0x160 [ 62.243717][ T5535] x64_sys_call+0x17ba/0x3000 [ 62.243741][ T5535] do_syscall_64+0xca/0x2b0 [ 62.243793][ T5535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.243813][ T5535] RIP: 0033:0x7f12538df749 [ 62.243829][ T5535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.243845][ T5535] RSP: 002b:00007f1252347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.243861][ T5535] RAX: ffffffffffffffda RBX: 00007f1253b35fa0 RCX: 00007f12538df749 [ 62.243872][ T5535] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 62.243882][ T5535] RBP: 00007f1252347090 R08: 0000000000000000 R09: 0000000000000000 [ 62.243965][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.243979][ T5535] R13: 00007f1253b36038 R14: 00007f1253b35fa0 R15: 00007fffa6fc8108 [ 62.243999][ T5535] [ 62.479274][ T5542] sd 0:0:1:0: device reset [ 62.493501][ T5545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 62.502421][ T5545] netlink: 108 bytes leftover after parsing attributes in process `syz.2.673'. [ 62.522687][ T5543] FAULT_INJECTION: forcing a failure. [ 62.522687][ T5543] name failslab, interval 1, probability 0, space 0, times 0 [ 62.535401][ T5543] CPU: 1 UID: 0 PID: 5543 Comm: Ptp Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.535427][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.535446][ T5543] Call Trace: [ 62.535453][ T5543] [ 62.535461][ T5543] __dump_stack+0x1d/0x30 [ 62.535487][ T5543] dump_stack_lvl+0x95/0xd0 [ 62.535508][ T5543] dump_stack+0x15/0x1b [ 62.535526][ T5543] should_fail_ex+0x265/0x280 [ 62.535568][ T5543] should_failslab+0x8c/0xb0 [ 62.535586][ T5543] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 62.535703][ T5543] ? sidtab_sid2str_get+0xa0/0x130 [ 62.535749][ T5543] kmemdup_noprof+0x2b/0x70 [ 62.535768][ T5543] sidtab_sid2str_get+0xa0/0x130 [ 62.535891][ T5543] security_sid_to_context_core+0x1eb/0x2e0 [ 62.535938][ T5543] security_sid_to_context+0x27/0x40 [ 62.535971][ T5543] selinux_lsmprop_to_secctx+0x67/0xf0 [ 62.535999][ T5543] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 62.536083][ T5543] audit_log_subj_ctx+0xa4/0x3e0 [ 62.536156][ T5543] ? skb_put+0xa9/0xf0 [ 62.536223][ T5543] audit_log_task_context+0x48/0x70 [ 62.536244][ T5543] audit_log_task+0xf4/0x250 [ 62.536319][ T5543] ? kstrtouint+0x76/0xc0 [ 62.536339][ T5543] audit_seccomp+0x61/0x100 [ 62.536436][ T5543] ? __seccomp_filter+0x832/0x1260 [ 62.536462][ T5543] __seccomp_filter+0x843/0x1260 [ 62.536490][ T5543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 62.536529][ T5543] ? vfs_write+0x7e8/0x960 [ 62.536548][ T5543] ? __rcu_read_unlock+0x4f/0x70 [ 62.536575][ T5543] ? __fget_files+0x184/0x1c0 [ 62.536617][ T5543] __secure_computing+0x82/0x150 [ 62.536641][ T5543] syscall_trace_enter+0xcf/0x1e0 [ 62.536721][ T5543] do_syscall_64+0xa4/0x2b0 [ 62.536753][ T5543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.536785][ T5543] RIP: 0033:0x7f9a5814f749 [ 62.536798][ T5543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.536812][ T5543] RSP: 002b:00007f9a56baf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 62.536828][ T5543] RAX: ffffffffffffffda RBX: 00007f9a583a5fa0 RCX: 00007f9a5814f749 [ 62.536841][ T5543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 62.536931][ T5543] RBP: 00007f9a56baf090 R08: 0000000000000000 R09: 0000000000000000 [ 62.536944][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.536957][ T5543] R13: 00007f9a583a6038 R14: 00007f9a583a5fa0 R15: 00007ffd84cedf88 [ 62.536976][ T5543] [ 62.781919][ T5545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 62.791610][ T5545] netlink: 108 bytes leftover after parsing attributes in process `syz.2.673'. [ 62.800627][ T5545] netlink: 84 bytes leftover after parsing attributes in process `syz.2.673'. [ 62.888025][ T5559] loop4: detected capacity change from 0 to 512 [ 62.898865][ T5561] loop3: detected capacity change from 0 to 512 [ 62.905830][ T5561] EXT4-fs: dax option not supported [ 62.913907][ T5561] $Hÿ: renamed from bond0 (while UP) [ 62.921049][ T5561] $Hÿ: entered promiscuous mode [ 62.926098][ T5561] bond_slave_0: entered promiscuous mode [ 62.931978][ T5561] bond_slave_1: entered promiscuous mode [ 62.941083][ T5559] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.681: error while reading EA inode 32 err=-116 [ 62.953746][ T5559] EXT4-fs (loop4): Remounting filesystem read-only [ 62.960429][ T5559] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.970897][ T5559] EXT4-fs (loop4): 1 orphan inode deleted [ 62.977015][ T5559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.993089][ T5559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.007644][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.683'. [ 63.067025][ T5565] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 63.074776][ T5565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.683'. [ 63.093337][ T5571] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 63.095096][ T5573] $Hÿ: renamed from bond0 (while UP) [ 63.113278][ T5573] $Hÿ: entered promiscuous mode [ 63.118424][ T5573] bond_slave_0: entered promiscuous mode [ 63.124184][ T5573] bond_slave_1: entered promiscuous mode [ 63.131689][ T5575] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 63.139329][ T3818] IPVS: starting estimator thread 0... [ 63.229557][ T5576] IPVS: using max 2544 ests per chain, 127200 per kthread [ 63.325500][ T5592] loop4: detected capacity change from 0 to 1024 [ 63.384345][ T5592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 63.399957][ T5592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.468110][ T5592] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.692: bg 0: block 88: padding at end of block bitmap is not set [ 63.729534][ T5619] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 63.846994][ T5625] SELinux: failed to load policy [ 63.887646][ T5634] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.146685][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.158037][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.176488][ T5673] lo speed is unknown, defaulting to 1000 [ 64.231201][ T5683] loop3: detected capacity change from 0 to 1024 [ 64.314711][ T5683] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 64.316647][ T5683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.729: bg 0: block 88: padding at end of block bitmap is not set [ 64.387866][ T5692] loop3: detected capacity change from 0 to 512 [ 64.400266][ T5692] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.451488][ T5690] lo speed is unknown, defaulting to 1000 [ 64.571622][ T5709] sctp: [Deprecated]: syz.3.734 (pid 5709) Use of int in maxseg socket option. [ 64.571622][ T5709] Use struct sctp_assoc_value instead [ 64.745745][ T5719] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.902199][ T5731] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 64.916164][ T5734] FAULT_INJECTION: forcing a failure. [ 64.916164][ T5734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.929248][ T5734] CPU: 1 UID: 0 PID: 5734 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.929273][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.929354][ T5734] Call Trace: [ 64.929358][ T5734] [ 64.929362][ T5734] __dump_stack+0x1d/0x30 [ 64.929431][ T5734] dump_stack_lvl+0x95/0xd0 [ 64.929444][ T5734] dump_stack+0x15/0x1b [ 64.929523][ T5734] should_fail_ex+0x265/0x280 [ 64.929537][ T5734] should_fail+0xb/0x20 [ 64.929547][ T5734] should_fail_usercopy+0x1a/0x20 [ 64.929561][ T5734] _copy_from_user+0x1c/0xb0 [ 64.929642][ T5734] __sys_bpf+0x183/0x7c0 [ 64.929658][ T5734] __x64_sys_bpf+0x41/0x50 [ 64.929675][ T5734] x64_sys_call+0x28e1/0x3000 [ 64.929688][ T5734] do_syscall_64+0xca/0x2b0 [ 64.929787][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.929799][ T5734] RIP: 0033:0x7fc7d015f749 [ 64.929808][ T5734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.929896][ T5734] RSP: 002b:00007fc7cebbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.929907][ T5734] RAX: ffffffffffffffda RBX: 00007fc7d03b5fa0 RCX: 00007fc7d015f749 [ 64.929917][ T5734] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 64.929929][ T5734] RBP: 00007fc7cebbf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.929941][ T5734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.929954][ T5734] R13: 00007fc7d03b6038 R14: 00007fc7d03b5fa0 R15: 00007ffe6950eb88 [ 64.929967][ T5734] [ 65.120205][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.130297][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.170627][ T5740] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 65.379155][ T5767] loop3: detected capacity change from 0 to 2048 [ 65.411545][ T5767] EXT4-fs mount: 5 callbacks suppressed [ 65.411599][ T5767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.429367][ T5767] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.457438][ T29] kauditd_printk_skb: 1209 callbacks suppressed [ 65.457451][ T29] audit: type=1400 audit(1767154103.221:7835): avc: denied { write } for pid=5766 comm="syz.3.764" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.630522][ T5780] hub 9-0:1.0: USB hub found [ 65.635240][ T5780] hub 9-0:1.0: 8 ports detected [ 65.653664][ T582] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 65.668827][ T582] EXT4-fs (loop3): Remounting filesystem read-only [ 65.675363][ T52] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 65.702618][ T5782] openvswitch: netlink: Missing key (keys=40, expected=80) [ 65.755828][ T29] audit: type=1400 audit(1767154103.521:7836): avc: denied { associate } for pid=5783 comm="syz.1.771" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.796213][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.819410][ T5796] loop3: detected capacity change from 0 to 512 [ 65.827686][ T5796] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.769: EA inode hash validation failed [ 65.840724][ T5796] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.769: corrupted inode contents [ 65.853036][ T5796] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.769: mark_inode_dirty error [ 65.853309][ T5798] sctp: [Deprecated]: syz.1.774 (pid 5798) Use of int in maxseg socket option. [ 65.853309][ T5798] Use struct sctp_assoc_value instead [ 65.864534][ T5796] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.769: corrupted inode contents [ 65.891108][ T5796] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.769: mark_inode_dirty error [ 65.903284][ T5796] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.769: mark inode dirty (error -117) [ 65.916134][ T5796] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 65.925301][ T5796] EXT4-fs (loop3): 1 orphan inode deleted [ 65.931486][ T5796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.964695][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.989753][ T5800] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 66.153546][ T29] audit: type=1326 audit(1767154103.921:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.177402][ T29] audit: type=1326 audit(1767154103.921:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.200749][ T29] audit: type=1326 audit(1767154103.921:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.224133][ T29] audit: type=1326 audit(1767154103.921:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.247536][ T29] audit: type=1326 audit(1767154103.921:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.271101][ T29] audit: type=1326 audit(1767154103.921:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.294422][ T29] audit: type=1326 audit(1767154103.921:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.317704][ T29] audit: type=1326 audit(1767154103.921:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12538df749 code=0x7ffc0000 [ 66.903133][ T5842] loop3: detected capacity change from 0 to 512 [ 66.912295][ T5842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.938883][ T5842] EXT4-fs (loop3): 1 truncate cleaned up [ 66.944965][ T5842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.966529][ T5848] netlink: 'syz.4.793': attribute type 13 has an invalid length. [ 67.053282][ T5856] sctp: [Deprecated]: syz.1.794 (pid 5856) Use of int in maxseg socket option. [ 67.053282][ T5856] Use struct sctp_assoc_value instead [ 67.167805][ T5861] SELinux: failed to load policy [ 67.200211][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.315776][ T5874] __nla_validate_parse: 32 callbacks suppressed [ 67.315802][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 67.344780][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 67.396498][ T5875] 9p: Bad value for 'wfdno' [ 67.495290][ T5877] loop3: detected capacity change from 0 to 512 [ 67.503907][ T5877] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.803: EA inode hash validation failed [ 67.520799][ T5877] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.803: corrupted inode contents [ 67.537015][ T5877] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.803: mark_inode_dirty error [ 67.548616][ T5877] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.803: corrupted inode contents [ 67.588575][ T5877] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.803: mark_inode_dirty error [ 67.611269][ T5877] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.803: mark inode dirty (error -117) [ 67.631228][ T5877] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 67.640372][ T5877] EXT4-fs (loop3): 1 orphan inode deleted [ 67.646512][ T5877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.670223][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.781502][ T5886] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 67.892488][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 67.932688][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.810'. [ 67.977666][ T5902] netlink: 256 bytes leftover after parsing attributes in process `syz.0.812'. [ 68.067966][ T5910] vhci_hcd vhci_hcd.0: invalid port number 129 [ 68.074287][ T5910] vhci_hcd vhci_hcd.0: default hub control req: 600f v0003 i0081 l0 [ 68.075483][ T5899] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 68.090032][ T5899] netlink: 224 bytes leftover after parsing attributes in process `syz.1.810'. [ 68.163688][ T5863] ================================================================== [ 68.171794][ T5863] BUG: KCSAN: data-race in touch_atime / touch_atime [ 68.178497][ T5863] [ 68.180813][ T5863] write to 0xffff88812a9ca0e8 of 4 bytes by task 5864 on cpu 1: [ 68.188433][ T5863] touch_atime+0x1e8/0x340 [ 68.192859][ T5863] shmem_file_read_iter+0x477/0x540 [ 68.198066][ T5863] copy_splice_read+0x442/0x660 [ 68.202910][ T5863] splice_direct_to_actor+0x290/0x680 [ 68.208283][ T5863] do_splice_direct+0xda/0x150 [ 68.213037][ T5863] do_sendfile+0x380/0x650 [ 68.217444][ T5863] __x64_sys_sendfile64+0x105/0x150 [ 68.222632][ T5863] x64_sys_call+0x2db1/0x3000 [ 68.227295][ T5863] do_syscall_64+0xca/0x2b0 [ 68.231826][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.237704][ T5863] [ 68.240011][ T5863] read to 0xffff88812a9ca0e8 of 4 bytes by task 5863 on cpu 0: [ 68.247533][ T5863] touch_atime+0x194/0x340 [ 68.251939][ T5863] shmem_file_read_iter+0x477/0x540 [ 68.257133][ T5863] copy_splice_read+0x442/0x660 [ 68.261968][ T5863] splice_direct_to_actor+0x290/0x680 [ 68.267324][ T5863] do_splice_direct+0xda/0x150 [ 68.272078][ T5863] do_sendfile+0x380/0x650 [ 68.276488][ T5863] __x64_sys_sendfile64+0x105/0x150 [ 68.281672][ T5863] x64_sys_call+0x2db1/0x3000 [ 68.286336][ T5863] do_syscall_64+0xca/0x2b0 [ 68.290830][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.296725][ T5863] [ 68.299031][ T5863] value changed: 0x36f47e5d -> 0x378d14dd [ 68.304732][ T5863] [ 68.307036][ T5863] Reported by Kernel Concurrency Sanitizer on: [ 68.313174][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: syz.2.799 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.322801][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.332843][ T5863] ==================================================================