last executing test programs: 3.252531192s ago: executing program 2 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000b786e93d303b22e34be4c810005fba0000000000000000000000008870277a02aaac864e81a41d000eeced814b1953d2e09b774451f6ae9cc204e9e280b4d5fb43615077b74b6ddfa937d24f76ae6ad8d465037d867f8e2e28e06ee4ee29a57b1f075f173e9e8ffc9ed2810d3e32d24cd6791aed7615a3dcbaec7d07ac1eaf93e966add7c00630c13de3a9c29b28c54c11443fa1b7aaa97dfd2a1d13f2", @ANYRESDEC=r1, @ANYBLOB="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"], 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000040)={0x4, 0x5, 0xfffffffd, 0xc6cf, 0xfd, "00060801f60900000000000600", 0x240001, 0x1fd}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="f5e067b95173"}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 2.414481873s ago: executing program 2 (id=1160): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000b786e93d303b22e34be4c810005fba0000000000000000000000008870277a02aaac864e81a41d000eeced814b1953d2e09b774451f6ae9cc204e9e280b4d5fb43615077b74b6ddfa937d24f76ae6ad8d465037d867f8e2e28e06ee4ee29a57b1f075f173e9e8ffc9ed2810d3e32d24cd6791aed7615a3dcbaec7d07ac1eaf93e966add7c00630c13de3a9c29b28c54c11443fa1b7aaa97dfd2a1d13f2", @ANYRESDEC=r1, @ANYBLOB="800002000800000008001b000000000008000d00010000000322687f54bf270c902626501277875ceed6a4d7e132b266daef81bf053121747e4c92ed78a14d9d5599a3ac84f4c61b29794a5f9ccc9beef24a8a24ecf65faaa51328804e22f6544e51dd3c3b5dee02b52f5000cdfe6b5ea93c74d7830ee499653178c3d79a7f0677a7d166cfaf2cbf487fe2867c6b280f57a25073487c3159cbab56b036ecc986107305486a34fbd1096979a186d48d7c3ea3970419ba0abc98f212608c8d302480d2ed332bac69675cb1e1d1cca1b3bbaac9a68cc3df483418b7fcd52798611a30c7e6b3a39c10ae3fa238d38aa3d5953d4c283b6c31ca6c13596d70c51c024b06cb9a1446522d202606e886"], 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 2.384952735s ago: executing program 2 (id=1161): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000080b70300000000000000001b00b70000000000000095000000000000003c5d67ef5bea4b67bdc7b036cae20b9edd6e6c0fbaa9f5b21ed78d2f26cbfba0f60b520d0e78aaa64072e8e5d75b987426cf562be205f14c3e33aca9a6dbcabcda78252acc0a086b1b03a953f54d73fad1decee8a10183899eb04344dad2855856"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r2, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r5}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f0000000640)=""/47, 0x2f}], 0x6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) getrlimit(0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) sync() 2.245402574s ago: executing program 2 (id=1168): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r0 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r0, 0x11, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="340000001000010025bdf000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804000080040014002b80080003001100000008000100", @ANYRES32, @ANYBLOB="2c2497776f49dcb443062eaebdee1ced7077fbf17414c18930b15b30ba59db002238e227cd4fa1cd8ff7c735ad78f3c064573fcf4cbbfd3694d31e403114ed"], 0x34}}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000080)=0xe8) getresuid(&(0x7f00000000c0)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@rnullb, r4, &(0x7f0000000280)) setresuid(r3, 0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r6, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000060000000d00000005000084d1000000020000004000000004000000020000000b00000006000000010000db9da181f5d9606c000000040000000a0000000000000200000000010000000900000c020000e40c846d767a48af00e2ca"], &(0x7f0000000f80)=""/4096, 0x72, 0x1000, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x66}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc105}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @generic={0x8, 0xd, 0xe, 0x9, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xb2, 0x1d, &(0x7f0000000400)=""/29, 0x40f00, 0x14, '\x00', r13, @fallback=0x5, r14, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x6, 0xf3ad, 0x2}, 0x10, r15, r9, 0x4, 0x0, &(0x7f0000000840)=[{0x5, 0x3, 0xd, 0xa}, {0x5, 0x5, 0x8, 0x9}, {0x4, 0x4, 0xc, 0x7}, {0x3, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94) r16 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r16, 0x4b35, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.131494521s ago: executing program 2 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000b786e93d303b22e34be4c810005fba0000000000000000000000008870277a02aaac864e81a41d000eeced814b1953d2e09b774451f6ae9cc204e9e280b4d5fb43615077b74b6ddfa937d24f76ae6ad8d465037d867f8e2e28e06ee4ee29a57b1f075f173e9e8ffc9ed2810d3e32d24cd6791aed7615a3dcbaec7d07ac1eaf93e966add7c00630c13de3a9c29b28c54c11443fa1b7aaa97dfd2a1d13f2", @ANYRESDEC=r1, @ANYBLOB="800002000800000008001b000000000008000d00010000000322687f54bf270c902626501277875ceed6a4d7e132b266daef81bf053121747e4c92ed78a14d9d5599a3ac84f4c61b29794a5f9ccc9beef24a8a24ecf65faaa51328804e22f6544e51dd3c3b5dee02b52f5000cdfe6b5ea93c74d7830ee499653178c3d79a7f0677a7d166cfaf2cbf487fe2867c6b280f57a25073487c3159cbab56b036ecc986107305486a34fbd1096979a186d48d7c3ea3970419ba0abc98f212608c8d302480d2ed332bac69675cb1e1d1cca1b3bbaac9a68cc3df483418b7fcd52798611a30c7e6b3a39c10ae3fa238d38aa3d5953d4c283b6c31ca6c13596d70c51c024b06cb9a1446522d202606e886"], 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 2.13105169s ago: executing program 2 (id=1172): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r0, r2, 0x8f5, 0x100000000000000) socket(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$eJzs3D9olGccB/DvJbk7o9A4OLnUOHQSiuLoDVWSq2IhnJZCcLD/EGmmCIGTHqbo0GaImEE6dpHCdYhxUjM4KQqdizi0CBlcCnaR2iFX7u4luUAplkZK8fMZ7ve8Lz+e7/uDZ30u/K8NpVysOtVeefeTv+3vjG2u5/Nhe2LyeKfT6ZxOSjmTcsbLb60kGcnWXbM/SWVgnxvf7Vz95rf3y+0np168c/b+wtDGntXsTrJrsDmjf/Up1X82Ka/Dcu3BWC3JYveh3lpb/yi5+XyicefkwtLKifKxz7rvLyUPi/7+wRjNhTRzMV/k45FXjvpqc1nakj9/Zba+2Kydf1xvrX3bfnpwfW99+Pa5Iy/3rV69dyiZ60ZMpXfYN1X+5eAD+ZcH8ufGr00vtY4euLXn+uHm3UeNZ8O/d/qKyPL25AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hosd3+uzNYXm7Xzj+utta9/+vGDm88nGndOLiytnKgc+7noe1jUkaJeSDMXU04yk5l8ntlXj5wuDebXHoxd3sj/Y2fy9OD63nr79rkjLydXr9471OsqZapbhrZj4q2WR9LLz+7+89z4teml1tEDt/ZcP9y8+6jxbLj/fqaaT3vjJqlu/2cAAAAAAAAAAAAAAAAAAADwhpuYPL5v6r3G6aSUMzuS/Ppl75Z9pzr6Q3o37/v2F7VS1Bs7+v8F0H5y6kXl7P2FX4pL8fOpZj7Jru+7nW9v5FzaGlve3Jn/0p8BAAD//83YiVM=") socket$pppoe(0x18, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 1.568240125s ago: executing program 3 (id=1188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x28b98) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x1, 0xd, 0x5, 0x5, 0x18, "6a9e4598b46c6f35"}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r6 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000500)={0xb4ff, {{0xa, 0x4e24, 0x3, @mcast2, 0xa}}}, 0x88) r7 = dup2(r1, r3) r8 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x4e20, 0x4, 0x4e24, 0x8001, 0xa, 0x80, 0xa0, 0x11, 0x0, r8}, {0x9, 0x9, 0xcd0f, 0xad, 0x10, 0x7f9, 0x9, 0x6}, {0x1, 0x5, 0x9, 0x4}, 0xcf3c, 0x6e6bbe, 0x2, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@private=0xa010101, 0x3500, 0x1, 0x3, 0x3, 0x40000000, 0x8, 0x6}}, 0xe8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 1.508534089s ago: executing program 3 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='napi_poll\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x2) r6 = fcntl$dupfd(r5, 0x406, r5) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x3c0, 0x108, 0x210, 0x108, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@set={{0x40}, {{0x0, [0x0, 0x5, 0x1, 0x2, 0x1], 0x5, 0x2}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffff7, 0x800, @broadcast, 0x4e20}}}, {{@ip={@multicast1, @remote, 0xff, 0xff, 'bond_slave_1\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x6, 0x1, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x2}}, @common=@inet=@socket1={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x2, 0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x954, 0x4, @multicast2, 0x4e21}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x0, 0x2], 0x6, 0x1}}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008848"], 0x24}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r7}, 0x18) r8 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 1.272562113s ago: executing program 1 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="644f3c61d67bf8cec25252dce44e52f22412b7900a3f3286dcbf834c0a5ee53e03568ae87cd5fbf91302fb7edd9e4c9e2edf401f65adc6fea8e9343cfb4dab6bb14be1f1b8565863347f74e0dc42d89df5b76b6877e666380a97c95b9b3e3358351a6b235925428c864c5f2741179f0bb6695cee632285d132367f6418ec1d7b181f4500f31f720a646ff13917c3d646eefc8503f02e85933c88", @ANYRESOCT, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x65, 0x0, &(0x7f0000000480)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000dc7e656700000000000000cd80a88c3caab4a381f1be946735b02628d05a89b4c43c5f9d740460ac081184f007b4aa482d6ad0bd1363e55e9f36069981be20c3e2a01ae6e0d1efc36743ae85f26feb20a528e99001bb59c888782c239956b37b2465831e6d0aba39b6c5ca18d59a9007f15e00"/144, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) capget(&(0x7f0000000300)={0x20071026}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r9}, 0x18) socket$packet(0x11, 0x2, 0x300) 1.249199534s ago: executing program 1 (id=1200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 1.223260906s ago: executing program 1 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x48) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x36041000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={r13, 0x3, 0x6, @random="1300"}, 0x10) dup2(r10, r11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x23, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r9, @ANYRES32=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r15}, 0x10) unshare(0x20000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tgkill(r3, r5, 0x30) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r16, @ANYBLOB=',wfdno=', @ANYRESHEX=r17, @ANYBLOB="2c76657273696f6eff3970323004002c00"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) socket$packet(0x11, 0x3, 0x300) keyctl$clear(0x11, 0xfffffffffffffffd) 1.020116378s ago: executing program 1 (id=1206): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x180080a, &(0x7f0000001c80)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@data_ordered}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@usrjquota}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000e4000000e4000000030000000304000200000013040000001000000007000000090000000b0000000000000c020000000100000002000004040000001000000001000000020000001000000005000000ff0700000d000000050000130c0000000c000000010000000400000001000000ba0e00000a0000000b00000061bf00000300000010000000d00500000200000004000000dc3b00000100000009000000060000930f0000001000000001000000070000000100fb0000000000090000000f0000000400000005000000080000000100008007000000100000000900000000000000060000000100000003000000005f00"], &(0x7f00000000c0)=""/58, 0xff, 0x3a, 0x1, 0xf9a}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x4b45, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000dc0), 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x406e43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x91}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRES16=r12, @ANYBLOB="85116d4a4a6b6a5f20007e"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000054) 979.40447ms ago: executing program 1 (id=1207): syz_clone(0x4010100, &(0x7f00000004c0)="2c1d92e23bf4e1fa250a40ee2128d8ae0ae0a6dc4aa612961fa8cec21d3fe2f9d5474aec6f9d7dae13733cd7d36779c8791dc76c51898acd4d466d9645e8fe3966c675b86a8e4187ef7458364128f1e62877bb63adc4c672a350e3c4c6c2bd052833ab82234280574aed96fe97b00b789cfe054ed20c3fb0cd9bb057eda3", 0x7e, 0x0, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0\x00', 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000040)='./file7\x00', 0x1a2) fallocate(r0, 0x0, 0x9, 0x2000406) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x5}) set_mempolicy(0x4003, 0x0, 0x8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) rt_sigprocmask(0x2, &(0x7f0000000280)={[0x7]}, &(0x7f00000002c0), 0x8) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x40) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x10040000) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000440), 0x4, 0x4eb, &(0x7f0000000f80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) write(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) mount$9p_fd(0x0, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540), 0x40000, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@ignoreqv}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@access_uid={'access', 0x3d, r8}}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@loose}, {@uname={'uname', 0x3d, '/dev/loop'}}, {@posixacl}]}}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 697.393608ms ago: executing program 4 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 685.287668ms ago: executing program 3 (id=1212): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="644f3c61d67bf8cec25252dce44e52f22412b7900a3f3286dcbf834c0a5ee53e03568ae87cd5fbf91302fb7edd9e4c9e2edf401f65adc6fea8e9343cfb4dab6bb14be1f1b8565863347f74e0dc42d89df5b76b6877e666380a97c95b9b3e3358351a6b235925428c864c5f2741179f0bb6695cee632285d132367f6418ec1d7b181f4500f31f720a646ff13917c3d646eefc8503f02e85933c88", @ANYRESOCT, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x65, 0x0, &(0x7f0000000480)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000dc7e656700000000000000cd80a88c3caab4a381f1be946735b02628d05a89b4c43c5f9d740460ac081184f007b4aa482d6ad0bd1363e55e9f36069981be20c3e2a01ae6e0d1efc36743ae85f26feb20a528e99001bb59c888782c239956b37b2465831e6d0aba39b6c5ca18d59a9007f15e00"/144, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) capget(&(0x7f0000000300)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) socket$packet(0x11, 0x2, 0x300) 677.790909ms ago: executing program 4 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000480)="528b4856d55340f7296f40fef4cd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 651.049271ms ago: executing program 3 (id=1214): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b581fb77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) 646.116551ms ago: executing program 4 (id=1215): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0000080001050001030080354b1232790088006700001011907864010100640101004e244e20007490784b3075eff8323c4c549bb6806b8a770d2cbc608981c7ba73489043d3cb5f918a1f59040054ed810baf325c145d4653fd7ea7767983224ea6f4fac1cad97f6ff32d24e2a54ce8674a50d5864e34bbc1d57e6b62728467c966015c59a7642e0a3b4952543c337f2c6700000000"], 0x96) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x25, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES64=r3, @ANYRESOCT=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d0e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x0, &(0x7f0000000100)={[{@clone_children}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 556.640457ms ago: executing program 3 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mm_compaction_migratepages\x00', r1, 0x0, 0x96}, 0x18) 556.398917ms ago: executing program 4 (id=1217): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x480d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x41341) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_emit_ethernet(0x24, &(0x7f0000000300)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x4e, 0xdc, 's', "6ab5b8ce9840c344d00ea19defe3a6"}}}}}}, &(0x7f0000000200)={0x1, 0x2, [0x9c2, 0xd13, 0xae7, 0x79e]}) 550.813567ms ago: executing program 1 (id=1218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000001240)=[{0x6, 0x1, 0x0, 0xf}]}) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 454.876772ms ago: executing program 3 (id=1219): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7056}, 0x94) syz_clone3(0x0, 0x0) r3 = io_uring_setup(0x4805, &(0x7f0000000180)={0x0, 0x845c, 0x1000, 0x2, 0x103a1}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff40, &(0x7f00000002c0)={0x0, 0x989680}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 453.034073ms ago: executing program 4 (id=1220): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x9, 0x8000000000000001, 0x80000000, 0x8001, 0x6, 0x8001}) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000000)="261cd2d286241106ec7616a5d234785e12f48f23eb4b79d92d62d8d73c1129163d3be6bafa017532babe2d3c5dce458fd993c87d226c84b78aa39df1d6136a21e511a214972023fe4d2019f50d4f88ce2ce3a50bf54150a4a3c9c69abe21") r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) 376.516417ms ago: executing program 4 (id=1221): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x180080a, &(0x7f0000001c80)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@data_ordered}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@usrjquota}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rHGUYAPBnNp9Nq40g2HppTloo3bQ1tgqCEQ8iWCjo2TZstiFmky3ZTWlCDhYRBBG0eBD04tmPevMqevZv8CIiLVXTYsWDrMx+JNtsvptN2ub3g0neZ/adfeeZ2Zl5d+dlN4A9ayD9k4k4HBEfJxEH6/OTiOiqljojhmv17i7M59IpiUrlzT+Tap07C/O5aFomtb8eHIqIH9+POJZpbbc0OzcxUijkp+vxYHny0mBpdu74+OTIWH4sP3X65NDQqTPPnzm9fbn+/fPcgZufvPbst8P/vvfU9Y9+SmI4DtQfa85juwzEQH2bdKWb8B6vbndjuyzZ7RVgS9JDs6N2lMfhOBgd1RIA8ChLr/8VAGCPSVz/AWCPaXwOcGdhPteYdvcTiZ1165WI6K3l37i/WXuks37Prrd6H7TvThKd9TuisY33uwYi4ovv3/46naJN9yEBVvLu1Yi40D/Qev5PWsYsbNaJDdQZWBY7/8HO+SHt/7ywUv8vs9j/icX+z5KeFY7drRiI6G6OW4//zI0VF3x5Gxqv9/9eqo1tSxNt6v8tDlrr76hHj6XBkYgYL+TTc9vjEXE0unoujhfyJ9do4+jt/26v9lhz/++va+98lbaf/l+qkbnR2XPvMqMj5ZH7ybnZrasRT3cuje2723L+7632dZfv/3TeubWe+MhS8fUXP/h8tWpp/mm+jak1//aqfBnxTKycf0Oy5vjEwXT3n6j9XbmN7379rG+19pv3fzql7TfeC6yie+vZtkr3f9/a+fcnzeM1S9vZ+kbyX/n13528VS03NsaVkXJ5+mREd/JG6/xTS8s24kb9NP9apsvzz6z5+k/fCV7YYI6dN//4Zuv5L2rLEMs0/9FN7f/NF67fnejYev7p/h+qlo7W52zk/LfRFbyfbQcAAAAAAAAAAAAAAAAAAAAAAAAAG5WJiAORZLKL5Uwmm639hveT0ZcpFEvlYxeLM1OjUf2t7P7oyjS+6vJgLU4a33/a3xSfWhY/FxFPRMSnPfuqcTZXLIzudvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULd/ld//T/3es9trBwC0Te+6NW7n7wkrlUqljesDALTf+td/AOBRs8b1f99OrgcAsHO8/weAvcf1HwD2Htd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2uzc2bPpVPlnYT6XxqOXZ2cmipePj+ZLE9nJmVw2V5y+lB0rFscK+WyuOLne8xWKxUtDMTVzZbCcL5UHS7Nz5yeLM1Pl8+OTI2P58/muHckKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADanNDs3MVIo5KcficKHEfEArEY7Ckk8EKuxK4Xfjv9yaK0619Z5GQ8/EFk8ZIXdPjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DwAA//8CzCWs") bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=""/58, 0xff, 0x3a, 0x1, 0xf9a}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x4b45, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x406e43, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000010000000000000004000500000000001000"], 0x24, 0x3) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYRES64=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x200000000000000, 0x0) 283.707783ms ago: executing program 0 (id=1222): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) 125.388673ms ago: executing program 0 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) fallocate(0xffffffffffffffff, 0x41, 0x5, 0x80000081) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="158d0200000065fffffc7f00008a3339663230d27b004c"], 0x41) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) 75.607606ms ago: executing program 0 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="644f3c61d67bf8cec25252dce44e52f22412b7900a3f3286dcbf834c0a5ee53e03568ae87cd5fbf91302fb7edd9e4c9e2edf401f65adc6fea8e9343cfb4dab6bb14be1f1b8565863347f74e0dc42d89df5b76b6877e666380a97c95b9b3e3358351a6b235925428c864c5f2741179f0bb6695cee632285d132367f6418ec1d7b181f4500f31f720a646ff13917c3d646eefc8503f02e85933c88", @ANYRESOCT, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x65, 0x0, &(0x7f0000000480)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000dc7e656700000000000000cd80a88c3caab4a381f1be946735b02628d05a89b4c43c5f9d740460ac081184f007b4aa482d6ad0bd1363e55e9f36069981be20c3e2a01ae6e0d1efc36743ae85f26feb20a528e99001bb59c888782c239956b37b2465831e6d0aba39b6c5ca18d59a9007f15e00"/144, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) capget(&(0x7f0000000300)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) socket$packet(0x11, 0x2, 0x300) 56.493027ms ago: executing program 0 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa1ff) 524.93µs ago: executing program 0 (id=1226): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdffdffd, @local, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4001c00) 0s ago: executing program 0 (id=1227): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() (async) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x3f5, 0x100, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200010c0}, 0x4008080) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) stat(0x0, 0x0) (async) stat(0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) set_mempolicy(0x3, 0x0, 0x5) kernel console output (not intermixed with test programs): 51.864130][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.926196][ T4113] netlink: 14 bytes leftover after parsing attributes in process `syz.4.203'. [ 51.983632][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.036169][ T4109] FAT-fs (loop1): bogus logical sector size 516 [ 52.042559][ T4109] FAT-fs (loop1): Can't find a valid FAT filesystem [ 52.067371][ T4109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.106360][ T4109] bond0 (unregistering): Released all slaves [ 52.126772][ T4120] syzkaller1: entered promiscuous mode [ 52.132352][ T4120] syzkaller1: entered allmulticast mode [ 52.161499][ T4111] FAT-fs (loop2): bogus logical sector size 516 [ 52.167993][ T4111] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.256835][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.268510][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 52.287732][ T4111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.324376][ T4137] netlink: 72 bytes leftover after parsing attributes in process `syz.3.212'. [ 52.334052][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 52.390541][ T4111] bond0 (unregistering): Released all slaves [ 52.398421][ T4139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4139 comm=syz.4.211 [ 52.411965][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 52.575801][ T4145] veth0_to_team: entered promiscuous mode [ 52.591512][ T4166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.218'. [ 52.604322][ T4166] syzkaller1: entered promiscuous mode [ 52.609975][ T4166] syzkaller1: entered allmulticast mode [ 52.695456][ T4170] EXT4-fs: inline encryption not supported [ 52.701434][ T4170] EXT4-fs: Ignoring removed i_version option [ 52.708643][ T4170] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.730593][ T4170] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.219: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.749192][ T4170] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.219: lblock 0 mapped to illegal pblock 48 (length 1) [ 52.763606][ T4170] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.219: Failed to acquire dquot type 0 [ 52.775186][ T4170] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 52.785160][ T4170] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.219: mark_inode_dirty error [ 52.797404][ T4170] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 52.808710][ T4170] EXT4-fs (loop0): 1 orphan inode deleted [ 52.815684][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.827930][ T2095] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.842426][ T2095] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 52.861085][ T4170] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.219: lblock 0 mapped to illegal pblock 16 (length 1) [ 52.926505][ T4173] FAT-fs (loop4): bogus logical sector size 516 [ 52.933125][ T4173] FAT-fs (loop4): Can't find a valid FAT filesystem [ 52.943073][ T4175] 9pnet_fd: p9_fd_create_tcp (4175): problem connecting socket to 127.0.0.1 [ 52.953653][ T4173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.977452][ T4173] bond0 (unregistering): Released all slaves [ 53.084079][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.092769][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.219132][ T4187] netlink: 72 bytes leftover after parsing attributes in process `syz.1.225'. [ 53.291154][ T4193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4193 comm=syz.1.227 [ 53.409727][ T29] kauditd_printk_skb: 1146 callbacks suppressed [ 53.409745][ T29] audit: type=1326 audit(1765899452.633:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.440075][ T29] audit: type=1326 audit(1765899452.633:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.454533][ T4205] bridge0: entered promiscuous mode [ 53.465546][ T29] audit: type=1326 audit(1765899452.633:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.492296][ T29] audit: type=1326 audit(1765899452.633:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.492583][ T4205] macsec1: entered promiscuous mode [ 53.516019][ T29] audit: type=1326 audit(1765899452.633:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.544906][ T29] audit: type=1326 audit(1765899452.633:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.546076][ T4205] bridge0: port 3(macsec1) entered blocking state [ 53.568272][ T29] audit: type=1326 audit(1765899452.633:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.574765][ T4205] bridge0: port 3(macsec1) entered disabled state [ 53.599873][ T29] audit: type=1326 audit(1765899452.633:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.606905][ T4205] macsec1: entered allmulticast mode [ 53.630443][ T29] audit: type=1326 audit(1765899452.633:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.635864][ T4205] bridge0: entered allmulticast mode [ 53.659942][ T29] audit: type=1326 audit(1765899452.633:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 53.689901][ T4205] macsec1: left allmulticast mode [ 53.695305][ T4205] bridge0: left allmulticast mode [ 53.711298][ T4205] bridge0: left promiscuous mode [ 53.729820][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.742202][ T4202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 53.751376][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.764919][ T4202] syzkaller1: entered promiscuous mode [ 53.765774][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 53.770643][ T4202] syzkaller1: entered allmulticast mode [ 53.786402][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 53.815409][ T4212] FAULT_INJECTION: forcing a failure. [ 53.815409][ T4212] name failslab, interval 1, probability 0, space 0, times 0 [ 53.828812][ T4212] CPU: 0 UID: 0 PID: 4212 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.828900][ T4212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.828930][ T4212] Call Trace: [ 53.828939][ T4212] [ 53.828948][ T4212] __dump_stack+0x1d/0x30 [ 53.828976][ T4212] dump_stack_lvl+0xe8/0x140 [ 53.829002][ T4212] dump_stack+0x15/0x1b [ 53.829026][ T4212] should_fail_ex+0x265/0x280 [ 53.829049][ T4212] should_failslab+0x8c/0xb0 [ 53.829109][ T4212] kmem_cache_alloc_noprof+0x69/0x4b0 [ 53.829174][ T4212] ? alloc_empty_file+0x76/0x200 [ 53.829200][ T4212] alloc_empty_file+0x76/0x200 [ 53.829225][ T4212] alloc_file_pseudo+0xc6/0x160 [ 53.829251][ T4212] hugetlb_file_setup+0x2a6/0x3d0 [ 53.829342][ T4212] ksys_mmap_pgoff+0x157/0x310 [ 53.829407][ T4212] x64_sys_call+0x16bb/0x3000 [ 53.829435][ T4212] do_syscall_64+0xd8/0x2c0 [ 53.829473][ T4212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.829554][ T4212] RIP: 0033:0x7f87c4c5f749 [ 53.829570][ T4212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.829588][ T4212] RSP: 002b:00007f87c36bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.829614][ T4212] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5f749 [ 53.829665][ T4212] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 53.829737][ T4212] RBP: 00007f87c36bf090 R08: ffffffffffffffff R09: 0000000000000000 [ 53.829749][ T4212] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 53.829761][ T4212] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 53.829784][ T4212] [ 54.093990][ T4220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.236'. [ 54.130650][ T4225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4225 comm=syz.2.238 [ 54.291958][ T4215] set_capacity_and_notify: 12 callbacks suppressed [ 54.291993][ T4215] loop0: detected capacity change from 0 to 8192 [ 54.306892][ T4215] FAT-fs (loop0): bogus logical sector size 516 [ 54.313216][ T4215] FAT-fs (loop0): Can't find a valid FAT filesystem [ 54.344135][ T4215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.434558][ T4215] bond0 (unregistering): Released all slaves [ 54.533201][ T4251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=4251 comm=syz.3.245 [ 54.610923][ T4255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 54.620728][ T4255] syzkaller1: entered promiscuous mode [ 54.626260][ T4255] syzkaller1: entered allmulticast mode [ 54.809088][ T4268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4268 comm=syz.0.250 [ 55.044609][ T4274] loop0: detected capacity change from 0 to 512 [ 55.051568][ T4274] EXT4-fs: test_dummy_encryption option not supported [ 55.113454][ T4278] loop0: detected capacity change from 0 to 4096 [ 55.124751][ T4278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.201572][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.224996][ T4284] loop0: detected capacity change from 0 to 128 [ 55.322662][ T4282] loop2: detected capacity change from 0 to 8192 [ 55.329759][ T4282] FAT-fs (loop2): bogus logical sector size 516 [ 55.336199][ T4282] FAT-fs (loop2): Can't find a valid FAT filesystem [ 55.356097][ T4282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.386257][ T4282] bond0 (unregistering): Released all slaves [ 55.400948][ T4292] ip6tnl0: entered promiscuous mode [ 55.406409][ T4292] ip6tnl0: entered allmulticast mode [ 55.412926][ T4292] syzkaller1: entered promiscuous mode [ 55.418428][ T4292] syzkaller1: entered allmulticast mode [ 55.463558][ T4294] FAULT_INJECTION: forcing a failure. [ 55.463558][ T4294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.476964][ T4294] CPU: 0 UID: 0 PID: 4294 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.476996][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.477070][ T4294] Call Trace: [ 55.477078][ T4294] [ 55.477087][ T4294] __dump_stack+0x1d/0x30 [ 55.477114][ T4294] dump_stack_lvl+0xe8/0x140 [ 55.477140][ T4294] dump_stack+0x15/0x1b [ 55.477159][ T4294] should_fail_ex+0x265/0x280 [ 55.477283][ T4294] should_fail+0xb/0x20 [ 55.477343][ T4294] should_fail_usercopy+0x1a/0x20 [ 55.477370][ T4294] _copy_from_user+0x1c/0xb0 [ 55.477401][ T4294] ___sys_recvmsg+0xaa/0x370 [ 55.477436][ T4294] do_recvmmsg+0x1ef/0x540 [ 55.477506][ T4294] ? fput+0x8f/0xc0 [ 55.477534][ T4294] __x64_sys_recvmmsg+0xe5/0x170 [ 55.477618][ T4294] x64_sys_call+0x2b75/0x3000 [ 55.477645][ T4294] do_syscall_64+0xd8/0x2c0 [ 55.477683][ T4294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.477785][ T4294] RIP: 0033:0x7f87c4c5f749 [ 55.477804][ T4294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.477824][ T4294] RSP: 002b:00007f87c36bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 55.477915][ T4294] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5f749 [ 55.477929][ T4294] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 55.477944][ T4294] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 55.477958][ T4294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 55.478018][ T4294] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 55.478034][ T4294] [ 55.812742][ T4313] loop2: detected capacity change from 0 to 512 [ 55.819311][ T4313] EXT4-fs: test_dummy_encryption option not supported [ 55.861023][ T4318] loop2: detected capacity change from 0 to 1024 [ 55.868053][ T4318] EXT4-fs: Ignoring removed orlov option [ 55.875241][ T4318] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.894641][ T4318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.929798][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.951738][ T4322] loop2: detected capacity change from 0 to 1024 [ 55.958780][ T4322] EXT4-fs: Ignoring removed orlov option [ 55.964952][ T4322] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 55.976819][ T4322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.993083][ T4322] FAULT_INJECTION: forcing a failure. [ 55.993083][ T4322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.007044][ T4322] CPU: 1 UID: 0 PID: 4322 Comm: syz.2.269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.007075][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.007087][ T4322] Call Trace: [ 56.007094][ T4322] [ 56.007102][ T4322] __dump_stack+0x1d/0x30 [ 56.007209][ T4322] dump_stack_lvl+0xe8/0x140 [ 56.007230][ T4322] dump_stack+0x15/0x1b [ 56.007251][ T4322] should_fail_ex+0x265/0x280 [ 56.007277][ T4322] should_fail+0xb/0x20 [ 56.007300][ T4322] should_fail_usercopy+0x1a/0x20 [ 56.007378][ T4322] strncpy_from_user+0x27/0x260 [ 56.007415][ T4322] path_setxattrat+0xeb/0x310 [ 56.007459][ T4322] __x64_sys_setxattr+0x6e/0x90 [ 56.007561][ T4322] x64_sys_call+0xf1e/0x3000 [ 56.007582][ T4322] do_syscall_64+0xd8/0x2c0 [ 56.007612][ T4322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.007636][ T4322] RIP: 0033:0x7f87c4c5f749 [ 56.007655][ T4322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.007704][ T4322] RSP: 002b:00007f87c36bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 56.007725][ T4322] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5f749 [ 56.007739][ T4322] RDX: 0000200000001400 RSI: 0000200000000080 RDI: 00002000000000c0 [ 56.007754][ T4322] RBP: 00007f87c36bf090 R08: 0000000000000002 R09: 0000000000000000 [ 56.007797][ T4322] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 56.007808][ T4322] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 56.007825][ T4322] [ 56.185397][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.215602][ T4330] loop0: detected capacity change from 0 to 1024 [ 56.222718][ T4330] EXT4-fs: Ignoring removed orlov option [ 56.229540][ T4330] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.239860][ T4327] loop1: detected capacity change from 0 to 8192 [ 56.247360][ T4327] FAT-fs (loop1): bogus logical sector size 516 [ 56.253019][ T4330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.253749][ T4327] FAT-fs (loop1): Can't find a valid FAT filesystem [ 56.295291][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.337202][ T4326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.337885][ T4336] EXT4-fs: inline encryption not supported [ 56.351258][ T4336] EXT4-fs: Ignoring removed i_version option [ 56.369212][ T4326] bond0 (unregistering): Released all slaves [ 56.376746][ T4336] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.389709][ T4336] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.273: lblock 2 mapped to illegal pblock 2 (length 1) [ 56.406613][ T4336] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.273: lblock 0 mapped to illegal pblock 48 (length 1) [ 56.432259][ T4336] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.273: Failed to acquire dquot type 0 [ 56.448656][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4340 comm=syz.2.274 [ 56.461832][ T4336] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.471467][ T4336] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.273: mark_inode_dirty error [ 56.483570][ T4336] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 56.494304][ T4336] EXT4-fs (loop0): 1 orphan inode deleted [ 56.500865][ T4336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.513304][ T3854] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.529518][ T3854] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 56.543235][ T4336] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.273: lblock 0 mapped to illegal pblock 16 (length 1) [ 56.634137][ T4350] 9pnet_fd: p9_fd_create_tcp (4350): problem connecting socket to 127.0.0.1 [ 56.736915][ T4353] EXT4-fs: test_dummy_encryption option not supported [ 56.818927][ T4358] __nla_validate_parse: 4 callbacks suppressed [ 56.818949][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 56.840250][ T4358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.853561][ T4358] macvlan2: entered promiscuous mode [ 56.858977][ T4358] macvlan2: entered allmulticast mode [ 56.865181][ T4358] bond1: entered allmulticast mode [ 56.870408][ T4358] bond1: entered promiscuous mode [ 56.876975][ T4358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 56.885836][ T4358] team0: Port device macvlan2 added [ 56.917676][ T4363] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 56.925606][ T4363] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 56.933392][ T4363] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.279'. [ 56.944740][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 56.954462][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 56.963470][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 56.973359][ T4362] syzkaller1: entered promiscuous mode [ 56.978862][ T4362] syzkaller1: entered allmulticast mode [ 56.986539][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 57.004270][ T4360] team0: Port device team_slave_1 removed [ 57.164278][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.174305][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.188395][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 57.202317][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 57.243269][ T4367] FAULT_INJECTION: forcing a failure. [ 57.243269][ T4367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.256793][ T4367] CPU: 0 UID: 0 PID: 4367 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.256823][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.256836][ T4367] Call Trace: [ 57.256843][ T4367] [ 57.256851][ T4367] __dump_stack+0x1d/0x30 [ 57.256877][ T4367] dump_stack_lvl+0xe8/0x140 [ 57.256913][ T4367] dump_stack+0x15/0x1b [ 57.256934][ T4367] should_fail_ex+0x265/0x280 [ 57.257015][ T4367] should_fail+0xb/0x20 [ 57.257035][ T4367] should_fail_usercopy+0x1a/0x20 [ 57.257060][ T4367] _copy_from_user+0x1c/0xb0 [ 57.257160][ T4367] ___sys_sendmsg+0xc1/0x1d0 [ 57.257200][ T4367] __x64_sys_sendmsg+0xd4/0x160 [ 57.257232][ T4367] x64_sys_call+0x17ba/0x3000 [ 57.257310][ T4367] do_syscall_64+0xd8/0x2c0 [ 57.257345][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.257367][ T4367] RIP: 0033:0x7fe48f10f749 [ 57.257384][ T4367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.257455][ T4367] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.257477][ T4367] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 57.257490][ T4367] RDX: 0000000024008004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 57.257504][ T4367] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.257516][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.257529][ T4367] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 57.257612][ T4367] [ 57.461526][ T4375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4375 comm=syz.3.287 [ 57.682250][ T4371] FAT-fs (loop2): bogus logical sector size 516 [ 57.688764][ T4371] FAT-fs (loop2): Can't find a valid FAT filesystem [ 57.701150][ T4383] EXT4-fs: test_dummy_encryption option not supported [ 57.714565][ T4371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.724622][ T4385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.291'. [ 57.734195][ T4385] syzkaller1: entered promiscuous mode [ 57.739871][ T4385] syzkaller1: entered allmulticast mode [ 57.764521][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 57.825803][ T4371] bond0 (unregistering): Released all slaves [ 57.849257][ T4396] netlink: 'syz.3.295': attribute type 4 has an invalid length. [ 57.862580][ T4399] netlink: 830 bytes leftover after parsing attributes in process `syz.0.297'. [ 57.923096][ T4406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4406 comm=syz.0.300 [ 58.054027][ T4426] netlink: 'syz.2.311': attribute type 4 has an invalid length. [ 58.075331][ T4433] macvtap0: refused to change device tx_queue_len [ 58.124571][ T4441] FAULT_INJECTION: forcing a failure. [ 58.124571][ T4441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.138502][ T4441] CPU: 1 UID: 0 PID: 4441 Comm: syz.1.316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.138533][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.138590][ T4441] Call Trace: [ 58.138597][ T4441] [ 58.138605][ T4441] __dump_stack+0x1d/0x30 [ 58.138631][ T4441] dump_stack_lvl+0xe8/0x140 [ 58.138654][ T4441] dump_stack+0x15/0x1b [ 58.138679][ T4441] should_fail_ex+0x265/0x280 [ 58.138743][ T4441] should_fail+0xb/0x20 [ 58.138761][ T4441] should_fail_usercopy+0x1a/0x20 [ 58.138850][ T4441] _copy_to_user+0x20/0xa0 [ 58.138876][ T4441] simple_read_from_buffer+0xb5/0x130 [ 58.138895][ T4441] proc_fail_nth_read+0x10e/0x150 [ 58.138927][ T4441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.138973][ T4441] vfs_read+0x1a8/0x770 [ 58.138989][ T4441] ? __rcu_read_unlock+0x4f/0x70 [ 58.139069][ T4441] ? __fget_files+0x184/0x1c0 [ 58.139094][ T4441] ? mutex_lock+0x58/0x90 [ 58.139136][ T4441] ksys_read+0xda/0x1a0 [ 58.139154][ T4441] __x64_sys_read+0x40/0x50 [ 58.139172][ T4441] x64_sys_call+0x2889/0x3000 [ 58.139197][ T4441] do_syscall_64+0xd8/0x2c0 [ 58.139283][ T4441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.139303][ T4441] RIP: 0033:0x7f09d0f9e15c [ 58.139321][ T4441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.139338][ T4441] RSP: 002b:00007f09cf9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.139364][ T4441] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9e15c [ 58.139377][ T4441] RDX: 000000000000000f RSI: 00007f09cf9ff0a0 RDI: 0000000000000003 [ 58.139391][ T4441] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 58.139408][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.139420][ T4441] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 58.139445][ T4441] [ 58.402639][ T4459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 58.412708][ T29] kauditd_printk_skb: 1394 callbacks suppressed [ 58.412723][ T29] audit: type=1400 audit(1765899457.643:4044): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.444106][ T29] audit: type=1326 audit(1765899457.643:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.456356][ T4432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.467664][ T29] audit: type=1326 audit(1765899457.643:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.500215][ T29] audit: type=1326 audit(1765899457.663:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.523675][ T29] audit: type=1326 audit(1765899457.663:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.547257][ T29] audit: type=1326 audit(1765899457.663:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.561438][ T3319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.570852][ T29] audit: type=1326 audit(1765899457.663:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0651cf749 code=0x7ffc0000 [ 58.577415][ T3319] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 58.577437][ T3319] audit: backlog limit exceeded [ 58.614276][ T4466] netlink: 'syz.3.326': attribute type 4 has an invalid length. [ 58.654383][ T4432] bond0 (unregistering): Released all slaves [ 58.684798][ T4478] FAULT_INJECTION: forcing a failure. [ 58.684798][ T4478] name failslab, interval 1, probability 0, space 0, times 0 [ 58.689820][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.698033][ T4478] CPU: 1 UID: 0 PID: 4478 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.698064][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.698134][ T4478] Call Trace: [ 58.698188][ T4478] [ 58.698196][ T4478] __dump_stack+0x1d/0x30 [ 58.698221][ T4478] dump_stack_lvl+0xe8/0x140 [ 58.698248][ T4478] dump_stack+0x15/0x1b [ 58.698267][ T4478] should_fail_ex+0x265/0x280 [ 58.698290][ T4478] should_failslab+0x8c/0xb0 [ 58.698312][ T4478] kmem_cache_alloc_noprof+0x69/0x4b0 [ 58.698410][ T4478] ? security_file_alloc+0x32/0x100 [ 58.698437][ T4478] security_file_alloc+0x32/0x100 [ 58.698461][ T4478] init_file+0x5c/0x1c0 [ 58.698486][ T4478] alloc_empty_file+0x8b/0x200 [ 58.698528][ T4478] alloc_file_pseudo+0xc6/0x160 [ 58.698555][ T4478] anon_inode_getfile_fmode+0xa5/0x140 [ 58.698594][ T4478] do_signalfd4+0x156/0x320 [ 58.698614][ T4478] __x64_sys_signalfd+0xbe/0xf0 [ 58.698658][ T4478] x64_sys_call+0x2a0a/0x3000 [ 58.698681][ T4478] do_syscall_64+0xd8/0x2c0 [ 58.698747][ T4478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.698768][ T4478] RIP: 0033:0x7f87c4c5f749 [ 58.698783][ T4478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.698801][ T4478] RSP: 002b:00007f87c36bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 58.698830][ T4478] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5f749 [ 58.698843][ T4478] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 58.698855][ T4478] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.698868][ T4478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.698927][ T4478] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 58.698944][ T4478] [ 58.895929][ T4489] FAULT_INJECTION: forcing a failure. [ 58.895929][ T4489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.898139][ T4481] macvlan2: entered promiscuous mode [ 58.909195][ T4489] CPU: 0 UID: 0 PID: 4489 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.909251][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.909263][ T4489] Call Trace: [ 58.909310][ T4489] [ 58.909318][ T4489] __dump_stack+0x1d/0x30 [ 58.909343][ T4489] dump_stack_lvl+0xe8/0x140 [ 58.909364][ T4489] dump_stack+0x15/0x1b [ 58.909422][ T4489] should_fail_ex+0x265/0x280 [ 58.909445][ T4489] should_fail+0xb/0x20 [ 58.909464][ T4489] should_fail_usercopy+0x1a/0x20 [ 58.909491][ T4489] _copy_from_user+0x1c/0xb0 [ 58.909517][ T4489] ___sys_sendmsg+0xc1/0x1d0 [ 58.909551][ T4489] __x64_sys_sendmsg+0xd4/0x160 [ 58.909630][ T4489] x64_sys_call+0x17ba/0x3000 [ 58.909717][ T4489] do_syscall_64+0xd8/0x2c0 [ 58.909810][ T4489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.909844][ T4489] RIP: 0033:0x7fe48f10f749 [ 58.909860][ T4489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.909877][ T4489] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.909897][ T4489] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 58.909910][ T4489] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 58.909923][ T4489] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.909945][ T4489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.909957][ T4489] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 58.909974][ T4489] [ 59.077098][ T4481] macvlan2: entered allmulticast mode [ 59.116875][ T4500] FAULT_INJECTION: forcing a failure. [ 59.116875][ T4500] name failslab, interval 1, probability 0, space 0, times 0 [ 59.129861][ T4500] CPU: 1 UID: 0 PID: 4500 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.129945][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.129978][ T4500] Call Trace: [ 59.129986][ T4500] [ 59.129996][ T4500] __dump_stack+0x1d/0x30 [ 59.130022][ T4500] dump_stack_lvl+0xe8/0x140 [ 59.130042][ T4500] dump_stack+0x15/0x1b [ 59.130059][ T4500] should_fail_ex+0x265/0x280 [ 59.130134][ T4500] should_failslab+0x8c/0xb0 [ 59.130176][ T4500] kmem_cache_alloc_noprof+0x69/0x4b0 [ 59.130196][ T4500] ? getname_flags+0x80/0x3b0 [ 59.130270][ T4500] getname_flags+0x80/0x3b0 [ 59.130295][ T4500] user_path_at+0x28/0x130 [ 59.130327][ T4500] __se_sys_mount+0x25b/0x2e0 [ 59.130347][ T4500] ? fput+0x8f/0xc0 [ 59.130412][ T4500] __x64_sys_mount+0x67/0x80 [ 59.130435][ T4500] x64_sys_call+0x2cca/0x3000 [ 59.130462][ T4500] do_syscall_64+0xd8/0x2c0 [ 59.130561][ T4500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.130657][ T4500] RIP: 0033:0x7f749b39f749 [ 59.130675][ T4500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.130748][ T4500] RSP: 002b:00007f7499dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.130839][ T4500] RAX: ffffffffffffffda RBX: 00007f749b5f5fa0 RCX: 00007f749b39f749 [ 59.130851][ T4500] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 59.130863][ T4500] RBP: 00007f7499dff090 R08: 0000000000000000 R09: 0000000000000000 [ 59.130874][ T4500] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 59.130955][ T4500] R13: 00007f749b5f6038 R14: 00007f749b5f5fa0 R15: 00007ffdc8844ff8 [ 59.130973][ T4500] [ 59.294416][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4515 comm=syz.4.346 [ 59.647691][ T4525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.677895][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4562 comm=syz.1.366 [ 59.700797][ T4525] bond1 (unregistering): Released all slaves [ 59.712588][ T4567] FAULT_INJECTION: forcing a failure. [ 59.712588][ T4567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.725831][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.725904][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.725917][ T4567] Call Trace: [ 59.725996][ T4567] [ 59.726003][ T4567] __dump_stack+0x1d/0x30 [ 59.726026][ T4567] dump_stack_lvl+0xe8/0x140 [ 59.726050][ T4567] dump_stack+0x15/0x1b [ 59.726078][ T4567] should_fail_ex+0x265/0x280 [ 59.726105][ T4567] should_fail+0xb/0x20 [ 59.726137][ T4567] should_fail_usercopy+0x1a/0x20 [ 59.726162][ T4567] _copy_to_user+0x20/0xa0 [ 59.726210][ T4567] simple_read_from_buffer+0xb5/0x130 [ 59.726234][ T4567] proc_fail_nth_read+0x10e/0x150 [ 59.726282][ T4567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.726328][ T4567] vfs_read+0x1a8/0x770 [ 59.726347][ T4567] ? __fget_files+0x184/0x1c0 [ 59.726370][ T4567] ? __rcu_read_unlock+0x4f/0x70 [ 59.726453][ T4567] ? __fget_files+0x184/0x1c0 [ 59.726472][ T4567] ? mutex_lock+0x58/0x90 [ 59.726497][ T4567] ksys_read+0xda/0x1a0 [ 59.726517][ T4567] __x64_sys_read+0x40/0x50 [ 59.726593][ T4567] x64_sys_call+0x2889/0x3000 [ 59.726617][ T4567] do_syscall_64+0xd8/0x2c0 [ 59.726713][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.726737][ T4567] RIP: 0033:0x7f87c4c5e15c [ 59.726754][ T4567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.726773][ T4567] RSP: 002b:00007f87c36bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.726795][ T4567] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5e15c [ 59.726807][ T4567] RDX: 000000000000000f RSI: 00007f87c36bf0a0 RDI: 0000000000000003 [ 59.726818][ T4567] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 59.726868][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.726881][ T4567] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 59.726900][ T4567] [ 59.727525][ T4569] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.935604][ T4578] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 59.946221][ T4578] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 59.959325][ T4578] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 59.967313][ T4578] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 60.046957][ T4592] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 60.062009][ T4592] bond0: entered promiscuous mode [ 60.067253][ T4592] bond0: entered allmulticast mode [ 60.072778][ T4592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.138215][ T4608] FAULT_INJECTION: forcing a failure. [ 60.138215][ T4608] name failslab, interval 1, probability 0, space 0, times 0 [ 60.151307][ T4608] CPU: 0 UID: 0 PID: 4608 Comm: syz.0.385 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.151338][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.151348][ T4608] Call Trace: [ 60.151355][ T4608] [ 60.151362][ T4608] __dump_stack+0x1d/0x30 [ 60.151384][ T4608] dump_stack_lvl+0xe8/0x140 [ 60.151405][ T4608] dump_stack+0x15/0x1b [ 60.151425][ T4608] should_fail_ex+0x265/0x280 [ 60.151449][ T4608] should_failslab+0x8c/0xb0 [ 60.151469][ T4608] kmem_cache_alloc_noprof+0x69/0x4b0 [ 60.151492][ T4608] ? vm_area_dup+0x33/0x2c0 [ 60.151516][ T4608] vm_area_dup+0x33/0x2c0 [ 60.151537][ T4608] __split_vma+0xe9/0x660 [ 60.151556][ T4608] ? __account_obj_stock+0x211/0x350 [ 60.151580][ T4608] ? obj_cgroup_charge_account+0x122/0x1a0 [ 60.151608][ T4608] vms_gather_munmap_vmas+0x17a/0x7b0 [ 60.151638][ T4608] ? avc_has_perm_noaudit+0xab/0x130 [ 60.151658][ T4608] ? avc_has_perm+0xf7/0x180 [ 60.151675][ T4608] do_vmi_align_munmap+0x1ac/0x3d0 [ 60.151710][ T4608] do_vmi_munmap+0x1db/0x220 [ 60.151738][ T4608] do_munmap+0x79/0xb0 [ 60.151766][ T4608] mremap_to+0x192/0x430 [ 60.151784][ T4608] ? mtree_load+0x33f/0x4f0 [ 60.151812][ T4608] ? check_prep_vma+0x49c/0x660 [ 60.151834][ T4608] __se_sys_mremap+0x632/0xb30 [ 60.151857][ T4608] ? kcsan_setup_watchpoint+0x415/0x430 [ 60.151887][ T4608] ? __x64_sys_mremap+0x52/0x80 [ 60.151906][ T4608] __x64_sys_mremap+0x67/0x80 [ 60.151926][ T4608] x64_sys_call+0x2944/0x3000 [ 60.151949][ T4608] do_syscall_64+0xd8/0x2c0 [ 60.151979][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.152000][ T4608] RIP: 0033:0x7f749b39f749 [ 60.152015][ T4608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.152032][ T4608] RSP: 002b:00007f7499dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 60.152053][ T4608] RAX: ffffffffffffffda RBX: 00007f749b5f5fa0 RCX: 00007f749b39f749 [ 60.152065][ T4608] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 60.152077][ T4608] RBP: 00007f7499dff090 R08: 0000200000a00000 R09: 0000000000000000 [ 60.152089][ T4608] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 60.152100][ T4608] R13: 00007f749b5f6038 R14: 00007f749b5f5fa0 R15: 00007ffdc8844ff8 [ 60.152116][ T4608] [ 60.375132][ T4613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.489412][ T4630] FAULT_INJECTION: forcing a failure. [ 60.489412][ T4630] name failslab, interval 1, probability 0, space 0, times 0 [ 60.503218][ T4630] CPU: 0 UID: 0 PID: 4630 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.503250][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.503263][ T4630] Call Trace: [ 60.503270][ T4630] [ 60.503280][ T4630] __dump_stack+0x1d/0x30 [ 60.503317][ T4630] dump_stack_lvl+0xe8/0x140 [ 60.503355][ T4630] dump_stack+0x15/0x1b [ 60.503373][ T4630] should_fail_ex+0x265/0x280 [ 60.503416][ T4630] should_failslab+0x8c/0xb0 [ 60.503442][ T4630] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 60.503510][ T4630] ? sidtab_sid2str_get+0xa0/0x130 [ 60.503542][ T4630] kmemdup_noprof+0x2b/0x70 [ 60.503564][ T4630] sidtab_sid2str_get+0xa0/0x130 [ 60.503662][ T4630] security_sid_to_context_core+0x1eb/0x2e0 [ 60.503768][ T4630] security_sid_to_context+0x27/0x40 [ 60.503794][ T4630] selinux_lsmprop_to_secctx+0x67/0xf0 [ 60.503941][ T4630] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 60.503961][ T4630] audit_log_subj_ctx+0xa4/0x3e0 [ 60.503982][ T4630] ? skb_put+0xa9/0xf0 [ 60.504060][ T4630] audit_log_task_context+0x48/0x70 [ 60.504085][ T4630] audit_log_task+0xf4/0x250 [ 60.504113][ T4630] ? kstrtouint+0x76/0xc0 [ 60.504137][ T4630] audit_seccomp+0x61/0x100 [ 60.504230][ T4630] ? __seccomp_filter+0x832/0x1260 [ 60.504324][ T4630] __seccomp_filter+0x843/0x1260 [ 60.504348][ T4630] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.504373][ T4630] ? vfs_write+0x7e8/0x960 [ 60.504470][ T4630] ? __cond_resched+0x4e/0x90 [ 60.504493][ T4630] __secure_computing+0x82/0x150 [ 60.504521][ T4630] syscall_trace_enter+0xcf/0x1e0 [ 60.504549][ T4630] do_syscall_64+0xb2/0x2c0 [ 60.504592][ T4630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.504657][ T4630] RIP: 0033:0x7f09d0f9f749 [ 60.504676][ T4630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.504696][ T4630] RSP: 002b:00007f09cf9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 60.504720][ T4630] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9f749 [ 60.504874][ T4630] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 60.504956][ T4630] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.504967][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.505022][ T4630] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 60.505089][ T4630] [ 60.800731][ T4613] bond1 (unregistering): Released all slaves [ 60.936507][ T4648] FAULT_INJECTION: forcing a failure. [ 60.936507][ T4648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.949671][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.0.404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.949701][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.949713][ T4648] Call Trace: [ 60.949720][ T4648] [ 60.949728][ T4648] __dump_stack+0x1d/0x30 [ 60.949755][ T4648] dump_stack_lvl+0xe8/0x140 [ 60.949779][ T4648] dump_stack+0x15/0x1b [ 60.949853][ T4648] should_fail_ex+0x265/0x280 [ 60.949878][ T4648] should_fail+0xb/0x20 [ 60.949936][ T4648] should_fail_usercopy+0x1a/0x20 [ 60.949962][ T4648] _copy_to_user+0x20/0xa0 [ 60.949992][ T4648] simple_read_from_buffer+0xb5/0x130 [ 60.950016][ T4648] proc_fail_nth_read+0x10e/0x150 [ 60.950065][ T4648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.950110][ T4648] vfs_read+0x1a8/0x770 [ 60.950129][ T4648] ? __rcu_read_unlock+0x4f/0x70 [ 60.950149][ T4648] ? __fget_files+0x184/0x1c0 [ 60.950174][ T4648] ? mutex_lock+0x58/0x90 [ 60.950276][ T4648] ksys_read+0xda/0x1a0 [ 60.950296][ T4648] __x64_sys_read+0x40/0x50 [ 60.950358][ T4648] x64_sys_call+0x2889/0x3000 [ 60.950456][ T4648] do_syscall_64+0xd8/0x2c0 [ 60.950492][ T4648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.950514][ T4648] RIP: 0033:0x7f749b39e15c [ 60.950529][ T4648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.950548][ T4648] RSP: 002b:00007f7499dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.950609][ T4648] RAX: ffffffffffffffda RBX: 00007f749b5f5fa0 RCX: 00007f749b39e15c [ 60.950623][ T4648] RDX: 000000000000000f RSI: 00007f7499dff0a0 RDI: 0000000000000003 [ 60.950635][ T4648] RBP: 00007f7499dff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.950647][ T4648] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 60.950659][ T4648] R13: 00007f749b5f6038 R14: 00007f749b5f5fa0 R15: 00007ffdc8844ff8 [ 60.950714][ T4648] [ 61.170629][ T4667] FAULT_INJECTION: forcing a failure. [ 61.170629][ T4667] name failslab, interval 1, probability 0, space 0, times 0 [ 61.183517][ T4667] CPU: 0 UID: 0 PID: 4667 Comm: syz.0.409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.183547][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.183560][ T4667] Call Trace: [ 61.183568][ T4667] [ 61.183631][ T4667] __dump_stack+0x1d/0x30 [ 61.183659][ T4667] dump_stack_lvl+0xe8/0x140 [ 61.183682][ T4667] dump_stack+0x15/0x1b [ 61.183703][ T4667] should_fail_ex+0x265/0x280 [ 61.183748][ T4667] should_failslab+0x8c/0xb0 [ 61.183770][ T4667] kmem_cache_alloc_noprof+0x69/0x4b0 [ 61.183794][ T4667] ? security_file_alloc+0x32/0x100 [ 61.183889][ T4667] security_file_alloc+0x32/0x100 [ 61.183915][ T4667] init_file+0x5c/0x1c0 [ 61.183942][ T4667] alloc_empty_file+0x8b/0x200 [ 61.184025][ T4667] alloc_file_pseudo+0xc6/0x160 [ 61.184131][ T4667] __shmem_file_setup+0x1de/0x210 [ 61.184157][ T4667] shmem_file_setup+0x3b/0x50 [ 61.184243][ T4667] __se_sys_memfd_create+0x2f7/0x6b0 [ 61.184330][ T4667] __x64_sys_memfd_create+0x31/0x40 [ 61.184360][ T4667] x64_sys_call+0x28cb/0x3000 [ 61.184384][ T4667] do_syscall_64+0xd8/0x2c0 [ 61.184486][ T4667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.184506][ T4667] RIP: 0033:0x7f749b39f749 [ 61.184522][ T4667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.184539][ T4667] RSP: 002b:00007f7499dfee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 61.184611][ T4667] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f749b39f749 [ 61.184625][ T4667] RDX: 00007f7499dfeef0 RSI: 0000000000000000 RDI: 00007f749b424960 [ 61.184637][ T4667] RBP: 0000200000000780 R08: 00007f7499dfebb7 R09: 00007f7499dfee40 [ 61.184648][ T4667] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 61.184659][ T4667] R13: 00007f7499dfeef0 R14: 00007f7499dfeeb0 R15: 00002000000000c0 [ 61.184693][ T4667] [ 61.215871][ T4672] xt_connbytes: Forcing CT accounting to be enabled [ 61.655058][ T4679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.699714][ T4679] bond1 (unregistering): Released all slaves [ 61.771174][ T4721] FAULT_INJECTION: forcing a failure. [ 61.771174][ T4721] name failslab, interval 1, probability 0, space 0, times 0 [ 61.783912][ T4721] CPU: 0 UID: 0 PID: 4721 Comm: syz.3.431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.784066][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.784080][ T4721] Call Trace: [ 61.784089][ T4721] [ 61.784099][ T4721] __dump_stack+0x1d/0x30 [ 61.784203][ T4721] dump_stack_lvl+0xe8/0x140 [ 61.784225][ T4721] dump_stack+0x15/0x1b [ 61.784246][ T4721] should_fail_ex+0x265/0x280 [ 61.784325][ T4721] should_failslab+0x8c/0xb0 [ 61.784345][ T4721] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 61.784373][ T4721] ? sidtab_sid2str_get+0xa0/0x130 [ 61.784406][ T4721] kmemdup_noprof+0x2b/0x70 [ 61.784495][ T4721] sidtab_sid2str_get+0xa0/0x130 [ 61.784527][ T4721] security_sid_to_context_core+0x1eb/0x2e0 [ 61.784579][ T4721] security_sid_to_context+0x27/0x40 [ 61.784608][ T4721] selinux_lsmprop_to_secctx+0x67/0xf0 [ 61.784634][ T4721] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 61.784655][ T4721] audit_log_subj_ctx+0xa4/0x3e0 [ 61.784742][ T4721] ? skb_put+0xa9/0xf0 [ 61.784763][ T4721] audit_log_task_context+0x48/0x70 [ 61.784783][ T4721] audit_log_task+0xf4/0x250 [ 61.784892][ T4721] audit_seccomp+0x61/0x100 [ 61.784920][ T4721] ? __seccomp_filter+0x832/0x1260 [ 61.784946][ T4721] __seccomp_filter+0x843/0x1260 [ 61.784978][ T4721] ? __rcu_read_unlock+0x4f/0x70 [ 61.785033][ T4721] __secure_computing+0x82/0x150 [ 61.785104][ T4721] syscall_trace_enter+0xcf/0x1e0 [ 61.785126][ T4721] do_syscall_64+0xb2/0x2c0 [ 61.785155][ T4721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.785180][ T4721] RIP: 0033:0x7fe48f10e15c [ 61.785207][ T4721] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 61.785230][ T4721] RSP: 002b:00007fe48db6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.785286][ T4721] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10e15c [ 61.785334][ T4721] RDX: 000000000000000f RSI: 00007fe48db6f0a0 RDI: 0000000000000003 [ 61.785348][ T4721] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.785362][ T4721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.785375][ T4721] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 61.785390][ T4721] [ 62.061674][ T4724] __nla_validate_parse: 16 callbacks suppressed [ 62.061691][ T4724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 62.077944][ T4726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4726 comm=syz.2.434 [ 62.080815][ T4727] validate_nla: 5 callbacks suppressed [ 62.080829][ T4727] netlink: 'syz.0.436': attribute type 4 has an invalid length. [ 62.210490][ T4748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 62.318742][ T4763] netlink: 'syz.1.448': attribute type 12 has an invalid length. [ 62.353776][ T4774] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 62.379592][ T4776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4776 comm=syz.2.455 [ 62.456356][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 62.479399][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 62.501894][ T4791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'. [ 62.507334][ T4756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.547647][ T4756] bond0 (unregistering): Released all slaves [ 62.558973][ T4794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.463'. [ 62.656676][ T4803] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 62.729603][ T4809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4809 comm=syz.4.470 [ 62.843938][ T4818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 62.864859][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 62.947339][ T4826] netlink: 'syz.4.478': attribute type 4 has an invalid length. [ 63.138314][ T4830] netlink: 14 bytes leftover after parsing attributes in process `syz.4.480'. [ 63.177129][ T4824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.243816][ T4824] bond1 (unregistering): Released all slaves [ 63.302799][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4844 comm=syz.4.485 [ 63.351149][ T4851] FAULT_INJECTION: forcing a failure. [ 63.351149][ T4851] name failslab, interval 1, probability 0, space 0, times 0 [ 63.364394][ T4851] CPU: 1 UID: 0 PID: 4851 Comm: syz.1.488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.364502][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.364513][ T4851] Call Trace: [ 63.364521][ T4851] [ 63.364529][ T4851] __dump_stack+0x1d/0x30 [ 63.364557][ T4851] dump_stack_lvl+0xe8/0x140 [ 63.364581][ T4851] dump_stack+0x15/0x1b [ 63.364677][ T4851] should_fail_ex+0x265/0x280 [ 63.364702][ T4851] should_failslab+0x8c/0xb0 [ 63.364727][ T4851] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 63.364749][ T4851] ? __alloc_skb+0x324/0x4d0 [ 63.364780][ T4851] __alloc_skb+0x324/0x4d0 [ 63.364799][ T4851] ? __alloc_skb+0x24d/0x4d0 [ 63.364821][ T4851] netlink_alloc_large_skb+0xbf/0xf0 [ 63.364850][ T4851] netlink_sendmsg+0x3cf/0x6b0 [ 63.364991][ T4851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.365023][ T4851] __sock_sendmsg+0x145/0x180 [ 63.365044][ T4851] ____sys_sendmsg+0x31e/0x4a0 [ 63.365075][ T4851] ___sys_sendmsg+0x17b/0x1d0 [ 63.365176][ T4851] __x64_sys_sendmsg+0xd4/0x160 [ 63.365207][ T4851] x64_sys_call+0x17ba/0x3000 [ 63.365294][ T4851] do_syscall_64+0xd8/0x2c0 [ 63.365372][ T4851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.365396][ T4851] RIP: 0033:0x7f09d0f9f749 [ 63.365512][ T4851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.365599][ T4851] RSP: 002b:00007f09cf9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.365622][ T4851] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9f749 [ 63.365687][ T4851] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 63.365699][ T4851] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 63.365712][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.365724][ T4851] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 63.365793][ T4851] [ 63.472304][ T29] kauditd_printk_skb: 3531 callbacks suppressed [ 63.472330][ T29] audit: type=1400 audit(1765899462.593:7556): avc: denied { prog_load } for pid=4843 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.594163][ T29] audit: type=1400 audit(1765899462.593:7557): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.618398][ T29] audit: type=1400 audit(1765899462.593:7558): avc: denied { mounton } for pid=4843 comm="syz.4.485" path="/88/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 63.640794][ T29] audit: type=1400 audit(1765899462.593:7559): avc: denied { create } for pid=4843 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 63.662281][ T29] audit: type=1400 audit(1765899462.803:7560): avc: denied { create } for pid=4852 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.683203][ T29] audit: type=1400 audit(1765899462.803:7561): avc: denied { create } for pid=4852 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.703838][ T29] audit: type=1400 audit(1765899462.803:7562): avc: denied { create } for pid=4852 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 63.709856][ T4857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 63.723435][ T29] audit: type=1400 audit(1765899462.803:7563): avc: denied { read } for pid=4852 comm="syz.2.489" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 63.740072][ T4858] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 63.754179][ T29] audit: type=1400 audit(1765899462.813:7564): avc: denied { create } for pid=4852 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 63.787398][ T29] audit: type=1400 audit(1765899462.813:7565): avc: denied { map_create } for pid=4852 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.928214][ T4869] netlink: 'syz.4.495': attribute type 39 has an invalid length. [ 64.244732][ T4905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4905 comm=syz.1.511 [ 64.279103][ T4909] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 64.420292][ T4929] FAULT_INJECTION: forcing a failure. [ 64.420292][ T4929] name failslab, interval 1, probability 0, space 0, times 0 [ 64.433135][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.433156][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.433230][ T4929] Call Trace: [ 64.433234][ T4929] [ 64.433239][ T4929] __dump_stack+0x1d/0x30 [ 64.433256][ T4929] dump_stack_lvl+0xe8/0x140 [ 64.433270][ T4929] dump_stack+0x15/0x1b [ 64.433315][ T4929] should_fail_ex+0x265/0x280 [ 64.433330][ T4929] should_failslab+0x8c/0xb0 [ 64.433375][ T4929] kmem_cache_alloc_noprof+0x69/0x4b0 [ 64.433434][ T4929] ? skb_clone+0x151/0x1f0 [ 64.433452][ T4929] skb_clone+0x151/0x1f0 [ 64.433477][ T4929] __netlink_deliver_tap+0x2c9/0x500 [ 64.433511][ T4929] netlink_unicast+0x66b/0x690 [ 64.433557][ T4929] netlink_sendmsg+0x58b/0x6b0 [ 64.433577][ T4929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.433651][ T4929] __sock_sendmsg+0x145/0x180 [ 64.433663][ T4929] ____sys_sendmsg+0x31e/0x4a0 [ 64.433752][ T4929] ___sys_sendmsg+0x17b/0x1d0 [ 64.433777][ T4929] __x64_sys_sendmsg+0xd4/0x160 [ 64.433796][ T4929] x64_sys_call+0x17ba/0x3000 [ 64.433811][ T4929] do_syscall_64+0xd8/0x2c0 [ 64.433865][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.433879][ T4929] RIP: 0033:0x7f09d0f9f749 [ 64.433890][ T4929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.433903][ T4929] RSP: 002b:00007f09cf9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.433919][ T4929] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9f749 [ 64.433928][ T4929] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 64.433982][ T4929] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.433990][ T4929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.433998][ T4929] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 64.434070][ T4929] [ 64.659545][ T4933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4933 comm=syz.1.523 [ 64.883759][ T4940] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 64.950232][ T4953] FAULT_INJECTION: forcing a failure. [ 64.950232][ T4953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.963631][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: syz.4.532 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.963664][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.963745][ T4953] Call Trace: [ 64.963753][ T4953] [ 64.963762][ T4953] __dump_stack+0x1d/0x30 [ 64.963814][ T4953] dump_stack_lvl+0xe8/0x140 [ 64.963836][ T4953] dump_stack+0x15/0x1b [ 64.963918][ T4953] should_fail_ex+0x265/0x280 [ 64.963944][ T4953] should_fail+0xb/0x20 [ 64.963965][ T4953] should_fail_usercopy+0x1a/0x20 [ 64.963989][ T4953] _copy_from_user+0x1c/0xb0 [ 64.964056][ T4953] memdup_user+0x5e/0xd0 [ 64.964075][ T4953] strndup_user+0x68/0xb0 [ 64.964091][ T4953] __se_sys_mount+0x8e/0x2e0 [ 64.964110][ T4953] ? fput+0x8f/0xc0 [ 64.964134][ T4953] ? ksys_write+0x192/0x1a0 [ 64.964155][ T4953] __x64_sys_mount+0x67/0x80 [ 64.964230][ T4953] x64_sys_call+0x2cca/0x3000 [ 64.964301][ T4953] do_syscall_64+0xd8/0x2c0 [ 64.964379][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.964399][ T4953] RIP: 0033:0x7fd0651cf749 [ 64.964417][ T4953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.964464][ T4953] RSP: 002b:00007fd063c37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.964488][ T4953] RAX: ffffffffffffffda RBX: 00007fd065425fa0 RCX: 00007fd0651cf749 [ 64.964496][ T4953] RDX: 0000200000000040 RSI: 0000200000001400 RDI: 00002000000013c0 [ 64.964504][ T4953] RBP: 00007fd063c37090 R08: 00002000000000c0 R09: 0000000000000000 [ 64.964585][ T4953] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 64.964598][ T4953] R13: 00007fd065426038 R14: 00007fd065425fa0 R15: 00007ffd249e7898 [ 64.964659][ T4953] [ 65.440288][ T4978] netlink: 'syz.2.543': attribute type 4 has an invalid length. [ 65.471492][ T4982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=4982 comm=syz.3.545 [ 66.045192][ T4988] IPv6: Can't replace route, no match found [ 66.244862][ T5005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5005 comm=syz.0.556 [ 67.304521][ T5040] netlink: 'syz.0.569': attribute type 4 has an invalid length. [ 67.356946][ T5048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5048 comm=syz.3.572 [ 67.410173][ T5051] __nla_validate_parse: 5 callbacks suppressed [ 67.410191][ T5051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.573'. [ 67.490915][ T5058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.575'. [ 67.568709][ T5061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5061 comm=syz.4.576 [ 67.871263][ T5073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 67.982601][ T5079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5079 comm=syz.1.585 [ 68.193471][ T5097] netlink: 'syz.1.602': attribute type 4 has an invalid length. [ 68.274104][ T5107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5107 comm=syz.0.596 [ 68.446488][ T5125] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 68.486051][ T29] kauditd_printk_skb: 1639 callbacks suppressed [ 68.486194][ T29] audit: type=1400 audit(1765899467.713:9205): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.549484][ T29] audit: type=1400 audit(1765899467.723:9206): avc: denied { prog_load } for pid=5130 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.568604][ T29] audit: type=1400 audit(1765899467.723:9207): avc: denied { create } for pid=5130 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 68.588046][ T29] audit: type=1400 audit(1765899467.723:9208): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.612595][ T29] audit: type=1400 audit(1765899467.743:9209): avc: denied { read write } for pid=5126 comm="syz.3.607" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.612628][ T29] audit: type=1400 audit(1765899467.753:9210): avc: denied { open } for pid=5132 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.647391][ T5143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.607'. [ 68.656167][ T29] audit: type=1400 audit(1765899467.753:9211): avc: denied { read write } for pid=5132 comm="syz.0.608" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.689358][ T29] audit: type=1400 audit(1765899467.753:9212): avc: denied { write } for pid=5132 comm="syz.0.608" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 68.712616][ T29] audit: type=1400 audit(1765899467.753:9213): avc: denied { prog_load } for pid=5132 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.732594][ T29] audit: type=1400 audit(1765899467.753:9214): avc: denied { open } for pid=5132 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 68.757860][ T5143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.768820][ T5143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.778835][ T5143] bond0 (unregistering): Released all slaves [ 68.839358][ T5150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 68.853931][ T5152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5152 comm=syz.3.615 [ 69.063398][ T5154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.086392][ T5154] bond1 (unregistering): Released all slaves [ 69.267841][ T5179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5179 comm=syz.2.628 [ 69.336114][ T5177] netlink: 14 bytes leftover after parsing attributes in process `syz.1.627'. [ 69.358638][ T5183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 69.673829][ T5209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5209 comm=syz.2.640 [ 69.682423][ T5189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.711853][ T5189] bond0 (unregistering): Released all slaves [ 69.751422][ T5212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 69.907356][ T5221] netlink: 14 bytes leftover after parsing attributes in process `syz.2.645'. [ 69.948234][ T5234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5234 comm=syz.4.651 [ 69.953716][ T5236] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 69.968767][ T5236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.652'. [ 69.983806][ T5236] team0: Port device geneve1 added [ 70.507671][ T5263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5263 comm=syz.1.664 [ 70.609487][ T5248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.646592][ T5248] bond1 (unregistering): Released all slaves [ 70.868228][ T5291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5291 comm=syz.0.675 [ 70.988506][ T5301] netlink: 'syz.4.679': attribute type 4 has an invalid length. [ 71.521327][ T5324] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 71.578664][ T5330] xt_hashlimit: size too large, truncated to 1048576 [ 71.622836][ T5339] FAULT_INJECTION: forcing a failure. [ 71.622836][ T5339] name failslab, interval 1, probability 0, space 0, times 0 [ 71.635543][ T5339] CPU: 1 UID: 0 PID: 5339 Comm: syz.3.697 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.635574][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.635587][ T5339] Call Trace: [ 71.635594][ T5339] [ 71.635603][ T5339] __dump_stack+0x1d/0x30 [ 71.635631][ T5339] dump_stack_lvl+0xe8/0x140 [ 71.635655][ T5339] dump_stack+0x15/0x1b [ 71.635673][ T5339] should_fail_ex+0x265/0x280 [ 71.635693][ T5339] should_failslab+0x8c/0xb0 [ 71.635713][ T5339] kmem_cache_alloc_noprof+0x69/0x4b0 [ 71.635737][ T5339] ? mas_alloc_nodes+0x1a2/0x210 [ 71.635767][ T5339] mas_alloc_nodes+0x1a2/0x210 [ 71.635792][ T5339] mas_preallocate+0x2ca/0x510 [ 71.635822][ T5339] __split_vma+0x240/0x660 [ 71.635847][ T5339] vms_gather_munmap_vmas+0x17a/0x7b0 [ 71.635879][ T5339] ? selinux_file_open+0x2dc/0x330 [ 71.635907][ T5339] do_vmi_align_munmap+0x1ac/0x3d0 [ 71.635939][ T5339] do_vmi_munmap+0x1db/0x220 [ 71.635968][ T5339] mremap_at+0xfc/0x610 [ 71.635996][ T5339] __se_sys_mremap+0x6d7/0xb30 [ 71.636021][ T5339] ? mutex_unlock+0x4f/0x90 [ 71.636047][ T5339] ? fput+0x8f/0xc0 [ 71.636074][ T5339] ? ksys_write+0x192/0x1a0 [ 71.636095][ T5339] __x64_sys_mremap+0x67/0x80 [ 71.636116][ T5339] x64_sys_call+0x2944/0x3000 [ 71.636137][ T5339] do_syscall_64+0xd8/0x2c0 [ 71.636170][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.636192][ T5339] RIP: 0033:0x7fe48f10f749 [ 71.636207][ T5339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.636223][ T5339] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 71.636243][ T5339] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 71.636254][ T5339] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 71.636266][ T5339] RBP: 00007fe48db6f090 R08: 00002000008b5000 R09: 0000000000000000 [ 71.636278][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.636291][ T5339] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 71.636310][ T5339] [ 72.122971][ T5397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=5397 comm=syz.1.722 [ 72.291094][ T5429] FAULT_INJECTION: forcing a failure. [ 72.291094][ T5429] name failslab, interval 1, probability 0, space 0, times 0 [ 72.303857][ T5429] CPU: 0 UID: 0 PID: 5429 Comm: syz.1.735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.303887][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.303900][ T5429] Call Trace: [ 72.303908][ T5429] [ 72.303916][ T5429] __dump_stack+0x1d/0x30 [ 72.304014][ T5429] dump_stack_lvl+0xe8/0x140 [ 72.304038][ T5429] dump_stack+0x15/0x1b [ 72.304060][ T5429] should_fail_ex+0x265/0x280 [ 72.304146][ T5429] should_failslab+0x8c/0xb0 [ 72.304167][ T5429] kmem_cache_alloc_noprof+0x69/0x4b0 [ 72.304187][ T5429] ? __anon_vma_prepare+0x70/0x2f0 [ 72.304236][ T5429] ? __rcu_read_lock+0x37/0x50 [ 72.304272][ T5429] __anon_vma_prepare+0x70/0x2f0 [ 72.304299][ T5429] handle_mm_fault+0x1d91/0x2c60 [ 72.304344][ T5429] do_user_addr_fault+0x630/0x1080 [ 72.304423][ T5429] ? ksys_mmap_pgoff+0xc2/0x310 [ 72.304448][ T5429] exc_page_fault+0x62/0xa0 [ 72.304583][ T5429] asm_exc_page_fault+0x26/0x30 [ 72.304615][ T5429] RIP: 0033:0x7f09d0e60943 [ 72.304634][ T5429] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 72.304653][ T5429] RSP: 002b:00007f09cf9fe4a0 EFLAGS: 00010202 [ 72.304672][ T5429] RAX: 0000000000008000 RBX: 00007f09cf9fe540 RCX: 00007f09c75df000 [ 72.304715][ T5429] RDX: 00007f09cf9fe6e0 RSI: 000000000000000e RDI: 00007f09cf9fe5e0 [ 72.304727][ T5429] RBP: 0000000000000102 R08: 0000000000000006 R09: 000000000000000e [ 72.304738][ T5429] R10: 000000000000001a R11: 00007f09cf9fe540 R12: 0000000000000001 [ 72.304750][ T5429] R13: 00007f09d103fc40 R14: 0000000000000001 R15: 00007f09cf9fe5e0 [ 72.304766][ T5429] [ 72.304793][ T5429] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.687420][ T5471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5471 comm=syz.1.751 [ 72.742497][ T5481] netlink: 'syz.1.756': attribute type 27 has an invalid length. [ 72.766103][ T5481] ip6tnl0: left promiscuous mode [ 72.771121][ T5481] ip6tnl0: left allmulticast mode [ 72.784444][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.791902][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.791975][ T5483] __nla_validate_parse: 9 callbacks suppressed [ 72.791988][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 72.813062][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 72.848939][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.860230][ T5481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.898524][ T5481] bond0: left promiscuous mode [ 72.903642][ T5481] bond0: left allmulticast mode [ 72.912793][ T2472] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.928291][ T2472] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.948149][ T2472] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.963927][ T2472] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.003488][ T5500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5500 comm=syz.1.764 [ 73.132957][ T5527] FAULT_INJECTION: forcing a failure. [ 73.132957][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.146332][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.146352][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.146404][ T5527] Call Trace: [ 73.146410][ T5527] [ 73.146416][ T5527] __dump_stack+0x1d/0x30 [ 73.146434][ T5527] dump_stack_lvl+0xe8/0x140 [ 73.146522][ T5527] dump_stack+0x15/0x1b [ 73.146535][ T5527] should_fail_ex+0x265/0x280 [ 73.146550][ T5527] should_fail+0xb/0x20 [ 73.146562][ T5527] should_fail_usercopy+0x1a/0x20 [ 73.146602][ T5527] _copy_to_user+0x20/0xa0 [ 73.146620][ T5527] simple_read_from_buffer+0xb5/0x130 [ 73.146688][ T5527] proc_fail_nth_read+0x10e/0x150 [ 73.146706][ T5527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 73.146724][ T5527] vfs_read+0x1a8/0x770 [ 73.146854][ T5527] ? __rcu_read_unlock+0x4f/0x70 [ 73.146874][ T5527] ? __fget_files+0x184/0x1c0 [ 73.146897][ T5527] ? mutex_lock+0x58/0x90 [ 73.147060][ T5527] ksys_read+0xda/0x1a0 [ 73.147073][ T5527] __x64_sys_read+0x40/0x50 [ 73.147162][ T5527] x64_sys_call+0x2889/0x3000 [ 73.147177][ T5527] do_syscall_64+0xd8/0x2c0 [ 73.147248][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.147317][ T5527] RIP: 0033:0x7fe48f10e15c [ 73.147328][ T5527] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 73.147341][ T5527] RSP: 002b:00007fe48db6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.147355][ T5527] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10e15c [ 73.147363][ T5527] RDX: 000000000000000f RSI: 00007fe48db6f0a0 RDI: 0000000000000003 [ 73.147440][ T5527] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.147448][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.147456][ T5527] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 73.147467][ T5527] [ 73.494593][ T29] kauditd_printk_skb: 3012 callbacks suppressed [ 73.494610][ T29] audit: type=1400 audit(1765899472.723:12227): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.526120][ T29] audit: type=1400 audit(1765899472.733:12228): avc: denied { map_create } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.546052][ T29] audit: type=1400 audit(1765899472.733:12229): avc: denied { prog_load } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.565428][ T29] audit: type=1400 audit(1765899472.733:12230): avc: denied { prog_load } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.584882][ T29] audit: type=1400 audit(1765899472.733:12231): avc: denied { prog_load } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.604307][ T29] audit: type=1400 audit(1765899472.733:12232): avc: denied { create } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 73.605248][ T5548] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.624483][ T29] audit: type=1400 audit(1765899472.733:12233): avc: denied { map_create } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.631027][ T5548] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 73.650285][ T29] audit: type=1400 audit(1765899472.733:12234): avc: denied { prog_load } for pid=5542 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.695285][ T5550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5550 comm=syz.3.785 [ 73.977900][ T5573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5573 comm=syz.0.796 [ 74.021515][ T5584] FAULT_INJECTION: forcing a failure. [ 74.021515][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 74.034445][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.034533][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.034545][ T5584] Call Trace: [ 74.034554][ T5584] [ 74.034563][ T5584] __dump_stack+0x1d/0x30 [ 74.034615][ T5584] dump_stack_lvl+0xe8/0x140 [ 74.034641][ T5584] dump_stack+0x15/0x1b [ 74.034660][ T5584] should_fail_ex+0x265/0x280 [ 74.034754][ T5584] should_failslab+0x8c/0xb0 [ 74.034782][ T5584] __kmalloc_cache_noprof+0x65/0x4c0 [ 74.034810][ T5584] ? audit_log_d_path+0x8d/0x150 [ 74.034836][ T5584] audit_log_d_path+0x8d/0x150 [ 74.034877][ T5584] audit_log_d_path_exe+0x42/0x70 [ 74.034947][ T5584] audit_log_task+0x1e9/0x250 [ 74.035027][ T5584] ? kstrtouint+0x76/0xc0 [ 74.035048][ T5584] audit_seccomp+0x61/0x100 [ 74.035136][ T5584] ? __seccomp_filter+0x832/0x1260 [ 74.035222][ T5584] __seccomp_filter+0x843/0x1260 [ 74.035252][ T5584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.035290][ T5584] ? vfs_write+0x7e8/0x960 [ 74.035380][ T5584] ? __rcu_read_unlock+0x4f/0x70 [ 74.035399][ T5584] ? __fget_files+0x184/0x1c0 [ 74.035426][ T5584] __secure_computing+0x82/0x150 [ 74.035525][ T5584] syscall_trace_enter+0xcf/0x1e0 [ 74.035552][ T5584] do_syscall_64+0xb2/0x2c0 [ 74.035589][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.035677][ T5584] RIP: 0033:0x7fe48f10f749 [ 74.035693][ T5584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.035714][ T5584] RSP: 002b:00007fe48db6ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 74.035909][ T5584] RAX: ffffffffffffffda RBX: 0000000000000a0e RCX: 00007fe48f10f749 [ 74.035922][ T5584] RDX: 00007fe48db6eef0 RSI: 0000000000000000 RDI: 00007fe48f194960 [ 74.035933][ T5584] RBP: 00002000000000c0 R08: 00007fe48db6ebb7 R09: 00007fe48db6ee40 [ 74.035945][ T5584] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 74.035957][ T5584] R13: 00007fe48db6eef0 R14: 00007fe48db6eeb0 R15: 0000200000000b00 [ 74.035972][ T5584] [ 74.288507][ T5588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 74.504535][ T5615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5615 comm=syz.1.815 [ 74.565358][ T5622] ip6tnl0: entered promiscuous mode [ 74.570714][ T5622] ip6tnl0: entered allmulticast mode [ 74.577439][ T5622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.819'. [ 74.706727][ T5629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5629 comm=syz.0.822 [ 74.756891][ T5637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5637 comm=syz.1.827 [ 75.180450][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.834'. [ 75.203534][ T5641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.272071][ T5641] bond1 (unregistering): Released all slaves [ 75.294819][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 75.312578][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 75.408070][ T5670] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 75.454609][ T5672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5672 comm=syz.0.840 [ 75.587192][ T5685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 75.811298][ T5701] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 75.896141][ T5697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.919897][ T5697] bond1 (unregistering): Released all slaves [ 76.003109][ T5711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5711 comm=syz.0.856 [ 76.199470][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 76.208452][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.216003][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.223813][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.231217][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.430371][ T5735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.865'. [ 76.787353][ T5742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5742 comm=syz.1.868 [ 77.161515][ T5762] 0ªî{X¹¦: renamed from gretap0 [ 77.167991][ T5762] 0ªî{X¹¦: entered allmulticast mode [ 77.174252][ T5762] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 77.379197][ T5771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5771 comm=syz.3.879 [ 78.364925][ T5793] __nla_validate_parse: 3 callbacks suppressed [ 78.364939][ T5793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 78.441534][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 78.457162][ T5797] bond1: option ad_user_port_key: invalid value (1136) [ 78.464212][ T5797] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 78.472872][ T5797] bond1 (unregistering): Released all slaves [ 78.497508][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 78.507196][ T29] kauditd_printk_skb: 2556 callbacks suppressed [ 78.507230][ T29] audit: type=1400 audit(1765899477.733:14784): avc: denied { create } for pid=5796 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 78.537792][ T29] audit: type=1400 audit(1765899477.763:14785): avc: denied { read } for pid=5796 comm="syz.1.890" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 78.559251][ T29] audit: type=1400 audit(1765899477.763:14786): avc: denied { map_create } for pid=5796 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.578935][ T29] audit: type=1400 audit(1765899477.763:14787): avc: denied { prog_load } for pid=5796 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.598606][ T29] audit: type=1400 audit(1765899477.763:14788): avc: denied { read } for pid=5796 comm="syz.1.890" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=0 [ 78.622018][ T29] audit: type=1400 audit(1765899477.763:14789): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.648705][ T29] audit: type=1400 audit(1765899477.773:14790): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.667688][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.673173][ T29] audit: type=1400 audit(1765899477.793:14791): avc: denied { read } for pid=5806 comm="syz.3.894" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 78.679705][ T5816] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 78.742313][ T5821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'. [ 78.854310][ T5829] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 78.875756][ T5832] netlink: 'syz.1.903': attribute type 10 has an invalid length. [ 78.900390][ T5832] team0: Port device dummy0 added [ 79.013529][ T5827] ip6tnl1: entered promiscuous mode [ 79.018976][ T5827] ip6tnl1: entered allmulticast mode [ 79.597315][ T5851] selinux_netlink_send: 1 callbacks suppressed [ 79.597334][ T5851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5851 comm=syz.4.910 [ 79.785729][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 79.809563][ T5855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 79.887663][ T5859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.078008][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'. [ 80.103715][ T5880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.923'. [ 80.243836][ T5887] FAULT_INJECTION: forcing a failure. [ 80.243836][ T5887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.257140][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.2.926 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.257161][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.257169][ T5887] Call Trace: [ 80.257219][ T5887] [ 80.257225][ T5887] __dump_stack+0x1d/0x30 [ 80.257243][ T5887] dump_stack_lvl+0xe8/0x140 [ 80.257257][ T5887] dump_stack+0x15/0x1b [ 80.257270][ T5887] should_fail_ex+0x265/0x280 [ 80.257360][ T5887] should_fail+0xb/0x20 [ 80.257372][ T5887] should_fail_usercopy+0x1a/0x20 [ 80.257388][ T5887] _copy_from_user+0x1c/0xb0 [ 80.257413][ T5887] kstrtouint_from_user+0x69/0xf0 [ 80.257428][ T5887] ? 0xffffffff81000000 [ 80.257437][ T5887] ? selinux_file_permission+0x1e2/0x320 [ 80.257457][ T5887] proc_fail_nth_write+0x50/0x160 [ 80.257546][ T5887] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.257563][ T5887] vfs_write+0x269/0x960 [ 80.257575][ T5887] ? vfs_read+0x4e6/0x770 [ 80.257586][ T5887] ? __rcu_read_unlock+0x4f/0x70 [ 80.257619][ T5887] ? __fget_files+0x184/0x1c0 [ 80.257634][ T5887] ? mutex_lock+0x58/0x90 [ 80.257651][ T5887] ksys_write+0xda/0x1a0 [ 80.257664][ T5887] __x64_sys_write+0x40/0x50 [ 80.257676][ T5887] x64_sys_call+0x2847/0x3000 [ 80.257694][ T5887] do_syscall_64+0xd8/0x2c0 [ 80.257746][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.257761][ T5887] RIP: 0033:0x7f87c4c5e1ff [ 80.257771][ T5887] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 80.257783][ T5887] RSP: 002b:00007f87c36bf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 80.257798][ T5887] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87c4c5e1ff [ 80.257852][ T5887] RDX: 0000000000000001 RSI: 00007f87c36bf0a0 RDI: 0000000000000003 [ 80.257860][ T5887] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.257912][ T5887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 80.257920][ T5887] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 80.257932][ T5887] [ 80.729928][ T5898] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.755977][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.933'. [ 80.781185][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'. [ 80.857793][ T5916] FAULT_INJECTION: forcing a failure. [ 80.857793][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 80.862200][ T5915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5915 comm=syz.0.939 [ 80.870568][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.2.940 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.870648][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.870660][ T5916] Call Trace: [ 80.870668][ T5916] [ 80.870676][ T5916] __dump_stack+0x1d/0x30 [ 80.870701][ T5916] dump_stack_lvl+0xe8/0x140 [ 80.870781][ T5916] dump_stack+0x15/0x1b [ 80.870801][ T5916] should_fail_ex+0x265/0x280 [ 80.870904][ T5916] should_failslab+0x8c/0xb0 [ 80.870947][ T5916] kmem_cache_alloc_noprof+0x69/0x4b0 [ 80.870969][ T5916] ? prepare_creds+0x39/0x550 [ 80.870989][ T5916] prepare_creds+0x39/0x550 [ 80.871008][ T5916] __sys_setresuid+0x464/0x6d0 [ 80.871034][ T5916] __x64_sys_setresuid+0x3f/0x50 [ 80.871103][ T5916] x64_sys_call+0x1e85/0x3000 [ 80.871151][ T5916] do_syscall_64+0xd8/0x2c0 [ 80.871182][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.871204][ T5916] RIP: 0033:0x7f87c4c5f749 [ 80.871220][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.871237][ T5916] RSP: 002b:00007f87c36bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 80.871328][ T5916] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5f749 [ 80.871341][ T5916] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 000000000000ee00 [ 80.871353][ T5916] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.871365][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.871378][ T5916] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 80.871396][ T5916] [ 81.378804][ T5941] FAULT_INJECTION: forcing a failure. [ 81.378804][ T5941] name failslab, interval 1, probability 0, space 0, times 0 [ 81.391508][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.1.951 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.391580][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.391591][ T5941] Call Trace: [ 81.391598][ T5941] [ 81.391618][ T5941] __dump_stack+0x1d/0x30 [ 81.391678][ T5941] dump_stack_lvl+0xe8/0x140 [ 81.391698][ T5941] dump_stack+0x15/0x1b [ 81.391715][ T5941] should_fail_ex+0x265/0x280 [ 81.391746][ T5941] should_failslab+0x8c/0xb0 [ 81.391771][ T5941] kmem_cache_alloc_noprof+0x69/0x4b0 [ 81.391816][ T5941] ? copy_utsname+0x11b/0x3c0 [ 81.391844][ T5941] copy_utsname+0x11b/0x3c0 [ 81.391866][ T5941] create_new_namespaces+0xde/0x400 [ 81.391957][ T5941] unshare_nsproxy_namespaces+0xe8/0x120 [ 81.391984][ T5941] ksys_unshare+0x3d0/0x6d0 [ 81.392025][ T5941] ? ksys_write+0x192/0x1a0 [ 81.392044][ T5941] __x64_sys_unshare+0x1f/0x30 [ 81.392067][ T5941] x64_sys_call+0x2ae6/0x3000 [ 81.392164][ T5941] do_syscall_64+0xd8/0x2c0 [ 81.392252][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.392288][ T5941] RIP: 0033:0x7f09d0f9f749 [ 81.392306][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.392373][ T5941] RSP: 002b:00007f09cf9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 81.392397][ T5941] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9f749 [ 81.392412][ T5941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000680 [ 81.392425][ T5941] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 81.392460][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.392472][ T5941] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 81.392488][ T5941] [ 81.625501][ T5953] netlink: 'syz.1.955': attribute type 13 has an invalid length. [ 81.879605][ T5983] netlink: 'syz.1.968': attribute type 39 has an invalid length. [ 81.965949][ T5988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5988 comm=syz.2.970 [ 82.005937][ T5992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=5992 comm=syz.3.972 [ 83.091638][ T6040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6040 comm=syz.1.989 [ 83.162333][ T6045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6045 comm=syz.3.993 [ 83.570437][ T29] kauditd_printk_skb: 1705 callbacks suppressed [ 83.570454][ T29] audit: type=1400 audit(1765899482.793:16494): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.602065][ T29] audit: type=1400 audit(1765899482.803:16495): avc: denied { read } for pid=6046 comm="syz.0.994" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 83.607360][ T6049] __nla_validate_parse: 8 callbacks suppressed [ 83.607401][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 83.623606][ T29] audit: type=1400 audit(1765899482.803:16496): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.623643][ T29] audit: type=1400 audit(1765899482.803:16497): avc: denied { prog_load } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.682842][ T29] audit: type=1400 audit(1765899482.833:16498): avc: denied { create } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 83.702396][ T29] audit: type=1400 audit(1765899482.833:16499): avc: denied { create } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 83.722209][ T29] audit: type=1400 audit(1765899482.833:16500): avc: denied { open } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 83.741585][ T29] audit: type=1400 audit(1765899482.833:16501): avc: denied { create } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 83.761400][ T29] audit: type=1400 audit(1765899482.833:16502): avc: denied { prog_load } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.780564][ T29] audit: type=1400 audit(1765899482.833:16503): avc: denied { prog_load } for pid=6048 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.918228][ T6061] bridge: RTM_NEWNEIGH with invalid ether address [ 84.084874][ T6063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.106858][ T6063] bond1 (unregistering): Released all slaves [ 84.208389][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 84.418425][ T6091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6091 comm=syz.0.1013 [ 84.788167][ T6093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.089086][ T6100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.091267][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'. [ 85.117197][ T6100] bond0 (unregistering): Released all slaves [ 85.339793][ T6125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1028'. [ 85.400113][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'. [ 85.472359][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.981364][ T6146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6146 comm=syz.1.1037 [ 86.036967][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1040'. [ 86.038535][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 86.105480][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 86.115655][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 86.140864][ T6157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=6157 comm=syz.4.1041 [ 86.213555][ T6172] FAULT_INJECTION: forcing a failure. [ 86.213555][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.226860][ T6172] CPU: 1 UID: 0 PID: 6172 Comm: syz.3.1048 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.226932][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.226946][ T6172] Call Trace: [ 86.226954][ T6172] [ 86.226962][ T6172] __dump_stack+0x1d/0x30 [ 86.226985][ T6172] dump_stack_lvl+0xe8/0x140 [ 86.227038][ T6172] dump_stack+0x15/0x1b [ 86.227087][ T6172] should_fail_ex+0x265/0x280 [ 86.227117][ T6172] should_fail+0xb/0x20 [ 86.227135][ T6172] should_fail_usercopy+0x1a/0x20 [ 86.227163][ T6172] _copy_from_user+0x1c/0xb0 [ 86.227191][ T6172] ___sys_sendmsg+0xc1/0x1d0 [ 86.227310][ T6172] __sys_sendmmsg+0x178/0x300 [ 86.227333][ T6172] __x64_sys_sendmmsg+0x57/0x70 [ 86.227351][ T6172] x64_sys_call+0x1e28/0x3000 [ 86.227389][ T6172] do_syscall_64+0xd8/0x2c0 [ 86.227410][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.227425][ T6172] RIP: 0033:0x7fe48f10f749 [ 86.227436][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.227469][ T6172] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 86.227484][ T6172] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 86.227492][ T6172] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 86.227501][ T6172] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.227509][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.227551][ T6172] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 86.227643][ T6172] [ 86.487188][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 87.398228][ T6202] netlink: 'syz.0.1059': attribute type 3 has an invalid length. [ 87.512257][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.518631][ T3530] Bluetooth: hci0: command 0x1003 tx timeout [ 87.568842][ T6206] FAULT_INJECTION: forcing a failure. [ 87.568842][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 87.582063][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.3.1061 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.582136][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.582150][ T6206] Call Trace: [ 87.582158][ T6206] [ 87.582167][ T6206] __dump_stack+0x1d/0x30 [ 87.582267][ T6206] dump_stack_lvl+0xe8/0x140 [ 87.582290][ T6206] dump_stack+0x15/0x1b [ 87.582311][ T6206] should_fail_ex+0x265/0x280 [ 87.582333][ T6206] should_failslab+0x8c/0xb0 [ 87.582395][ T6206] __kmalloc_cache_noprof+0x65/0x4c0 [ 87.582481][ T6206] ? __tcf_chain_get+0x91/0x270 [ 87.582502][ T6206] __tcf_chain_get+0x91/0x270 [ 87.582599][ T6206] ? __tcf_block_find+0x11a/0x1a0 [ 87.582619][ T6206] tc_new_tfilter+0x5ac/0x10a0 [ 87.582686][ T6206] ? __rcu_read_unlock+0x4f/0x70 [ 87.582739][ T6206] ? avc_has_perm_noaudit+0xab/0x130 [ 87.582757][ T6206] ? ns_capable+0x7d/0xb0 [ 87.582920][ T6206] ? __pfx_tc_new_tfilter+0x10/0x10 [ 87.582939][ T6206] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 87.583020][ T6206] netlink_rcv_skb+0x123/0x220 [ 87.583039][ T6206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.583077][ T6206] rtnetlink_rcv+0x1c/0x30 [ 87.583096][ T6206] netlink_unicast+0x5c0/0x690 [ 87.583117][ T6206] netlink_sendmsg+0x58b/0x6b0 [ 87.583145][ T6206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.583164][ T6206] __sock_sendmsg+0x145/0x180 [ 87.583236][ T6206] ____sys_sendmsg+0x31e/0x4a0 [ 87.583255][ T6206] ___sys_sendmsg+0x17b/0x1d0 [ 87.583279][ T6206] __x64_sys_sendmsg+0xd4/0x160 [ 87.583500][ T6206] x64_sys_call+0x17ba/0x3000 [ 87.583535][ T6206] do_syscall_64+0xd8/0x2c0 [ 87.583556][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.583581][ T6206] RIP: 0033:0x7fe48f10f749 [ 87.583599][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.583617][ T6206] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.583639][ T6206] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 87.583727][ T6206] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 87.583736][ T6206] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.583744][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.583752][ T6206] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 87.583817][ T6206] [ 88.255105][ T6231] binfmt_misc: register: failed to install interpreter file ./file0 [ 88.275640][ T6233] FAULT_INJECTION: forcing a failure. [ 88.275640][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 88.288560][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: Ptp Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.288588][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.288671][ T6233] Call Trace: [ 88.288678][ T6233] [ 88.288687][ T6233] __dump_stack+0x1d/0x30 [ 88.288780][ T6233] dump_stack_lvl+0xe8/0x140 [ 88.288801][ T6233] dump_stack+0x15/0x1b [ 88.288823][ T6233] should_fail_ex+0x265/0x280 [ 88.288845][ T6233] should_failslab+0x8c/0xb0 [ 88.288874][ T6233] __kmalloc_noprof+0xb9/0x5a0 [ 88.288895][ T6233] ? bm_register_write+0x8c/0xb40 [ 88.288984][ T6233] ? kstrtouint_from_user+0x9f/0xf0 [ 88.289005][ T6233] bm_register_write+0x8c/0xb40 [ 88.289032][ T6233] ? __pfx_bm_register_write+0x10/0x10 [ 88.289056][ T6233] vfs_write+0x269/0x960 [ 88.289119][ T6233] ? __rcu_read_unlock+0x4f/0x70 [ 88.289141][ T6233] ? __fget_files+0x184/0x1c0 [ 88.289178][ T6233] ? mutex_lock+0x58/0x90 [ 88.289204][ T6233] ksys_write+0xda/0x1a0 [ 88.289230][ T6233] __x64_sys_write+0x40/0x50 [ 88.289320][ T6233] x64_sys_call+0x2847/0x3000 [ 88.289348][ T6233] do_syscall_64+0xd8/0x2c0 [ 88.289427][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.289513][ T6233] RIP: 0033:0x7fe48f10f749 [ 88.289530][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.289566][ T6233] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.289583][ T6233] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 88.289591][ T6233] RDX: 0000000000000031 RSI: 0000200000000040 RDI: 0000000000000003 [ 88.289600][ T6233] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.289654][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.289663][ T6233] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 88.289674][ T6233] [ 88.550990][ T6241] binfmt_misc: register: failed to install interpreter file ./file0 [ 88.580807][ T29] kauditd_printk_skb: 1372 callbacks suppressed [ 88.580824][ T29] audit: type=1400 audit(1765899487.803:17874): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.612416][ T29] audit: type=1400 audit(1765899487.803:17875): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.639768][ T29] audit: type=1400 audit(1765899487.843:17876): avc: denied { prog_load } for pid=6249 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.640625][ T6253] FAULT_INJECTION: forcing a failure. [ 88.640625][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.659275][ T29] audit: type=1400 audit(1765899487.843:17877): avc: denied { map_create } for pid=6249 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.659304][ T29] audit: type=1400 audit(1765899487.843:17878): avc: denied { prog_load } for pid=6249 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.659330][ T29] audit: type=1400 audit(1765899487.843:17879): avc: denied { prog_load } for pid=6249 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.659352][ T29] audit: type=1400 audit(1765899487.843:17880): avc: denied { map_create } for pid=6249 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.672405][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.2.1080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.672435][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.672447][ T6253] Call Trace: [ 88.672454][ T6253] [ 88.672462][ T6253] __dump_stack+0x1d/0x30 [ 88.672575][ T6253] dump_stack_lvl+0xe8/0x140 [ 88.672632][ T6253] dump_stack+0x15/0x1b [ 88.672652][ T6253] should_fail_ex+0x265/0x280 [ 88.672675][ T6253] should_fail+0xb/0x20 [ 88.672694][ T6253] should_fail_usercopy+0x1a/0x20 [ 88.672717][ T6253] _copy_to_user+0x20/0xa0 [ 88.672869][ T6253] simple_read_from_buffer+0xb5/0x130 [ 88.672890][ T6253] proc_fail_nth_read+0x10e/0x150 [ 88.672939][ T6253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.673041][ T6253] vfs_read+0x1a8/0x770 [ 88.673059][ T6253] ? __rcu_read_unlock+0x4f/0x70 [ 88.673079][ T6253] ? __fget_files+0x184/0x1c0 [ 88.673159][ T6253] ? mutex_lock+0x58/0x90 [ 88.673184][ T6253] ksys_read+0xda/0x1a0 [ 88.673204][ T6253] __x64_sys_read+0x40/0x50 [ 88.673262][ T6253] x64_sys_call+0x2889/0x3000 [ 88.673285][ T6253] do_syscall_64+0xd8/0x2c0 [ 88.673316][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.673415][ T6253] RIP: 0033:0x7f87c4c5e15c [ 88.673498][ T6253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.673558][ T6253] RSP: 002b:00007f87c36bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.673579][ T6253] RAX: ffffffffffffffda RBX: 00007f87c4eb5fa0 RCX: 00007f87c4c5e15c [ 88.673591][ T6253] RDX: 000000000000000f RSI: 00007f87c36bf0a0 RDI: 0000000000000003 [ 88.673604][ T6253] RBP: 00007f87c36bf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.673616][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.673629][ T6253] R13: 00007f87c4eb6038 R14: 00007f87c4eb5fa0 R15: 00007ffe0d14ecb8 [ 88.673731][ T6253] [ 88.721183][ T6255] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.731125][ T29] audit: type=1326 audit(1765899487.843:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f10f749 code=0x7ffc0000 [ 88.750672][ T6255] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 88.785236][ T6257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6257 comm=syz.2.1083 [ 89.183324][ T6288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6288 comm=syz.1.1097 [ 89.294954][ T6298] __nla_validate_parse: 1 callbacks suppressed [ 89.294969][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'. [ 89.428460][ T6321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6321 comm=syz.1.1110 [ 89.886893][ T6353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6353 comm=syz.4.1123 [ 90.071028][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6358 comm=syz.3.1125 [ 90.159382][ T6366] FAULT_INJECTION: forcing a failure. [ 90.159382][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.172696][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.3.1129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.172743][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.172758][ T6366] Call Trace: [ 90.172766][ T6366] [ 90.172775][ T6366] __dump_stack+0x1d/0x30 [ 90.172873][ T6366] dump_stack_lvl+0xe8/0x140 [ 90.172893][ T6366] dump_stack+0x15/0x1b [ 90.172926][ T6366] should_fail_ex+0x265/0x280 [ 90.172954][ T6366] should_fail+0xb/0x20 [ 90.172976][ T6366] should_fail_usercopy+0x1a/0x20 [ 90.173059][ T6366] _copy_from_user+0x1c/0xb0 [ 90.173083][ T6366] kstrtouint_from_user+0x69/0xf0 [ 90.173103][ T6366] ? 0xffffffff81000000 [ 90.173116][ T6366] ? selinux_file_permission+0x1e2/0x320 [ 90.173274][ T6366] proc_fail_nth_write+0x50/0x160 [ 90.173306][ T6366] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 90.173336][ T6366] vfs_write+0x269/0x960 [ 90.173407][ T6366] ? vfs_read+0x4e6/0x770 [ 90.173426][ T6366] ? __rcu_read_unlock+0x4f/0x70 [ 90.173449][ T6366] ? __fget_files+0x184/0x1c0 [ 90.173475][ T6366] ? mutex_lock+0x58/0x90 [ 90.173567][ T6366] ksys_write+0xda/0x1a0 [ 90.173634][ T6366] __x64_sys_write+0x40/0x50 [ 90.173656][ T6366] x64_sys_call+0x2847/0x3000 [ 90.173678][ T6366] do_syscall_64+0xd8/0x2c0 [ 90.173709][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.173799][ T6366] RIP: 0033:0x7fe48f10e1ff [ 90.173817][ T6366] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 90.173839][ T6366] RSP: 002b:00007fe48db6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 90.173938][ T6366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe48f10e1ff [ 90.173953][ T6366] RDX: 0000000000000001 RSI: 00007fe48db6f0a0 RDI: 0000000000000004 [ 90.173968][ T6366] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.174038][ T6366] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 90.174050][ T6366] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 90.174067][ T6366] [ 90.609442][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6387 comm=syz.1.1136 [ 90.970809][ T6407] FAULT_INJECTION: forcing a failure. [ 90.970809][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.984442][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.1.1145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.984463][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.984471][ T6407] Call Trace: [ 90.984477][ T6407] [ 90.984482][ T6407] __dump_stack+0x1d/0x30 [ 90.984500][ T6407] dump_stack_lvl+0xe8/0x140 [ 90.984582][ T6407] dump_stack+0x15/0x1b [ 90.984595][ T6407] should_fail_ex+0x265/0x280 [ 90.984610][ T6407] should_fail+0xb/0x20 [ 90.984622][ T6407] should_fail_usercopy+0x1a/0x20 [ 90.984679][ T6407] _copy_to_user+0x20/0xa0 [ 90.984697][ T6407] simple_read_from_buffer+0xb5/0x130 [ 90.984712][ T6407] proc_fail_nth_read+0x10e/0x150 [ 90.984745][ T6407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.984763][ T6407] vfs_read+0x1a8/0x770 [ 90.984828][ T6407] ? __rcu_read_unlock+0x4f/0x70 [ 90.984842][ T6407] ? __fget_files+0x184/0x1c0 [ 90.984856][ T6407] ? mutex_lock+0x58/0x90 [ 90.984873][ T6407] ksys_read+0xda/0x1a0 [ 90.984961][ T6407] __x64_sys_read+0x40/0x50 [ 90.984974][ T6407] x64_sys_call+0x2889/0x3000 [ 90.984989][ T6407] do_syscall_64+0xd8/0x2c0 [ 90.985075][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.985090][ T6407] RIP: 0033:0x7f09d0f9e15c [ 90.985102][ T6407] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 90.985115][ T6407] RSP: 002b:00007f09cf9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 90.985129][ T6407] RAX: ffffffffffffffda RBX: 00007f09d11f5fa0 RCX: 00007f09d0f9e15c [ 90.985138][ T6407] RDX: 000000000000000f RSI: 00007f09cf9ff0a0 RDI: 0000000000000008 [ 90.985255][ T6407] RBP: 00007f09cf9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 90.985263][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.985271][ T6407] R13: 00007f09d11f6038 R14: 00007f09d11f5fa0 R15: 00007ffff56512b8 [ 90.985338][ T6407] [ 91.335596][ T6414] netlink: 'syz.2.1147': attribute type 4 has an invalid length. [ 91.336835][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6416 comm=syz.3.1148 [ 91.374213][ T6420] FAULT_INJECTION: forcing a failure. [ 91.374213][ T6420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.387452][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.3.1150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.387481][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.387495][ T6420] Call Trace: [ 91.387503][ T6420] [ 91.387511][ T6420] __dump_stack+0x1d/0x30 [ 91.387599][ T6420] dump_stack_lvl+0xe8/0x140 [ 91.387622][ T6420] dump_stack+0x15/0x1b [ 91.387703][ T6420] should_fail_ex+0x265/0x280 [ 91.387730][ T6420] should_fail+0xb/0x20 [ 91.387750][ T6420] should_fail_usercopy+0x1a/0x20 [ 91.387798][ T6420] _copy_from_user+0x1c/0xb0 [ 91.387825][ T6420] ___sys_sendmsg+0xc1/0x1d0 [ 91.387863][ T6420] __sys_sendmmsg+0x178/0x300 [ 91.387893][ T6420] __x64_sys_sendmmsg+0x57/0x70 [ 91.387950][ T6420] x64_sys_call+0x1e28/0x3000 [ 91.387971][ T6420] do_syscall_64+0xd8/0x2c0 [ 91.388085][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.388106][ T6420] RIP: 0033:0x7fe48f10f749 [ 91.388124][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.388213][ T6420] RSP: 002b:00007fe48db6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.388235][ T6420] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10f749 [ 91.388293][ T6420] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 91.388306][ T6420] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.388321][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.388334][ T6420] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 91.388369][ T6420] [ 91.388604][ T6422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6422 comm=syz.2.1151 [ 91.447081][ T6427] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.462221][ T6426] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.628403][ T6433] FAULT_INJECTION: forcing a failure. [ 91.628403][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.641604][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.3.1155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.641630][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.641643][ T6433] Call Trace: [ 91.641651][ T6433] [ 91.641659][ T6433] __dump_stack+0x1d/0x30 [ 91.641678][ T6433] dump_stack_lvl+0xe8/0x140 [ 91.641695][ T6433] dump_stack+0x15/0x1b [ 91.641760][ T6433] should_fail_ex+0x265/0x280 [ 91.641795][ T6433] should_fail+0xb/0x20 [ 91.641808][ T6433] should_fail_usercopy+0x1a/0x20 [ 91.641823][ T6433] _copy_to_user+0x20/0xa0 [ 91.641894][ T6433] simple_read_from_buffer+0xb5/0x130 [ 91.641908][ T6433] proc_fail_nth_read+0x10e/0x150 [ 91.642002][ T6433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.642019][ T6433] vfs_read+0x1a8/0x770 [ 91.642031][ T6433] ? __fget_files+0x184/0x1c0 [ 91.642116][ T6433] ? __rcu_read_unlock+0x4f/0x70 [ 91.642138][ T6433] ? __fget_files+0x184/0x1c0 [ 91.642169][ T6433] ? mutex_lock+0x58/0x90 [ 91.642198][ T6433] ksys_read+0xda/0x1a0 [ 91.642219][ T6433] __x64_sys_read+0x40/0x50 [ 91.642253][ T6433] x64_sys_call+0x2889/0x3000 [ 91.642280][ T6433] do_syscall_64+0xd8/0x2c0 [ 91.642333][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.642396][ T6433] RIP: 0033:0x7fe48f10e15c [ 91.642408][ T6433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.642484][ T6433] RSP: 002b:00007fe48db6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.642499][ T6433] RAX: ffffffffffffffda RBX: 00007fe48f365fa0 RCX: 00007fe48f10e15c [ 91.642507][ T6433] RDX: 000000000000000f RSI: 00007fe48db6f0a0 RDI: 0000000000000003 [ 91.642516][ T6433] RBP: 00007fe48db6f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.642561][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.642570][ T6433] R13: 00007fe48f366038 R14: 00007fe48f365fa0 R15: 00007fffa83917a8 [ 91.642587][ T6433] [ 92.266513][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6446 comm=syz.2.1160 [ 92.317962][ T6448] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1161'. [ 92.456699][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6466 comm=syz.0.1170 [ 92.497694][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 92.520042][ T6470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6470 comm=syz.2.1171 [ 92.912437][ T6488] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1178'. [ 93.180651][ T6512] x_tables: duplicate underflow at hook 1 [ 93.416875][ T6536] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 93.431756][ T6536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.441362][ T6536] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1199'. [ 93.519123][ T6550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34487 sclass=netlink_route_socket pid=6550 comm=syz.0.1205 [ 93.589412][ T29] kauditd_printk_skb: 1532 callbacks suppressed [ 93.589429][ T29] audit: type=1400 audit(1765899492.813:19407): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.629700][ T29] audit: type=1400 audit(1765899492.853:19408): avc: denied { read write } for pid=6551 comm="syz.1.1206" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.654439][ T29] audit: type=1400 audit(1765899492.863:19409): avc: denied { bpf } for pid=6551 comm="syz.1.1206" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 93.675555][ T29] audit: type=1400 audit(1765899492.863:19410): avc: denied { prog_load } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.695436][ T29] audit: type=1400 audit(1765899492.883:19411): avc: denied { read write } for pid=6551 comm="syz.1.1206" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.720466][ T29] audit: type=1400 audit(1765899492.883:19412): avc: denied { map_create } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.740169][ T29] audit: type=1400 audit(1765899492.883:19413): avc: denied { prog_load } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.759676][ T29] audit: type=1400 audit(1765899492.883:19414): avc: denied { prog_load } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.778974][ T29] audit: type=1400 audit(1765899492.883:19415): avc: denied { create } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 93.799977][ T29] audit: type=1400 audit(1765899492.883:19416): avc: denied { execmem } for pid=6551 comm="syz.1.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 93.904624][ T6558] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 93.949029][ T6562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1210'. [ 93.958320][ T6563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1210'. [ 94.089372][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 94.109035][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 94.153698][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 94.167560][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.176971][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.205676][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.223696][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.691141][ T6601] ================================================================== [ 94.699296][ T6601] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 94.706683][ T6601] [ 94.709010][ T6601] write to 0xffff888107366000 of 4096 bytes by task 6602 on cpu 1: [ 94.717043][ T6601] _copy_from_iter+0x106/0xe70 [ 94.721828][ T6601] copy_page_from_iter+0x178/0x2a0 [ 94.726960][ T6601] process_vm_rw+0x659/0x960 [ 94.731642][ T6601] __x64_sys_process_vm_writev+0x78/0x90 [ 94.737375][ T6601] x64_sys_call+0x27ef/0x3000 [ 94.742058][ T6601] do_syscall_64+0xd8/0x2c0 [ 94.746717][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.752624][ T6601] [ 94.754964][ T6601] write to 0xffff888107366000 of 4096 bytes by task 6601 on cpu 0: [ 94.762864][ T6601] _copy_from_iter+0x106/0xe70 [ 94.767700][ T6601] copy_page_from_iter+0x178/0x2a0 [ 94.772842][ T6601] process_vm_rw+0x659/0x960 [ 94.777564][ T6601] __x64_sys_process_vm_writev+0x78/0x90 [ 94.783504][ T6601] x64_sys_call+0x27ef/0x3000 [ 94.788212][ T6601] do_syscall_64+0xd8/0x2c0 [ 94.792822][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.798723][ T6601] [ 94.801052][ T6601] Reported by Kernel Concurrency Sanitizer on: [ 94.807462][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.0.1227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.817282][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.827362][ T6601] ==================================================================