last executing test programs: 5.489318431s ago: executing program 4 (id=506): socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xd}, 0x604a, 0xb9, 0x2, 0x0, 0x2, 0x240, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/251, 0xfb}], 0x1, &(0x7f0000121000)=[{&(0x7f00000000c0)=""/231, 0xe7}], 0x1, 0x0) 2.976597347s ago: executing program 2 (id=525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000004000c"], 0x28}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x4, 0x2, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x7810, 0x4}}) getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000ec0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b40)={0x360, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "12c2cceb41567c12268bf0701d4651a772c69a2445370b5c0822553f9ee000b51f8535f678ee9ec1581bd9cfe61d6b36fecbf889c5b5188aa9299f3f3b39c820190640494fd68c298c6871e9cb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "f3e54563a036bdc780e6c17ca920c7737669db50cae05db9accf42097216438368a4c36efa9f8789ca5a93bce9dedb5ab850a657bde48564ce671f225938ce470715b6590404384874008d49345eda371c91cab424dba7d68fae3450429c75f1c94bf406b921b5c76ab226a6aa1bbc464b209c8b85173f81c7fab06b91e73f93c07d125add2e10fc2bf29a82475ed4ada1ea6e7bf785f701e71c27fd081c2d10c2d403589485188a558b5d05ca975ec7ebb757851f3e1659271b1072be34a9e12729c8a916667c964bf33283775d5d66b4d2238ad27c52fee6d93ac43eaca3998d263590a64c74ed0f0bae393677240748167720fa094d1b9120153f063a"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "de771a9528c8cdee758bbdb7c5d1f8decf61919d10d6d46c373c4b4b2d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "76ff1121bec8e81ec9b6be49800d1fa77deced4388d2c8d762f007c3ff4d631fcf98672b425b7d0229a3cf4fb1044d2ce9a865f8d6563fa7e6a52d84dab21ceb7998d002d924f7e9fec8d688b8517ad24ae74e75f6bc08e3ca03e9d24cbaaa4145fdd721bca3ef4e953ff1c0976450708b96cb1d7a109b10de94776e4540a1ef4e54d461d06654b8c0e754a539aa8f9b806f30bb4311466594"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x99{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42df}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ')(![%*,/%/{\'(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\xe1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/snapshot\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x360}}, 0x8041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="09000080000000000000000008005b13a4892aa41c1f5076"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaaf}, 0x94) socket$netlink(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) mremap(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() 2.901147568s ago: executing program 2 (id=527): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") syz_usb_connect(0x0, 0x34c, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x35, 0x9d, 0x54, 0x40, 0x19d2, 0xff63, 0x9c9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33a, 0x1, 0x2, 0x2, 0x80, 0x8, [{{0x9, 0x4, 0x81, 0x4, 0xf, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x9}}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0xa, 0x0, [@generic={0x16, 0x24, "f3ee48a2e1fbf72245685e7405d2dc65c28ce43f"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x7f, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0xd135a03d9491f6fa, 0x7f, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xdf46}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xa4, 0xff, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x8, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0xed}, @generic={0xe4, 0x6, "d7e8ed759da55089d271cc2b089471fe5b034ab25847f2941e3b3736f29db1887723410134fa95841caec42945712555ed21bf3595f38cec2709c586e06656541e5b50311488b99256500713cb9975fbaab47befee9771d45085226b95ed8815b88bc4f6a176c3f9029723652f5681d59b52d36af7f88f14cb1ab7da6952bd755054852dd477cb8a93b7679f98865e38cb1d0dde2370f4bb0ba6c8daa7d9a73d6ed7bbaa2b8a4317ffec10a1a27fd3f3bf82198fc53476abe8dfe3be6b39002da0cedc8e15ad7ccd0818a2fa1318a537b77a6eb4db16bf2e6b023611182354194cca"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x16, 0x0, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0xadfe54ea2dfd7c33, 0x0, 0x52, 0x80}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x0, 0xe1, 0x9, [@generic={0x9, 0x7, "fde2981571252e"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x81, 0x90, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xe7, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf5, 0xf512}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x86, 0xfe, 0xf8, [@generic={0xc6, 0x9, "435d1b8f72b562e2da3c19a001e4a3d350467feb0951c0b8d2a592ae84024b0fab2a98974ed5bdafec6c651bf0cd822593428e177fd97cc7b762128d9b4b2a3d74e1267a6ea9baefadfd4cf39b11ae5c9ef26d557b35736512141041c3f6d1508f7413985a415330084ae12bb2de63dd83aa02a4ba15b0e376efc25c0140192828d9646e6baa997699276855774d9e2702858ea699344f5a4b23f2db6280c11260f1de74a949507ce57533b3325e9957543c239f730bfd2e9a3caa609fe39d5e0019ebab"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x7f, 0x89, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1b, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x10, 0x81, 0x3, [@generic={0x89, 0x31, "b6294664b9ee38072756de5ea3c19a75e5f4cc33587779f236dd4c0e3c7fffdf984938e43ce590cdc874c93840c2f4dd6570c370f8044c7a7a08933f2108a6627610679cfbd677eaabed28a57cf9636be2da688c318b0a4c96683a15b80c8118d5a461a113e1ba741c82aa7cc3279d48d516800aa8c9f1ecdae01e4392d180d4f74d2287576bda"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x240, 0x3, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x9, 0x8, 0x3, 0x20, 0x4}, 0x101, &(0x7f0000000600)={0x5, 0xf, 0x101, 0x1, [@generic={0xfc, 0x10, 0xb, "a9fcf89d12dcae326591be3f6bb32e63e2f1119c1459efe66140f3f852afcb9b2ce39fae079a48c3164ace7268d03524cd7aeba201dc2ae79a57ae0d959019f31b81205f83feeae8ea0af0b7e1773f51cac0d8e46b5b8b2b3a2d725c6569686a488ab8d26396bee24f8c2e535ee90585f717651a5e1fddda8b9457392ed7fde7a81796b3ab7ad6940a17c7b327f1fc371254fb0c373a35a21669b112f2aa1c9fb943fbc63cd4258f0dfe05fe472e36916669a9c32ad2efce7fa7aee045bc785b04315f0fed87702688abcbf7341b313f6c0b3c6f949e1abaab6ce0f586e3cc0d26b75d12b017b68b409b821cda642b507b96bccf62e00b2a34"}]}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x46b}}, {0xd3, &(0x7f00000007c0)=@string={0xd3, 0x3, "efb643864961a22a71f9c1ddc2ee7bcb2ba9f706328bf7c39c1224330b31e78c998835dfcf3e659fb2d297fa380c5501355060f0a6bf49b675f10cdf240ae4af41ed3cccbf5fe6ec860f3afdc2813d0d4de729b4461c8c65105c6456bb27b4d304d2a6bfeccfb2210edb34b75315b28a1220ccef54ac43f4ba71014b94bd00159fa6658662b55f6d252533f864046d9f4b35f6aaf9dc7631da23b90be5a32796b5c9360cd93aea9153e09619ea6c90055d148829beacb2a938b3e9e8cf630ddc73303bb515a9e672bdac2c6a492f92840f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x803cc0f319bc725b}}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x1000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240080cb) 2.365044338s ago: executing program 4 (id=533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000040000007020000f8ffffffb72e6c5ab4519098969bf86a8d03000008010000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='kmem_cache_free\x00', r0, 0x0, 0x81}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a51267c78f958ba583c3fc20641a5061615aa4e28f388753bd7e952f6aa55083fef5392eb"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000940)=ANY=[]) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') unshare(0x2040400) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400090523bd7000fddbdf25022028cb", @ANYRES32, @ANYBLOB="0800000000000102080008080008000100ac141422080009000301000000000000000000000000003f456fc1f79e8acdbe1a22c9f3e8c3ea0000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x7, 0x1ff, 0x22, @loopback, @private1, 0x700, 0x1f, 0x4, 0x9}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="800000001000039a3b1e7b440f26ff6604000000", @ANYRES32=0x0, @ANYRESHEX=r9, @ANYRES32=r10, @ANYBLOB="08000318fc77ce809f59ba73013967f7e53d4bc9c5247bf7cf3dd1a2a73242a8851ccb911ad488eea21326023306e0927005c5ada7"], 0x80}}, 0x4084) 2.27169981s ago: executing program 2 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) 2.193138041s ago: executing program 2 (id=537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x100000000000000, 0x0) 2.193046051s ago: executing program 2 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.049045624s ago: executing program 2 (id=540): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1f, 0x1f, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) inotify_init1(0x800) (async) inotify_init1(0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.790330248s ago: executing program 1 (id=542): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 1.570877592s ago: executing program 1 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) io_setup(0x8, &(0x7f0000004200)) (fail_nth: 13) 1.439529095s ago: executing program 1 (id=546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x0) 1.216602309s ago: executing program 1 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000000000000a00000000faffff05000700"], 0x20}}, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000e5b00000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c00004400000000000690780a210104ac1414aa44140a01e0000001000000007f0000010000000007060990ec74000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000190780000cce1e844d98a43a3caeafa4776b3c50582f24887b248"], 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r3) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x80000) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000240)=""/15) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x21d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000001c00)=ANY=[@ANYBLOB="18000000000000000000000000000000c65e06ac034b6eb85049cafbaa40c943a1144b7859da93cbb100f4bdf51cc7e612318050ba9e68abf37cbd24c5c65d3eaf5b72e40b6d7c263849a454aabc8c30c710b21ca5f45529d7a3f284b528ce42e14a9f0bc3ab962d96acea9a0e501688ef52f0c2dc7616df7bf599d28199847b3f612f1173a252b754640ed3940c326b19934b6a7be9e05a1ea19c819dc5699f54978fcde56a865e92d1bbbf10e4b9c9d5f25306594722ea54f5d617b6b800"/201, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'bridge_slave_1\x00', 0x400}) r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r10, r10, 0x30) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) syz_emit_ethernet(0x1016, &(0x7f0000000bc0)={@broadcast, @random="456598a99f62", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, '6', "3c61c7", 0xa01, "515980af770b85b5c7af4559ed203d2adc09e45ab6b4050741fcc206057ca9d8dc5e3de679822b506cfc85a883d71f2075014b599d88e697107613eab54e8eca3026248c5b99c23b1b0008f13b418198b470ef5ca6db2ff191b51fabf173fa1d9854898470d15bf8c54fa45b5f297bb49dc71e8d0665116d4dc5bfecd4c794af96879e74226e6f792a9d90c6e75618a0415b540ac86c674c146e5dd050351eb101ac6d2750b07c108ce292a015981fb8f966bb95c5b0bcc63da68f4f0aa8675909dededef15e7e16322b21a161bc477855b517fbd63597d1b799e775e7c448d02c3b5371160a9ecfa443225dbb8a39664d8e1a06179d0d6d772c7deefa0a81786a18911ebcbd42c3bf6a8b488be13378bf62553189eae5a165ffe938166e74912170bf295ccf1a66319971151aa7c480d28c52bca624c7ed24331b6f10084bcaefcaee52cfcfd25eb570ca7bd74476ff633838ebd74c2a12ab2e245e00b8f7e3ce84b075eb5bdee2058dedf136b86a701f3cc1d50b2c3ab81f02d6f7b5d1d4e20febd4f082c866e5c70996766174b958da10bbf27b7fc2553a3c8376a1375a6a419d40059c6bd7a1dc5d0d92dbda3376d8deb1da2bfd0e23cff192383b8ba1ae43af91451da2d2fbaa78d1b6a5876b4da543eec73492ba12781bc5edc40266a299fcde831d618ce0e4837e5029c43d34c354d71b4a575cb9a0e8e5e28a64037bef48004a34a6e31be381196ad1e0234e5a535c6ba8ff610daebab202fb51e6b66a07ea077ac0c2c4248d9c1250dbfa2fa13416526ec168c40693563fa53cbb9ebe313623aa0f69853541e4b8d4de26cbb94a003f08820b3426710f72dc2a21c759e3e7b0f65c01f1c1f088117e3de3d3edb2de6629f1631fdec894f36ddf9047cf5d223b58367da6b5a4aa5acfd5f14ae45b457179685f775cdbf34bc5ef3eea7efe9d168c3ebbdd55432ebeb822cf0edb31fae7e1cc5d6957fb08ff05d6f7cbca616222ac86f5d373734cf162b6403f75613d98aa2e0f20c16965a67d393602d544b71136a30ce4af09e1ad44dda2a7fdee07a6ef85aea04e4153ce8547763ee0307b28ccc667e89b3389fb7ba91dfde1aaddc6faf06c21c172d02412393a2c2d38314ec927169338cf5c13be43c93b6b8202c03d12927a5d0c0384d798ac266af5a62c5c0d900c0728f012c9dea3082cd9374ec0b87de0b2b330dfc2555791e34a68bdfd4a45cb9eb1b99a5310a2e02aae15709adcfd67f1ab299e7ff3cf0543acdc3b35445894b950deae9a326063d32119c85f2024a1dad114ba621a9fe014d2ad14414cc715e72656cb903befa223b7e97462b751660c7aa22e77b0069e938ba6e642c0ae62f645ed3fb7704717078c366e4fe73f14d5496b02c33798502a4a52bf601014d62957e0c61a3791111291363390f8f94621338082e49e48e4443ef3a312c6278bfd5cd32fa8b8be4e1c920ba625daea37d92e6cc5871c5760ac73f0fa69ccec169a932976ab7e86e06f1b0066e0843a8faefebc201624e562384a052022c9f276fedc5c2c4814cd707a4211f084b8c631f5ed0b7b76cd5992512c236cf4a4d36062cc1e01c0e5a4b1e43fb611bd5f58f38650b3b4ec3ac60ce815b690315da122f48ebe797a7923703a5afe4bfc9e085e270f8f83eb55d01e950a44c4d8c8a55ae3bf89e89989e6582b1512b6964c81ed86f69933f5b20349860b67e0d063a91356958b216c5a83f35171f1d0d7a6df8c2a8a385b1e48b7167429c88fa4cc8df5b97fa33bd7b4817cab6fbbcc28c08870b21da3a5b659221010afa7c3724cd64f8a4ff139a5b4ac23163e26d5706f2f7f86065bd905a08388af7fb5b82d1bae5dab2620ce7bc75ccdc1ea0b9a2978ecad80ff3aa7afe2805c24272c360aed68e99890ab01fdb9cbe3503ff1f5a6d16941b752aae273be53aea0f66addb7eca162647fe8862494cb3b3d2ef31d5d60c595d333f1303afa12d2e9168d8038d3f290c3e26472f8b575328febd5f3a2c3d8fe2ef712951226a08e66e0865b588dab1086182159618f5efcf7cd59057c55a9580d139f4c3ef01bc9a393d21001dc181f9f3f91ec4497932ef89b7b02bdceca9abe7f340b143b60c79f2dad2715303a99dd0839d28d7eac8b378df227afc96e68c6ce3a06567795954f5984fc18f0d56f9709e833e1a6fb45c7f924097ac3b3e3c92c7e69e9ab533fafbd2469951ed226c4744513494db78b15e6ed059f6c3083a61629e3051417861714a96bab3d4f160560c655de41f493ed5b5bbd2f0333891d1912909f469e102244e303bcce5c679d8a81529a310c7041ac9c8fb8a1237b90d04470a27cf577ae2d295cea49776029fca99cafc1db82edea7c6e047362a18f7f037b96de18ae7c940bf8bd9539d6db8b245aaae0961bd077d00b141fbfa1fd92939827bb21af291a394da950b50c242b155f32e3a100095aa48f6f59d09e7053f47d260aa47b43ae2cad5f5ef1bf287cf9ae8538ac9a219e79aac61d8e62a96d8c24285e9d41967c52caf05523512750b6d38f3cd0c0ab620f1a4999dd5c66303cdde6e5ef82502edaf56c24d70979554deac46d9ea4b1a18efc0f75abfdb0fccf635c01632cb4de7592d22d61ea034a5200978691c2f6d3e0d22c33ae0133a9067dae01510443951fcd0a0552bed90e52b8454c69b44f48195373ec4de36df96387f31ebabceff764caab66fecea2b09fc037ff4ab761b9c853d5d7f7f75f64a3597f301effa91a20865b6d5cfb323b81013462c169ed6d8ab2c927d6f028856d9819fd8f37113a5587f7b5812320e618b82df2f75fde1d3896ae6fe6893f155c4f5a44b58b1696dadd6262ea9381d5c6ed339c3d336619a1cf70385d20b73b110cd526c6127aa8f9d138712d157acac6eeb3865b950eef81cf1f9aad3065c69cf5c3ab0673537d7210f762b97d9cf81d80757913e81ecc3098c337be9589ad61622524343dd25fc9a32d490e8806e9cf5de2088c9bb9a705255b409528b83d50a8772d1ce11c7ad0f9c202a3450a1bdce823aa4719fe679e9a91bde91bea57783c63988c197274b1af7145121258b20dadd4aaa9d0a2ddfc0436dbe9a5e5cb93a4d44f8562cb0b25749124edfd5826b9829a73c30c5b05d84f898ff7791445cb2147d373e3aed1714680268e747baad808c9266dd0e4aeca0d281a3012f46456bb35226aa58d087922e026cf1086e8b20b1135c6a2759305df51c504791384505ccb4b4bb9c872115f64aa0f38abdb96bbed6c41978a4ab40df1f7122aa70e63eda9d53685b0473d2a20d5a6d25c7a26ced865ab0fcef80de16ac70129d19176448b1af457964a7990f6b5f6e711835ce69ad1bf56dc4b098fc0bbacb7f5920ef7bc7f4a22180c71f67a7e92bd786f10e0e447edc7432b951a92a05e0a7647f9c2cd132c9747d85d0bbe68c7627137413ca9023d3eba0071c1241c42c30e281669ae38d65eae186fce3198c5edef37cb2b2b66127c36abdd52a83f2620a65fa36884ec7807a17ad2e255dc4dd08867fd106db188c22cc724e432cd0afb6ddf31cb2684e25dc74878757427e9d3c293258dba80d9cc5f565b4efad71e2f742a41323c2f3570bd9519614cadc036b4948585bf8cb439265224db863b9b38be1973afb97ca353d1dfd1abc2731b3310c0c690e0a03515a2e8deeb99065fe6e8b9ca80138df0c1a6a8d66f44545b82fe977ea9e0c84d5b703819eac954d5ad232390320c61e439ffd51d4100eed12682bc80c27e1714581199db919028aff7841564d38bebbb4145b63c8d7d4c1efb0393c76e3be1fb4a64787020427dfd5110d29a6761de3f0f9d83a49e0b32a548acde85f8723bd49005b43dcb0fc7c17d2a40df425947472ef706a49f544c85303c8347c712cb05766f3f1464a03ef8382801a460a9facafa37dd77962a45df62ad7a8d0676d055853bc44caf505ecdce9e5638fadd40e2a4d785caed73e7d476552daddca6003c907596e5a3f04327d57b80b5cd583270620a9898a40214af17e296213dd6274d87019cecfac6f3850f97677bfcb34a46c21d1c0bbe126917e6ce9bc5dbb5da306554ab87273448ce6e074ff449f52c8216cd82977e95d88c8188b9df7d9e4ef86e84b3e30f3813187835e6aa2a98b49dc4a04ec4fb6737fa0c71abe43c3836fa893a5298a6547e76ef8c79d7538830389295dd0967d639640fd56cb9343820341c5ba713645ab7ea9adbbbd54278bc5dec9c77aab74aa1843aec3a20c48a460f8b598d213740b356fb77354615da3f624d4fcc4bd2cc67a06970693e4d62e63985fba89f9bb36d08ee8ac3e43b3e4c2e049dab937e47154bbd0569816360efbc1850b5d7722c99087bd6f99631c81e07dd0a48783a7f3e14b03c7891237ee1f59c2a2f7dcb710c101df7146147c2b88515d07a126022afc647a3bdf5357c8c16a618796b059630988c1010ce010beb4aeefb6e0cd4d5f57e83038dd4b4d6a965a968f25d1eb931104b9afc6998fa41a1ca4d565ea58253462938fc778acbcdc93fad7f3a5e02c71de3c53b2bf7c929f8a13111c2dcfbaf0175870b23b81cd68ba9caaec8d2bbabe78732659ec6961d5a34f179e814532bde6d575b7d54598d146f8578093be0fa99094f500eabaf45885541961a9e845eae5a8e3fa481f6d68ac7c6bfed8d4fcab8b03c0ad09f2ba2f6d6099f47aace58b6b5cc10bc567613dd34b8db76a245089375fde4acdaaba81db41ff4542cbeb1ca45fe1dc0a8fcce94761d1fac197877773cb1e0d93a1e48dc2c7aa1c6a710516ebd97841ad717173ec0d91d2962beef7d659ddcb7d2765e31ed2ce266deed6ba6edb9bdec7401477bc084e011fd17fdcafa03b95a2de6460c704101965f326948f3e1bb393fc047c9a3663a5024990763de90b4f82ad4118fe75cb83d4cc719adec7e8a17e1d1fa8f4d4cb939f724c91e08c47c5418e49eec592b612d5eaa482c704111e33c148e8bdee7d48821276ba4135301851609f752b5be4a737073db060bb4348d47e2aacfc3a8da3c6e1cfa4d3bd465922db22f6820a4cf27c3c7b4d98e1df53f09c060bf517d1c04a161b9f39170a2523412d4007aab6393c144ca4380b01ea93721bb347741402c95df15ad417a44339be85f1be34368f1788018e1e7a6f02e3c2057ced7d4193d7915183ff8817bc05924461cdb6c6d9b70780aac82ce1f3f18c1337782a304559378f6e67ce64feeb59309258508fd1a913c2bae077294ddd80edbe2379fbecc086b42863f074302fbf8465c991d789b72d3604e079b85ea74b6eab8a860c7bed47c5fa5bdfd4c8c22cc1ce88abb598d0feda34c229699302ac24947554b8880e68fbb93c66caaaadd7eb659d834467a0a756e95dd0fca8b50e3d236ff34f9a8763891becc47e02b5770da4b01d56ab6371e1e6fd546f71dae033ed832ce6da1e36fae3c0cf3bbbbd6261a94b0cb663058cc3f264aedeef6acc2264486f2b49f73bbded392d0bfca597caa10750d5bdeb0f38e6f3b811ec62a717326e1a330f6414339c91df2778f5adf162dd7771bc30cd2cbcd0c083dd1376d027ad4b6e310e0790c7fa9677bfaeac0dee79677f8301445423be49aa7f8ea83277f42a4b4169308b36860e84ccefb21ea075cd96566dc59da001dc4221a1a13360735b746db5a6150c5ece3525860d3e8d8e48ac7a6ab3f234d5f7beac18e6a47dc6c6bcd56a50cb79d50dbf0c61671cfb98856e1e8b24fd7ae7582a5e96b24485ac013846a1411d94c269108f4606272ba92"}}}}}, &(0x7f0000000140)={0x0, 0x2, [0xcb, 0x58d, 0x851, 0xad5]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 1.12530857s ago: executing program 0 (id=549): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (fail_nth: 10) 1.113405511s ago: executing program 1 (id=550): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r9}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000000), &(0x7f00000005c0)=r11}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) 1.107383931s ago: executing program 0 (id=551): prlimit64(0x0, 0xdfca4525bd501741, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0xc, 0x9]}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3c3982, 0xaf) utimensat(r6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 898.415454ms ago: executing program 1 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000300)=@v3={0x3000000, [{0xd3b, 0x3}, {0x1, 0x40}]}, 0x18, 0x2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xac, 0x0, 0x80}, {0x6, 0x0, 0xff}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r7, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f00000000c0)=ANY=[], 0x10da) 898.084504ms ago: executing program 32 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000300)=@v3={0x3000000, [{0xd3b, 0x3}, {0x1, 0x40}]}, 0x18, 0x2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xac, 0x0, 0x80}, {0x6, 0x0, 0xff}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r7, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f00000000c0)=ANY=[], 0x10da) 897.556524ms ago: executing program 3 (id=554): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x94, 0x84000) ioctl$BLKRRPART(r0, 0x125f, 0x0) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000840)) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000d40)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) socket(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) setregid(0xffffffffffffffff, 0x0) ioctl$FICLONE(r8, 0x40049409, r3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) chown(&(0x7f0000000040)='./file1\x00', r9, r10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba636c008a123467d4ebde947f09e3e18471413aacf4976b500"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x0, 0x11}, {0x9, 0x0, 0x0, 0x2, 0x9, 0x3b6, 0xffd, 0xc}, {0x1, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) 816.418856ms ago: executing program 4 (id=555): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 815.009826ms ago: executing program 4 (id=556): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a0000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000004000c"], 0x28}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x4, 0x2, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x20, 0x7810, 0x4}}) getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000ec0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b40)={0x360, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "12c2cceb41567c12268bf0701d4651a772c69a2445370b5c0822553f9ee000b51f8535f678ee9ec1581bd9cfe61d6b36fecbf889c5b5188aa9299f3f3b39c820190640494fd68c298c6871e9cb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x102, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "de771a9528c8cdee758bbdb7c5d1f8decf61919d10d6d46c373c4b4b2d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "76ff1121bec8e81ec9b6be49800d1fa77deced4388d2c8d762f007c3ff4d631fcf98672b425b7d0229a3cf4fb1044d2ce9a865f8d6563fa7e6a52d84dab21ceb7998d002d924f7e9fec8d688b8517ad24ae74e75f6bc08e3ca03e9d24cbaaa4145fdd721bca3ef4e953ff1c0976450708b96cb1d7a109b10de94776e4540a1ef4e54d461d06654b8c0e754a539aa8f9b806f30bb4311466594"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x99{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42df}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ')(![%*,/%/{\'(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-\xe1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/snapshot\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x360}}, 0x8041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="09000080000000000000000008005b13a4892aa41c1f5076"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaaf}, 0x94) socket$netlink(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) mremap(&(0x7f0000499000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() 769.298687ms ago: executing program 3 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x6}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r3) ioprio_get$pid(0x2, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x6}) (async) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(0x0, r3) (async) ioprio_get$pid(0x2, r3) (async) 769.088707ms ago: executing program 3 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x77b, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r2, 0x0, 0xfff}, 0x18) capset(0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) 751.452637ms ago: executing program 3 (id=559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) 730.875437ms ago: executing program 3 (id=560): r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$eJzs3V9v01YfwPGfS8tT5ZHQo+d5hFBV4FA2qZVKcBIIirjBc07SA44d2Q5qr1BFW1SRwkSZtPaOG7ZJ24vgdi9id7va7d4G2kvY5D8tKW2S0pIGVd9PBOfEPjnnd1LLPzmJbQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGK5ddsuWeIZv7Os+nPrYdAasH4i72/hQDFgXBEr+SfT03IlW3Tl/x9WX07+m5NZkT9FZFamk+fTsvvvy/+5/7/Jib3XDwjoTGzv7D5f7XbXX407kDFpat9EgWk5Ta1MFKhatWrfXmpEqmE8Ha1EsW4pN9ROHIRq3l1QpVqtonRxJej4zbrj6b2F926VbbuqHhbb2gmjwL/9sBi5S8bzjN9M2ySrkzb3kg3xkYlVrJ2WUhub3fXKsCCTRqXjNCoPa1S2y+VSqVwuVe/W7t6z7clDC+yPyKEW499oMV4j2IsDJzOR53/xxIgvHVkWdeTDlbqEEkjrwNIH+7VcmvgnZOHr2w8Gjtub/2ezRbNXPqyekTT/X8ueXeuX//vEenaPbdmRXXkuq9KVrqzLq5P2dH38cznJoylafDESSSBGWuKkS1S+RElNqlIVW57IkjQkEiUNMeKJlkhWJJJYdLpFuRKKFkdiCSQUJfPiyoIoKUlNalIRJVqKsiKBdMSXptTFSXvZkM30fa8MiHG/Uek4jcoDGpH/cXqj2I0DJ/L3Xv4HAAAAAADnlpV++p4c/0/J1bTWMJ62xx0WAAAAAAD4jNJv/meTYiqpXRWL438AAAAAAM4bKz3HzhKRglzPantnQvEhAAAAAAAA50T6/f+1pCgkteticfwPAAAAAMB58+P+1Xf7XWM3av/L+u0vCcMp6017+Stry0naOVsXstdd+LjHuDFjXco7SYvqZP7M1bNWfvXL/Ytgvs+LjWFxWJ8hAPlZbmRtbqxl5dremmyUQsN4uugG3v2SOM6liVgvx9+92Pxe0un/5LcuWbKx2V0vPn3ZXUtjeZP08mYrv4DioesoDojldXq9hfSciyNnPJWeiJGPW8jGtXvnn99yYeITxnwrc1mbuUJWFg7OfzoZs1S8X5LJo2afR1E65czfys2szc35m1lxRBTl4oe/wR95nweiKPdGcaL34hhRVIr9toQ8isopowCAcdkYkoWsw4n/BHu5Q9n94iiy+1uZz9rMz6Q71smZI/bo9rA9un3K7PbroXsg9cuxybi/fJRV3yUveNd33MgrW8lbeOH11rdyeXtn99bm1uqz9WfrL8rlStW+Y9t3yzKVTiMvyD0AgCMMv8fO0BbWnSFH1f/d/0lBUZ7KS+nKmiymZxukvzg4stdCz88QFocctRZ67vCyOOSortBzo5fjt62cwV8CAICzMzckDx8n/y8OOe4+mMsHHx335vIhBt9gEAAA9KXD91Yh/sEKQ9N+UqrVSk68pFUYuI9UaOpNrYwf69BdcvymVu0wiAM38JLKY1PXkYo67XYQxqoRhKodRGY5vfO7ym/9HumW48fGjdqediKt3MCPHTdWdRO5qt35xjPRkg7TF0dt7ZqG+T3/xDvohK4uKhVp3dPQ1LUfm4ZJqr5qh6blhCvqceB1WlrVdeSGph0HWYd7Yxm/EYQtJzaBXxz3mw0AwBdie2f3+Wq3u/5qhJVxzxEAABxElgYAAAAAAAAAAAAAAAAAAAAA4Ms3stP+LuYDjPTMQiojrHzqtjHxBcRM5eSVi3JgyZh3TABG7p8AAAD//xR6Tls=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000f4ff0000000000000000000000180100001af8ff00000000bfa100000000000007010000f8ffffe4b702000008000000b703000000008fd8850000e83f1d244995"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000006c8800000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x4}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001600)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400), 0x40000, &(0x7f0000000d00)={[{@usrquota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x6e, 0x36, 0x6d, 0x6a, 0x31, 0x6b, 0x31]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x34, 0x37, 0x74]}}, {@uid={'uid', 0x3d, r11}}, {@gid={'gid', 0x3d, r12}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x36, 0x39, 0x37, 0x77, 0x2f, 0x38, 0x2c, 0x34]}}}}, {@uid={'uid', 0x3d, r13}}], [{@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'kfree\x00'}}, {@obj_type={'obj_type', 0x3d, 'last\x00'}}]}) 684.883038ms ago: executing program 4 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/141, 0x8d}], 0x1, 0x34, 0x2000163c, 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 465.168892ms ago: executing program 4 (id=562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6ee35a4058be03af, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000500)=0x3b1b) futex(&(0x7f0000000380), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000006000000e27f00000100000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="f66e30895b4afb42d1070eb7281847a1180000000000000000000000030000006d200000040000ff0300000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0xfffbfffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00004000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P \x00\x00', @ANYRES16=r10, @ANYBLOB="8ea72cbd7000fcdbdf25270000000c009900080000003d00000012003400e7ba34783242d6a72bf9c9"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x24004081) 452.389263ms ago: executing program 3 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x16e}}, {{0xa, 0x4e21, 0x9, @private0, 0xfffffffd}}}, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x408e, &(0x7f0000000240), 0xff, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = dup(r7) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000e80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x168, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40800}, 0x4048800) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 172.095818ms ago: executing program 0 (id=564): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) sendto$inet6(r0, &(0x7f0000000100)="0f", 0x1, 0x48000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) (async) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x4) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 26.43645ms ago: executing program 0 (id=565): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 25.80161ms ago: executing program 0 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 0s ago: executing program 0 (id=567): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18451a9aa06d7ca16c00"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000040)={0x8, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ? __alloc_skb+0x223/0x320 [ 49.058232][ T3890] netlink_sendmsg+0x471/0x6b0 [ 49.058321][ T3890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.058430][ T3890] __sock_sendmsg+0x142/0x180 [ 49.058459][ T3890] ____sys_sendmsg+0x31e/0x4e0 [ 49.058485][ T3890] ___sys_sendmsg+0x17b/0x1d0 [ 49.058626][ T3890] __x64_sys_sendmsg+0xd4/0x160 [ 49.058667][ T3890] x64_sys_call+0x191e/0x2ff0 [ 49.058701][ T3890] do_syscall_64+0xd2/0x200 [ 49.058765][ T3890] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.058796][ T3890] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.058873][ T3890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.058893][ T3890] RIP: 0033:0x7fb817d3ebe9 [ 49.058907][ T3890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.058921][ T3890] RSP: 002b:00007fb8167a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.058988][ T3890] RAX: ffffffffffffffda RBX: 00007fb817f75fa0 RCX: 00007fb817d3ebe9 [ 49.059001][ T3890] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 49.059092][ T3890] RBP: 00007fb8167a7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.059103][ T3890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.059190][ T3890] R13: 00007fb817f76038 R14: 00007fb817f75fa0 R15: 00007ffd1b1f6f18 [ 49.059226][ T3890] [ 49.290625][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.309100][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.323972][ T3878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.335006][ T3894] loop0: detected capacity change from 0 to 2048 [ 49.342598][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.351423][ T2102] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.384626][ T3314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 49.404217][ T3314] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 49.418375][ T2102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.459716][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.464002][ T3904] loop0: detected capacity change from 0 to 1024 [ 49.478907][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.490680][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.503825][ T3904] capability: warning: `syz.0.130' uses deprecated v2 capabilities in a way that may be insecure [ 50.361532][ T3925] loop3: detected capacity change from 0 to 8192 [ 50.750872][ T3927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 50.890342][ T3929] loop2: detected capacity change from 0 to 512 [ 50.905285][ T3929] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.913308][ T3929] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.140: bad orphan inode 13 [ 50.969942][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 50.970200][ T3929] ext4_test_bit(bit=12, block=18) = 1 [ 50.984344][ T3929] is_bad_inode(inode)=0 [ 50.988525][ T3929] NEXT_ORPHAN(inode)=2130706432 [ 50.993507][ T3929] max_ino=32 [ 50.993982][ T3932] loop1: detected capacity change from 0 to 2048 [ 50.996724][ T3929] i_nlink=1 [ 51.008927][ T3936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.142'. [ 51.069471][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 51.069490][ T29] audit: type=1400 audit(1757353084.438:781): avc: denied { read } for pid=3934 comm="syz.0.142" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.081676][ T3929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.099266][ T29] audit: type=1400 audit(1757353084.438:782): avc: denied { open } for pid=3934 comm="syz.0.142" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.116535][ T3942] loop0: detected capacity change from 0 to 1024 [ 51.132084][ T29] audit: type=1400 audit(1757353084.438:783): avc: denied { ioctl } for pid=3934 comm="syz.0.142" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 51.138692][ T3929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.188297][ T3942] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.200870][ T3942] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.227057][ T3305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 51.243436][ T3942] JBD2: no valid journal superblock found [ 51.249420][ T3942] EXT4-fs (loop0): Could not load journal inode [ 51.269945][ T3940] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 51.281093][ T3305] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.322124][ T29] audit: type=1400 audit(1757353084.718:784): avc: denied { create } for pid=3948 comm="syz.4.148" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.352005][ T3949] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.352518][ T29] audit: type=1400 audit(1757353084.758:785): avc: denied { mounton } for pid=3948 comm="syz.4.148" path="/21/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.379219][ T3949] FAT-fs (loop9): unable to read boot sector [ 51.384897][ T29] audit: type=1400 audit(1757353084.778:786): avc: denied { create } for pid=3953 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.410604][ T29] audit: type=1400 audit(1757353084.778:787): avc: denied { setopt } for pid=3953 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.507079][ T29] audit: type=1400 audit(1757353084.898:788): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.518233][ T3959] loop3: detected capacity change from 0 to 1024 [ 51.559784][ T29] audit: type=1400 audit(1757353084.958:789): avc: denied { bind } for pid=3953 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.579130][ T29] audit: type=1400 audit(1757353084.958:790): avc: denied { name_bind } for pid=3953 comm="syz.0.149" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.615895][ T3959] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.151: Allocating blocks 449-513 which overlap fs metadata [ 51.662565][ T3957] EXT4-fs (loop3): pa ffff888100614230: logic 48, phys. 177, len 21 [ 51.670706][ T3957] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 51.987544][ T3973] loop4: detected capacity change from 0 to 2048 [ 52.102958][ T3979] support for cryptoloop has been removed. Use dm-crypt instead. [ 52.112449][ T3304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 52.115231][ T3979] loop3: detected capacity change from 0 to 764 [ 52.140206][ T3304] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 52.152790][ T3979] Symlink component flag not implemented [ 52.158773][ T3979] Symlink component flag not implemented [ 52.177168][ T3979] Symlink component flag not implemented (128) [ 52.183458][ T3979] Symlink component flag not implemented (122) [ 52.242412][ T3989] netlink: 'syz.3.154': attribute type 29 has an invalid length. [ 52.302776][ T3996] loop4: detected capacity change from 0 to 512 [ 52.324708][ T3996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.350152][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 52.371027][ T3996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.159: invalid indirect mapped block 4294967295 (level 1) [ 52.386376][ T4003] program syz.2.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.405325][ T3996] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.159: invalid indirect mapped block 4294967295 (level 1) [ 52.407871][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 52.429907][ T3996] EXT4-fs (loop4): 2 truncates cleaned up [ 52.451014][ T3996] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.159: bg 0: block 5: invalid block bitmap [ 52.475234][ T4011] loop2: detected capacity change from 0 to 2048 [ 52.563841][ T3309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 52.624788][ T3309] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 52.641541][ T4022] SELinux: Context  is not valid (left unmapped). [ 53.634594][ T4106] FAULT_INJECTION: forcing a failure. [ 53.634594][ T4106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.648292][ T4106] CPU: 0 UID: 0 PID: 4106 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.648409][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.648426][ T4106] Call Trace: [ 53.648434][ T4106] [ 53.648519][ T4106] __dump_stack+0x1d/0x30 [ 53.648579][ T4106] dump_stack_lvl+0xe8/0x140 [ 53.648600][ T4106] dump_stack+0x15/0x1b [ 53.648615][ T4106] should_fail_ex+0x265/0x280 [ 53.648679][ T4106] should_fail+0xb/0x20 [ 53.648698][ T4106] should_fail_usercopy+0x1a/0x20 [ 53.648724][ T4106] _copy_from_iter+0xd2/0xe80 [ 53.648842][ T4106] ? __build_skb_around+0x1a0/0x200 [ 53.648865][ T4106] ? __alloc_skb+0x223/0x320 [ 53.648957][ T4106] netlink_sendmsg+0x471/0x6b0 [ 53.648990][ T4106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.649022][ T4106] __sock_sendmsg+0x142/0x180 [ 53.649063][ T4106] ____sys_sendmsg+0x31e/0x4e0 [ 53.649124][ T4106] ___sys_sendmsg+0x17b/0x1d0 [ 53.649173][ T4106] __x64_sys_sendmsg+0xd4/0x160 [ 53.649222][ T4106] x64_sys_call+0x191e/0x2ff0 [ 53.649253][ T4106] do_syscall_64+0xd2/0x200 [ 53.649293][ T4106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.649324][ T4106] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.649382][ T4106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.649415][ T4106] RIP: 0033:0x7ffb149aebe9 [ 53.649431][ T4106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.649448][ T4106] RSP: 002b:00007ffb13417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.649466][ T4106] RAX: ffffffffffffffda RBX: 00007ffb14be5fa0 RCX: 00007ffb149aebe9 [ 53.649534][ T4106] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 53.649545][ T4106] RBP: 00007ffb13417090 R08: 0000000000000000 R09: 0000000000000000 [ 53.649556][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.649571][ T4106] R13: 00007ffb14be6038 R14: 00007ffb14be5fa0 R15: 00007ffc525fd8a8 [ 53.649656][ T4106] [ 54.042854][ T4123] loop4: detected capacity change from 0 to 512 [ 54.051566][ T4123] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.058276][ T4123] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.193: bad orphan inode 13 [ 54.070040][ T4123] ext4_test_bit(bit=12, block=18) = 1 [ 54.075880][ T4123] is_bad_inode(inode)=0 [ 54.080193][ T4123] NEXT_ORPHAN(inode)=2130706432 [ 54.085137][ T4123] max_ino=32 [ 54.088576][ T4123] i_nlink=1 [ 54.093337][ T4123] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.193: deleted inode referenced: 12 [ 54.106266][ T4123] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 54.121220][ T4123] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.193: bg 0: block 176: padding at end of block bitmap is not set [ 54.136043][ T4123] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.193: Failed to acquire dquot type 1 [ 54.147795][ T4123] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.276955][ T4137] FAULT_INJECTION: forcing a failure. [ 54.276955][ T4137] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.290337][ T4137] CPU: 0 UID: 0 PID: 4137 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.290374][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.290428][ T4137] Call Trace: [ 54.290479][ T4137] [ 54.290488][ T4137] __dump_stack+0x1d/0x30 [ 54.290517][ T4137] dump_stack_lvl+0xe8/0x140 [ 54.290591][ T4137] dump_stack+0x15/0x1b [ 54.290612][ T4137] should_fail_ex+0x265/0x280 [ 54.290643][ T4137] should_fail_alloc_page+0xf2/0x100 [ 54.290679][ T4137] __alloc_frozen_pages_noprof+0xff/0x360 [ 54.290752][ T4137] alloc_pages_mpol+0xb3/0x250 [ 54.290794][ T4137] vma_alloc_folio_noprof+0x1aa/0x300 [ 54.290838][ T4137] handle_mm_fault+0xec2/0x2c20 [ 54.290952][ T4137] do_user_addr_fault+0x636/0x1090 [ 54.290988][ T4137] ? arch_exit_work+0x30/0x40 [ 54.291011][ T4137] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 54.291053][ T4137] exc_page_fault+0x62/0xa0 [ 54.291092][ T4137] asm_exc_page_fault+0x26/0x30 [ 54.291159][ T4137] RIP: 0033:0x7ffb14870c50 [ 54.291179][ T4137] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 54.291200][ T4137] RSP: 002b:00007ffb134164a0 EFLAGS: 00010206 [ 54.291220][ T4137] RAX: 0000000000085000 RBX: 00007ffb13416540 RCX: 0000000000000003 [ 54.291235][ T4137] RDX: 00000000000033ff RSI: 0000000000000800 RDI: 00007ffb134165e0 [ 54.291298][ T4137] RBP: 0000000000000004 R08: 00007ffb0aff7000 R09: 0000000000000005 [ 54.291312][ T4137] R10: 0000200000000a82 R11: 00000000000009b2 R12: 0000000000000601 [ 54.291365][ T4137] R13: 00007ffb14a4da20 R14: 0000000000000015 R15: 00007ffb134165e0 [ 54.291385][ T4137] [ 54.291399][ T4137] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 54.300227][ C1] hrtimer: interrupt took 37153 ns [ 54.314820][ T4137] loop4: detected capacity change from 0 to 1156 [ 55.171644][ T4162] loop1: detected capacity change from 0 to 1024 [ 55.185324][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.192755][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.225979][ T4167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.237348][ T4165] bridge0: entered allmulticast mode [ 55.247131][ T4162] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.205: Allocating blocks 449-513 which overlap fs metadata [ 55.265207][ T4161] EXT4-fs (loop1): pa ffff888100563850: logic 48, phys. 177, len 21 [ 55.273418][ T4161] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 55.405944][ T4182] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.584046][ T4191] loop3: detected capacity change from 0 to 2048 [ 55.633860][ T4191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.211: bg 0: block 234: padding at end of block bitmap is not set [ 55.648726][ T4191] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 55.661165][ T4191] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.661165][ T4191] [ 55.684859][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.705865][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.401352][ T4202] netlink: 284 bytes leftover after parsing attributes in process `syz.1.217'. [ 56.423078][ T4191] syz.3.211 (4191) used greatest stack depth: 8912 bytes left [ 56.432846][ T4182] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.464795][ T4202] loop1: detected capacity change from 0 to 164 [ 56.480354][ T4202] iso9660: Unknown parameter 'iocharse' [ 56.502381][ T4182] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.519822][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 56.519839][ T29] audit: type=1400 audit(1757353089.928:968): avc: denied { ioctl } for pid=4201 comm="syz.1.217" path="socket:[7683]" dev="sockfs" ino=7683 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.633412][ T4182] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.698075][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.726177][ T4212] loop1: detected capacity change from 0 to 1024 [ 56.737582][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.788801][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.832944][ T4212] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.220: Allocating blocks 449-513 which overlap fs metadata [ 56.853026][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.902317][ T4211] EXT4-fs (loop1): pa ffff8881005638c0: logic 48, phys. 177, len 21 [ 56.910625][ T4211] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 56.931084][ T4219] openvswitch: netlink: Message has 6 unknown bytes. [ 56.959786][ T4219] loop2: detected capacity change from 0 to 164 [ 56.980127][ T4219] process 'syz.2.222' launched '/dev/fd/3' with NULL argv: empty string added [ 56.989184][ T29] audit: type=1400 audit(1757353090.388:969): avc: denied { execute } for pid=4218 comm="syz.2.222" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.027290][ T4219] syz.2.222: attempt to access beyond end of device [ 57.027290][ T4219] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 57.071611][ T29] audit: type=1400 audit(1757353090.428:970): avc: denied { execute_no_trans } for pid=4218 comm="syz.2.222" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.109972][ T4219] syz.2.222: attempt to access beyond end of device [ 57.109972][ T4219] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 57.223983][ T4225] loop2: detected capacity change from 0 to 1024 [ 57.305307][ T4230] FAULT_INJECTION: forcing a failure. [ 57.305307][ T4230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.318725][ T4230] CPU: 0 UID: 0 PID: 4230 Comm: syz.4.227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.318796][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.318808][ T4230] Call Trace: [ 57.318814][ T4230] [ 57.318821][ T4230] __dump_stack+0x1d/0x30 [ 57.318841][ T4230] dump_stack_lvl+0xe8/0x140 [ 57.318858][ T4230] dump_stack+0x15/0x1b [ 57.318894][ T4230] should_fail_ex+0x265/0x280 [ 57.318915][ T4230] should_fail+0xb/0x20 [ 57.318931][ T4230] should_fail_usercopy+0x1a/0x20 [ 57.318953][ T4230] _copy_to_user+0x20/0xa0 [ 57.318980][ T4230] bpf_obj_get_info_by_fd+0x102c/0x1e30 [ 57.319056][ T4230] __sys_bpf+0x508/0x7b0 [ 57.319085][ T4230] __x64_sys_bpf+0x41/0x50 [ 57.319108][ T4230] x64_sys_call+0x2aea/0x2ff0 [ 57.319126][ T4230] do_syscall_64+0xd2/0x200 [ 57.319152][ T4230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.319174][ T4230] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.319248][ T4230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.319268][ T4230] RIP: 0033:0x7ffb149aebe9 [ 57.319281][ T4230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.319296][ T4230] RSP: 002b:00007ffb13417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.319377][ T4230] RAX: ffffffffffffffda RBX: 00007ffb14be5fa0 RCX: 00007ffb149aebe9 [ 57.319432][ T4230] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 000000000000000f [ 57.319453][ T4230] RBP: 00007ffb13417090 R08: 0000000000000000 R09: 0000000000000000 [ 57.319464][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.319474][ T4230] R13: 00007ffb14be6038 R14: 00007ffb14be5fa0 R15: 00007ffc525fd8a8 [ 57.319497][ T4230] [ 57.639292][ T4250] loop1: detected capacity change from 0 to 1024 [ 57.664752][ T4252] loop4: detected capacity change from 0 to 512 [ 57.672556][ T4252] EXT4-fs: Ignoring removed bh option [ 57.682577][ T4252] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.692145][ T4252] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.714445][ T4252] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 57.717012][ T4250] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.234: Allocating blocks 449-513 which overlap fs metadata [ 57.725126][ T4252] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 57.742063][ T4249] EXT4-fs (loop1): pa ffff888100614070: logic 48, phys. 177, len 21 [ 57.754358][ T4249] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 57.769856][ T4252] netlink: 180 bytes leftover after parsing attributes in process `syz.4.235'. [ 57.779568][ T4252] netlink: 180 bytes leftover after parsing attributes in process `syz.4.235'. [ 57.790015][ T29] audit: type=1400 audit(1757353091.198:971): avc: denied { ioctl } for pid=4251 comm="syz.4.235" path="/41/file0/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.814997][ T4252] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.235: bg 0: block 353: padding at end of block bitmap is not set [ 57.845913][ T4257] FAULT_INJECTION: forcing a failure. [ 57.845913][ T4257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.859194][ T4257] CPU: 1 UID: 0 PID: 4257 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.859308][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.859365][ T4257] Call Trace: [ 57.859375][ T4257] [ 57.859384][ T4257] __dump_stack+0x1d/0x30 [ 57.859409][ T4257] dump_stack_lvl+0xe8/0x140 [ 57.859432][ T4257] dump_stack+0x15/0x1b [ 57.859462][ T4257] should_fail_ex+0x265/0x280 [ 57.859484][ T4257] should_fail+0xb/0x20 [ 57.859501][ T4257] should_fail_usercopy+0x1a/0x20 [ 57.859608][ T4257] _copy_to_user+0x20/0xa0 [ 57.859645][ T4257] simple_read_from_buffer+0xb5/0x130 [ 57.859680][ T4257] proc_fail_nth_read+0x10e/0x150 [ 57.859714][ T4257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.859746][ T4257] vfs_read+0x1a5/0x770 [ 57.859772][ T4257] ? __rcu_read_unlock+0x4f/0x70 [ 57.859792][ T4257] ? __fget_files+0x184/0x1c0 [ 57.859822][ T4257] ksys_read+0xda/0x1a0 [ 57.859852][ T4257] __x64_sys_read+0x40/0x50 [ 57.859879][ T4257] x64_sys_call+0x27bc/0x2ff0 [ 57.859902][ T4257] do_syscall_64+0xd2/0x200 [ 57.860016][ T4257] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.860045][ T4257] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.860078][ T4257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.860103][ T4257] RIP: 0033:0x7f6f5fc8d5fc [ 57.860122][ T4257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.860171][ T4257] RSP: 002b:00007f6f5e6ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.860194][ T4257] RAX: ffffffffffffffda RBX: 00007f6f5fec5fa0 RCX: 00007f6f5fc8d5fc [ 57.860217][ T4257] RDX: 000000000000000f RSI: 00007f6f5e6ef0a0 RDI: 0000000000000003 [ 57.860232][ T4257] RBP: 00007f6f5e6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 57.860323][ T4257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.860337][ T4257] R13: 00007f6f5fec6038 R14: 00007f6f5fec5fa0 R15: 00007ffc2e2440e8 [ 57.860359][ T4257] [ 58.122156][ T29] audit: type=1400 audit(1757353091.528:972): avc: denied { create } for pid=4261 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.142032][ T29] audit: type=1400 audit(1757353091.528:973): avc: denied { write } for pid=4261 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.229978][ T4270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 58.240009][ T4270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4270 comm=syz.4.241 [ 58.306618][ T4272] loop3: detected capacity change from 0 to 8192 [ 58.380279][ T4272] loop3: p1 p2 p3 p4 [ 58.386377][ T4272] loop3: p2 start 151000334 is beyond EOD, truncated [ 58.393429][ T4272] loop3: p3 start 331777 is beyond EOD, truncated [ 58.400043][ T4272] loop3: p4 size 263168 extends beyond EOD, truncated [ 58.454181][ T29] audit: type=1326 audit(1757353091.818:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5fc8ebe9 code=0x7ffc0000 [ 58.477705][ T29] audit: type=1326 audit(1757353091.818:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5fc8ebe9 code=0x7ffc0000 [ 58.501227][ T29] audit: type=1326 audit(1757353091.818:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f5fc8ebe9 code=0x7ffc0000 [ 58.524759][ T29] audit: type=1326 audit(1757353091.818:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.1.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5fc8ebe9 code=0x7ffc0000 [ 58.583277][ T4280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 58.603986][ T4281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.662549][ T2994] loop3: p1 p2 p3 p4 [ 58.667449][ T2994] loop3: p2 start 151000334 is beyond EOD, truncated [ 58.674303][ T2994] loop3: p3 start 331777 is beyond EOD, truncated [ 58.680931][ T2994] loop3: p4 size 263168 extends beyond EOD, truncated [ 58.705482][ T4285] loop0: detected capacity change from 0 to 512 [ 58.712947][ T4285] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.738334][ T4288] loop4: detected capacity change from 0 to 1024 [ 58.747538][ T4285] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.770156][ T4291] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 58.786618][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 58.791645][ T4285] EXT4-fs (loop0): 1 truncate cleaned up [ 58.800435][ T3748] udevd[3748]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 58.825554][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 58.837289][ T3748] udevd[3748]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 58.885374][ T4288] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.246: Allocating blocks 449-513 which overlap fs metadata [ 58.908889][ T4285] openvswitch: netlink: Message has 6 unknown bytes. [ 58.915411][ T4287] EXT4-fs (loop4): pa ffff8881005637e0: logic 48, phys. 177, len 21 [ 58.923770][ T4287] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 58.989254][ T4301] netlink: 87 bytes leftover after parsing attributes in process `syz.1.249'. [ 59.082809][ T4317] syz.4.254 uses obsolete (PF_INET,SOCK_PACKET) [ 59.133031][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 59.133736][ T4317] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.175018][ T4324] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 59.188597][ T4324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.198010][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 59.208877][ T4324] bond1 (unregistering): Released all slaves [ 59.235760][ T4327] random: crng reseeded on system resumption [ 59.316697][ T4332] loop4: detected capacity change from 0 to 512 [ 59.323707][ T4332] EXT4-fs: Ignoring removed nobh option [ 59.345535][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.259: corrupted inode contents [ 59.358713][ T4332] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.259: mark_inode_dirty error [ 59.371921][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.259: corrupted inode contents [ 59.384247][ T4332] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.259: mark_inode_dirty error [ 59.396983][ T4332] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.259: Failed to acquire dquot type 0 [ 59.409131][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.259: corrupted inode contents [ 59.422349][ T4332] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.259: mark_inode_dirty error [ 59.436789][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.259: corrupted inode contents [ 59.448999][ T4332] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.259: mark_inode_dirty error [ 59.462929][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.259: corrupted inode contents [ 59.475120][ T4332] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.484129][ T4332] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.259: corrupted inode contents [ 59.503039][ T4332] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.259: mark_inode_dirty error [ 59.516042][ T4332] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.525693][ T4332] EXT4-fs (loop4): 1 truncate cleaned up [ 59.532054][ T4332] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.651163][ T4345] loop0: detected capacity change from 0 to 512 [ 59.658098][ T4345] EXT4-fs: Ignoring removed orlov option [ 59.702925][ T4345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.795220][ T4345] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 59.960733][ T4345] EXT4-fs (loop0): 1 orphan inode deleted [ 60.878296][ T4366] loop4: detected capacity change from 0 to 128 [ 60.890289][ T4366] FAT-fs (loop4): Directory bread(block 32) failed [ 60.896972][ T4366] FAT-fs (loop4): Directory bread(block 33) failed [ 60.903736][ T4366] FAT-fs (loop4): Directory bread(block 34) failed [ 60.910757][ T4366] FAT-fs (loop4): Directory bread(block 35) failed [ 60.917408][ T4366] FAT-fs (loop4): Directory bread(block 36) failed [ 60.924150][ T4366] FAT-fs (loop4): Directory bread(block 37) failed [ 60.930808][ T4366] FAT-fs (loop4): Directory bread(block 38) failed [ 60.937434][ T4366] FAT-fs (loop4): Directory bread(block 39) failed [ 60.944079][ T4366] FAT-fs (loop4): Directory bread(block 40) failed [ 60.950721][ T4366] FAT-fs (loop4): Directory bread(block 41) failed [ 60.972008][ T4366] syz.4.271: attempt to access beyond end of device [ 60.972008][ T4366] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 60.985425][ T4366] Buffer I/O error on dev loop4, logical block 1028, async page read [ 60.993870][ T4366] syz.4.271: attempt to access beyond end of device [ 60.993870][ T4366] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 61.007294][ T4366] Buffer I/O error on dev loop4, logical block 41991, async page read [ 61.015645][ T4366] FAT-fs (loop4): Filesystem has been set read-only [ 61.022333][ T4366] syz.4.271: attempt to access beyond end of device [ 61.022333][ T4366] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 61.035589][ T4366] Buffer I/O error on dev loop4, logical block 1028, async page read [ 61.044434][ T4366] syz.4.271: attempt to access beyond end of device [ 61.044434][ T4366] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 61.058003][ T4366] Buffer I/O error on dev loop4, logical block 41991, async page read [ 61.070970][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 61.080109][ T4372] openvswitch: netlink: Message has 6 unknown bytes. [ 61.086409][ T4370] hsr0: entered promiscuous mode [ 61.094654][ T4375] netlink: 'syz.2.275': attribute type 39 has an invalid length. [ 61.102778][ T4370] macsec1: entered promiscuous mode [ 61.108161][ T4370] macsec1: entered allmulticast mode [ 61.111608][ T4377] FAULT_INJECTION: forcing a failure. [ 61.111608][ T4377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.113769][ T4370] hsr0: entered allmulticast mode [ 61.126899][ T4377] CPU: 1 UID: 0 PID: 4377 Comm: syz.4.274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.126974][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.126991][ T4377] Call Trace: [ 61.126999][ T4377] [ 61.127008][ T4377] __dump_stack+0x1d/0x30 [ 61.127037][ T4377] dump_stack_lvl+0xe8/0x140 [ 61.127117][ T4377] dump_stack+0x15/0x1b [ 61.127139][ T4377] should_fail_ex+0x265/0x280 [ 61.127173][ T4377] should_fail+0xb/0x20 [ 61.127224][ T4377] should_fail_usercopy+0x1a/0x20 [ 61.127258][ T4377] _copy_from_iter+0xd2/0xe80 [ 61.127295][ T4377] ? __build_skb_around+0x1a0/0x200 [ 61.127325][ T4377] ? __alloc_skb+0x223/0x320 [ 61.127403][ T4377] netlink_sendmsg+0x471/0x6b0 [ 61.127441][ T4377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.127476][ T4377] __sock_sendmsg+0x142/0x180 [ 61.127525][ T4377] ____sys_sendmsg+0x31e/0x4e0 [ 61.127561][ T4377] ___sys_sendmsg+0x17b/0x1d0 [ 61.127612][ T4377] __x64_sys_sendmsg+0xd4/0x160 [ 61.127678][ T4377] x64_sys_call+0x191e/0x2ff0 [ 61.127707][ T4377] do_syscall_64+0xd2/0x200 [ 61.127782][ T4377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.127814][ T4377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.127853][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.127883][ T4377] RIP: 0033:0x7ffb149aebe9 [ 61.127911][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.127934][ T4377] RSP: 002b:00007ffb13417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.128036][ T4377] RAX: ffffffffffffffda RBX: 00007ffb14be5fa0 RCX: 00007ffb149aebe9 [ 61.128053][ T4377] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 61.128069][ T4377] RBP: 00007ffb13417090 R08: 0000000000000000 R09: 0000000000000000 [ 61.128085][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.128102][ T4377] R13: 00007ffb14be6038 R14: 00007ffb14be5fa0 R15: 00007ffc525fd8a8 [ 61.128176][ T4377] [ 61.269317][ T4382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=4382 comm=syz.4.276 [ 61.284219][ T4370] hsr_slave_0: entered allmulticast mode [ 61.284253][ T4370] hsr_slave_1: entered allmulticast mode [ 61.361103][ T4370] hsr0: left allmulticast mode [ 61.366193][ T4370] hsr_slave_0: left allmulticast mode [ 61.371759][ T4370] hsr_slave_1: left allmulticast mode [ 61.455742][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 61.476759][ T4397] netlink: 272 bytes leftover after parsing attributes in process `syz.4.283'. [ 61.553094][ T4400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4400 comm=syz.4.283 [ 61.648652][ T4408] loop3: detected capacity change from 0 to 128 [ 61.656782][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 61.656796][ T29] audit: type=1400 audit(1757353095.068:1365): avc: denied { mount } for pid=4407 comm="syz.3.287" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.668180][ T4408] syz.3.287: attempt to access beyond end of device [ 61.668180][ T4408] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.699009][ T4408] syz.3.287: attempt to access beyond end of device [ 61.699009][ T4408] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.713579][ T4408] syz.3.287: attempt to access beyond end of device [ 61.713579][ T4408] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 61.727535][ T4408] syz.3.287: attempt to access beyond end of device [ 61.727535][ T4408] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 61.772131][ T29] audit: type=1400 audit(1757353095.178:1366): avc: denied { read } for pid=4407 comm="syz.3.287" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 61.800216][ T29] audit: type=1400 audit(1757353095.198:1367): avc: denied { ioctl } for pid=4407 comm="syz.3.287" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.329647][ T29] audit: type=1326 audit(1757353095.728:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.460655][ T29] audit: type=1326 audit(1757353095.758:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.484424][ T29] audit: type=1326 audit(1757353095.758:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.508046][ T29] audit: type=1326 audit(1757353095.758:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.531670][ T29] audit: type=1326 audit(1757353095.758:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.555279][ T29] audit: type=1326 audit(1757353095.758:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.578950][ T29] audit: type=1326 audit(1757353095.758:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb817d3ebe9 code=0x7ffc0000 [ 62.603398][ T4426] FAULT_INJECTION: forcing a failure. [ 62.603398][ T4426] name failslab, interval 1, probability 0, space 0, times 0 [ 62.616172][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: syz.4.293 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.616203][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.616218][ T4426] Call Trace: [ 62.616227][ T4426] [ 62.616236][ T4426] __dump_stack+0x1d/0x30 [ 62.616260][ T4426] dump_stack_lvl+0xe8/0x140 [ 62.616408][ T4426] dump_stack+0x15/0x1b [ 62.616425][ T4426] should_fail_ex+0x265/0x280 [ 62.616453][ T4426] should_failslab+0x8c/0xb0 [ 62.616494][ T4426] kmem_cache_alloc_node_noprof+0x57/0x320 [ 62.616530][ T4426] ? __alloc_skb+0x101/0x320 [ 62.616557][ T4426] __alloc_skb+0x101/0x320 [ 62.616646][ T4426] alloc_skb_with_frags+0x7d/0x470 [ 62.616676][ T4426] ? selinux_file_open+0x2df/0x330 [ 62.616764][ T4426] ? should_fail_ex+0xdb/0x280 [ 62.616790][ T4426] sock_alloc_send_pskb+0x43a/0x4f0 [ 62.616829][ T4426] tun_get_user+0x9b3/0x2680 [ 62.616877][ T4426] ? ref_tracker_alloc+0x1f2/0x2f0 [ 62.616909][ T4426] ? selinux_file_permission+0x1e4/0x320 [ 62.616933][ T4426] tun_chr_write_iter+0x15e/0x210 [ 62.617039][ T4426] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 62.617089][ T4426] vfs_write+0x527/0x960 [ 62.617153][ T4426] ksys_write+0xda/0x1a0 [ 62.617175][ T4426] __x64_sys_write+0x40/0x50 [ 62.617211][ T4426] x64_sys_call+0x27fe/0x2ff0 [ 62.617251][ T4426] do_syscall_64+0xd2/0x200 [ 62.617288][ T4426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.617316][ T4426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.617402][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.617485][ T4426] RIP: 0033:0x7ffb149aebe9 [ 62.617520][ T4426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.617540][ T4426] RSP: 002b:00007ffb133f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.617598][ T4426] RAX: ffffffffffffffda RBX: 00007ffb14be6090 RCX: 00007ffb149aebe9 [ 62.617610][ T4426] RDX: 0000000000000fce RSI: 0000200000000840 RDI: 0000000000000003 [ 62.617622][ T4426] RBP: 00007ffb133f6090 R08: 0000000000000000 R09: 0000000000000000 [ 62.617713][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.617763][ T4426] R13: 00007ffb14be6128 R14: 00007ffb14be6090 R15: 00007ffc525fd8a8 [ 62.617785][ T4426] [ 62.623999][ T4424] 9pnet_virtio: no channels available for device syz [ 62.886706][ T4425] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.930575][ T4436] openvswitch: netlink: Message has 6 unknown bytes. [ 63.057423][ T4425] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.149730][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 63.158928][ T4443] netem: change failed [ 63.180763][ T4425] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.262350][ T4425] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.362348][ T2102] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.391554][ T2102] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.406093][ T4425] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.456611][ T4425] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.585529][ T4456] loop1: detected capacity change from 0 to 512 [ 63.603071][ T4456] EXT4-fs: Ignoring removed nobh option [ 64.171307][ T4470] FAULT_INJECTION: forcing a failure. [ 64.171307][ T4470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.184711][ T4470] CPU: 0 UID: 0 PID: 4470 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.184747][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.184762][ T4470] Call Trace: [ 64.184770][ T4470] [ 64.184778][ T4470] __dump_stack+0x1d/0x30 [ 64.184801][ T4470] dump_stack_lvl+0xe8/0x140 [ 64.184864][ T4470] dump_stack+0x15/0x1b [ 64.184892][ T4470] should_fail_ex+0x265/0x280 [ 64.184925][ T4470] should_fail+0xb/0x20 [ 64.184954][ T4470] should_fail_usercopy+0x1a/0x20 [ 64.185057][ T4470] _copy_from_user+0x1c/0xb0 [ 64.185097][ T4470] addrconf_set_dstaddr+0x48/0x1e0 [ 64.185145][ T4470] inet6_ioctl+0xc5/0x190 [ 64.185205][ T4470] ? ioctl_has_perm+0x257/0x2a0 [ 64.185238][ T4470] sock_do_ioctl+0x70/0x220 [ 64.185276][ T4470] sock_ioctl+0x41b/0x610 [ 64.185323][ T4470] ? __pfx_sock_ioctl+0x10/0x10 [ 64.185363][ T4470] __se_sys_ioctl+0xcb/0x140 [ 64.185411][ T4470] __x64_sys_ioctl+0x43/0x50 [ 64.185434][ T4470] x64_sys_call+0x1816/0x2ff0 [ 64.185525][ T4470] do_syscall_64+0xd2/0x200 [ 64.185558][ T4470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.185625][ T4470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.185722][ T4470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.185749][ T4470] RIP: 0033:0x7f1137e9ebe9 [ 64.185768][ T4470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.185787][ T4470] RSP: 002b:00007f11368ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.185809][ T4470] RAX: ffffffffffffffda RBX: 00007f11380d5fa0 RCX: 00007f1137e9ebe9 [ 64.185826][ T4470] RDX: 0000200000000080 RSI: 0000000000008918 RDI: 0000000000000003 [ 64.185862][ T4470] RBP: 00007f11368ff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.185875][ T4470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.185888][ T4470] R13: 00007f11380d6038 R14: 00007f11380d5fa0 R15: 00007ffd17d16638 [ 64.185907][ T4470] [ 64.422685][ T4475] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 64.533188][ T4491] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 64.541004][ T4491] netlink: 224 bytes leftover after parsing attributes in process `syz.3.311'. [ 64.792850][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 64.827498][ T4504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.322'. [ 64.841488][ T4502] loop3: detected capacity change from 0 to 8192 [ 64.843124][ T4504] loop2: detected capacity change from 0 to 1024 [ 64.855963][ T4504] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.863284][ T4504] ext4: Unknown parameter 'obj_user' [ 65.065173][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 65.078276][ T4510] team0: entered promiscuous mode [ 65.083573][ T4510] team0: entered allmulticast mode [ 65.260031][ T4520] FAULT_INJECTION: forcing a failure. [ 65.260031][ T4520] name failslab, interval 1, probability 0, space 0, times 0 [ 65.272919][ T4520] CPU: 1 UID: 0 PID: 4520 Comm: syz.3.327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.272963][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.272974][ T4520] Call Trace: [ 65.272980][ T4520] [ 65.272987][ T4520] __dump_stack+0x1d/0x30 [ 65.273006][ T4520] dump_stack_lvl+0xe8/0x140 [ 65.273023][ T4520] dump_stack+0x15/0x1b [ 65.273071][ T4520] should_fail_ex+0x265/0x280 [ 65.273178][ T4520] should_failslab+0x8c/0xb0 [ 65.273201][ T4520] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 65.273229][ T4520] ? sidtab_sid2str_get+0xa0/0x130 [ 65.273254][ T4520] kmemdup_noprof+0x2b/0x70 [ 65.273364][ T4520] sidtab_sid2str_get+0xa0/0x130 [ 65.273384][ T4520] security_sid_to_context_core+0x1eb/0x2e0 [ 65.273404][ T4520] security_sid_to_context+0x27/0x40 [ 65.273422][ T4520] selinux_lsmprop_to_secctx+0x67/0xf0 [ 65.273442][ T4520] security_lsmprop_to_secctx+0x43/0x80 [ 65.273575][ T4520] audit_log_task_context+0x77/0x190 [ 65.273642][ T4520] audit_log_task+0xf4/0x250 [ 65.273744][ T4520] audit_seccomp+0x61/0x100 [ 65.273767][ T4520] ? __seccomp_filter+0x68c/0x10d0 [ 65.273789][ T4520] __seccomp_filter+0x69d/0x10d0 [ 65.273808][ T4520] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.273851][ T4520] ? vfs_write+0x7e8/0x960 [ 65.273870][ T4520] ? __rcu_read_unlock+0x4f/0x70 [ 65.273889][ T4520] ? __fget_files+0x184/0x1c0 [ 65.273993][ T4520] __secure_computing+0x82/0x150 [ 65.274011][ T4520] syscall_trace_enter+0xcf/0x1e0 [ 65.274110][ T4520] do_syscall_64+0xac/0x200 [ 65.274137][ T4520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.274157][ T4520] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.274209][ T4520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.274228][ T4520] RIP: 0033:0x7f1c9c7bd5fc [ 65.274241][ T4520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.274256][ T4520] RSP: 002b:00007f1c9b21f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.274273][ T4520] RAX: ffffffffffffffda RBX: 00007f1c9c9f5fa0 RCX: 00007f1c9c7bd5fc [ 65.274284][ T4520] RDX: 000000000000000f RSI: 00007f1c9b21f0a0 RDI: 0000000000000006 [ 65.274320][ T4520] RBP: 00007f1c9b21f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.274330][ T4520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.274345][ T4520] R13: 00007f1c9c9f6038 R14: 00007f1c9c9f5fa0 R15: 00007fff580982b8 [ 65.274369][ T4520] [ 65.556907][ T4524] netlink: '+}[@': attribute type 3 has an invalid length. [ 65.607408][ T4530] FAULT_INJECTION: forcing a failure. [ 65.607408][ T4530] name failslab, interval 1, probability 0, space 0, times 0 [ 65.620418][ T4530] CPU: 1 UID: 0 PID: 4530 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.620449][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.620466][ T4530] Call Trace: [ 65.620479][ T4530] [ 65.620485][ T4530] __dump_stack+0x1d/0x30 [ 65.620507][ T4530] dump_stack_lvl+0xe8/0x140 [ 65.620531][ T4530] dump_stack+0x15/0x1b [ 65.620552][ T4530] should_fail_ex+0x265/0x280 [ 65.620607][ T4530] should_failslab+0x8c/0xb0 [ 65.620635][ T4530] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 65.620686][ T4530] ? sidtab_sid2str_get+0xa0/0x130 [ 65.620708][ T4530] kmemdup_noprof+0x2b/0x70 [ 65.620733][ T4530] sidtab_sid2str_get+0xa0/0x130 [ 65.620779][ T4530] security_sid_to_context_core+0x1eb/0x2e0 [ 65.620864][ T4530] security_sid_to_context+0x27/0x40 [ 65.620884][ T4530] avc_audit_post_callback+0x10f/0x520 [ 65.620961][ T4530] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.620993][ T4530] common_lsm_audit+0x1b8/0x230 [ 65.621087][ T4530] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 65.621119][ T4530] ? avc_denied+0xe4/0x100 [ 65.621142][ T4530] slow_avc_audit+0x104/0x140 [ 65.621229][ T4530] avc_has_perm+0x13a/0x180 [ 65.621307][ T4530] selinux_socket_sendmsg+0x175/0x1b0 [ 65.621339][ T4530] security_socket_sendmsg+0x48/0x80 [ 65.621374][ T4530] __sock_sendmsg+0x30/0x180 [ 65.621482][ T4530] __sys_sendto+0x268/0x330 [ 65.621519][ T4530] __x64_sys_sendto+0x76/0x90 [ 65.621577][ T4530] x64_sys_call+0x2d05/0x2ff0 [ 65.621603][ T4530] do_syscall_64+0xd2/0x200 [ 65.621640][ T4530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.621673][ T4530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.621779][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.621809][ T4530] RIP: 0033:0x7f6f5fc8ebe9 [ 65.621851][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.621875][ T4530] RSP: 002b:00007f6f5e6ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 65.621902][ T4530] RAX: ffffffffffffffda RBX: 00007f6f5fec5fa0 RCX: 00007f6f5fc8ebe9 [ 65.621917][ T4530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 65.621977][ T4530] RBP: 00007f6f5e6ef090 R08: 00002000000002c0 R09: 0000000000000014 [ 65.622058][ T4530] R10: 000000000004c001 R11: 0000000000000246 R12: 0000000000000001 [ 65.622075][ T4530] R13: 00007f6f5fec6038 R14: 00007f6f5fec5fa0 R15: 00007ffc2e2440e8 [ 65.622101][ T4530] [ 65.735200][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 65.895160][ T4537] IPVS: Error joining to the multicast group [ 65.926011][ T4540] loop1: detected capacity change from 0 to 1024 [ 65.934417][ T4540] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.945536][ T4540] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.959350][ T4540] JBD2: no valid journal superblock found [ 65.965317][ T4540] EXT4-fs (loop1): Could not load journal inode [ 65.992127][ T4540] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 66.017399][ T4544] loop2: detected capacity change from 0 to 2048 [ 66.092158][ T4553] EXT4-fs (loop2): shut down requested (0) [ 66.417671][ T4555] macvtap0: refused to change device tx_queue_len [ 66.475534][ T4559] netlink: 'syz.3.343': attribute type 6 has an invalid length. [ 66.585020][ T4569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.345'. [ 66.594316][ T10] IPVS: starting estimator thread 0... [ 66.600245][ T4569] loop3: detected capacity change from 0 to 512 [ 66.611430][ T4569] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.673890][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 66.673910][ T29] audit: type=1400 audit(1757353100.078:1529): avc: denied { execmem } for pid=4576 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.705629][ T4570] IPVS: using max 2352 ests per chain, 117600 per kthread [ 66.897194][ T4582] ip6gretap0: entered promiscuous mode [ 66.906312][ T4582] ip6gretap0: left promiscuous mode [ 66.917518][ T4585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.348'. [ 66.925450][ T29] audit: type=1400 audit(1757353100.328:1530): avc: denied { setopt } for pid=4583 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.964166][ T29] audit: type=1400 audit(1757353100.328:1531): avc: denied { execute } for pid=4579 comm="syz.2.348" name="bus" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.988723][ T4585] netlink: 96 bytes leftover after parsing attributes in process `syz.2.348'. [ 66.999547][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 67.008703][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 67.020545][ T29] audit: type=1400 audit(1757353100.428:1532): avc: denied { create } for pid=4579 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.043792][ T29] audit: type=1326 audit(1757353100.458:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb149aebe9 code=0x7ffc0000 [ 67.067670][ T29] audit: type=1326 audit(1757353100.458:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb149aebe9 code=0x7ffc0000 [ 67.108055][ T29] audit: type=1400 audit(1757353100.458:1535): avc: denied { read } for pid=4579 comm="syz.2.348" path="socket:[8920]" dev="sockfs" ino=8920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.131214][ T29] audit: type=1326 audit(1757353100.508:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb149aebe9 code=0x7ffc0000 [ 67.155155][ T29] audit: type=1326 audit(1757353100.508:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb149aebe9 code=0x7ffc0000 [ 67.178795][ T29] audit: type=1326 audit(1757353100.508:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb149aebe9 code=0x7ffc0000 [ 67.203123][ T4587] loop1: detected capacity change from 0 to 2048 [ 67.244360][ T4587] loop1: p4 < > [ 67.311890][ T4598] loop4: detected capacity change from 0 to 128 [ 67.332120][ T4598] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.475653][ T4610] FAULT_INJECTION: forcing a failure. [ 67.475653][ T4610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.489072][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.4.357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.489176][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.489191][ T4610] Call Trace: [ 67.489199][ T4610] [ 67.489208][ T4610] __dump_stack+0x1d/0x30 [ 67.489235][ T4610] dump_stack_lvl+0xe8/0x140 [ 67.489261][ T4610] dump_stack+0x15/0x1b [ 67.489298][ T4610] should_fail_ex+0x265/0x280 [ 67.489320][ T4610] should_fail_alloc_page+0xf2/0x100 [ 67.489354][ T4610] __alloc_frozen_pages_noprof+0xff/0x360 [ 67.489535][ T4610] alloc_pages_mpol+0xb3/0x250 [ 67.489653][ T4610] alloc_pages_noprof+0x90/0x130 [ 67.489692][ T4610] pte_alloc_one+0x2d/0x120 [ 67.489773][ T4610] __pte_alloc+0x32/0x2b0 [ 67.489869][ T4610] handle_mm_fault+0x1c55/0x2c20 [ 67.489950][ T4610] do_user_addr_fault+0x636/0x1090 [ 67.489991][ T4610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.490017][ T4610] exc_page_fault+0x62/0xa0 [ 67.490047][ T4610] asm_exc_page_fault+0x26/0x30 [ 67.490098][ T4610] RIP: 0033:0x7ffb14870c46 [ 67.490166][ T4610] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 67.490183][ T4610] RSP: 002b:00007ffb134164a0 EFLAGS: 00010246 [ 67.490248][ T4610] RAX: 0000000000000001 RBX: 00007ffb13416540 RCX: 0000000000000101 [ 67.490260][ T4610] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007ffb134165e0 [ 67.490272][ T4610] RBP: 0000000000000102 R08: 00007ffb0aff7000 R09: 0000000000000000 [ 67.490286][ T4610] R10: 0000000000000000 R11: 00007ffb13416550 R12: 0000000000000001 [ 67.490301][ T4610] R13: 00007ffb14a4da20 R14: 0000000000000000 R15: 00007ffb134165e0 [ 67.490385][ T4610] [ 67.664011][ T4610] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 67.735770][ T4610] loop4: detected capacity change from 0 to 512 [ 67.752691][ T4610] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.772741][ T4610] EXT4-fs (loop4): mount failed [ 67.789418][ T4619] program syz.2.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.825641][ T4627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.843406][ T4630] mmap: syz.2.364 (4630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.953131][ T4633] loop1: detected capacity change from 0 to 1024 [ 67.980532][ T4633] EXT4-fs: Ignoring removed bh option [ 68.278177][ T4646] veth0_vlan: entered allmulticast mode [ 68.299557][ T4646] veth0_vlan: left promiscuous mode [ 68.307508][ T4646] veth0_vlan: entered promiscuous mode [ 68.784743][ T4663] netlink: 76 bytes leftover after parsing attributes in process `syz.0.378'. [ 68.812758][ T4663] loop0: detected capacity change from 0 to 512 [ 68.831328][ T4663] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.852446][ T4663] EXT4-fs (loop0): 1 orphan inode deleted [ 68.858237][ T4663] EXT4-fs (loop0): 1 truncate cleaned up [ 68.917216][ T4680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.384'. [ 69.047648][ T4687] FAULT_INJECTION: forcing a failure. [ 69.047648][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 69.060529][ T4687] CPU: 0 UID: 0 PID: 4687 Comm: syz.2.387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.060556][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.060569][ T4687] Call Trace: [ 69.060575][ T4687] [ 69.060584][ T4687] __dump_stack+0x1d/0x30 [ 69.060606][ T4687] dump_stack_lvl+0xe8/0x140 [ 69.060625][ T4687] dump_stack+0x15/0x1b [ 69.060645][ T4687] should_fail_ex+0x265/0x280 [ 69.060673][ T4687] should_failslab+0x8c/0xb0 [ 69.060722][ T4687] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.060799][ T4687] ? __alloc_skb+0x101/0x320 [ 69.060858][ T4675] loop1: detected capacity change from 0 to 65536 [ 69.060880][ T4687] __alloc_skb+0x101/0x320 [ 69.060904][ T4687] ? ip_generic_getfrag+0x135/0x1b0 [ 69.060946][ T4687] __ip_append_data+0x1935/0x2440 [ 69.061022][ T4687] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.061076][ T4687] ip_append_data+0xd6/0x130 [ 69.061119][ T4687] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.061213][ T4687] udp_sendmsg+0x36e/0x13c0 [ 69.061262][ T4687] ? mntput+0x4b/0x80 [ 69.061303][ T4687] ? __rcu_read_unlock+0x4f/0x70 [ 69.061386][ T4687] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.061443][ T4687] ? avc_has_perm+0xf7/0x180 [ 69.061535][ T4687] ? __pfx_udp_sendmsg+0x10/0x10 [ 69.061573][ T4687] inet_sendmsg+0xac/0xd0 [ 69.061662][ T4687] __sock_sendmsg+0x102/0x180 [ 69.061706][ T4687] __sys_sendto+0x268/0x330 [ 69.061750][ T4687] __x64_sys_sendto+0x76/0x90 [ 69.061783][ T4687] x64_sys_call+0x2d05/0x2ff0 [ 69.061842][ T4687] do_syscall_64+0xd2/0x200 [ 69.061883][ T4687] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.061917][ T4687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.061991][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.062093][ T4687] RIP: 0033:0x7f1137e9ebe9 [ 69.062113][ T4687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.062137][ T4687] RSP: 002b:00007f11368ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.062163][ T4687] RAX: ffffffffffffffda RBX: 00007f11380d5fa0 RCX: 00007f1137e9ebe9 [ 69.062244][ T4687] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000003 [ 69.062269][ T4687] RBP: 00007f11368ff090 R08: 0000000000000000 R09: 0000000000000000 [ 69.062286][ T4687] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.062301][ T4687] R13: 00007f11380d6038 R14: 00007f11380d5fa0 R15: 00007ffd17d16638 [ 69.062327][ T4687] [ 69.310441][ T4689] netlink: 96 bytes leftover after parsing attributes in process `syz.2.388'. [ 69.445437][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 69.542665][ T4710] FAULT_INJECTION: forcing a failure. [ 69.542665][ T4710] name failslab, interval 1, probability 0, space 0, times 0 [ 69.555489][ T4710] CPU: 1 UID: 0 PID: 4710 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.555517][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.555529][ T4710] Call Trace: [ 69.555534][ T4710] [ 69.555543][ T4710] __dump_stack+0x1d/0x30 [ 69.555568][ T4710] dump_stack_lvl+0xe8/0x140 [ 69.555645][ T4710] dump_stack+0x15/0x1b [ 69.555666][ T4710] should_fail_ex+0x265/0x280 [ 69.555696][ T4710] should_failslab+0x8c/0xb0 [ 69.555728][ T4710] __kvmalloc_node_noprof+0x123/0x4e0 [ 69.555773][ T4710] ? alloc_netdev_mqs+0x553/0xa30 [ 69.555867][ T4710] alloc_netdev_mqs+0x553/0xa30 [ 69.555903][ T4710] rtnl_create_link+0x239/0x710 [ 69.555937][ T4710] rtnl_newlink_create+0x14c/0x620 [ 69.556089][ T4710] ? security_capable+0x83/0x90 [ 69.556122][ T4710] ? netlink_ns_capable+0x86/0xa0 [ 69.556158][ T4710] rtnl_newlink+0xf29/0x12d0 [ 69.556206][ T4710] ? xas_load+0x413/0x430 [ 69.556236][ T4710] ? __memcg_slab_free_hook+0x135/0x230 [ 69.556329][ T4710] ? __rcu_read_unlock+0x4f/0x70 [ 69.556396][ T4710] ? avc_has_perm_noaudit+0x1b1/0x200 [ 69.556425][ T4710] ? cred_has_capability+0x210/0x280 [ 69.556552][ T4710] ? selinux_capable+0x31/0x40 [ 69.556643][ T4710] ? security_capable+0x83/0x90 [ 69.556672][ T4710] ? ns_capable+0x7d/0xb0 [ 69.556698][ T4710] ? __pfx_rtnl_newlink+0x10/0x10 [ 69.556775][ T4710] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 69.556871][ T4710] netlink_rcv_skb+0x123/0x220 [ 69.556893][ T4710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.556978][ T4710] rtnetlink_rcv+0x1c/0x30 [ 69.557013][ T4710] netlink_unicast+0x5bd/0x690 [ 69.557043][ T4710] netlink_sendmsg+0x58b/0x6b0 [ 69.557077][ T4710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.557109][ T4710] __sock_sendmsg+0x142/0x180 [ 69.557140][ T4710] ____sys_sendmsg+0x31e/0x4e0 [ 69.557229][ T4710] ___sys_sendmsg+0x17b/0x1d0 [ 69.557266][ T4710] __x64_sys_sendmsg+0xd4/0x160 [ 69.557302][ T4710] x64_sys_call+0x191e/0x2ff0 [ 69.557407][ T4710] do_syscall_64+0xd2/0x200 [ 69.557437][ T4710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.557462][ T4710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.557499][ T4710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.557548][ T4710] RIP: 0033:0x7fb817d3ebe9 [ 69.557563][ T4710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.557580][ T4710] RSP: 002b:00007fb8167a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.557686][ T4710] RAX: ffffffffffffffda RBX: 00007fb817f75fa0 RCX: 00007fb817d3ebe9 [ 69.557699][ T4710] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000003 [ 69.557710][ T4710] RBP: 00007fb8167a7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.557743][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.557758][ T4710] R13: 00007fb817f76038 R14: 00007fb817f75fa0 R15: 00007ffd1b1f6f18 [ 69.557782][ T4710] [ 69.874187][ T4713] loop0: detected capacity change from 0 to 512 [ 69.882765][ T4713] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.894468][ T4713] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 69.904756][ T4713] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.398: Corrupt directory, running e2fsck is recommended [ 69.918229][ T4713] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 69.927256][ T4713] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.398: corrupted in-inode xattr: invalid ea_ino [ 69.942587][ T4713] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.398: couldn't read orphan inode 15 (err -117) [ 69.957109][ T4713] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.963705][ T4716] FAULT_INJECTION: forcing a failure. [ 69.963705][ T4716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.968768][ T4713] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 69.981886][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.4.399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.981919][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 69.981935][ T4716] Call Trace: [ 69.981965][ T4716] [ 69.981976][ T4716] __dump_stack+0x1d/0x30 [ 69.982007][ T4716] dump_stack_lvl+0xe8/0x140 [ 69.982034][ T4716] dump_stack+0x15/0x1b [ 69.982136][ T4716] should_fail_ex+0x265/0x280 [ 69.982170][ T4716] should_fail+0xb/0x20 [ 69.982227][ T4716] should_fail_usercopy+0x1a/0x20 [ 69.982259][ T4716] _copy_from_iter+0xd2/0xe80 [ 69.982297][ T4716] ? __build_skb_around+0x1a0/0x200 [ 69.982328][ T4716] ? __alloc_skb+0x223/0x320 [ 69.982404][ T4716] netlink_sendmsg+0x471/0x6b0 [ 69.982454][ T4716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.982498][ T4716] __sock_sendmsg+0x142/0x180 [ 69.982541][ T4716] ____sys_sendmsg+0x31e/0x4e0 [ 69.982624][ T4716] ___sys_sendmsg+0x17b/0x1d0 [ 69.982677][ T4716] __x64_sys_sendmsg+0xd4/0x160 [ 69.982717][ T4716] x64_sys_call+0x191e/0x2ff0 [ 69.982747][ T4716] do_syscall_64+0xd2/0x200 [ 69.982807][ T4716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.982840][ T4716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.982881][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.982940][ T4716] RIP: 0033:0x7ffb149aebe9 [ 69.982961][ T4716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.983072][ T4716] RSP: 002b:00007ffb13417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.983107][ T4716] RAX: ffffffffffffffda RBX: 00007ffb14be5fa0 RCX: 00007ffb149aebe9 [ 69.983124][ T4716] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 69.983149][ T4716] RBP: 00007ffb13417090 R08: 0000000000000000 R09: 0000000000000000 [ 69.983166][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.983183][ T4716] R13: 00007ffb14be6038 R14: 00007ffb14be5fa0 R15: 00007ffc525fd8a8 [ 69.983209][ T4716] [ 70.195130][ T4713] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.398: Corrupt directory, running e2fsck is recommended [ 70.210756][ T4713] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.398: path /54/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 70.231374][ T4713] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 64: comm syz.0.398: path /54/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 70.296773][ T4725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 70.362259][ T4727] FAULT_INJECTION: forcing a failure. [ 70.362259][ T4727] name failslab, interval 1, probability 0, space 0, times 0 [ 70.375025][ T4727] CPU: 1 UID: 0 PID: 4727 Comm: syz.1.404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.375125][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.375141][ T4727] Call Trace: [ 70.375148][ T4727] [ 70.375156][ T4727] __dump_stack+0x1d/0x30 [ 70.375184][ T4727] dump_stack_lvl+0xe8/0x140 [ 70.375231][ T4727] dump_stack+0x15/0x1b [ 70.375252][ T4727] should_fail_ex+0x265/0x280 [ 70.375282][ T4727] ? audit_log_d_path+0x8d/0x150 [ 70.375382][ T4727] should_failslab+0x8c/0xb0 [ 70.375422][ T4727] __kmalloc_cache_noprof+0x4c/0x320 [ 70.375520][ T4727] audit_log_d_path+0x8d/0x150 [ 70.375559][ T4727] audit_log_d_path_exe+0x42/0x70 [ 70.375598][ T4727] audit_log_task+0x1e9/0x250 [ 70.375683][ T4727] audit_seccomp+0x61/0x100 [ 70.375736][ T4727] ? __seccomp_filter+0x68c/0x10d0 [ 70.375763][ T4727] __seccomp_filter+0x69d/0x10d0 [ 70.375792][ T4727] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 70.375838][ T4727] ? vfs_write+0x7e8/0x960 [ 70.375873][ T4727] __secure_computing+0x82/0x150 [ 70.375949][ T4727] syscall_trace_enter+0xcf/0x1e0 [ 70.375980][ T4727] do_syscall_64+0xac/0x200 [ 70.376075][ T4727] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.376134][ T4727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.376172][ T4727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.376252][ T4727] RIP: 0033:0x7f6f5fc8ebe9 [ 70.376280][ T4727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.376302][ T4727] RSP: 002b:00007f6f5e6ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 70.376326][ T4727] RAX: ffffffffffffffda RBX: 00007f6f5fec5fa0 RCX: 00007f6f5fc8ebe9 [ 70.376357][ T4727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.376372][ T4727] RBP: 00007f6f5e6ef090 R08: 0000000000000000 R09: 0000000000000002 [ 70.376386][ T4727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.376405][ T4727] R13: 00007f6f5fec6038 R14: 00007f6f5fec5fa0 R15: 00007ffc2e2440e8 [ 70.376425][ T4727] [ 70.378366][ T3314] EXT4-fs unmount: 63 callbacks suppressed [ 70.378383][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.441092][ T4729] FAULT_INJECTION: forcing a failure. [ 70.441092][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 70.462659][ T4733] loop3: detected capacity change from 0 to 2048 [ 70.467318][ T4729] CPU: 0 UID: 0 PID: 4729 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.467350][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.467364][ T4729] Call Trace: [ 70.467372][ T4729] [ 70.467422][ T4729] __dump_stack+0x1d/0x30 [ 70.467451][ T4729] dump_stack_lvl+0xe8/0x140 [ 70.467480][ T4729] dump_stack+0x15/0x1b [ 70.467502][ T4729] should_fail_ex+0x265/0x280 [ 70.467533][ T4729] ? __pfx_ip6_dst_gc+0x10/0x10 [ 70.467593][ T4729] should_failslab+0x8c/0xb0 [ 70.467628][ T4729] kmem_cache_alloc_noprof+0x50/0x310 [ 70.467666][ T4729] ? dst_alloc+0xbd/0x100 [ 70.467697][ T4729] ? __pfx_ip6_dst_gc+0x10/0x10 [ 70.467800][ T4729] dst_alloc+0xbd/0x100 [ 70.467834][ T4729] ip6_pol_route+0x6bf/0xb40 [ 70.467877][ T4729] ? ip6_pol_route+0x389/0xb40 [ 70.468003][ T4729] ip6_pol_route_input+0x42/0x60 [ 70.468027][ T4729] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 70.468054][ T4729] fib6_rule_lookup+0x32c/0x470 [ 70.468089][ T4729] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 70.468196][ T4729] ip6_route_input+0x412/0x4e0 [ 70.468232][ T4729] ip6_rcv_finish+0x1c1/0x340 [ 70.468269][ T4729] ipv6_rcv+0x72/0x150 [ 70.468379][ T4729] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 70.468418][ T4729] __netif_receive_skb+0x9e/0x270 [ 70.468461][ T4729] ? tun_rx_batched+0xc7/0x430 [ 70.468541][ T4729] netif_receive_skb+0x4b/0x2e0 [ 70.468640][ T4729] ? tun_rx_batched+0xc7/0x430 [ 70.468665][ T4729] tun_rx_batched+0xfc/0x430 [ 70.468693][ T4729] tun_get_user+0x1eb6/0x2680 [ 70.468792][ T4729] ? ref_tracker_alloc+0x1f2/0x2f0 [ 70.468831][ T4729] tun_chr_write_iter+0x15e/0x210 [ 70.468880][ T4729] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 70.469036][ T4729] vfs_write+0x527/0x960 [ 70.469073][ T4729] ksys_write+0xda/0x1a0 [ 70.469105][ T4729] __x64_sys_write+0x40/0x50 [ 70.469142][ T4729] x64_sys_call+0x27fe/0x2ff0 [ 70.469273][ T4729] do_syscall_64+0xd2/0x200 [ 70.469316][ T4729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.469348][ T4729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.469388][ T4729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.469426][ T4729] RIP: 0033:0x7f1137e9d69f [ 70.469447][ T4729] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 70.469525][ T4729] RSP: 002b:00007f11368ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 70.469620][ T4729] RAX: ffffffffffffffda RBX: 00007f11380d5fa0 RCX: 00007f1137e9d69f [ 70.469636][ T4729] RDX: 000000000000006e RSI: 0000200000000080 RDI: 00000000000000c8 [ 70.469767][ T4729] RBP: 00007f11368ff090 R08: 0000000000000000 R09: 0000000000000000 [ 70.469784][ T4729] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 70.469799][ T4729] R13: 00007f11380d6038 R14: 00007f11380d5fa0 R15: 00007ffd17d16638 [ 70.469825][ T4729] [ 70.928124][ T4733] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.944390][ T4739] loop1: detected capacity change from 0 to 1024 [ 70.964145][ T4739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.977646][ T4733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm : bg 0: block 120: padding at end of block bitmap is not set [ 71.029572][ T3311] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 71.041226][ T4750] FAULT_INJECTION: forcing a failure. [ 71.041226][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 71.054005][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: syz.2.413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.054073][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.054086][ T4750] Call Trace: [ 71.054093][ T4750] [ 71.054102][ T4750] __dump_stack+0x1d/0x30 [ 71.054127][ T4750] dump_stack_lvl+0xe8/0x140 [ 71.054219][ T4750] dump_stack+0x15/0x1b [ 71.054239][ T4750] should_fail_ex+0x265/0x280 [ 71.054267][ T4750] should_failslab+0x8c/0xb0 [ 71.054297][ T4750] kmem_cache_alloc_node_noprof+0x57/0x320 [ 71.054390][ T4750] ? __alloc_skb+0x101/0x320 [ 71.054415][ T4750] ? tcp_chrono_stop+0x19d/0x210 [ 71.054496][ T4750] __alloc_skb+0x101/0x320 [ 71.054524][ T4750] tcp_stream_alloc_skb+0x2d/0x1d0 [ 71.054563][ T4750] tcp_connect+0xce9/0x2290 [ 71.054654][ T4750] ? tcp_sendmsg_fastopen+0x172/0x520 [ 71.054696][ T4750] tcp_sendmsg_fastopen+0x209/0x520 [ 71.054730][ T4750] tcp_sendmsg_locked+0x26e1/0x2c00 [ 71.054812][ T4750] ? mntput_no_expire+0x6f/0x460 [ 71.054856][ T4750] ? __rcu_read_unlock+0x4f/0x70 [ 71.054880][ T4750] ? avc_has_perm_noaudit+0x1b1/0x200 [ 71.054916][ T4750] ? avc_has_perm+0xf7/0x180 [ 71.055008][ T4750] ? _raw_spin_unlock_bh+0x36/0x40 [ 71.055040][ T4750] ? __pfx_tcp_sendmsg+0x10/0x10 [ 71.055082][ T4750] tcp_sendmsg+0x2f/0x50 [ 71.055193][ T4750] inet6_sendmsg+0x76/0xd0 [ 71.055212][ T4750] __sock_sendmsg+0x8b/0x180 [ 71.055254][ T4750] __sys_sendto+0x268/0x330 [ 71.055291][ T4750] __x64_sys_sendto+0x76/0x90 [ 71.055350][ T4750] x64_sys_call+0x2d05/0x2ff0 [ 71.055377][ T4750] do_syscall_64+0xd2/0x200 [ 71.055465][ T4750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.055488][ T4750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.055516][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.055541][ T4750] RIP: 0033:0x7f1137e9ebe9 [ 71.055579][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.055599][ T4750] RSP: 002b:00007f11368ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.055620][ T4750] RAX: ffffffffffffffda RBX: 00007f11380d5fa0 RCX: 00007f1137e9ebe9 [ 71.055632][ T4750] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000006 [ 71.055643][ T4750] RBP: 00007f11368ff090 R08: 0000000000000000 R09: 0000000000000000 [ 71.055654][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.055697][ T4750] R13: 00007f11380d6038 R14: 00007f11380d5fa0 R15: 00007ffd17d16638 [ 71.055716][ T4750] [ 71.324911][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.395758][ T4761] loop3: detected capacity change from 0 to 512 [ 71.441390][ T4761] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.457752][ T4761] EXT4-fs (loop3): mount failed [ 71.470895][ T4752] loop3: detected capacity change from 0 to 512 [ 71.478128][ T4752] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.490075][ T4752] EXT4-fs (loop3): 1 orphan inode deleted [ 71.495920][ T4752] EXT4-fs (loop3): 1 truncate cleaned up [ 71.502101][ T4752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.540855][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.690140][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 71.690157][ T29] audit: type=1400 audit(1757353105.098:1818): avc: denied { create } for pid=4768 comm="syz.4.419" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.722745][ T29] audit: type=1400 audit(1757353105.098:1819): avc: denied { map } for pid=4768 comm="syz.4.419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.747488][ T29] audit: type=1400 audit(1757353105.098:1820): avc: denied { read write } for pid=4768 comm="syz.4.419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.782526][ T4778] loop3: detected capacity change from 0 to 1024 [ 71.789466][ T4778] EXT4-fs: Ignoring removed orlov option [ 71.795470][ T4778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.802647][ T4778] EXT4-fs: Invalid want_extra_isize -2147483520 [ 71.815313][ T29] audit: type=1400 audit(1757353105.218:1821): avc: denied { sqpoll } for pid=4777 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.876041][ T29] audit: type=1400 audit(1757353105.278:1822): avc: denied { checkpoint_restore } for pid=4777 comm="syz.3.421" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.910832][ T4783] Illegal XDP return value 3161764891 on prog (id 330) dev syz_tun, expect packet loss! [ 71.965635][ T29] audit: type=1400 audit(1757353105.368:1823): avc: denied { create } for pid=4786 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.985146][ T29] audit: type=1400 audit(1757353105.368:1824): avc: denied { ioctl } for pid=4786 comm="syz.0.424" path="socket:[10320]" dev="sockfs" ino=10320 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.027827][ T29] audit: type=1400 audit(1757353105.428:1825): avc: denied { create } for pid=4788 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.047951][ T29] audit: type=1400 audit(1757353105.428:1826): avc: denied { setopt } for pid=4788 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.073505][ T29] audit: type=1326 audit(1757353105.478:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 72.188695][ T4798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.428'. [ 72.259405][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 72.271491][ T4803] loop2: detected capacity change from 0 to 128 [ 72.278121][ T4803] ext4: Unknown parameter 'fsmagic' [ 72.287534][ T4793] ip6gre1: entered allmulticast mode [ 72.294211][ T4803] netlink: 'syz.2.431': attribute type 4 has an invalid length. [ 72.301928][ T4803] netlink: 17 bytes leftover after parsing attributes in process `syz.2.431'. [ 72.322753][ T4803] loop2: detected capacity change from 0 to 1024 [ 72.342329][ T4807] loop0: detected capacity change from 0 to 512 [ 72.365732][ T4803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.393616][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.436152][ T4815] loop3: detected capacity change from 0 to 1024 [ 72.444025][ T4815] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.455135][ T4815] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.467362][ T4815] JBD2: no valid journal superblock found [ 72.467589][ T4821] FAULT_INJECTION: forcing a failure. [ 72.467589][ T4821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.473500][ T4815] EXT4-fs (loop3): Could not load journal inode [ 72.486432][ T4821] CPU: 0 UID: 0 PID: 4821 Comm: syz.0.438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.486523][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.486540][ T4821] Call Trace: [ 72.486548][ T4821] [ 72.486557][ T4821] __dump_stack+0x1d/0x30 [ 72.486586][ T4821] dump_stack_lvl+0xe8/0x140 [ 72.486653][ T4821] dump_stack+0x15/0x1b [ 72.486675][ T4821] should_fail_ex+0x265/0x280 [ 72.486706][ T4821] should_fail+0xb/0x20 [ 72.486734][ T4821] should_fail_usercopy+0x1a/0x20 [ 72.486788][ T4821] _copy_from_user+0x1c/0xb0 [ 72.486832][ T4821] ___sys_sendmsg+0xc1/0x1d0 [ 72.486957][ T4821] __x64_sys_sendmsg+0xd4/0x160 [ 72.487033][ T4821] x64_sys_call+0x191e/0x2ff0 [ 72.487062][ T4821] do_syscall_64+0xd2/0x200 [ 72.487103][ T4821] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.487218][ T4821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.487257][ T4821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.487286][ T4821] RIP: 0033:0x7fb817d3ebe9 [ 72.487307][ T4821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.487330][ T4821] RSP: 002b:00007fb8167a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.487385][ T4821] RAX: ffffffffffffffda RBX: 00007fb817f75fa0 RCX: 00007fb817d3ebe9 [ 72.487402][ T4821] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 72.487419][ T4821] RBP: 00007fb8167a7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.487434][ T4821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.487450][ T4821] R13: 00007fb817f76038 R14: 00007fb817f75fa0 R15: 00007ffd1b1f6f18 [ 72.487476][ T4821] [ 72.736466][ T4835] FAULT_INJECTION: forcing a failure. [ 72.736466][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 72.749368][ T4835] CPU: 1 UID: 0 PID: 4835 Comm: syz.0.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.749402][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.749418][ T4835] Call Trace: [ 72.749433][ T4835] [ 72.749442][ T4835] __dump_stack+0x1d/0x30 [ 72.749465][ T4835] dump_stack_lvl+0xe8/0x140 [ 72.749483][ T4835] dump_stack+0x15/0x1b [ 72.749569][ T4835] should_fail_ex+0x265/0x280 [ 72.749602][ T4835] should_failslab+0x8c/0xb0 [ 72.749633][ T4835] kmem_cache_alloc_noprof+0x50/0x310 [ 72.749663][ T4835] ? io_submit_one+0xb8/0x11d0 [ 72.749698][ T4835] io_submit_one+0xb8/0x11d0 [ 72.749817][ T4835] __se_sys_io_submit+0xfb/0x280 [ 72.749852][ T4835] __x64_sys_io_submit+0x43/0x50 [ 72.749908][ T4835] x64_sys_call+0x2d5d/0x2ff0 [ 72.749935][ T4835] do_syscall_64+0xd2/0x200 [ 72.750047][ T4835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.750071][ T4835] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 72.750102][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.750199][ T4835] RIP: 0033:0x7fb817d3ebe9 [ 72.750214][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.750231][ T4835] RSP: 002b:00007fb8167a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 72.750308][ T4835] RAX: ffffffffffffffda RBX: 00007fb817f75fa0 RCX: 00007fb817d3ebe9 [ 72.750323][ T4835] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fb818ab2000 [ 72.750339][ T4835] RBP: 00007fb8167a7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.750354][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.750369][ T4835] R13: 00007fb817f76038 R14: 00007fb817f75fa0 R15: 00007ffd1b1f6f18 [ 72.750389][ T4835] [ 73.053089][ T4846] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 73.060903][ T4846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.447'. [ 73.085315][ T4848] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 73.093303][ T4848] netlink: 224 bytes leftover after parsing attributes in process `syz.3.448'. [ 73.120655][ T4851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.450'. [ 73.139508][ T4854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 73.169879][ T4858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 73.260511][ T4865] FAULT_INJECTION: forcing a failure. [ 73.260511][ T4865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.274025][ T4865] CPU: 0 UID: 0 PID: 4865 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.274062][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.274073][ T4865] Call Trace: [ 73.274079][ T4865] [ 73.274086][ T4865] __dump_stack+0x1d/0x30 [ 73.274120][ T4865] dump_stack_lvl+0xe8/0x140 [ 73.274139][ T4865] dump_stack+0x15/0x1b [ 73.274153][ T4865] should_fail_ex+0x265/0x280 [ 73.274174][ T4865] should_fail_alloc_page+0xf2/0x100 [ 73.274201][ T4865] __alloc_frozen_pages_noprof+0xff/0x360 [ 73.274234][ T4865] alloc_pages_mpol+0xb3/0x250 [ 73.274262][ T4865] vma_alloc_folio_noprof+0x1aa/0x300 [ 73.274301][ T4865] do_wp_page+0x5db/0x24e0 [ 73.274321][ T4865] ? css_rstat_updated+0xb7/0x240 [ 73.274394][ T4865] ? __rcu_read_lock+0x37/0x50 [ 73.274415][ T4865] handle_mm_fault+0x77d/0x2c20 [ 73.274443][ T4865] do_user_addr_fault+0x636/0x1090 [ 73.274475][ T4865] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 73.274585][ T4865] exc_page_fault+0x62/0xa0 [ 73.274609][ T4865] asm_exc_page_fault+0x26/0x30 [ 73.274626][ T4865] RIP: 0033:0x7f6f5fb50c50 [ 73.274640][ T4865] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 73.274654][ T4865] RSP: 002b:00007f6f5e6cd4a0 EFLAGS: 00010202 [ 73.274717][ T4865] RAX: 0000000000006005 RBX: 00007f6f5e6cd540 RCX: 0000000000000101 [ 73.274728][ T4865] RDX: 00000000000003f2 RSI: 0000000000000ff3 RDI: 00007f6f5e6cd5e0 [ 73.274739][ T4865] RBP: 0000000000000102 R08: 00007f6f562ae000 R09: 0000000000000010 [ 73.274749][ T4865] R10: 00002000000009c2 R11: 0000000000000517 R12: 0000000000000c01 [ 73.274759][ T4865] R13: 00007f6f5fd2da20 R14: 0000000000000017 R15: 00007f6f5e6cd5e0 [ 73.274775][ T4865] [ 73.274785][ T4865] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 73.277986][ T4866] cgroup2: Unknown parameter '' [ 73.294910][ T4865] loop1: detected capacity change from 0 to 512 [ 73.475113][ T4865] EXT4-fs: Ignoring removed nobh option [ 73.491304][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.454: corrupted inode contents [ 73.503260][ T4865] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.454: mark_inode_dirty error [ 73.515456][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.454: corrupted inode contents [ 73.575234][ T4865] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.454: mark_inode_dirty error [ 73.587241][ T4865] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.454: Failed to acquire dquot type 0 [ 73.622507][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.454: corrupted inode contents [ 73.638282][ T4865] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.454: mark_inode_dirty error [ 73.651203][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.454: corrupted inode contents [ 73.663972][ T4865] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.454: mark_inode_dirty error [ 73.677285][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.454: corrupted inode contents [ 73.691133][ T4865] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 73.700687][ T4865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.454: corrupted inode contents [ 73.710328][ T4878] loop2: detected capacity change from 0 to 512 [ 73.714891][ T4865] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.454: mark_inode_dirty error [ 73.729893][ T4878] EXT4-fs: Ignoring removed nobh option [ 73.733188][ T4865] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 73.747548][ T4865] EXT4-fs (loop1): 1 truncate cleaned up [ 73.754930][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.768120][ T4873] loop4: detected capacity change from 0 to 32768 [ 73.768189][ T4865] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.776964][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.458: corrupted inode contents [ 73.785971][ T4865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.798701][ T4878] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.458: mark_inode_dirty error [ 73.819308][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.458: corrupted inode contents [ 73.834538][ T4878] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.458: mark_inode_dirty error [ 73.846336][ T4873] loop4: p1 p3 < > [ 73.848035][ T4878] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.458: Failed to acquire dquot type 0 [ 73.863496][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.458: corrupted inode contents [ 73.880782][ T4878] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.458: mark_inode_dirty error [ 73.907409][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.458: corrupted inode contents [ 73.927119][ T4878] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.458: mark_inode_dirty error [ 73.929101][ T4884] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 73.946547][ T4884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.459'. [ 73.959662][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.458: corrupted inode contents [ 73.974430][ T4878] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.990586][ T4892] @: renamed from vlan0 (while UP) [ 73.997990][ T4878] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.458: corrupted inode contents [ 74.063795][ T4894] vlan2: entered promiscuous mode [ 74.068958][ T4894] vlan2: entered allmulticast mode [ 74.074244][ T4894] hsr_slave_1: entered allmulticast mode [ 74.081515][ T4878] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.458: mark_inode_dirty error [ 74.093159][ T4878] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 74.111257][ T4878] EXT4-fs (loop2): 1 truncate cleaned up [ 74.118088][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.118818][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 74.131122][ T4878] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.151529][ T4878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.268369][ T4912] loop1: detected capacity change from 0 to 2048 [ 74.281925][ T4912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.309951][ T3305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 74.326346][ T3305] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 74.346564][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.353475][ T4919] loop2: detected capacity change from 0 to 2048 [ 74.371396][ T4919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.490003][ T3309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 74.506906][ T3309] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 74.519472][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.742342][ T4938] loop1: detected capacity change from 0 to 512 [ 74.752611][ T4938] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.759570][ T4938] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.478: bad orphan inode 13 [ 74.775236][ T4938] ext4_test_bit(bit=12, block=18) = 1 [ 74.780739][ T4938] is_bad_inode(inode)=0 [ 74.785225][ T4938] NEXT_ORPHAN(inode)=2130706432 [ 74.790145][ T4938] max_ino=32 [ 74.793564][ T4938] i_nlink=1 [ 74.797374][ T4938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.880545][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.964377][ T4960] SELinux: failed to load policy [ 74.973478][ T4965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.987608][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 74.998826][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.005404][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.034675][ T4968] loop1: detected capacity change from 0 to 512 [ 75.034745][ T4965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.051853][ T4968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.064970][ T4960] infiniband syz2: set active [ 75.069731][ T4960] infiniband syz2: added vxcan1 [ 75.079876][ T23] vxcan1 speed is unknown, defaulting to 1000 [ 75.112863][ T4960] RDS/IB: syz2: added [ 75.116968][ T4960] smc: adding ib device syz2 with port count 1 [ 75.123446][ T4960] smc: ib device syz2 port 1 has pnetid [ 75.129726][ T23] vxcan1 speed is unknown, defaulting to 1000 [ 75.137212][ T4968] EXT4-fs (loop1): 1 truncate cleaned up [ 75.139830][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.149509][ T4975] loop3: detected capacity change from 0 to 512 [ 75.157987][ T4968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.182463][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.207810][ T4965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.225282][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.260259][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.271392][ T4965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.296934][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.331689][ T4960] vxcan1 speed is unknown, defaulting to 1000 [ 75.339656][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.348158][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356867][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365723][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.446666][ T4983] loop4: detected capacity change from 0 to 4096 [ 75.455468][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.467649][ T4983] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.485045][ T4983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.782639][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.878405][ T5024] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.895256][ T5026] loop3: detected capacity change from 0 to 1024 [ 75.902520][ T5026] EXT4-fs: Ignoring removed oldalloc option [ 75.908938][ T5026] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 75.931405][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.943946][ T5028] loop4: detected capacity change from 0 to 512 [ 75.951356][ T5028] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.962653][ T5024] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.974916][ T5028] EXT4-fs (loop4): 1 truncate cleaned up [ 75.981580][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.001406][ T5024] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.051128][ T5024] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.081303][ T5036] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 76.109343][ T3428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121948][ T3428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134024][ T3428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.145711][ T3428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.181678][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.731245][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.768978][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 76.768998][ T29] audit: type=1326 audit(1757353110.168:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.800345][ T29] audit: type=1326 audit(1757353110.168:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.824758][ T29] audit: type=1326 audit(1757353110.178:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.832423][ T5048] loop3: detected capacity change from 0 to 512 [ 76.849016][ T29] audit: type=1326 audit(1757353110.198:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.878994][ T29] audit: type=1326 audit(1757353110.198:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.893421][ T5048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.903615][ T29] audit: type=1326 audit(1757353110.208:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1c9c7bebe9 code=0x7ffc0000 [ 76.917081][ T5048] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.938970][ T29] audit: type=1326 audit(1757353110.208:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c9c7bec23 code=0x7ffc0000 [ 76.939011][ T29] audit: type=1326 audit(1757353110.208:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c9c7bd69f code=0x7ffc0000 [ 76.939089][ T29] audit: type=1326 audit(1757353110.208:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c9c7bec77 code=0x7ffc0000 [ 76.939118][ T29] audit: type=1326 audit(1757353110.238:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.3.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c9c7bd550 code=0x7ffc0000 [ 77.079790][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.133214][ T5055] loop3: detected capacity change from 0 to 512 [ 77.140702][ T5055] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 77.150395][ T5055] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.510: bad orphan inode 15 [ 77.160917][ T5055] ext4_test_bit(bit=14, block=18) = 1 [ 77.166487][ T5055] is_bad_inode(inode)=0 [ 77.170757][ T5055] NEXT_ORPHAN(inode)=1023 [ 77.175206][ T5055] max_ino=32 [ 77.178535][ T5055] i_nlink=0 [ 77.182304][ T5055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 77.194739][ T5055] ext2 filesystem being mounted at /106/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 77.343086][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 77.411528][ T5062] vxcan1 speed is unknown, defaulting to 1000 [ 77.498238][ T5066] loop3: detected capacity change from 0 to 512 [ 77.506463][ T5066] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.513931][ T5066] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.514: bad orphan inode 13 [ 77.524867][ T5066] ext4_test_bit(bit=12, block=18) = 1 [ 77.530893][ T5066] is_bad_inode(inode)=0 [ 77.535188][ T5066] NEXT_ORPHAN(inode)=2130706432 [ 77.540451][ T5066] max_ino=32 [ 77.543689][ T5066] i_nlink=1 [ 77.548925][ T5066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.564629][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.573420][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.987841][ T5069] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 77.996086][ T5069] __nla_validate_parse: 6 callbacks suppressed [ 77.996146][ T5069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.515'. [ 78.035166][ T5073] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.516'. [ 78.048812][ T5073] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.107673][ T5074] loop2: detected capacity change from 0 to 512 [ 78.114403][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.125334][ T5074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.137550][ T5073] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.149920][ T5074] EXT4-fs (loop2): 1 truncate cleaned up [ 78.158147][ T5074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.178971][ T5078] loop3: detected capacity change from 0 to 2048 [ 78.192471][ T5078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.243028][ T3311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.265393][ T5073] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.276642][ T3311] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.289292][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.320006][ T5082] loop3: detected capacity change from 0 to 2048 [ 78.332067][ T5073] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.336219][ T5082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.370630][ T3311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.385735][ T3311] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.401734][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.414020][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.425971][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.434300][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.443011][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.485158][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.491834][ T5088] loop3: detected capacity change from 0 to 512 [ 78.512271][ T5088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.525193][ T5088] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.553421][ T5088] EXT4-fs: Ignoring removed orlov option [ 78.559369][ T5088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.568291][ T5096] loop2: detected capacity change from 0 to 1024 [ 78.575092][ T5088] EXT4-fs (loop3): can't enable nombcache during remount [ 78.575755][ T5096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.603736][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.608358][ T5096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.627192][ T5096] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.522: bg 0: block 232: padding at end of block bitmap is not set [ 78.653385][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.699021][ T5102] ipvlan2: entered promiscuous mode [ 78.745863][ T5102] random: crng reseeded on system resumption [ 78.764015][ T5106] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 78.771779][ T5106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.526'. [ 78.786448][ T5110] loop2: detected capacity change from 0 to 512 [ 78.807953][ T5110] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.817415][ T5110] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.527: bad orphan inode 13 [ 78.828798][ T5110] ext4_test_bit(bit=12, block=18) = 1 [ 78.834256][ T5110] is_bad_inode(inode)=0 [ 78.838727][ T5110] NEXT_ORPHAN(inode)=2130706432 [ 78.843760][ T5110] max_ino=32 [ 78.846981][ T5110] i_nlink=1 [ 78.851133][ T5110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.864820][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.873521][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.897443][ T5115] loop1: detected capacity change from 0 to 2048 [ 78.920462][ T5115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.949189][ T3305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.964460][ T3305] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.977451][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.999007][ T5122] loop1: detected capacity change from 0 to 512 [ 79.006179][ T5122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.018203][ T5122] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.033664][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 79.039959][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.134267][ T5126] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.532'. [ 79.155301][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.172182][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.190850][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.208960][ T5126] loop0: detected capacity change from 0 to 512 [ 79.218975][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.228892][ T5126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.241881][ T5126] EXT4-fs (loop0): 1 truncate cleaned up [ 79.248328][ T5126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.277810][ T5129] veth0: entered promiscuous mode [ 79.283988][ T5129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 79.312524][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.339805][ T5133] netlink: 96 bytes leftover after parsing attributes in process `syz.4.533'. [ 79.400118][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.520629][ T5142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.532894][ T5142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.564319][ T3428] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.574012][ T3428] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.589010][ T3428] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.607703][ T3428] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.678744][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 79.719711][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.736501][ T5148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.882028][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.892757][ T5151] loop3: detected capacity change from 0 to 8192 [ 80.013949][ T5159] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.544'. [ 80.106454][ T5162] FAULT_INJECTION: forcing a failure. [ 80.106454][ T5162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.119857][ T5162] CPU: 0 UID: 0 PID: 5162 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.119955][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.120036][ T5162] Call Trace: [ 80.120044][ T5162] [ 80.120054][ T5162] __dump_stack+0x1d/0x30 [ 80.120076][ T5162] dump_stack_lvl+0xe8/0x140 [ 80.120159][ T5162] dump_stack+0x15/0x1b [ 80.120181][ T5162] should_fail_ex+0x265/0x280 [ 80.120235][ T5162] should_fail_alloc_page+0xf2/0x100 [ 80.120274][ T5162] __alloc_frozen_pages_noprof+0xff/0x360 [ 80.120393][ T5162] alloc_pages_mpol+0xb3/0x250 [ 80.120432][ T5162] vma_alloc_folio_noprof+0x1aa/0x300 [ 80.120480][ T5162] do_wp_page+0x5db/0x24e0 [ 80.120516][ T5162] ? __rcu_read_lock+0x37/0x50 [ 80.120542][ T5162] handle_mm_fault+0x77d/0x2c20 [ 80.120635][ T5162] ? __rcu_read_unlock+0x4f/0x70 [ 80.120673][ T5162] do_user_addr_fault+0x3fe/0x1090 [ 80.120785][ T5162] exc_page_fault+0x62/0xa0 [ 80.120812][ T5162] asm_exc_page_fault+0x26/0x30 [ 80.120831][ T5162] RIP: 0010:__put_user_8+0xd/0x20 [ 80.120868][ T5162] Code: 89 01 31 c9 0f 01 ca e9 d1 82 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 80.120901][ T5162] RSP: 0018:ffffc90000e9beb0 EFLAGS: 00050206 [ 80.120916][ T5162] RAX: 00007f6f609fe000 RBX: 0000000000000000 RCX: 0000200000004200 [ 80.120929][ T5162] RDX: 0000000000000db1 RSI: 0000000000000000 RDI: ffff88811b4f6028 [ 80.120941][ T5162] RBP: ffffc90000e9bf48 R08: 000188811b4f602f R09: 0000000000000000 [ 80.120954][ T5162] R10: ffff8881197e1fc0 R11: 00018881045d2efb R12: 0000000000000000 [ 80.120970][ T5162] R13: 0000000000000000 R14: ffff88811b4f6000 R15: 0000000000000000 [ 80.121041][ T5162] __se_sys_io_setup+0x95/0x1b0 [ 80.121071][ T5162] __x64_sys_io_setup+0x31/0x40 [ 80.121171][ T5162] x64_sys_call+0x2eff/0x2ff0 [ 80.121289][ T5162] do_syscall_64+0xd2/0x200 [ 80.121316][ T5162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.121363][ T5162] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.121388][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.121406][ T5162] RIP: 0033:0x7f6f5fc8ebe9 [ 80.121492][ T5162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.121508][ T5162] RSP: 002b:00007f6f5e6ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 80.121524][ T5162] RAX: ffffffffffffffda RBX: 00007f6f5fec5fa0 RCX: 00007f6f5fc8ebe9 [ 80.121574][ T5162] RDX: 0000000000000000 RSI: 0000200000004200 RDI: 0000000000000008 [ 80.121584][ T5162] RBP: 00007f6f5e6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 80.121595][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.121605][ T5162] R13: 00007f6f5fec6038 R14: 00007f6f5fec5fa0 R15: 00007ffc2e2440e8 [ 80.121622][ T5162] [ 80.124898][ T5159] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.423946][ T5168] loop3: detected capacity change from 0 to 512 [ 80.431123][ T5168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.457016][ T5168] EXT4-fs (loop3): 1 truncate cleaned up [ 80.463741][ T5174] netlink: 'syz.1.548': attribute type 7 has an invalid length. [ 80.464023][ T5168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.476005][ T5174] loop1: detected capacity change from 0 to 512 [ 80.491777][ T5174] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.504759][ T5159] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.522844][ T5178] loop0: detected capacity change from 0 to 512 [ 80.529923][ T5178] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.563523][ T5159] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.621729][ T5159] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.686857][ T3428] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.698515][ T3428] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.710520][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.722310][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.748879][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.772499][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.803256][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.859782][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.883805][ T5196] ipvlan2: entered promiscuous mode [ 80.932538][ T5210] random: crng reseeded on system resumption [ 80.946204][ T5212] loop3: detected capacity change from 0 to 164 [ 80.953769][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.969068][ T5212] ISOFS: unable to read i-node block [ 80.974668][ T5212] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.997760][ T5188] vxcan1 speed is unknown, defaulting to 1000 [ 81.006370][ T5212] loop9: detected capacity change from 0 to 7 [ 81.012837][ T5212] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.021113][ T5212] Buffer I/O error on dev loop9, logical block 0, async page read [ 81.030527][ T5212] loop9: unable to read partition table [ 81.045308][ T5212] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 81.045308][ T5212] ) failed (rc=-5) [ 81.059131][ T5218] loop4: detected capacity change from 0 to 128 [ 81.094403][ T51] bridge_slave_1: left allmulticast mode [ 81.100420][ T51] bridge_slave_1: left promiscuous mode [ 81.106245][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.122289][ T51] bridge_slave_0: left allmulticast mode [ 81.128090][ T51] bridge_slave_0: left promiscuous mode [ 81.133968][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.161869][ T52] bio_check_eod: 5 callbacks suppressed [ 81.161904][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.161904][ T52] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 81.182660][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.182660][ T52] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 81.198705][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.198705][ T52] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 81.217676][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.217676][ T52] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 81.233913][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.233913][ T52] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 81.253987][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.253987][ T52] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 81.268455][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.268455][ T52] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 81.270516][ T5222] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.563'. [ 81.284046][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.284046][ T52] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 81.307893][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.307893][ T52] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 81.323508][ T52] kworker/u8:4: attempt to access beyond end of device [ 81.323508][ T52] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 81.352603][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.364091][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.373193][ T5225] loop3: detected capacity change from 0 to 512 [ 81.374212][ T51] bond0 (unregistering): Released all slaves [ 81.381497][ T5225] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.400750][ T5225] EXT4-fs (loop3): 1 truncate cleaned up [ 81.407371][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.411155][ T5222] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.522317][ T5231] loop0: detected capacity change from 0 to 128 [ 81.529913][ T5222] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.549878][ T5232] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 81.557579][ T5232] FAT-fs (loop0): Filesystem has been set read-only [ 81.574808][ T51] hsr_slave_0: left promiscuous mode [ 81.581747][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.589163][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.597888][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.605668][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.634234][ T51] veth1_macvtap: left promiscuous mode [ 81.649826][ T51] veth0_macvtap: left promiscuous mode [ 81.655933][ T51] veth1_vlan: left promiscuous mode [ 81.661466][ T51] veth0_vlan: left promiscuous mode [ 81.767795][ T51] team0 (unregistering): Port device team_slave_1 removed [ 81.779021][ T5238] usb usb9: usbfs: process 5238 (syz.0.567) did not claim interface 8 before use [ 81.796364][ T51] team0 (unregistering): Port device team_slave_0 removed [ 81.803733][ T5227] ================================================================== [ 81.812386][ T5227] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 81.822516][ T5227] [ 81.824869][ T5227] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 81.833138][ T5227] tick_do_update_jiffies64+0x113/0x1c0 [ 81.838730][ T5227] tick_nohz_handler+0x7f/0x2d0 [ 81.843616][ T5227] __hrtimer_run_queues+0x20c/0x5a0 [ 81.848845][ T5227] hrtimer_interrupt+0x21a/0x460 [ 81.854401][ T5227] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 81.860314][ T5227] sysvec_apic_timer_interrupt+0x6f/0x80 [ 81.865994][ T5227] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.871989][ T5227] console_flush_all+0x55b/0x730 [ 81.877241][ T5227] console_unlock+0xa1/0x330 [ 81.881867][ T5227] vprintk_emit+0x388/0x650 [ 81.886468][ T5227] vprintk_default+0x26/0x30 [ 81.891074][ T5227] vprintk+0x1d/0x30 [ 81.895187][ T5227] _printk+0x79/0xa0 [ 81.899220][ T5227] __netdev_printk+0x321/0x3e0 [ 81.904006][ T5227] netdev_info+0x9b/0xd0 [ 81.908399][ T5227] team_port_del+0x667/0x6e0 [ 81.913090][ T5227] team_device_event+0x33e/0x3d0 [ 81.918090][ T5227] raw_notifier_call_chain+0x6f/0x1b0 [ 81.923909][ T5227] call_netdevice_notifiers_info+0xae/0x100 [ 81.930196][ T5227] unregister_netdevice_many_notify+0xda9/0x15d0 [ 81.936747][ T5227] default_device_exit_batch+0x50c/0x560 [ 81.942760][ T5227] ops_undo_list+0x2bd/0x410 [ 81.947561][ T5227] cleanup_net+0x2de/0x4d0 [ 81.952820][ T5227] process_scheduled_works+0x4cb/0x9d0 [ 81.958445][ T5227] worker_thread+0x582/0x770 [ 81.963072][ T5227] kthread+0x489/0x510 [ 81.967395][ T5227] ret_from_fork+0xda/0x150 [ 81.972178][ T5227] ret_from_fork_asm+0x1a/0x30 [ 81.977061][ T5227] [ 81.979501][ T5227] read to 0xffffffff868099c0 of 8 bytes by task 5227 on cpu 0: [ 81.987095][ T5227] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 81.993636][ T5227] count_shadow_nodes+0x6a/0x230 [ 82.000540][ T5227] do_shrink_slab+0x63/0x680 [ 82.005424][ T5227] shrink_slab+0x448/0x760 [ 82.009873][ T5227] shrink_node+0x6c3/0x2120 [ 82.015123][ T5227] do_try_to_free_pages+0x3f6/0xcd0 [ 82.020454][ T5227] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 82.026460][ T5227] try_charge_memcg+0x358/0x9e0 [ 82.031764][ T5227] obj_cgroup_charge_pages+0xa6/0x150 [ 82.037296][ T5227] __memcg_kmem_charge_page+0x9f/0x170 [ 82.043242][ T5227] __alloc_frozen_pages_noprof+0x188/0x360 [ 82.049342][ T5227] alloc_pages_mpol+0xb3/0x250 [ 82.055153][ T5227] alloc_pages_noprof+0x90/0x130 [ 82.060554][ T5227] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 82.067383][ T5227] bpf_map_area_alloc+0xfa/0x150 [ 82.072771][ T5227] htab_map_alloc+0x2a8/0x6d0 [ 82.077636][ T5227] map_create+0x840/0xca0 [ 82.081993][ T5227] __sys_bpf+0x545/0x7b0 [ 82.086270][ T5227] __x64_sys_bpf+0x41/0x50 [ 82.090798][ T5227] x64_sys_call+0x2aea/0x2ff0 [ 82.095521][ T5227] do_syscall_64+0xd2/0x200 [ 82.100078][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.105995][ T5227] [ 82.108333][ T5227] value changed: 0x00000000ffffaa81 -> 0x00000000ffffaa82 [ 82.115450][ T5227] [ 82.117777][ T5227] Reported by Kernel Concurrency Sanitizer on: [ 82.123931][ T5227] CPU: 0 UID: 0 PID: 5227 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.133590][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.143658][ T5227] ================================================================== [ 82.173204][ T5222] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.198651][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 82.247369][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.254817][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.262105][ T5188] bridge_slave_0: entered allmulticast mode [ 82.268821][ T5188] bridge_slave_0: entered promiscuous mode [ 82.276492][ T5222] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.289242][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.296547][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.305484][ T5188] bridge_slave_1: entered allmulticast mode [ 82.312744][ T5188] bridge_slave_1: entered promiscuous mode [ 82.335826][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.347321][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.367474][ T5188] team0: Port device team_slave_0 added [ 82.374405][ T5188] team0: Port device team_slave_1 added [ 82.391765][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.398735][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.425120][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.436590][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.443854][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.471314][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.498398][ T5188] hsr_slave_0: entered promiscuous mode [ 82.506300][ T5188] hsr_slave_1: entered promiscuous mode [ 82.512541][ T5188] debugfs: 'hsr0' already exists in 'hsr' [ 82.518457][ T5188] Cannot create hsr debugfs directory [ 82.586879][ T5188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.596072][ T5188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.605205][ T5188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.614198][ T5188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.648549][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.661242][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.671266][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.678423][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.689820][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.697095][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.764986][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.872553][ T5188] veth0_vlan: entered promiscuous mode [ 82.880772][ T5188] veth1_vlan: entered promiscuous mode [ 82.896162][ T5188] veth0_macvtap: entered promiscuous mode [ 82.903861][ T5188] veth1_macvtap: entered promiscuous mode [ 82.916169][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.927298][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.939504][ T3428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.948437][ T3428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.959214][ T3428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.969459][ T3428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987650][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 82.987668][ T29] audit: type=1400 audit(1757353116.388:2485): avc: denied { mounton } for pid=5188 comm="syz-executor" path="/root/syzkaller.w4Diqv/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 83.019884][ T29] audit: type=1400 audit(1757353116.388:2486): avc: denied { mount } for pid=5188 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.042748][ T29] audit: type=1400 audit(1757353116.388:2487): avc: denied { mount } for pid=5188 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.065083][ T29] audit: type=1400 audit(1757353116.388:2488): avc: denied { mounton } for pid=5188 comm="syz-executor" path="/root/syzkaller.w4Diqv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 83.092170][ T29] audit: type=1400 audit(1757353116.388:2489): avc: denied { mounton } for pid=5188 comm="syz-executor" path="/root/syzkaller.w4Diqv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.119977][ T29] audit: type=1400 audit(1757353116.428:2490): avc: denied { mounton } for pid=5188 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.143924][ T29] audit: type=1400 audit(1757353116.428:2491): avc: denied { mount } for pid=5188 comm="syz-executor" name="/" dev="gadgetfs" ino=4682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.168363][ T29] audit: type=1400 audit(1757353116.428:2492): avc: denied { add_name } for pid=5188 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.195652][ T29] audit: type=1400 audit(1757353116.428:2493): avc: denied { create } for pid=5188 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 83.216730][ T29] audit: type=1400 audit(1757353116.428:2494): avc: denied { associate } for pid=5188 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.545172][ T3428] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557307][ T3428] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.569295][ T3428] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.580767][ T2612] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.600416][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.