last executing test programs: 35.789016088s ago: executing program 4 (id=184): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0xfc, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='sys_enter\x00', r2, 0x0, 0xfff}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/242, 0xf2) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008001740"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x3}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x108000) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r8, 0x0, r8) r9 = fsmount(r0, 0x0, 0x0) fchownat(r9, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) 35.103727864s ago: executing program 4 (id=191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000300)=0x0) io_destroy(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r6, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 34.539669309s ago: executing program 4 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 34.180995508s ago: executing program 4 (id=202): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f00005f5000/0x4000)=nil, 0x4000, 0x16) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x20004f) r3 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x4000000) r4 = fcntl$getown(r1, 0x9) r5 = getpgid(0x0) r6 = pidfd_getfd(r0, r1, 0x0) syz_clone3(&(0x7f0000000740)={0x120c000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000580), {0x1d}, &(0x7f00000005c0)=""/24, 0x18, &(0x7f0000000600)=""/4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, r4, r5], 0xa, {r6}}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x42) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x49b, &(0x7f0000000640)={0x0, 0xc81b, 0x800, 0x7ff9, 0x32c, 0x0, r8}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x450000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000006c0)='cachefiles_ondemand_close\x00', r7, 0x0, 0xffffffffffff0c21}, 0x18) io_uring_enter(r9, 0xfd0, 0x4c0, 0x43, 0x0, 0x0) 33.608316245s ago: executing program 4 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xffff, @loopback, 0x4}, 0x1c, 0x0}}], 0x1, 0x2000c010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x4d3f, &(0x7f0000000400)={0x0, 0xca6a, 0x40, 0x2, 0x354}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r5, 0x16) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000500), 0x66) 33.367376844s ago: executing program 4 (id=215): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x1000041, &(0x7f0000000140)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file2'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'syzkaller1\x00', @remote}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x98) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000180)={'ipvlan1\x00'}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef) 33.29385429s ago: executing program 32 (id=215): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x1000041, &(0x7f0000000140)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file2'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'syzkaller1\x00', @remote}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x98) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000180)={'ipvlan1\x00'}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) close(r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef) 1.518837287s ago: executing program 3 (id=986): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000001000000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 1.416755725s ago: executing program 3 (id=988): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527"], 0x2d4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240"], 0xac}, 0x1, 0x0, 0x0, 0x41050}, 0x0) 1.391484677s ago: executing program 3 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000005640)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 1.263857868s ago: executing program 3 (id=994): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="2f60f6b9e53843107aba491cd400af0936eb2409446863ced530a753615d8cdcda"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0xd731e9b96eef36ba) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f00000016c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d000000ff0002f0ca887e9263c02020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000854bccbb66dbdbc9cba44101dcd5f76b1099183a169363eb24ac6b5190c31cdd844426c808ac1611107371eef54f1077d67dc3e7bac98252f1b22caef6e515a76006"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001880)={@fallback=r0, 0x35, 0x1, 0x5, &(0x7f00000016c0), 0x0, 0x0, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='afs_lookup\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffe6c) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x15, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000001640), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.243718379s ago: executing program 0 (id=995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x6fc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/180, 0xb4}, 0x3}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000780)=""/136, 0x88}, {&(0x7f0000000580)=""/33, 0x21}], 0x4, &(0x7f0000000680)=""/18, 0x12}, 0x3}, {{&(0x7f0000000840)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000001b00)=""/214, 0xd6}, 0x9}], 0x3, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r9, 0x0, 0x1}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1a00, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 1.172837745s ago: executing program 0 (id=998): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_context(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000001000000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 1.048646945s ago: executing program 0 (id=1002): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527"], 0x2d4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xac}, 0x1, 0x0, 0x0, 0x41050}, 0x0) 975.032911ms ago: executing program 0 (id=1005): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0xfc, 0x7ffc1ffb}]}) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008001740"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 944.281494ms ago: executing program 0 (id=1006): io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79b2, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681024fff2eeb9b6e0e02d3aa3c", 0xe}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)="26db", 0x2}, {&(0x7f00000001c0)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000001440)="34a4", 0x2}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92a4", 0x2}, {&(0x7f0000000940)="a64e", 0x2}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)="5f0db4d681", 0x5}], 0xc7}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)="74c1400d", 0x4}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="8186", 0x2}], 0x5}}], 0x2, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 688.686734ms ago: executing program 2 (id=1016): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/249) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x80004, 0x10510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x6}, 0x15112, 0x10000, 0x0, 0x1, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80000, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c0000000d06010100000000000000000700ebff0500050003000000078c39faf83814b5a4d2d36a6a4f196069d102765ed39d7c09458170070557b412569fd03c0e196c29291ab0699e4edfc9effdf7ea261d4bb6f9abf8d6ac690aa90d0fc6ffd4e482e2b3cc505401b4e82304fd2b191179119154686f269c20f35a9074e86c2978a590f8e6e3bf443a2d3ffca599884b76b6453b5d5caf7775e5ade5070021acbabf878c56"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c895}, 0x40844) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 630.912569ms ago: executing program 5 (id=1017): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0xfc, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008001740"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 613.06899ms ago: executing program 5 (id=1018): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100b11b700000feffff1a000000180001"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r5, &(0x7f0000000100)="136f8e351b9d3da53247d29e0623f30fdb8c54c665efd05e59a2efb9527e455dc96cb483d9d79cd5bcee4e6aab7158d282ad9f1617e5e121d7913308", 0x3c, 0x60000840, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, 0x1c) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 578.735803ms ago: executing program 1 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 553.904985ms ago: executing program 5 (id=1020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x40}}, 0x22040000) 546.504536ms ago: executing program 1 (id=1021): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002e00030500000400003b1e166a53000000a8000000"], 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r4, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) 540.821746ms ago: executing program 2 (id=1022): syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x20, 0x1, 0x15e}, &(0x7f0000000000), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) timer_delete(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="2d01000021000000000000000000004d0000000700000000000087950000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x9, 0xffffffff, {{0x10, 0x4, 0x0, 0x28, 0x40, 0x68, 0x0, 0x7, 0x2b, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x4, 0x80, 0x3, 0x5}, @cipso={0x86, 0x28, 0x2, [{0x6, 0x6, "bdd28718"}, {0x1, 0xf, "03091e502f2282ec2b099e24a5"}, {0x6, 0x5, "a41dae"}, {0x7, 0x2}, {0x7, 0x6, "a1c907c0"}]}]}}}}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r5, &(0x7f0000000080), 0x10) r7 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) close(r0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7, 0x7, 0xffffffff, 0x6, 0x8452, 0x3}, {0x6, 0xfff, 0x1ba, 0x80000001, 0x200, 0x9}], ['\x00']}) 517.780038ms ago: executing program 5 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000005640)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 475.478792ms ago: executing program 1 (id=1024): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xa26d]}, 0x8, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000500)='\xfddev/vcsu#\x00', 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x3}]}) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, 0x0, 0x60, 0x0, 0x0, 0x0) 393.653028ms ago: executing program 1 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x2, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d3, 0x2b}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, 0x0, 0x27) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8f6004b", @ANYRES16, @ANYBLOB="01002abd7000ffdbdf254c000000"], 0x14}}, 0x8800) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50e4aa163b6ecaeabf120ed74cb6f0f4010000", @ANYRES16, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2e}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}}, 0x404c8c4) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 371.88685ms ago: executing program 3 (id=1026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0xfc, 0x7ffc1ffb}]}) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='sys_enter\x00', r2, 0x0, 0xfff}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/242, 0xf2) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008001740"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x108000) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0xa0, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x0, 0x7995}, 0xfffffffffffffda7, 0x0, 0x0, 0x48000000, 0x1, 0x0, 0x0}) r8 = fsmount(r0, 0x0, 0x0) fchownat(r8, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) 170.853656ms ago: executing program 5 (id=1027): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x5, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96e", 0x0, 0x300, 0x0, 0x0, 0x0}) 145.241598ms ago: executing program 2 (id=1028): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1090) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x22040000) 126.72674ms ago: executing program 1 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 125.55384ms ago: executing program 5 (id=1030): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) socket$kcm(0x2, 0xa, 0x73) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 113.345111ms ago: executing program 2 (id=1031): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100b11b700000feffff1a000000180001"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet6(r5, &(0x7f0000000100)="136f8e351b9d3da53247d29e0623f30fdb8c54c665efd05e59a2efb9527e455dc96cb483d9d79cd5bcee4e6aab7158d282ad9f1617e5e121d7913308", 0x3c, 0x60000840, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, 0x1c) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 62.626945ms ago: executing program 1 (id=1032): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002e00030500000400003b1e166a53000000a8000000"], 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) fstat(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r4, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x6}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) 32.578647ms ago: executing program 2 (id=1033): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 30.589138ms ago: executing program 3 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="eeff0000480000000f000080d900008cce000000c2b22f5a5fd4118107fd5d3b7ea2852e18b4ec20a0f83b602636139c739c977b0386fd2e2a0eb9966d0a6dac9d71e5e1ba7309d04d36335b18711825bf57a061a652629ddeb0b64a0d34880e9de890496d7851fa554b6e2e904bfce82e4800391fd0e81fe286e9329840156f1e2a2d572e25288ef50161120074544ec2743e3ab2f6571e827da61a5fe765b9e18923df9e578e7728e191c0f85df1ef9ff454efa2ea97bc359eb2453e2b75b97631badbc92bb853c4abca16891b73164d4fad1aae274af9d26711390d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c1, 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r4, 0x2}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801440010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r7, &(0x7f0000000240), 0x0, 0x8800000, 0x0, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 10.21419ms ago: executing program 2 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=1036): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xa26d]}, 0x8, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000500)='\xfddev/vcsu#\x00', 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x3}]}) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, 0x0, 0x60, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ==== [ 31.433677][ T3541] WARNING: The mand mount option has been deprecated and [ 31.433677][ T3541] and is ignored by this kernel. Remove the mand [ 31.433677][ T3541] option from the mount to silence this warning. [ 31.433677][ T3541] ======================================================= [ 31.530783][ T3592] loop2: detected capacity change from 0 to 2048 [ 31.624845][ T3598] loop0: detected capacity change from 0 to 2048 [ 31.627634][ T3592] SELinux: failed to load policy [ 31.638421][ T3599] loop1: detected capacity change from 0 to 1024 [ 31.671067][ T3598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 31.672652][ T3599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.765383][ T3595] vhci_hcd: invalid port number 96 [ 31.770747][ T3595] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 31.785838][ T3612] loop2: detected capacity change from 0 to 1024 [ 31.827582][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.860171][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.916646][ T3604] vhci_hcd: invalid port number 96 [ 31.921833][ T3604] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 31.981416][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.005454][ T3630] cgroup: name respecified [ 32.042869][ T3634] loop2: detected capacity change from 0 to 2048 [ 32.078901][ T3640] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 32.103926][ T3634] loop2: p1 < > p4 [ 32.106689][ T3634] loop2: p4 size 8388608 extends beyond EOD, truncated [ 32.149875][ T3634] bridge0: entered promiscuous mode [ 32.164569][ T3634] bridge0: port 3(macvlan2) entered blocking state [ 32.171400][ T3634] bridge0: port 3(macvlan2) entered disabled state [ 32.178384][ T3634] macvlan2: entered allmulticast mode [ 32.183940][ T3634] bridge0: entered allmulticast mode [ 32.190565][ T3634] macvlan2: left allmulticast mode [ 32.195800][ T3634] bridge0: left allmulticast mode [ 32.209857][ T3649] loop0: detected capacity change from 0 to 1024 [ 32.216686][ T3634] bridge0: left promiscuous mode [ 32.241888][ T3649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.272406][ T3653] netlink: 'syz.3.63': attribute type 3 has an invalid length. [ 32.304256][ T3655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3655 comm=syz.3.64 [ 32.314005][ T3649] vhci_hcd: invalid port number 96 [ 32.321874][ T3649] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 32.370908][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.378359][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 32.391623][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.498117][ T3670] loop3: detected capacity change from 0 to 512 [ 32.506840][ T3667] loop0: detected capacity change from 0 to 2048 [ 32.509659][ T3670] ext4: Unknown parameter 'noacl' [ 32.586877][ T3675] 9pnet_fd: p9_fd_create_tcp (3675): problem connecting socket to 127.0.0.1 [ 32.751587][ T3685] openvswitch: netlink: Message has 6 unknown bytes. [ 33.275248][ T29] kauditd_printk_skb: 728 callbacks suppressed [ 33.275262][ T29] audit: type=1400 audit(1755877317.587:817): avc: denied { shutdown } for pid=3698 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.301494][ T29] audit: type=1400 audit(1755877317.597:818): avc: denied { name_connect } for pid=3698 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 33.392927][ T29] audit: type=1400 audit(1755877317.707:819): avc: denied { create } for pid=3698 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.449392][ T29] audit: type=1400 audit(1755877317.727:820): avc: denied { setopt } for pid=3698 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.468799][ T29] audit: type=1400 audit(1755877317.727:821): avc: denied { connect } for pid=3698 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.488222][ T29] audit: type=1400 audit(1755877317.737:822): avc: denied { setattr } for pid=3700 comm="syz.1.84" name="SCTPv6" dev="sockfs" ino=6249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.588709][ T3707] loop0: detected capacity change from 0 to 128 [ 33.601478][ T29] audit: type=1400 audit(1755877317.907:823): avc: denied { mount } for pid=3706 comm="syz.0.85" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.666709][ T3713] process 'syz.0.88' launched './file1' with NULL argv: empty string added [ 33.680213][ T29] audit: type=1400 audit(1755877317.957:824): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.700559][ T29] audit: type=1400 audit(1755877317.977:825): avc: denied { execute } for pid=3712 comm="syz.0.88" name="file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.777039][ T29] audit: type=1400 audit(1755877318.017:826): avc: denied { execute_no_trans } for pid=3712 comm="syz.0.88" path="/20/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.777792][ T3715] __nla_validate_parse: 6 callbacks suppressed [ 33.777805][ T3715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 33.829649][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 33.873493][ T3717] loop0: detected capacity change from 0 to 4096 [ 33.881499][ T3717] EXT4-fs: test_dummy_encryption option not supported [ 33.938321][ T3717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 33.965401][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 33.997962][ T3719] Zero length message leads to an empty skb [ 34.124066][ T3743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3743 comm=syz.4.98 [ 34.260751][ T3751] loop1: detected capacity change from 0 to 128 [ 34.270253][ T3751] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.303659][ T3751] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.462343][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.684407][ T3794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 34.766432][ T3801] loop2: detected capacity change from 0 to 4096 [ 34.780455][ T3801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.808710][ T3804] syz.1.108 (3804) used greatest stack depth: 10224 bytes left [ 34.852174][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.974790][ T3823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5145 sclass=netlink_route_socket pid=3823 comm=syz.3.114 [ 35.146414][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb0a00: rx timeout, send abort [ 35.412638][ T3841] loop4: detected capacity change from 0 to 4096 [ 35.418791][ T3844] loop0: detected capacity change from 0 to 2048 [ 35.427290][ T3844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.122'. [ 35.436822][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 35.466426][ T3841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.524446][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.646407][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb0600: rx timeout, send abort [ 35.655015][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb0a00: abort rx timeout. Force session deactivation [ 36.112879][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 36.122179][ T3885] netlink: 312 bytes leftover after parsing attributes in process `syz.4.134'. [ 36.122182][ T3884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 36.154640][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811acb0600: abort rx timeout. Force session deactivation [ 36.235424][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.242928][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.297771][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.308716][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.327906][ T3895] mmap: syz.4.138 (3895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.357230][ T41] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.367177][ T41] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.390158][ T41] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.399829][ T41] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.416496][ T3897] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 36.434677][ T3897] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 36.457885][ T3899] loop4: detected capacity change from 0 to 1024 [ 36.477220][ T3899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.512054][ T3899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.591710][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.671224][ T3915] 9pnet_fd: Insufficient options for proto=fd [ 36.737075][ T3922] team0: Device gtp0 is of different type [ 36.777850][ T3928] loop1: detected capacity change from 0 to 512 [ 36.814709][ T3931] loop2: detected capacity change from 0 to 2048 [ 36.830381][ T3928] EXT4-fs (loop1): too many log groups per flexible block group [ 36.838178][ T3928] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 36.867880][ T3928] EXT4-fs (loop1): mount failed [ 36.934729][ T3931] SELinux: failed to load policy [ 37.044599][ T3951] loop0: detected capacity change from 0 to 2048 [ 37.139301][ T3951] SELinux: failed to load policy [ 37.254916][ T3967] FAULT_INJECTION: forcing a failure. [ 37.254916][ T3967] name failslab, interval 1, probability 0, space 0, times 0 [ 37.267795][ T3967] CPU: 0 UID: 0 PID: 3967 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.267824][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.267836][ T3967] Call Trace: [ 37.267843][ T3967] [ 37.267850][ T3967] __dump_stack+0x1d/0x30 [ 37.267906][ T3967] dump_stack_lvl+0xe8/0x140 [ 37.267956][ T3967] dump_stack+0x15/0x1b [ 37.267972][ T3967] should_fail_ex+0x265/0x280 [ 37.267994][ T3967] ? audit_log_d_path+0x8d/0x150 [ 37.268018][ T3967] should_failslab+0x8c/0xb0 [ 37.268040][ T3967] __kmalloc_cache_noprof+0x4c/0x320 [ 37.268097][ T3967] audit_log_d_path+0x8d/0x150 [ 37.268123][ T3967] audit_log_d_path_exe+0x42/0x70 [ 37.268177][ T3967] audit_log_task+0x1e9/0x250 [ 37.268206][ T3967] audit_seccomp+0x61/0x100 [ 37.268229][ T3967] ? __seccomp_filter+0x68c/0x10d0 [ 37.268250][ T3967] __seccomp_filter+0x69d/0x10d0 [ 37.268280][ T3967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 37.268303][ T3967] ? vfs_write+0x7e8/0x960 [ 37.268323][ T3967] ? __rcu_read_unlock+0x4f/0x70 [ 37.268351][ T3967] ? __fget_files+0x184/0x1c0 [ 37.268375][ T3967] __secure_computing+0x82/0x150 [ 37.268394][ T3967] syscall_trace_enter+0xcf/0x1e0 [ 37.268415][ T3967] do_syscall_64+0xac/0x200 [ 37.268473][ T3967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.268495][ T3967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.268519][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.268536][ T3967] RIP: 0033:0x7f29aa93ebe9 [ 37.268551][ T3967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.268601][ T3967] RSP: 002b:00007f29a939f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 37.268620][ T3967] RAX: ffffffffffffffda RBX: 00007f29aab65fa0 RCX: 00007f29aa93ebe9 [ 37.268632][ T3967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 37.268642][ T3967] RBP: 00007f29a939f090 R08: 0000000000000000 R09: 0000000000000000 [ 37.268734][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.268745][ T3967] R13: 00007f29aab66038 R14: 00007f29aab65fa0 R15: 00007ffc76877d98 [ 37.268764][ T3967] [ 37.576724][ T3981] loop1: detected capacity change from 0 to 256 [ 37.685262][ T3983] loop4: detected capacity change from 0 to 1024 [ 37.694195][ T3983] EXT4-fs: Ignoring removed orlov option [ 37.717273][ T3983] ext4: Bad value for 'resuid' [ 37.722356][ T3983] ext4: Bad value for 'resuid' [ 37.873077][ T3995] loop4: detected capacity change from 0 to 2048 [ 37.915973][ T3999] FAULT_INJECTION: forcing a failure. [ 37.915973][ T3999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.929290][ T3999] CPU: 0 UID: 0 PID: 3999 Comm: syz.2.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.929377][ T3999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.929386][ T3999] Call Trace: [ 37.929391][ T3999] [ 37.929398][ T3999] __dump_stack+0x1d/0x30 [ 37.929419][ T3999] dump_stack_lvl+0xe8/0x140 [ 37.929438][ T3999] dump_stack+0x15/0x1b [ 37.929517][ T3999] should_fail_ex+0x265/0x280 [ 37.929540][ T3999] should_fail+0xb/0x20 [ 37.929555][ T3999] should_fail_usercopy+0x1a/0x20 [ 37.929652][ T3999] _copy_to_user+0x20/0xa0 [ 37.929679][ T3999] simple_read_from_buffer+0xb5/0x130 [ 37.929700][ T3999] proc_fail_nth_read+0x10e/0x150 [ 37.929786][ T3999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 37.929810][ T3999] vfs_read+0x1a8/0x770 [ 37.929830][ T3999] ? __rcu_read_unlock+0x4f/0x70 [ 37.929859][ T3999] ? __fget_files+0x184/0x1c0 [ 37.929884][ T3999] ksys_read+0xda/0x1a0 [ 37.929905][ T3999] __x64_sys_read+0x40/0x50 [ 37.929932][ T3999] x64_sys_call+0x27bc/0x2ff0 [ 37.929950][ T3999] do_syscall_64+0xd2/0x200 [ 37.929976][ T3999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.930000][ T3999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.930044][ T3999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.930064][ T3999] RIP: 0033:0x7f49a776d5fc [ 37.930079][ T3999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.930146][ T3999] RSP: 002b:00007f49a61d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.930165][ T3999] RAX: ffffffffffffffda RBX: 00007f49a7995fa0 RCX: 00007f49a776d5fc [ 37.930179][ T3999] RDX: 000000000000000f RSI: 00007f49a61d70a0 RDI: 0000000000000003 [ 37.930189][ T3999] RBP: 00007f49a61d7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.930200][ T3999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.930212][ T3999] R13: 00007f49a7996038 R14: 00007f49a7995fa0 R15: 00007ffc197198d8 [ 37.930263][ T3999] [ 38.206961][ T3995] SELinux: failed to load policy [ 38.255301][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.268147][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.317186][ T29] kauditd_printk_skb: 782 callbacks suppressed [ 38.317198][ T29] audit: type=1326 audit(1755877322.627:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.351741][ T29] audit: type=1326 audit(1755877322.627:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.375204][ T29] audit: type=1326 audit(1755877322.627:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.398651][ T29] audit: type=1326 audit(1755877322.627:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.422542][ T29] audit: type=1326 audit(1755877322.627:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.446286][ T29] audit: type=1326 audit(1755877322.627:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.469588][ T29] audit: type=1326 audit(1755877322.627:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.482309][ T4020] loop4: detected capacity change from 0 to 1024 [ 38.493097][ T29] audit: type=1326 audit(1755877322.627:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.522586][ T29] audit: type=1326 audit(1755877322.627:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.546005][ T29] audit: type=1326 audit(1755877322.627:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.4.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cb909ebe9 code=0x7ffc0000 [ 38.573374][ T4020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.638482][ T4032] FAULT_INJECTION: forcing a failure. [ 38.638482][ T4032] name failslab, interval 1, probability 0, space 0, times 0 [ 38.651263][ T4032] CPU: 1 UID: 0 PID: 4032 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.651287][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.651299][ T4032] Call Trace: [ 38.651307][ T4032] [ 38.651382][ T4032] __dump_stack+0x1d/0x30 [ 38.651400][ T4032] dump_stack_lvl+0xe8/0x140 [ 38.651416][ T4032] dump_stack+0x15/0x1b [ 38.651495][ T4032] should_fail_ex+0x265/0x280 [ 38.651511][ T4032] ? genl_start+0x117/0x390 [ 38.651533][ T4032] should_failslab+0x8c/0xb0 [ 38.651557][ T4032] __kmalloc_cache_noprof+0x4c/0x320 [ 38.651633][ T4032] genl_start+0x117/0x390 [ 38.651654][ T4032] __netlink_dump_start+0x331/0x520 [ 38.651675][ T4032] genl_family_rcv_msg_dumpit+0x115/0x180 [ 38.651700][ T4032] ? __pfx_genl_start+0x10/0x10 [ 38.651797][ T4032] ? __pfx_genl_dumpit+0x10/0x10 [ 38.651816][ T4032] ? __pfx_genl_done+0x10/0x10 [ 38.651851][ T4032] genl_rcv_msg+0x3f0/0x460 [ 38.651876][ T4032] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 38.651912][ T4032] netlink_rcv_skb+0x120/0x220 [ 38.651969][ T4032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 38.651997][ T4032] genl_rcv+0x28/0x40 [ 38.652019][ T4032] netlink_unicast+0x5c0/0x690 [ 38.652053][ T4032] netlink_sendmsg+0x58b/0x6b0 [ 38.652145][ T4032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.652163][ T4032] __sock_sendmsg+0x145/0x180 [ 38.652185][ T4032] ____sys_sendmsg+0x31e/0x4e0 [ 38.652262][ T4032] ___sys_sendmsg+0x17b/0x1d0 [ 38.652290][ T4032] __x64_sys_sendmsg+0xd4/0x160 [ 38.652310][ T4032] x64_sys_call+0x191e/0x2ff0 [ 38.652348][ T4032] do_syscall_64+0xd2/0x200 [ 38.652369][ T4032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.652390][ T4032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.652416][ T4032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.652437][ T4032] RIP: 0033:0x7f6fd9e1ebe9 [ 38.652453][ T4032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.652468][ T4032] RSP: 002b:00007f6fd8887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.652483][ T4032] RAX: ffffffffffffffda RBX: 00007f6fda045fa0 RCX: 00007f6fd9e1ebe9 [ 38.652542][ T4032] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 38.652555][ T4032] RBP: 00007f6fd8887090 R08: 0000000000000000 R09: 0000000000000000 [ 38.652567][ T4032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.652580][ T4032] R13: 00007f6fda046038 R14: 00007f6fda045fa0 R15: 00007ffead342358 [ 38.652596][ T4032] [ 38.910374][ T4030] loop1: detected capacity change from 0 to 2048 [ 38.931025][ T4020] vhci_hcd: invalid port number 96 [ 38.936168][ T4020] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 38.947660][ T4037] __nla_validate_parse: 1 callbacks suppressed [ 38.947673][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 38.963107][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 38.976408][ T4030] netlink: 48 bytes leftover after parsing attributes in process `syz.1.185'. [ 39.006224][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 39.030300][ T4037] loop2: detected capacity change from 0 to 2048 [ 39.038228][ T4042] FAULT_INJECTION: forcing a failure. [ 39.038228][ T4042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.038396][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.051379][ T4042] CPU: 1 UID: 0 PID: 4042 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.051413][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.051425][ T4042] Call Trace: [ 39.051430][ T4042] [ 39.051438][ T4042] __dump_stack+0x1d/0x30 [ 39.051458][ T4042] dump_stack_lvl+0xe8/0x140 [ 39.051476][ T4042] dump_stack+0x15/0x1b [ 39.051491][ T4042] should_fail_ex+0x265/0x280 [ 39.051542][ T4042] should_fail+0xb/0x20 [ 39.051559][ T4042] should_fail_usercopy+0x1a/0x20 [ 39.051579][ T4042] _copy_from_user+0x1c/0xb0 [ 39.051604][ T4042] __se_sys_mount+0x10d/0x2e0 [ 39.051675][ T4042] ? fput+0x8f/0xc0 [ 39.051702][ T4042] ? ksys_write+0x192/0x1a0 [ 39.051722][ T4042] __x64_sys_mount+0x67/0x80 [ 39.051742][ T4042] x64_sys_call+0x2b4d/0x2ff0 [ 39.051793][ T4042] do_syscall_64+0xd2/0x200 [ 39.051815][ T4042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.051837][ T4042] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.051867][ T4042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.051886][ T4042] RIP: 0033:0x7f6fd9e1ebe9 [ 39.051901][ T4042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.051996][ T4042] RSP: 002b:00007f6fd8887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.052088][ T4042] RAX: ffffffffffffffda RBX: 00007f6fda045fa0 RCX: 00007f6fd9e1ebe9 [ 39.052100][ T4042] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 39.052111][ T4042] RBP: 00007f6fd8887090 R08: 0000200000000600 R09: 0000000000000000 [ 39.052123][ T4042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.052135][ T4042] R13: 00007f6fda046038 R14: 00007f6fda045fa0 R15: 00007ffead342358 [ 39.052170][ T4042] [ 39.101664][ T4037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.203867][ T4045] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 39.222184][ T4037] FAULT_INJECTION: forcing a failure. [ 39.222184][ T4037] name failslab, interval 1, probability 0, space 0, times 0 [ 39.272643][ T4037] CPU: 1 UID: 0 PID: 4037 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.272684][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.272695][ T4037] Call Trace: [ 39.272702][ T4037] [ 39.272710][ T4037] __dump_stack+0x1d/0x30 [ 39.272798][ T4037] dump_stack_lvl+0xe8/0x140 [ 39.272814][ T4037] dump_stack+0x15/0x1b [ 39.272901][ T4037] should_fail_ex+0x265/0x280 [ 39.272923][ T4037] should_failslab+0x8c/0xb0 [ 39.272945][ T4037] __kmalloc_noprof+0xa5/0x3e0 [ 39.273015][ T4037] ? iter_file_splice_write+0xf9/0xa60 [ 39.273035][ T4037] iter_file_splice_write+0xf9/0xa60 [ 39.273084][ T4037] ? __pfx_iter_file_splice_write+0x10/0x10 [ 39.273104][ T4037] direct_splice_actor+0x153/0x2a0 [ 39.273123][ T4037] ? ext4_release_file+0x191/0x1c0 [ 39.273147][ T4037] splice_direct_to_actor+0x30f/0x680 [ 39.273166][ T4037] ? __pfx_direct_splice_actor+0x10/0x10 [ 39.273233][ T4037] do_splice_direct+0xda/0x150 [ 39.273316][ T4037] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 39.273409][ T4037] do_sendfile+0x380/0x650 [ 39.273438][ T4037] __x64_sys_sendfile64+0x105/0x150 [ 39.273510][ T4037] x64_sys_call+0x2bb0/0x2ff0 [ 39.273527][ T4037] do_syscall_64+0xd2/0x200 [ 39.273547][ T4037] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.273566][ T4037] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.273662][ T4037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.273679][ T4037] RIP: 0033:0x7f49a776ebe9 [ 39.273692][ T4037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.273705][ T4037] RSP: 002b:00007f49a61d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 39.273738][ T4037] RAX: ffffffffffffffda RBX: 00007f49a7995fa0 RCX: 00007f49a776ebe9 [ 39.273750][ T4037] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 39.273762][ T4037] RBP: 00007f49a61d7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.273774][ T4037] R10: 000000007ffff019 R11: 0000000000000246 R12: 0000000000000001 [ 39.273786][ T4037] R13: 00007f49a7996038 R14: 00007f49a7995fa0 R15: 00007ffc197198d8 [ 39.273885][ T4037] [ 39.534178][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.548075][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 39.580183][ T4054] netlink: 536 bytes leftover after parsing attributes in process `syz.0.192'. [ 39.604600][ T4056] loop2: detected capacity change from 0 to 512 [ 39.606248][ T4050] team1: entered promiscuous mode [ 39.616159][ T4050] team1: entered allmulticast mode [ 39.621758][ T4054] netlink: 'syz.0.192': attribute type 4 has an invalid length. [ 39.629562][ T4054] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 39.637333][ T4054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.192'. [ 39.650784][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 39.660442][ T4054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 39.671409][ T4056] EXT4-fs (loop2): too many log groups per flexible block group [ 39.679169][ T4056] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 39.701249][ T4056] EXT4-fs (loop2): mount failed [ 39.712023][ T4064] loop1: detected capacity change from 0 to 512 [ 39.761132][ T4064] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.794475][ T4064] EXT4-fs (loop1): mount failed [ 39.869809][ T4081] netlink: 108 bytes leftover after parsing attributes in process `syz.3.199'. [ 39.973019][ T4089] loop1: detected capacity change from 0 to 512 [ 39.993396][ T4089] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 40.023662][ T4089] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.024681][ T4092] loop4: detected capacity change from 0 to 128 [ 40.036522][ T4089] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm ^: Block bitmap for bg 0 marked uninitialized [ 40.049280][ T4089] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 40.066061][ T4092] FAT-fs (loop4): Directory bread(block 32) failed [ 40.073439][ T4092] FAT-fs (loop4): Directory bread(block 33) failed [ 40.080770][ T4089] EXT4-fs (loop1): 1 orphan inode deleted [ 40.086732][ T4092] FAT-fs (loop4): Directory bread(block 34) failed [ 40.094457][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.107538][ T4092] FAT-fs (loop4): Directory bread(block 35) failed [ 40.114861][ T4092] FAT-fs (loop4): Directory bread(block 36) failed [ 40.126104][ T4092] FAT-fs (loop4): Directory bread(block 37) failed [ 40.141436][ T4092] FAT-fs (loop4): Directory bread(block 38) failed [ 40.155738][ T4092] FAT-fs (loop4): Directory bread(block 39) failed [ 40.169261][ T4092] FAT-fs (loop4): Directory bread(block 40) failed [ 40.185962][ T4092] FAT-fs (loop4): Directory bread(block 41) failed [ 40.317439][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.452690][ T4104] loop1: detected capacity change from 0 to 2048 [ 40.535891][ T3306] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 40.543540][ T3306] FAT-fs (loop4): Filesystem has been set read-only [ 40.751565][ T3493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.793862][ T4141] loop2: detected capacity change from 0 to 1024 [ 40.840957][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.862474][ T3493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.933150][ T4130] vhci_hcd: invalid port number 96 [ 40.938325][ T4130] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 40.962272][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.992137][ T3493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.023651][ T4162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=4162 comm=syz.2.221 [ 41.062644][ T3493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.167412][ T3493] bridge_slave_1: left allmulticast mode [ 41.173272][ T3493] bridge_slave_1: left promiscuous mode [ 41.179074][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.191024][ T3493] bridge_slave_0: left allmulticast mode [ 41.196714][ T3493] bridge_slave_0: left promiscuous mode [ 41.202495][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.299202][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.311334][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.321819][ T3493] bond0 (unregistering): Released all slaves [ 41.350354][ T4152] chnl_net:caif_netlink_parms(): no params data found [ 41.407710][ T3493] hsr_slave_0: left promiscuous mode [ 41.439384][ T3493] hsr_slave_1: left promiscuous mode [ 41.455827][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.463413][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.504806][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.512363][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.543914][ T3493] veth1_macvtap: left promiscuous mode [ 41.559734][ T3493] veth0_macvtap: left promiscuous mode [ 41.565417][ T3493] veth1_vlan: left promiscuous mode [ 41.571141][ T3493] veth0_vlan: left promiscuous mode [ 41.683008][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 41.702123][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 41.788534][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.795989][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.803528][ T4152] bridge_slave_0: entered allmulticast mode [ 41.810100][ T4152] bridge_slave_0: entered promiscuous mode [ 41.840194][ T4376] team1: entered promiscuous mode [ 41.845488][ T4376] team1: entered allmulticast mode [ 41.851981][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.859052][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.866816][ T4152] bridge_slave_1: entered allmulticast mode [ 41.877696][ T4152] bridge_slave_1: entered promiscuous mode [ 41.898833][ T4440] loop2: detected capacity change from 0 to 2048 [ 41.916996][ T4437] team1: entered promiscuous mode [ 41.922193][ T4437] team1: entered allmulticast mode [ 41.953828][ T4152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.966725][ T4152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.979165][ T4508] netlink: 'syz.3.237': attribute type 6 has an invalid length. [ 42.011101][ T4513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 42.017725][ T4513] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.025447][ T4513] vhci_hcd vhci_hcd.0: Device attached [ 42.054748][ T4518] vhci_hcd: connection closed [ 42.054976][ T31] vhci_hcd: stop threads [ 42.063996][ T31] vhci_hcd: release socket [ 42.068464][ T31] vhci_hcd: disconnect device [ 42.090239][ T4152] team0: Port device team_slave_0 added [ 42.097171][ T4152] team0: Port device team_slave_1 added [ 42.131828][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.138859][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.165113][ T4152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.193941][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.200946][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.226971][ T4152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.241656][ T4578] FAULT_INJECTION: forcing a failure. [ 42.241656][ T4578] name failslab, interval 1, probability 0, space 0, times 0 [ 42.254372][ T4578] CPU: 0 UID: 0 PID: 4578 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.254396][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.254472][ T4578] Call Trace: [ 42.254479][ T4578] [ 42.254488][ T4578] __dump_stack+0x1d/0x30 [ 42.254511][ T4578] dump_stack_lvl+0xe8/0x140 [ 42.254531][ T4578] dump_stack+0x15/0x1b [ 42.254624][ T4578] should_fail_ex+0x265/0x280 [ 42.254647][ T4578] should_failslab+0x8c/0xb0 [ 42.254700][ T4578] kmem_cache_alloc_noprof+0x50/0x310 [ 42.254723][ T4578] ? skb_clone+0x151/0x1f0 [ 42.254743][ T4578] skb_clone+0x151/0x1f0 [ 42.254783][ T4578] __netlink_deliver_tap+0x2c9/0x500 [ 42.254876][ T4578] ? netlink_attachskb+0x2d0/0x610 [ 42.254903][ T4578] netlink_sendskb+0x126/0x150 [ 42.254931][ T4578] netlink_unicast+0x2a2/0x690 [ 42.254963][ T4578] netlink_ack+0x4c8/0x500 [ 42.255027][ T4578] nfnetlink_rcv+0x15c0/0x1690 [ 42.255069][ T4578] netlink_unicast+0x5c0/0x690 [ 42.255100][ T4578] netlink_sendmsg+0x58b/0x6b0 [ 42.255180][ T4578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.255197][ T4578] __sock_sendmsg+0x145/0x180 [ 42.255218][ T4578] ____sys_sendmsg+0x31e/0x4e0 [ 42.255239][ T4578] ___sys_sendmsg+0x17b/0x1d0 [ 42.255325][ T4578] __x64_sys_sendmsg+0xd4/0x160 [ 42.255344][ T4578] x64_sys_call+0x191e/0x2ff0 [ 42.255412][ T4578] do_syscall_64+0xd2/0x200 [ 42.255434][ T4578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.255454][ T4578] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.255624][ T4578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.255646][ T4578] RIP: 0033:0x7f29aa93ebe9 [ 42.255661][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.255675][ T4578] RSP: 002b:00007f29a935d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.255691][ T4578] RAX: ffffffffffffffda RBX: 00007f29aab66180 RCX: 00007f29aa93ebe9 [ 42.255701][ T4578] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000007 [ 42.255731][ T4578] RBP: 00007f29a935d090 R08: 0000000000000000 R09: 0000000000000000 [ 42.255743][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.255756][ T4578] R13: 00007f29aab66218 R14: 00007f29aab66180 R15: 00007ffc76877d98 [ 42.255774][ T4578] [ 42.516848][ T4152] hsr_slave_0: entered promiscuous mode [ 42.530461][ T4152] hsr_slave_1: entered promiscuous mode [ 42.544809][ T4152] debugfs: 'hsr0' already exists in 'hsr' [ 42.552748][ T4152] Cannot create hsr debugfs directory [ 42.655953][ T3493] ------------[ cut here ]------------ [ 42.661552][ T3493] WARNING: CPU: 0 PID: 3493 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x1a0/0x1f0 [ 42.671197][ T3493] Modules linked in: [ 42.675104][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.685225][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.695610][ T3493] Workqueue: netns cleanup_net [ 42.700447][ T3493] RIP: 0010:xfrm_state_fini+0x1a0/0x1f0 [ 42.706186][ T3493] Code: a2 fc 90 0f 0b 90 e9 d9 fe ff ff e8 ea 39 a2 fc 90 0f 0b 90 4c 89 f7 e8 6e f7 bc fc 4d 8b 3e e9 06 ff ff ff e8 d1 39 a2 fc 90 <0f> 0b 90 4c 89 f7 e8 55 f7 bc fc 4d 8b 3e e9 24 ff ff ff e8 b8 39 [ 42.707997][ T4655] team2: entered promiscuous mode [ 42.726217][ T3493] RSP: 0018:ffffc90002993c60 EFLAGS: 00010293 [ 42.731135][ T4655] team2: entered allmulticast mode [ 42.742462][ T3493] [ 42.744796][ T3493] RAX: ffffffff84b5bfff RBX: ffff888109eb0000 RCX: ffff88811aaf8000 [ 42.753133][ T3493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881184a2300 [ 42.761182][ T3493] RBP: 0000000000000040 R08: 0001888109eb0e27 R09: 0000000000000000 [ 42.769470][ T3493] R10: ffff8881184a2380 R11: 00018881184a237f R12: ffffffff86c8b7a0 [ 42.777469][ T3493] R13: ffff888109eb0028 R14: ffff888109eb0e20 R15: ffff8881184a2300 [ 42.785621][ T3493] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 42.794877][ T3493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.801622][ T3493] CR2: 00005603505cb300 CR3: 000000011acb2000 CR4: 00000000003506f0 [ 42.809947][ T3493] Call Trace: [ 42.813270][ T3493] [ 42.816226][ T3493] xfrm_net_exit+0x2d/0x60 [ 42.820743][ T3493] ops_undo_list+0x278/0x410 [ 42.825492][ T3493] cleanup_net+0x2de/0x4d0 [ 42.830027][ T3493] process_scheduled_works+0x4ce/0x9d0 [ 42.835532][ T3493] worker_thread+0x582/0x770 [ 42.840295][ T3493] kthread+0x486/0x510 [ 42.844378][ T3493] ? finish_task_switch+0xad/0x2b0 [ 42.849570][ T3493] ? __pfx_worker_thread+0x10/0x10 [ 42.854988][ T3493] ? __pfx_kthread+0x10/0x10 [ 42.859961][ T3493] ret_from_fork+0xda/0x150 [ 42.864483][ T3493] ? __pfx_kthread+0x10/0x10 [ 42.869139][ T3493] ret_from_fork_asm+0x1a/0x30 [ 42.874153][ T3493] [ 42.877170][ T3493] ---[ end trace 0000000000000000 ]--- [ 43.031968][ T4152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.059574][ T4152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.101308][ T4152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.121842][ T4152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.142701][ T4768] vhci_hcd: invalid port number 96 [ 43.147878][ T4768] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 43.233911][ T4788] loop2: detected capacity change from 0 to 1024 [ 43.243401][ T4787] team3: entered promiscuous mode [ 43.248561][ T4787] team3: entered allmulticast mode [ 43.284062][ T4788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.342621][ T4788] vhci_hcd: invalid port number 96 [ 43.347788][ T4788] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 43.369518][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 43.369531][ T29] audit: type=1326 audit(1755877327.677:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49a770ade9 code=0x7ffc0000 [ 43.396557][ T4152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.398974][ T29] audit: type=1326 audit(1755877327.677:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.428779][ T29] audit: type=1326 audit(1755877327.677:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.458309][ T29] audit: type=1326 audit(1755877327.767:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.481811][ T29] audit: type=1326 audit(1755877327.767:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.482718][ T29] audit: type=1326 audit(1755877327.767:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.529083][ T29] audit: type=1326 audit(1755877327.767:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.552519][ T29] audit: type=1326 audit(1755877327.767:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.575961][ T29] audit: type=1326 audit(1755877327.767:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.575985][ T29] audit: type=1326 audit(1755877327.767:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49a776ebe9 code=0x7ffc0000 [ 43.608654][ T4152] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.667805][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.691095][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.698330][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.727119][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.734240][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.760776][ T4874] loop2: detected capacity change from 0 to 512 [ 43.773468][ T4874] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.786727][ T4874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.805993][ T4874] EXT4-fs (loop2): 1 truncate cleaned up [ 43.822603][ T4152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.845483][ T4874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.917131][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.967057][ T4152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.014380][ T4901] loop1: detected capacity change from 0 to 256 [ 44.158610][ T4152] veth0_vlan: entered promiscuous mode [ 44.245996][ T4152] veth1_vlan: entered promiscuous mode [ 44.296795][ T4152] veth0_macvtap: entered promiscuous mode [ 44.353669][ T4152] veth1_macvtap: entered promiscuous mode [ 44.385021][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.420821][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.466435][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.536914][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.546053][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.575666][ T3493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.687266][ T4972] loop5: detected capacity change from 0 to 512 [ 44.829821][ T4999] loop2: detected capacity change from 0 to 1024 [ 44.845955][ T4999] EXT4-fs: Ignoring removed nobh option [ 44.904456][ T4999] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.932935][ T4999] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.275: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.937587][ T4999] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.275: couldn't read orphan inode 11 (err -117) [ 44.938217][ T4999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.031952][ T5013] __nla_validate_parse: 11 callbacks suppressed [ 45.031972][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 45.074898][ T5033] SELinux: failed to load policy [ 45.130473][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.192838][ T5041] loop2: detected capacity change from 0 to 2048 [ 45.324277][ T5065] FAULT_INJECTION: forcing a failure. [ 45.324277][ T5065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.337644][ T5065] CPU: 1 UID: 0 PID: 5065 Comm: syz.5.286 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.337724][ T5065] Tainted: [W]=WARN [ 45.337730][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.337742][ T5065] Call Trace: [ 45.337748][ T5065] [ 45.337755][ T5065] __dump_stack+0x1d/0x30 [ 45.337834][ T5065] dump_stack_lvl+0xe8/0x140 [ 45.337852][ T5065] dump_stack+0x15/0x1b [ 45.337868][ T5065] should_fail_ex+0x265/0x280 [ 45.337936][ T5065] should_fail+0xb/0x20 [ 45.337974][ T5065] should_fail_usercopy+0x1a/0x20 [ 45.337994][ T5065] _copy_to_user+0x20/0xa0 [ 45.338021][ T5065] simple_read_from_buffer+0xb5/0x130 [ 45.338102][ T5065] proc_fail_nth_read+0x10e/0x150 [ 45.338127][ T5065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.338150][ T5065] vfs_read+0x1a8/0x770 [ 45.338170][ T5065] ? __rcu_read_unlock+0x4f/0x70 [ 45.338191][ T5065] ? __fget_files+0x184/0x1c0 [ 45.338217][ T5065] ksys_read+0xda/0x1a0 [ 45.338238][ T5065] __x64_sys_read+0x40/0x50 [ 45.338259][ T5065] x64_sys_call+0x27bc/0x2ff0 [ 45.338302][ T5065] do_syscall_64+0xd2/0x200 [ 45.338328][ T5065] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.338351][ T5065] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.338405][ T5065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.338425][ T5065] RIP: 0033:0x7f47f6e3d5fc [ 45.338441][ T5065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.338460][ T5065] RSP: 002b:00007f47f589f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.338479][ T5065] RAX: ffffffffffffffda RBX: 00007f47f7065fa0 RCX: 00007f47f6e3d5fc [ 45.338492][ T5065] RDX: 000000000000000f RSI: 00007f47f589f0a0 RDI: 0000000000000008 [ 45.338504][ T5065] RBP: 00007f47f589f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.338589][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.338601][ T5065] R13: 00007f47f7066038 R14: 00007f47f7065fa0 R15: 00007ffcbf610df8 [ 45.338628][ T5065] [ 45.463059][ T5041] SELinux: failed to load policy [ 45.646569][ T5101] FAULT_INJECTION: forcing a failure. [ 45.646569][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 45.659529][ T5101] CPU: 1 UID: 0 PID: 5101 Comm: syz.0.293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.659555][ T5101] Tainted: [W]=WARN [ 45.659562][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.659572][ T5101] Call Trace: [ 45.659578][ T5101] [ 45.659599][ T5101] __dump_stack+0x1d/0x30 [ 45.659665][ T5101] dump_stack_lvl+0xe8/0x140 [ 45.659757][ T5101] dump_stack+0x15/0x1b [ 45.659772][ T5101] should_fail_ex+0x265/0x280 [ 45.659807][ T5101] should_failslab+0x8c/0xb0 [ 45.659827][ T5101] __kmalloc_noprof+0xa5/0x3e0 [ 45.659851][ T5101] ? rds_message_alloc+0x45/0x120 [ 45.659943][ T5101] rds_message_alloc+0x45/0x120 [ 45.659962][ T5101] rds_sendmsg+0x860/0x14a0 [ 45.660103][ T5101] ? __pfx_rds_sendmsg+0x10/0x10 [ 45.660123][ T5101] __sock_sendmsg+0x145/0x180 [ 45.660203][ T5101] ____sys_sendmsg+0x31e/0x4e0 [ 45.660222][ T5101] ___sys_sendmsg+0x17b/0x1d0 [ 45.660254][ T5101] __x64_sys_sendmsg+0xd4/0x160 [ 45.660278][ T5101] x64_sys_call+0x191e/0x2ff0 [ 45.660314][ T5101] do_syscall_64+0xd2/0x200 [ 45.660340][ T5101] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.660361][ T5101] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.660381][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.660439][ T5101] RIP: 0033:0x7f6fd9e1ebe9 [ 45.660455][ T5101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.660470][ T5101] RSP: 002b:00007f6fd8887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.660486][ T5101] RAX: ffffffffffffffda RBX: 00007f6fda045fa0 RCX: 00007f6fd9e1ebe9 [ 45.660498][ T5101] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 45.660511][ T5101] RBP: 00007f6fd8887090 R08: 0000000000000000 R09: 0000000000000000 [ 45.660583][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.660595][ T5101] R13: 00007f6fda046038 R14: 00007f6fda045fa0 R15: 00007ffead342358 [ 45.660613][ T5101] [ 45.942844][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 46.147419][ T5142] FAULT_INJECTION: forcing a failure. [ 46.147419][ T5142] name failslab, interval 1, probability 0, space 0, times 0 [ 46.160125][ T5142] CPU: 0 UID: 0 PID: 5142 Comm: syz.2.302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 46.160158][ T5142] Tainted: [W]=WARN [ 46.160165][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.160177][ T5142] Call Trace: [ 46.160188][ T5142] [ 46.160196][ T5142] __dump_stack+0x1d/0x30 [ 46.160215][ T5142] dump_stack_lvl+0xe8/0x140 [ 46.160231][ T5142] dump_stack+0x15/0x1b [ 46.160244][ T5142] should_fail_ex+0x265/0x280 [ 46.160262][ T5142] should_failslab+0x8c/0xb0 [ 46.160320][ T5142] __kvmalloc_node_noprof+0x123/0x4e0 [ 46.160350][ T5142] ? io_alloc_cache_init+0x31/0xa0 [ 46.160377][ T5142] ? io_alloc_cache_init+0x31/0xa0 [ 46.160457][ T5142] io_alloc_cache_init+0x31/0xa0 [ 46.160508][ T5142] io_rsrc_cache_init+0x26/0x50 [ 46.160535][ T5142] io_ring_ctx_alloc+0x346/0x6a0 [ 46.160561][ T5142] io_uring_create+0x10f/0x610 [ 46.160660][ T5142] __se_sys_io_uring_setup+0x1f7/0x210 [ 46.160815][ T5142] __x64_sys_io_uring_setup+0x31/0x40 [ 46.160836][ T5142] x64_sys_call+0x2b21/0x2ff0 [ 46.160854][ T5142] do_syscall_64+0xd2/0x200 [ 46.160893][ T5142] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.160917][ T5142] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.160987][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.161005][ T5142] RIP: 0033:0x7f49a776ebe9 [ 46.161019][ T5142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.161033][ T5142] RSP: 002b:00007f49a61d6fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 46.161052][ T5142] RAX: ffffffffffffffda RBX: 00007f49a7995fa0 RCX: 00007f49a776ebe9 [ 46.161065][ T5142] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 46.161077][ T5142] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 46.161153][ T5142] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.161163][ T5142] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 46.161178][ T5142] [ 46.482164][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 46.589712][ T5158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.784801][ T5171] __vm_enough_memory: pid: 5171, comm: syz.1.308, bytes: 4503599627366400 not enough memory for the allocation [ 46.803742][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 46.867329][ T5179] netlink: 592 bytes leftover after parsing attributes in process `syz.3.310'. [ 46.908164][ T5162] loop2: detected capacity change from 0 to 512 [ 46.986759][ T5162] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.007392][ T5193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5193 comm=syz.1.315 [ 47.022611][ T5162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.072959][ T5162] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.307: corrupted inode contents [ 47.092549][ T5162] EXT4-fs (loop2): Remounting filesystem read-only [ 47.105773][ T5162] EXT4-fs (loop2): 1 truncate cleaned up [ 47.112383][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.123276][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.141477][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.174274][ T5162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.194383][ T5214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 47.237487][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.276216][ T5232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.323'. [ 47.376029][ T5246] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 47.425151][ T5246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.439613][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 47.648627][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.682533][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.685835][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 47.711856][ T5309] FAULT_INJECTION: forcing a failure. [ 47.711856][ T5309] name failslab, interval 1, probability 0, space 0, times 0 [ 47.724730][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.724774][ T5309] Tainted: [W]=WARN [ 47.724781][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.724793][ T5309] Call Trace: [ 47.724799][ T5309] [ 47.724807][ T5309] __dump_stack+0x1d/0x30 [ 47.724830][ T5309] dump_stack_lvl+0xe8/0x140 [ 47.724850][ T5309] dump_stack+0x15/0x1b [ 47.724883][ T5309] should_fail_ex+0x265/0x280 [ 47.724901][ T5309] should_failslab+0x8c/0xb0 [ 47.725000][ T5309] kmem_cache_alloc_node_noprof+0x57/0x320 [ 47.725107][ T5309] ? __alloc_skb+0x101/0x320 [ 47.725235][ T5309] __alloc_skb+0x101/0x320 [ 47.725265][ T5309] mpls_netconf_notify_devconf+0x46/0x100 [ 47.725294][ T5309] mpls_dev_sysctl_unregister+0x6b/0x80 [ 47.725312][ T5309] ? __pfx_mpls_dev_notify+0x10/0x10 [ 47.725397][ T5309] mpls_dev_notify+0x7a7/0x8d0 [ 47.725415][ T5309] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 47.725434][ T5309] ? batadv_hard_if_event+0x217/0xf10 [ 47.725455][ T5309] ? ovs_netdev_get_vport+0x5a/0x60 [ 47.725475][ T5309] ? __pfx_mpls_dev_notify+0x10/0x10 [ 47.725506][ T5309] raw_notifier_call_chain+0x6c/0x1b0 [ 47.725526][ T5309] ? call_netdevice_notifiers_info+0x9c/0x100 [ 47.725549][ T5309] call_netdevice_notifiers_info+0xae/0x100 [ 47.725605][ T5309] unregister_netdevice_many_notify+0xda9/0x15d0 [ 47.725629][ T5309] unregister_netdevice_queue+0x1f5/0x220 [ 47.725648][ T5309] unregister_netdev+0xb3/0xe0 [ 47.725665][ T5309] slip_close+0xe4/0x100 [ 47.725839][ T5309] ? __pfx_slip_close+0x10/0x10 [ 47.725861][ T5309] tty_ldisc_close+0x74/0xa0 [ 47.725896][ T5309] tty_set_ldisc+0x1b9/0x380 [ 47.725923][ T5309] tiocsetd+0x51/0x60 [ 47.725946][ T5309] tty_ioctl+0xa7f/0xb80 [ 47.725983][ T5309] ? __pfx_tty_ioctl+0x10/0x10 [ 47.726025][ T5309] __se_sys_ioctl+0xce/0x140 [ 47.726060][ T5309] __x64_sys_ioctl+0x43/0x50 [ 47.726085][ T5309] x64_sys_call+0x1816/0x2ff0 [ 47.726106][ T5309] do_syscall_64+0xd2/0x200 [ 47.726195][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.726219][ T5309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.726247][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.726265][ T5309] RIP: 0033:0x7f49a776ebe9 [ 47.726279][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.726292][ T5309] RSP: 002b:00007f49a61d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.726309][ T5309] RAX: ffffffffffffffda RBX: 00007f49a7995fa0 RCX: 00007f49a776ebe9 [ 47.726347][ T5309] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 47.726361][ T5309] RBP: 00007f49a61d7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.726372][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.726385][ T5309] R13: 00007f49a7996038 R14: 00007f49a7995fa0 R15: 00007ffc197198d8 [ 47.726403][ T5309] [ 48.067525][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 48.083530][ T5320] team2: entered promiscuous mode [ 48.088615][ T5320] team2: entered allmulticast mode [ 48.385123][ T5400] SELinux: failed to load policy [ 48.451195][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 48.451221][ T29] audit: type=1400 audit(1755877332.767:2984): avc: denied { create } for pid=5416 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.483037][ T29] audit: type=1326 audit(1755877332.797:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5401 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4d2c94ebe9 code=0x7ffc0000 [ 48.520551][ T29] audit: type=1400 audit(1755877332.817:2986): avc: denied { bind } for pid=5416 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.540006][ T29] audit: type=1400 audit(1755877332.827:2987): avc: denied { map } for pid=5416 comm="+}[@" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.563641][ T29] audit: type=1400 audit(1755877332.827:2988): avc: denied { read write } for pid=5416 comm="+}[@" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.588216][ T29] audit: type=1326 audit(1755877332.827:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d2c8eade9 code=0x7ffc0000 [ 48.611585][ T29] audit: type=1326 audit(1755877332.827:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2c94ebe9 code=0x7ffc0000 [ 48.634955][ T29] audit: type=1326 audit(1755877332.827:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2c94ebe9 code=0x7ffc0000 [ 48.661716][ T29] audit: type=1400 audit(1755877332.947:2992): avc: denied { getopt } for pid=5424 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.715235][ T5434] vlan2: entered promiscuous mode [ 48.720505][ T5434] vlan2: entered allmulticast mode [ 48.725698][ T5434] hsr_slave_1: entered allmulticast mode [ 48.734365][ T29] audit: type=1400 audit(1755877333.047:2993): avc: denied { create } for pid=5428 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.814739][ T5460] FAULT_INJECTION: forcing a failure. [ 48.814739][ T5460] name failslab, interval 1, probability 0, space 0, times 0 [ 48.827769][ T5460] CPU: 1 UID: 0 PID: 5460 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.827892][ T5460] Tainted: [W]=WARN [ 48.827899][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.827909][ T5460] Call Trace: [ 48.827915][ T5460] [ 48.827921][ T5460] __dump_stack+0x1d/0x30 [ 48.827946][ T5460] dump_stack_lvl+0xe8/0x140 [ 48.827962][ T5460] dump_stack+0x15/0x1b [ 48.828016][ T5460] should_fail_ex+0x265/0x280 [ 48.828037][ T5460] should_failslab+0x8c/0xb0 [ 48.828117][ T5460] kmem_cache_alloc_noprof+0x50/0x310 [ 48.828142][ T5460] ? getname_flags+0x80/0x3b0 [ 48.828170][ T5460] getname_flags+0x80/0x3b0 [ 48.828260][ T5460] io_openat_prep+0x129/0x2b0 [ 48.828338][ T5460] io_submit_sqes+0x5db/0x1050 [ 48.828363][ T5460] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 48.828442][ T5460] ? 0xffffffff81000000 [ 48.828454][ T5460] ? __rcu_read_unlock+0x4f/0x70 [ 48.828473][ T5460] ? vfs_write+0x5e4/0x960 [ 48.828492][ T5460] ? vfs_write+0x7e8/0x960 [ 48.828590][ T5460] ? __rcu_read_unlock+0x4f/0x70 [ 48.828677][ T5460] ? __fget_files+0x184/0x1c0 [ 48.828698][ T5460] ? fput+0x8f/0xc0 [ 48.828726][ T5460] __x64_sys_io_uring_enter+0x78/0x90 [ 48.828748][ T5460] x64_sys_call+0x2de1/0x2ff0 [ 48.828812][ T5460] do_syscall_64+0xd2/0x200 [ 48.828837][ T5460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.828859][ T5460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.828915][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.828934][ T5460] RIP: 0033:0x7f6fd9e1ebe9 [ 48.828957][ T5460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.828996][ T5460] RSP: 002b:00007f6fd8887038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 48.829014][ T5460] RAX: ffffffffffffffda RBX: 00007f6fda045fa0 RCX: 00007f6fd9e1ebe9 [ 48.829027][ T5460] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 48.829038][ T5460] RBP: 00007f6fd8887090 R08: 0000000000000000 R09: 0000000000000000 [ 48.829050][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.829062][ T5460] R13: 00007f6fda046038 R14: 00007f6fda045fa0 R15: 00007ffead342358 [ 48.829079][ T5460] [ 49.082722][ T5466] team2: entered promiscuous mode [ 49.087889][ T5466] team2: entered allmulticast mode [ 49.369308][ T5158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.424618][ T5158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.480943][ T5584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5584 comm=syz.1.364 [ 49.500238][ T5158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.602564][ T152] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.631253][ T152] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.659002][ T152] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.684094][ T152] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.738960][ T5612] SELinux: failed to load policy [ 50.063802][ T5683] __nla_validate_parse: 10 callbacks suppressed [ 50.063820][ T5683] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.379'. [ 50.240127][ T5701] ÿÿÿÿÿÿ: renamed from vlan1 [ 50.365162][ T5725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 50.374116][ T5725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.382'. [ 50.414038][ T5725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 50.658227][ T5776] loop5: detected capacity change from 0 to 512 [ 50.685231][ T5776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.709232][ T5776] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.731288][ T5784] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.746837][ T5776] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 50.775192][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.805777][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 51.111449][ T5811] block device autoloading is deprecated and will be removed. [ 51.214039][ T3374] IPVS: starting estimator thread 0... [ 51.282419][ T5854] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 51.303457][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 51.319568][ T5850] IPVS: using max 2832 ests per chain, 141600 per kthread [ 51.417147][ T5863] IPv6: Can't replace route, no match found [ 51.550733][ T5887] SELinux: failed to load policy [ 51.592459][ T5900] loop2: detected capacity change from 0 to 2048 [ 51.599125][ T5900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.099615][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104537600: rx timeout, send abort [ 52.108013][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104537800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.125249][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 52.142204][ T5963] team3: entered promiscuous mode [ 52.147318][ T5963] team3: entered allmulticast mode [ 52.216609][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.436'. [ 52.242289][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 52.294775][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 52.352619][ T6039] team3: entered promiscuous mode [ 52.357686][ T6039] team3: entered allmulticast mode [ 52.393777][ T6078] loop1: detected capacity change from 0 to 1024 [ 52.414865][ T6078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.518293][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.607960][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104537600: abort rx timeout. Force session deactivation [ 52.671889][ T6130] team1: entered promiscuous mode [ 52.677109][ T6130] team1: entered allmulticast mode [ 52.749483][ T6186] netlink: 'syz.2.464': attribute type 3 has an invalid length. [ 52.780386][ T6187] loop5: detected capacity change from 0 to 1024 [ 52.791365][ T6193] bond_slave_1: entered promiscuous mode [ 52.802486][ T6193] bond0: (slave bond_slave_1): Releasing backup interface [ 52.815717][ T6193] bond_slave_1 (unregistering): left promiscuous mode [ 52.831658][ T6187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.882586][ T6205] veth0_vlan: entered allmulticast mode [ 52.900237][ T6205] ªªªªªª: renamed from vlan0 [ 52.905312][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.949984][ T6211] loop5: detected capacity change from 0 to 512 [ 52.978711][ T6211] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.470: bad orphan inode 15 [ 53.003223][ T6211] ext4_test_bit(bit=14, block=5) = 0 [ 53.008127][ T6226] FAULT_INJECTION: forcing a failure. [ 53.008127][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 53.009175][ T6211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.021551][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.2.474 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.021582][ T6226] Tainted: [W]=WARN [ 53.021589][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.021641][ T6226] Call Trace: [ 53.021648][ T6226] [ 53.021655][ T6226] __dump_stack+0x1d/0x30 [ 53.021676][ T6226] dump_stack_lvl+0xe8/0x140 [ 53.021694][ T6226] dump_stack+0x15/0x1b [ 53.021710][ T6226] should_fail_ex+0x265/0x280 [ 53.021775][ T6226] should_failslab+0x8c/0xb0 [ 53.021798][ T6226] kmem_cache_alloc_noprof+0x50/0x310 [ 53.021822][ T6226] ? skb_clone+0x151/0x1f0 [ 53.021843][ T6226] skb_clone+0x151/0x1f0 [ 53.021898][ T6226] __netlink_deliver_tap+0x2c9/0x500 [ 53.021995][ T6226] netlink_unicast+0x66b/0x690 [ 53.022026][ T6226] netlink_sendmsg+0x58b/0x6b0 [ 53.022047][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.022067][ T6226] __sock_sendmsg+0x145/0x180 [ 53.022140][ T6226] ____sys_sendmsg+0x345/0x4e0 [ 53.022162][ T6226] ___sys_sendmsg+0x17b/0x1d0 [ 53.022213][ T6226] __sys_sendmmsg+0x178/0x300 [ 53.022240][ T6226] __x64_sys_sendmmsg+0x57/0x70 [ 53.022287][ T6226] x64_sys_call+0x1c4a/0x2ff0 [ 53.022307][ T6226] do_syscall_64+0xd2/0x200 [ 53.022330][ T6226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.022401][ T6226] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.022424][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.022443][ T6226] RIP: 0033:0x7f49a776ebe9 [ 53.022457][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.022472][ T6226] RSP: 002b:00007f49a61d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.022546][ T6226] RAX: ffffffffffffffda RBX: 00007f49a7995fa0 RCX: 00007f49a776ebe9 [ 53.022558][ T6226] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 53.022570][ T6226] RBP: 00007f49a61d7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.022582][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.022629][ T6226] R13: 00007f49a7996038 R14: 00007f49a7995fa0 R15: 00007ffc197198d8 [ 53.022645][ T6226] [ 53.290606][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.430851][ T6263] vhci_hcd: invalid port number 96 [ 53.436137][ T6263] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.473842][ T6280] team1: left promiscuous mode [ 53.478659][ T6280] team1: left allmulticast mode [ 53.483688][ T6280] team2: left promiscuous mode [ 53.484566][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 53.484578][ T29] audit: type=1326 audit(1755877337.797:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 53.488500][ T6280] team2: left allmulticast mode [ 53.488604][ T6280] team3: left promiscuous mode [ 53.505189][ T29] audit: type=1326 audit(1755877337.807:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fd9dbade9 code=0x7ffc0000 [ 53.518060][ T6280] team3: left allmulticast mode [ 53.556175][ T29] audit: type=1326 audit(1755877337.807:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 53.556237][ T29] audit: type=1326 audit(1755877337.807:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 53.660300][ T29] audit: type=1400 audit(1755877337.977:3721): avc: denied { search } for pid=6300 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.682762][ T29] audit: type=1400 audit(1755877337.977:3722): avc: denied { search } for pid=6300 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.705994][ T29] audit: type=1400 audit(1755877337.977:3723): avc: denied { search } for pid=6300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.729428][ T29] audit: type=1400 audit(1755877337.977:3724): avc: denied { search } for pid=6300 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.755792][ T6307] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 53.762423][ T6307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.770103][ T6307] vhci_hcd vhci_hcd.0: Device attached [ 53.788502][ T6315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.795140][ T6315] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 53.832550][ T6324] team2: entered promiscuous mode [ 53.837606][ T6309] vhci_hcd: connection closed [ 53.837785][ T6324] team2: entered allmulticast mode [ 53.843759][ T51] vhci_hcd: stop threads [ 53.843830][ T51] vhci_hcd: release socket [ 53.843837][ T51] vhci_hcd: disconnect device [ 53.886845][ T6336] bridge_slave_0: left allmulticast mode [ 53.886926][ T6336] bridge_slave_0: left promiscuous mode [ 53.887048][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.909716][ T6336] bridge_slave_1: left allmulticast mode [ 53.933057][ T6336] bridge_slave_1: left promiscuous mode [ 53.938702][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.977873][ T6336] bond0: (slave bond_slave_0): Releasing backup interface [ 54.001199][ T6336] bond0: (slave bond_slave_1): Releasing backup interface [ 54.017831][ T6336] team0: Port device team_slave_0 removed [ 54.027181][ T6336] team0: Port device team_slave_1 removed [ 54.034400][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.041909][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.051043][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.058443][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.071190][ T6392] loop2: detected capacity change from 0 to 1024 [ 54.093261][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.115230][ T6336] syz.5.491 (6336) used greatest stack depth: 10128 bytes left [ 54.162137][ T6392] vhci_hcd: invalid port number 96 [ 54.167297][ T6392] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 54.272258][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.516694][ T6479] FAULT_INJECTION: forcing a failure. [ 54.516694][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 54.522912][ T6465] SELinux: failed to load policy [ 54.529490][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.5.513 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.529601][ T6479] Tainted: [W]=WARN [ 54.529607][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.529618][ T6479] Call Trace: [ 54.529625][ T6479] [ 54.529633][ T6479] __dump_stack+0x1d/0x30 [ 54.529653][ T6479] dump_stack_lvl+0xe8/0x140 [ 54.529672][ T6479] dump_stack+0x15/0x1b [ 54.529687][ T6479] should_fail_ex+0x265/0x280 [ 54.529747][ T6479] should_failslab+0x8c/0xb0 [ 54.529797][ T6479] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.529824][ T6479] ? __alloc_skb+0x101/0x320 [ 54.529854][ T6479] __alloc_skb+0x101/0x320 [ 54.529940][ T6479] netlink_alloc_large_skb+0xba/0xf0 [ 54.530011][ T6479] netlink_sendmsg+0x3cf/0x6b0 [ 54.530032][ T6479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.530126][ T6479] __sock_sendmsg+0x145/0x180 [ 54.530151][ T6479] ____sys_sendmsg+0x31e/0x4e0 [ 54.530173][ T6479] ___sys_sendmsg+0x17b/0x1d0 [ 54.530203][ T6479] __x64_sys_sendmsg+0xd4/0x160 [ 54.530226][ T6479] x64_sys_call+0x191e/0x2ff0 [ 54.530312][ T6479] do_syscall_64+0xd2/0x200 [ 54.530336][ T6479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.530423][ T6479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.530445][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.530480][ T6479] RIP: 0033:0x7f47f6e3ebe9 [ 54.530495][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.530510][ T6479] RSP: 002b:00007f47f589f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.530528][ T6479] RAX: ffffffffffffffda RBX: 00007f47f7065fa0 RCX: 00007f47f6e3ebe9 [ 54.530540][ T6479] RDX: 00000000200008e2 RSI: 0000200000000180 RDI: 0000000000000008 [ 54.530552][ T6479] RBP: 00007f47f589f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.530563][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.530575][ T6479] R13: 00007f47f7066038 R14: 00007f47f7065fa0 R15: 00007ffcbf610df8 [ 54.530636][ T6479] [ 55.119528][ T6515] __nla_validate_parse: 20 callbacks suppressed [ 55.119542][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 55.238419][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 55.324402][ T6529] loop2: detected capacity change from 0 to 512 [ 55.371359][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.404507][ T6529] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.422775][ T6529] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.625458][ T6577] loop5: detected capacity change from 0 to 2048 [ 55.673048][ T6577] SELinux: failed to load policy [ 55.717382][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 55.729878][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 55.751639][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 55.762999][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 55.773226][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.534'. [ 55.800710][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.536'. [ 55.860180][ T6612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6612 comm=syz.1.537 [ 55.891245][ T6620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6620 comm=syz.5.540 [ 55.939052][ T6625] 9pnet_fd: p9_fd_create_tcp (6625): problem connecting socket to 127.0.0.1 [ 55.939171][ T6622] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 55.956024][ T6622] ipvlan0: entered allmulticast mode [ 55.961544][ T6622] veth0_vlan: entered allmulticast mode [ 55.969471][ T6622] team0: Device ipvlan0 failed to register rx_handler [ 56.125795][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 56.294444][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 56.310627][ T6668] team4: entered promiscuous mode [ 56.315951][ T6668] team4: entered allmulticast mode [ 56.451283][ T6721] team3: entered promiscuous mode [ 56.456432][ T6721] team3: entered allmulticast mode [ 56.502508][ T6761] team4: entered promiscuous mode [ 56.507735][ T6761] team4: entered allmulticast mode [ 56.689027][ T6822] loop2: detected capacity change from 0 to 2048 [ 56.713807][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.810586][ T6847] loop5: detected capacity change from 0 to 1024 [ 56.817598][ T6847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.838580][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.838848][ T6847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.950243][ T6863] team5: entered promiscuous mode [ 56.955364][ T6863] team5: entered allmulticast mode [ 56.991270][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.065036][ T6925] FAULT_INJECTION: forcing a failure. [ 57.065036][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 57.077989][ T6925] CPU: 1 UID: 0 PID: 6925 Comm: syz.5.579 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.078027][ T6925] Tainted: [W]=WARN [ 57.078084][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.078095][ T6925] Call Trace: [ 57.078102][ T6925] [ 57.078109][ T6925] __dump_stack+0x1d/0x30 [ 57.078134][ T6925] dump_stack_lvl+0xe8/0x140 [ 57.078202][ T6925] dump_stack+0x15/0x1b [ 57.078297][ T6925] should_fail_ex+0x265/0x280 [ 57.078319][ T6925] ? vmstat_start+0x8d/0x450 [ 57.078342][ T6925] should_failslab+0x8c/0xb0 [ 57.078367][ T6925] __kmalloc_cache_noprof+0x4c/0x320 [ 57.078432][ T6925] vmstat_start+0x8d/0x450 [ 57.078450][ T6925] seq_read_iter+0x279/0x940 [ 57.078483][ T6925] proc_reg_read_iter+0x10d/0x180 [ 57.078553][ T6925] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 57.078580][ T6925] __io_read+0x435/0xc20 [ 57.078602][ T6925] ? __fget_files+0x184/0x1c0 [ 57.078690][ T6925] io_read+0x1c/0x60 [ 57.078709][ T6925] __io_issue_sqe+0xfe/0x2e0 [ 57.078727][ T6925] ? io_assign_file+0x1b6/0x200 [ 57.078747][ T6925] io_issue_sqe+0x53/0x970 [ 57.078767][ T6925] io_submit_sqes+0x664/0x1050 [ 57.078794][ T6925] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 57.078815][ T6925] ? 0xffffffff81000000 [ 57.078846][ T6925] ? __rcu_read_unlock+0x4f/0x70 [ 57.078868][ T6925] ? get_pid_task+0x96/0xd0 [ 57.078889][ T6925] ? proc_fail_nth_write+0x13b/0x160 [ 57.078914][ T6925] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.078971][ T6925] ? vfs_write+0x7e8/0x960 [ 57.078992][ T6925] ? __rcu_read_unlock+0x4f/0x70 [ 57.079012][ T6925] ? __fget_files+0x184/0x1c0 [ 57.079114][ T6925] ? fput+0x8f/0xc0 [ 57.079143][ T6925] __x64_sys_io_uring_enter+0x78/0x90 [ 57.079164][ T6925] x64_sys_call+0x2de1/0x2ff0 [ 57.079230][ T6925] do_syscall_64+0xd2/0x200 [ 57.079256][ T6925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.079324][ T6925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.079350][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.079410][ T6925] RIP: 0033:0x7f47f6e3ebe9 [ 57.079430][ T6925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.079468][ T6925] RSP: 002b:00007f47f589f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 57.079486][ T6925] RAX: ffffffffffffffda RBX: 00007f47f7065fa0 RCX: 00007f47f6e3ebe9 [ 57.079498][ T6925] RDX: 00000000000004c1 RSI: 0000000000000fd0 RDI: 0000000000000006 [ 57.079510][ T6925] RBP: 00007f47f589f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.079521][ T6925] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 57.079531][ T6925] R13: 00007f47f7066038 R14: 00007f47f7065fa0 R15: 00007ffcbf610df8 [ 57.079567][ T6925] [ 57.420533][ T6936] FAULT_INJECTION: forcing a failure. [ 57.420533][ T6936] name failslab, interval 1, probability 0, space 0, times 0 [ 57.433243][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.1.587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.433273][ T6936] Tainted: [W]=WARN [ 57.433279][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.433369][ T6936] Call Trace: [ 57.433376][ T6936] [ 57.433383][ T6936] __dump_stack+0x1d/0x30 [ 57.433407][ T6936] dump_stack_lvl+0xe8/0x140 [ 57.433423][ T6936] dump_stack+0x15/0x1b [ 57.433437][ T6936] should_fail_ex+0x265/0x280 [ 57.433476][ T6936] should_failslab+0x8c/0xb0 [ 57.433590][ T6936] __kmalloc_noprof+0xa5/0x3e0 [ 57.433611][ T6936] ? alloc_trace_uprobe+0x2f/0x1e0 [ 57.433633][ T6936] alloc_trace_uprobe+0x2f/0x1e0 [ 57.433720][ T6936] ? create_local_trace_uprobe+0x91/0x2c0 [ 57.433739][ T6936] create_local_trace_uprobe+0xb5/0x2c0 [ 57.433757][ T6936] perf_uprobe_init+0xc0/0x150 [ 57.433817][ T6936] perf_uprobe_event_init+0xc4/0x140 [ 57.433838][ T6936] perf_try_init_event+0xd6/0x540 [ 57.433859][ T6936] ? perf_event_alloc+0xb1c/0x1740 [ 57.433888][ T6936] perf_event_alloc+0xb27/0x1740 [ 57.433991][ T6936] __se_sys_perf_event_open+0x615/0x11c0 [ 57.434014][ T6936] ? __rcu_read_unlock+0x4f/0x70 [ 57.434056][ T6936] __x64_sys_perf_event_open+0x67/0x80 [ 57.434134][ T6936] x64_sys_call+0x7bd/0x2ff0 [ 57.434151][ T6936] do_syscall_64+0xd2/0x200 [ 57.434173][ T6936] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.434193][ T6936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.434290][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.434308][ T6936] RIP: 0033:0x7f29aa93ebe9 [ 57.434389][ T6936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.434405][ T6936] RSP: 002b:00007f29a939f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 57.434425][ T6936] RAX: ffffffffffffffda RBX: 00007f29aab65fa0 RCX: 00007f29aa93ebe9 [ 57.434437][ T6936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 57.434448][ T6936] RBP: 00007f29a939f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.434458][ T6936] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 57.434508][ T6936] R13: 00007f29aab66038 R14: 00007f29aab65fa0 R15: 00007ffc76877d98 [ 57.434524][ T6936] [ 57.434531][ T6936] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 57.652815][ T6923] loop2: detected capacity change from 0 to 2048 [ 57.720515][ T6948] team4: entered promiscuous mode [ 57.725893][ T6948] team4: entered allmulticast mode [ 57.827528][ T7002] loop1: detected capacity change from 0 to 2048 [ 57.839405][ T6923] SELinux: failed to load policy [ 57.878550][ T7011] IPVS: stopping master sync thread 7014 ... [ 57.881610][ T7014] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 57.929893][ T7011] netlink: 'syz.5.600': attribute type 29 has an invalid length. [ 57.985476][ T7002] SELinux: failed to load policy [ 58.125676][ T7054] team4: entered promiscuous mode [ 58.131159][ T7054] team4: entered allmulticast mode [ 58.160885][ T7089] loop5: detected capacity change from 0 to 1024 [ 58.173263][ T7089] EXT4-fs: Ignoring removed orlov option [ 58.182881][ T7089] ext4: Bad value for 'resuid' [ 58.187725][ T7089] ext4: Bad value for 'resuid' [ 58.373247][ T7120] loop1: detected capacity change from 0 to 1024 [ 58.391548][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.464599][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.493984][ T7141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7141 comm=syz.1.622 [ 58.511984][ T29] kauditd_printk_skb: 1206 callbacks suppressed [ 58.511998][ T29] audit: type=1326 audit(1755877342.797:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.543326][ T29] audit: type=1326 audit(1755877342.857:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.594267][ T29] audit: type=1326 audit(1755877342.877:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.617668][ T29] audit: type=1326 audit(1755877342.877:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.641356][ T29] audit: type=1326 audit(1755877342.887:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.664762][ T29] audit: type=1326 audit(1755877342.887:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.688250][ T29] audit: type=1326 audit(1755877342.887:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.711961][ T29] audit: type=1326 audit(1755877342.887:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.735808][ T29] audit: type=1326 audit(1755877342.887:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.759602][ T29] audit: type=1326 audit(1755877342.887:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7131 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 58.761042][ T7019] 9pnet_fd: p9_fd_create_tcp (7019): problem connecting socket to 127.0.0.1 [ 58.888505][ T7169] loop5: detected capacity change from 0 to 1024 [ 58.924174][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.951298][ T7186] loop2: detected capacity change from 0 to 1024 [ 58.972770][ T7186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.999248][ T7169] vhci_hcd: invalid port number 96 [ 59.004561][ T7169] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 59.071812][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.097186][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.153796][ T7211] team1: entered promiscuous mode [ 59.158960][ T7211] team1: entered allmulticast mode [ 59.245679][ T7252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7252 comm=syz.5.636 [ 59.271311][ T7256] loop2: detected capacity change from 0 to 512 [ 59.292927][ T7256] EXT4-fs (loop2): too many log groups per flexible block group [ 59.300711][ T7256] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 59.307611][ T7256] EXT4-fs (loop2): mount failed [ 59.501781][ T7302] smc: net device bond0 applied user defined pnetid SYZ0 [ 60.152959][ T7341] __nla_validate_parse: 21 callbacks suppressed [ 60.152974][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 60.221031][ T7279] 9pnet_fd: p9_fd_create_tcp (7279): problem connecting socket to 127.0.0.1 [ 60.260993][ T7355] loop5: detected capacity change from 0 to 1024 [ 60.273235][ T7355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.337121][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 60.351824][ T7361] team6: entered promiscuous mode [ 60.356918][ T7361] team6: entered allmulticast mode [ 60.409930][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.461859][ T7408] smc: net device bond0 erased user defined pnetid SYZ0 [ 60.535417][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.676'. [ 60.591248][ T7428] loop2: detected capacity change from 0 to 1024 [ 60.611544][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.646287][ T7428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.674002][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.680'. [ 60.687913][ T7442] team2: entered promiscuous mode [ 60.693021][ T7442] team2: entered allmulticast mode [ 60.723897][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.782275][ T7488] loop5: detected capacity change from 0 to 1024 [ 60.797323][ T7489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7489 comm=syz.2.684 [ 60.836294][ T7488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.870530][ T7490] loop1: detected capacity change from 0 to 512 [ 60.908779][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.929151][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.930676][ T7490] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.949978][ T7490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.985601][ T7509] FAULT_INJECTION: forcing a failure. [ 60.985601][ T7509] name failslab, interval 1, probability 0, space 0, times 0 [ 60.998339][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.0.689 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.998410][ T7509] Tainted: [W]=WARN [ 60.998422][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.998433][ T7509] Call Trace: [ 60.998441][ T7509] [ 60.998450][ T7509] __dump_stack+0x1d/0x30 [ 60.998475][ T7509] dump_stack_lvl+0xe8/0x140 [ 60.998524][ T7509] dump_stack+0x15/0x1b [ 60.998542][ T7509] should_fail_ex+0x265/0x280 [ 60.998564][ T7509] should_failslab+0x8c/0xb0 [ 60.998594][ T7509] kmem_cache_alloc_noprof+0x50/0x310 [ 60.998621][ T7509] ? __proc_create+0x265/0x510 [ 60.998692][ T7509] __proc_create+0x265/0x510 [ 60.998714][ T7509] ? snprintf+0x86/0xb0 [ 60.998731][ T7509] proc_mkdir+0x3c/0xc0 [ 60.998757][ T7509] register_handler_proc+0x223/0x240 [ 60.998860][ T7509] ? register_irq_proc+0x272/0x2a0 [ 60.998964][ T7509] __setup_irq+0xf53/0x1210 [ 60.998992][ T7509] ? __pfx_serial8250_interrupt+0x10/0x10 [ 60.999085][ T7509] request_threaded_irq+0x22d/0x2c0 [ 60.999162][ T7509] ? __pfx_serial8250_interrupt+0x10/0x10 [ 60.999188][ T7509] univ8250_setup_irq+0x2b0/0x310 [ 60.999212][ T7509] serial8250_do_startup+0xa3d/0x1b10 [ 60.999232][ T7509] serial8250_startup+0x41/0x50 [ 60.999268][ T7509] uart_startup+0x465/0x8e0 [ 60.999289][ T7509] uart_ioctl+0xba1/0xe80 [ 60.999321][ T7509] ? do_vfs_ioctl+0x866/0xe10 [ 60.999343][ T7509] ? tty_jobctrl_ioctl+0x29e/0x810 [ 60.999403][ T7509] tty_ioctl+0x7de/0xb80 [ 60.999432][ T7509] ? __pfx_tty_ioctl+0x10/0x10 [ 60.999484][ T7509] __se_sys_ioctl+0xce/0x140 [ 60.999528][ T7509] __x64_sys_ioctl+0x43/0x50 [ 60.999557][ T7509] x64_sys_call+0x1816/0x2ff0 [ 60.999576][ T7509] do_syscall_64+0xd2/0x200 [ 60.999603][ T7509] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.999627][ T7509] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.999661][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.999679][ T7509] RIP: 0033:0x7f6fd9e1ebe9 [ 60.999693][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.999797][ T7509] RSP: 002b:00007f6fd8887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.999816][ T7509] RAX: ffffffffffffffda RBX: 00007f6fda045fa0 RCX: 00007f6fd9e1ebe9 [ 60.999827][ T7509] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 60.999837][ T7509] RBP: 00007f6fd8887090 R08: 0000000000000000 R09: 0000000000000000 [ 60.999848][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.999857][ T7509] R13: 00007f6fda046038 R14: 00007f6fda045fa0 R15: 00007ffead342358 [ 60.999952][ T7509] [ 61.023110][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 61.148332][ T7530] loop5: detected capacity change from 0 to 2048 [ 61.156200][ T7528] 9pnet_fd: p9_fd_create_tcp (7528): problem connecting socket to 127.0.0.1 [ 61.241733][ T7539] SELinux: failed to load policy [ 61.280361][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 61.316906][ T7518] team5: entered promiscuous mode [ 61.322128][ T7518] team5: entered allmulticast mode [ 61.398580][ T7588] loop5: detected capacity change from 0 to 512 [ 61.457406][ T7588] EXT4-fs (loop5): too many log groups per flexible block group [ 61.465363][ T7588] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 61.493430][ T7588] EXT4-fs (loop5): mount failed [ 61.557537][ T7603] loop5: detected capacity change from 0 to 2048 [ 61.566654][ T7605] loop2: detected capacity change from 0 to 1024 [ 61.584651][ T7605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.673573][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.686711][ T7603] SELinux: failed to load policy [ 61.731110][ T7632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7632 comm=syz.2.707 [ 61.788990][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 61.812140][ T7655] netlink: 108 bytes leftover after parsing attributes in process `syz.1.706'. [ 61.819142][ T7648] team7: entered promiscuous mode [ 61.826373][ T7648] team7: entered allmulticast mode [ 61.973914][ T7709] loop2: detected capacity change from 0 to 512 [ 62.001833][ T7707] vhci_hcd: invalid port number 96 [ 62.007060][ T7707] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 62.020148][ T7709] EXT4-fs (loop2): too many log groups per flexible block group [ 62.027854][ T7709] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 62.035205][ T7709] EXT4-fs (loop2): mount failed [ 62.095778][ T7723] smc: net device bond0 applied user defined pnetid SYZ0 [ 62.118449][ T7726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7726 comm=syz.0.720 [ 62.299286][ T7737] loop5: detected capacity change from 0 to 1024 [ 62.309156][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 62.321985][ T7737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.336889][ T7737] /dev/loop5: Can't open blockdev [ 62.358526][ T7740] team6: entered promiscuous mode [ 62.363642][ T7740] team6: entered allmulticast mode [ 62.388440][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'. [ 62.510645][ T7807] team7: entered promiscuous mode [ 62.515796][ T7807] team7: entered allmulticast mode [ 62.534077][ T7845] loop2: detected capacity change from 0 to 1024 [ 62.567355][ T7845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.677323][ T7804] vhci_hcd: invalid port number 96 [ 62.682585][ T7804] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 62.770437][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.864054][ T7878] smc: net device bond0 erased user defined pnetid SYZ0 [ 62.970622][ T7889] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.143408][ T7899] team3: entered promiscuous mode [ 63.148530][ T7899] team3: entered allmulticast mode [ 63.553746][ T29] kauditd_printk_skb: 955 callbacks suppressed [ 63.553789][ T29] audit: type=1326 audit(1755877347.867:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.583852][ T29] audit: type=1326 audit(1755877347.867:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.607222][ T29] audit: type=1326 audit(1755877347.867:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.630695][ T29] audit: type=1326 audit(1755877347.867:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.654377][ T29] audit: type=1326 audit(1755877347.867:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.677935][ T29] audit: type=1326 audit(1755877347.877:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.701624][ T29] audit: type=1326 audit(1755877347.877:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.725097][ T29] audit: type=1326 audit(1755877347.877:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.748694][ T29] audit: type=1326 audit(1755877347.877:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.772066][ T29] audit: type=1326 audit(1755877347.877:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.5.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f6e3ebe9 code=0x7ffc0000 [ 63.977370][ T7996] team4: entered promiscuous mode [ 63.983112][ T7996] team4: entered allmulticast mode [ 63.999743][ T7993] SELinux: failed to load policy [ 64.065147][ T8042] loop5: detected capacity change from 0 to 1024 [ 64.080338][ T8042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.109928][ T8051] loop2: detected capacity change from 0 to 512 [ 64.121949][ T8042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.151124][ T8051] EXT4-fs (loop2): too many log groups per flexible block group [ 64.158997][ T8051] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 64.175723][ T8051] EXT4-fs (loop2): mount failed [ 64.210927][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.245876][ T8070] team8: entered promiscuous mode [ 64.251011][ T8070] team8: entered allmulticast mode [ 64.395190][ T8129] loop1: detected capacity change from 0 to 2048 [ 64.420117][ T8132] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.471890][ T8129] SELinux: failed to load policy [ 64.501985][ T8147] loop2: detected capacity change from 0 to 512 [ 64.519250][ T8151] loop5: detected capacity change from 0 to 2048 [ 64.552383][ T8147] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.555803][ T8151] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 64.598758][ T8151] SELinux: failed to load policy [ 64.616627][ T8147] EXT4-fs (loop2): mount failed [ 64.721305][ T8175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8175 comm=syz.1.784 [ 65.044323][ T8202] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.141659][ T8205] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.233770][ T8215] loop1: detected capacity change from 0 to 1024 [ 65.261739][ T8215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.375497][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.527114][ T8247] loop1: detected capacity change from 0 to 512 [ 65.571222][ T8247] EXT4-fs (loop1): too many log groups per flexible block group [ 65.579030][ T8247] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 65.600690][ T8247] EXT4-fs (loop1): mount failed [ 65.662829][ T8261] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.692520][ T8261] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.134215][ T8307] 9pnet_fd: p9_fd_create_tcp (8307): problem connecting socket to 127.0.0.1 [ 66.952765][ T8408] loop1: detected capacity change from 0 to 2048 [ 67.027853][ T8408] SELinux: failed to load policy [ 67.046030][ T8425] loop5: detected capacity change from 0 to 512 [ 67.069797][ T8422] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.072636][ T8425] EXT4-fs (loop5): too many log groups per flexible block group [ 67.084638][ T8425] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 67.094572][ T8434] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.145574][ T8425] EXT4-fs (loop5): mount failed [ 67.175408][ T8447] __nla_validate_parse: 6 callbacks suppressed [ 67.175425][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 67.205546][ T8453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8453 comm=syz.3.838 [ 67.240687][ T8447] team5: entered promiscuous mode [ 67.245885][ T8447] team5: entered allmulticast mode [ 67.365628][ T8509] 9pnet_fd: p9_fd_create_tcp (8509): problem connecting socket to 127.0.0.1 [ 67.435789][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 67.484066][ T8522] smc: net device bond0 applied user defined pnetid SYZ0 [ 67.491540][ T8522] smc: net device bond0 erased user defined pnetid SYZ0 [ 67.567140][ T8535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8535 comm=syz.5.854 [ 67.657017][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 67.670410][ T8544] loop5: detected capacity change from 0 to 512 [ 67.703679][ T8544] EXT4-fs (loop5): too many log groups per flexible block group [ 67.711575][ T8544] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 67.730907][ T8544] EXT4-fs (loop5): mount failed [ 67.984209][ T8594] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.013317][ T8594] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.137568][ T8608] SELinux: failed to load policy [ 68.203305][ T8620] loop2: detected capacity change from 0 to 512 [ 68.267282][ T8620] EXT4-fs (loop2): too many log groups per flexible block group [ 68.275198][ T8620] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 68.314870][ T8632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8632 comm=syz.3.870 [ 68.331142][ T8620] EXT4-fs (loop2): mount failed [ 68.386136][ T8641] loop2: detected capacity change from 0 to 512 [ 68.412498][ T8641] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.437091][ T8641] EXT4-fs (loop2): mount failed [ 68.538482][ T8669] loop5: detected capacity change from 0 to 2048 [ 68.576653][ T8656] SELinux: failed to load policy [ 68.590116][ T8669] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 68.623362][ T8669] SELinux: failed to load policy [ 68.633476][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 68.633490][ T29] audit: type=1326 audit(1755877352.947:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.663370][ T29] audit: type=1326 audit(1755877352.947:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.707987][ T29] audit: type=1326 audit(1755877352.957:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.731428][ T29] audit: type=1326 audit(1755877352.957:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.754876][ T29] audit: type=1326 audit(1755877352.957:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.778428][ T29] audit: type=1326 audit(1755877352.957:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.801871][ T29] audit: type=1326 audit(1755877352.957:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.825552][ T29] audit: type=1326 audit(1755877352.957:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.849318][ T29] audit: type=1326 audit(1755877352.957:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.872888][ T29] audit: type=1326 audit(1755877352.957:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8677 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd9e1ebe9 code=0x7ffc0000 [ 68.934374][ T8700] 9pnet_fd: p9_fd_create_tcp (8700): problem connecting socket to 127.0.0.1 [ 68.971321][ T8708] loop2: detected capacity change from 0 to 512 [ 68.991893][ T8708] EXT4-fs (loop2): too many log groups per flexible block group [ 69.000002][ T8708] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 69.031760][ T8708] EXT4-fs (loop2): mount failed [ 69.053138][ T8716] vhci_hcd: invalid port number 96 [ 69.058303][ T8716] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 69.142461][ T8736] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.143025][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 69.150105][ T8736] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.180678][ T8739] team8: entered promiscuous mode [ 69.185847][ T8739] team8: entered allmulticast mode [ 69.627417][ T8806] loop1: detected capacity change from 0 to 1024 [ 69.672238][ T8806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.704436][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 69.731865][ T8820] team9: entered promiscuous mode [ 69.735807][ T8806] vhci_hcd: invalid port number 96 [ 69.737006][ T8820] team9: entered allmulticast mode [ 69.742151][ T8806] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 69.791144][ T8859] loop2: detected capacity change from 0 to 2048 [ 69.822597][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.823970][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 69.846721][ T8859] SELinux: failed to load policy [ 69.856457][ T8863] team5: entered promiscuous mode [ 69.861590][ T8863] team5: entered allmulticast mode [ 69.955428][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 69.987737][ T8917] loop1: detected capacity change from 0 to 2048 [ 70.242984][ T8937] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 70.381432][ T8937] SELinux: failed to load policy [ 70.411700][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 70.436712][ T8946] loop2: detected capacity change from 0 to 1024 [ 70.451136][ T8945] team9: entered promiscuous mode [ 70.456206][ T8945] team9: entered allmulticast mode [ 70.462121][ T8946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.475764][ T8949] 9pnet_fd: p9_fd_create_tcp (8949): problem connecting socket to 127.0.0.1 [ 70.494210][ T8988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.923'. [ 70.511642][ T8946] vhci_hcd: invalid port number 96 [ 70.516819][ T8946] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 70.545084][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.600004][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 70.628119][ T9005] team6: entered promiscuous mode [ 70.633247][ T9005] team6: entered allmulticast mode [ 70.712849][ T9049] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.720886][ T9049] smc: net device bond0 erased user defined pnetid SYZ0 [ 70.755820][ T9052] loop5: detected capacity change from 0 to 1024 [ 70.774737][ T9052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.801720][ T9052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.838844][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.899030][ T9066] loop5: detected capacity change from 0 to 2048 [ 70.914167][ T9060] vhci_hcd: invalid port number 96 [ 70.919396][ T9060] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 70.985398][ T9066] SELinux: failed to load policy [ 71.058905][ T9084] loop5: detected capacity change from 0 to 512 [ 71.068097][ T9085] loop2: detected capacity change from 0 to 512 [ 71.083143][ T9084] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.102956][ T9084] EXT4-fs (loop5): mount failed [ 71.108845][ T9085] EXT4-fs (loop2): too many log groups per flexible block group [ 71.116679][ T9085] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 71.124957][ T9085] EXT4-fs (loop2): mount failed [ 71.222126][ T9109] smc: net device bond0 applied user defined pnetid SYZ0 [ 71.240337][ T9109] smc: net device bond0 erased user defined pnetid SYZ0 [ 71.819317][ T9142] loop5: detected capacity change from 0 to 512 [ 71.827410][ T9141] team7: entered promiscuous mode [ 71.832655][ T9141] team7: entered allmulticast mode [ 71.872306][ T9142] EXT4-fs (loop5): too many log groups per flexible block group [ 71.880741][ T9142] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 71.905306][ T9142] EXT4-fs (loop5): mount failed [ 71.988526][ T9193] 9pnet_fd: p9_fd_create_tcp (9193): problem connecting socket to 127.0.0.1 [ 72.057376][ T9195] loop5: detected capacity change from 0 to 512 [ 72.091814][ T9195] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.106889][ T9195] EXT4-fs (loop5): mount failed [ 72.196689][ T9227] __nla_validate_parse: 2 callbacks suppressed [ 72.196702][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.972'. [ 72.267798][ T9233] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 72.306002][ T9233] serio: Serial port ptm1 [ 72.345481][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 72.354437][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 72.391521][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 72.432772][ T9252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9252 comm=syz.1.979 [ 72.505296][ T9258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9258 comm=syz.3.981 [ 72.702707][ T9308] loop5: detected capacity change from 0 to 512 [ 72.704449][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 72.717945][ T9310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 72.754179][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 72.773547][ T9308] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.793671][ T9308] EXT4-fs (loop5): mount failed [ 72.811408][ T9327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9327 comm=syz.2.993 [ 72.994178][ T9349] loop2: detected capacity change from 0 to 512 [ 73.051878][ T9349] EXT4-fs (loop2): too many log groups per flexible block group [ 73.059614][ T9349] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 73.066548][ T9349] EXT4-fs (loop2): mount failed [ 73.104469][ T9379] loop5: detected capacity change from 0 to 2048 [ 73.107678][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 73.119793][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 73.181367][ T9398] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.196794][ T9398] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.204486][ T9379] SELinux: failed to load policy [ 73.216099][ T9407] 9pnet_fd: p9_fd_create_tcp (9407): problem connecting socket to 127.0.0.1 [ 73.316268][ T9425] loop5: detected capacity change from 0 to 512 [ 73.343831][ T9425] EXT4-fs (loop5): too many log groups per flexible block group [ 73.351590][ T9425] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 73.375845][ T9425] EXT4-fs (loop5): mount failed [ 73.461902][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'. [ 73.477167][ T9468] loop2: detected capacity change from 0 to 512 [ 73.484126][ T9467] team5: entered promiscuous mode [ 73.489189][ T9467] team5: entered allmulticast mode [ 73.504764][ T9468] EXT4-fs (loop2): too many log groups per flexible block group [ 73.512656][ T9468] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 73.532779][ T9468] EXT4-fs (loop2): mount failed [ 73.551223][ T9513] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.566674][ T9513] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.606882][ T9525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9525 comm=syz.1.1021 [ 73.637853][ T9530] loop5: detected capacity change from 0 to 1024 [ 73.645187][ T9530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.663365][ T9530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.682136][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 73.682159][ T29] audit: type=1326 audit(1755877357.997:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.713876][ T29] audit: type=1326 audit(1755877357.997:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.737568][ T29] audit: type=1326 audit(1755877357.997:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.761654][ T29] audit: type=1326 audit(1755877357.997:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.785428][ T29] audit: type=1326 audit(1755877357.997:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.809096][ T29] audit: type=1326 audit(1755877357.997:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.814243][ T9548] loop1: detected capacity change from 0 to 512 [ 73.832430][ T29] audit: type=1326 audit(1755877357.997:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.862057][ T29] audit: type=1326 audit(1755877357.997:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.885403][ T29] audit: type=1326 audit(1755877357.997:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.908844][ T29] audit: type=1326 audit(1755877357.997:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9540 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29aa93ebe9 code=0x7ffc0000 [ 73.941234][ T9548] EXT4-fs (loop1): too many log groups per flexible block group [ 73.948961][ T9548] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 73.961457][ T9548] EXT4-fs (loop1): mount failed [ 73.969301][ T4152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.040801][ T9569] team6: entered promiscuous mode [ 74.045877][ T9569] team6: entered allmulticast mode [ 74.051394][ T9573] smc: net device bond0 applied user defined pnetid SYZ0 [ 74.060252][ T9573] smc: net device bond0 erased user defined pnetid SYZ0 [ 74.082574][ T9609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9609 comm=syz.1.1032 [ 74.161606][ T31] ================================================================== [ 74.169873][ T31] BUG: KCSAN: data-race in alloc_pid / copy_process [ 74.176539][ T31] [ 74.178931][ T31] read-write to 0xffffffff8685fc48 of 4 bytes by task 51 on cpu 0: [ 74.186887][ T31] alloc_pid+0x539/0x720 [ 74.191113][ T31] copy_process+0xe25/0x2000 [ 74.195687][ T31] kernel_clone+0x16c/0x5c0 [ 74.200259][ T31] user_mode_thread+0x7d/0xb0 [ 74.205012][ T31] call_usermodehelper_exec_work+0x41/0x160 [ 74.210904][ T31] process_scheduled_works+0x4ce/0x9d0 [ 74.216363][ T31] worker_thread+0x582/0x770 [ 74.220966][ T31] kthread+0x486/0x510 [ 74.225015][ T31] ret_from_fork+0xda/0x150 [ 74.229584][ T31] ret_from_fork_asm+0x1a/0x30 [ 74.234417][ T31] [ 74.236718][ T31] read to 0xffffffff8685fc48 of 4 bytes by task 31 on cpu 1: [ 74.244090][ T31] copy_process+0x14a6/0x2000 [ 74.248779][ T31] kernel_clone+0x16c/0x5c0 [ 74.253299][ T31] user_mode_thread+0x7d/0xb0 [ 74.257975][ T31] call_usermodehelper_exec_work+0x41/0x160 [ 74.263948][ T31] process_scheduled_works+0x4ce/0x9d0 [ 74.269392][ T31] worker_thread+0x582/0x770 [ 74.273969][ T31] kthread+0x486/0x510 [ 74.278022][ T31] ret_from_fork+0xda/0x150 [ 74.282511][ T31] ret_from_fork_asm+0x1a/0x30 [ 74.287258][ T31] [ 74.289560][ T31] value changed: 0x800000ff -> 0x80000100 [ 74.295262][ T31] [ 74.297598][ T31] Reported by Kernel Concurrency Sanitizer on: [ 74.303727][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.315079][ T31] Tainted: [W]=WARN [ 74.318857][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.328895][ T31] Workqueue: events_unbound call_usermodehelper_exec_work [ 74.336012][ T31] ================================================================== [ 74.355286][ T9618] team10: entered promiscuous mode [ 74.360461][ T9618] team10: entered allmulticast mode