last executing test programs: 15m47.291377281s ago: executing program 32 (id=146): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000f00)={[{@usrquota}, {@barrier}, {@resuid}, {@min_batch_time={'min_batch_time', 0x3d, 0x101}}, {@errors_remount}, {@bh}]}, 0x6, 0x600, &(0x7f0000001200)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/ZFxBbFgIcWpGlSi1UvtvVgDwUL9iDioaFJauj2B00KthZMwYOCgohXkV78B7xL795EUG+ehSpSUVDpyuzOtptkN92m2Z008/nAZp/nmdl9nu9OnswzM3l2Aiit8exHGrEr4s6pJGKsZdloNBaO5+vd/u3a6eyRRK32+q9JJHlZc/0kf96eZ4Yj4tujEf+vrK534crVs9PVWsN7EfsXz13cv3Dl6r75c9NnZs/Mnp868MLBQ5MvTh2c2pA4t+fPx46/9uTH77/9/Nx31X1JHI6Tg+/OxIo4Nsp4jMedPMTW8oGIOJQl2nwuj5oHCmGkd+1gfSr57+NgRDweY1Gp5xrGYv6jQhsH9FStElEDSirR/6GkmuOA5rF9d8fBJ3s8KumfW0caB0Cr4x9onBuJ4fqx0bbbScuRUePcxo4NqD+r459ruz/PHrHsPMSfd7fOwAbU08nS9Yh4ol38Sb1tO+qRZvGny9qRRMRkRAzl7XvlIdqQtKR7cR5mLeuNP42Iw/lzVn50nfWPr8j3O34AyunmkXxHvpTl7u3/srFHc/wTbcY/o232XetR9P6v8/ivub8frp8jT1eMw7Ixy4n2bzm4suCnD4992qn+1vFf9sjqb44F++HW9YjdK+L/IAs2H/9k8Sdttn+2yqnD3dXx6ve/HOu0rOj4azci9rQ9/rk3Ks1Sa1yf3D83X52dbPxsW8fX37z1Zaf6i44/2/7bOsTfsv3Tla/LPpOLXdbx1Ykb5zotG71v/OnPQ0njeHMoL3lnenHx0lTEUHI8X6Wl/MDabWmu03yPLP69z7Tv/8t+/68vf5+R5p/MLlx84+ztTsvWs/1bLibfqXXZhk6y+Gfuv/1X9f+s7JMu6/jjzctPdVq2VvwuFwMAAAAAAMCDSevXYJN04m46TScmGvNlH4ttafXCwuKzcxcun5+J2Fv/f8jBtHmle6yRT7L8VP7/sM38gRX55yJiZ0R8Vhmp5ydOX6jOFB08AAAAAAAAAAAAAAAAAAAAbBLb8/n/zftU/15pzP8HSqKXN5gDNjf9H8qr3v9X3eIJKAP7fygv/R/KS/+H8tL/obz0fygv/R/KS/+H8tL/AQAAAGBL2vn0zR+TiFh6aaT+yAzly8wIgq1tsOgGAIWpFN0AoDB3L/0b7EPpdDX+/yv/csDeNwcoQNKusD44qK3d+W+2fSUAAAAAAAAAAAAA0AN7dnWe/29uMGxtpv1BeT3E/H9fHQCPOF/9D+XlGB+43yz+4U4LzP8HAAAAAAAAAAAAgL4ZrT+SdCKfCzwaaToxEfHfiNgRg8ncfHV2MiL+FxE/VAb/k+Wnim40AAAAAAAAAAAAAAAAAAAAbDELV66ena5WZy+1Jv5eVbK1E827oPahrpfjAV8VSf8/lpGIKHyj9Cwx0FKSRCxlW35TNOzSQmyOZtQTBf9hAgAAAAAAAAAAAAAAAACAEmqZe9ze7i/63CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L979//vXaLoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR9O/AQAA//9/3EA1") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15m41.354074164s ago: executing program 33 (id=217): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x814) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="380000000000a707d05f0000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='rpcgss_svc_unwrap_failed\x00', r2, 0x0, 0x4}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) splice(r0, 0x0, r3, 0x0, 0xa86, 0x2) 14m25.610235664s ago: executing program 34 (id=1237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x9ae, 0x3, 0x3, 0x5, 0x198, 0x4202, 0x1}, &(0x7f0000000140)={0xffffffff, 0x7, 0x6, 0x1, 0x1ff, 0x0, 0x4}, &(0x7f00000001c0)={0x7fff, 0x76d0, 0x0, 0x4, 0xda12, 0xdfb, 0x7fffffffffffffff, 0xffffffff}, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340)={[0x9]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r5}, 0x18) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) copy_file_range(r0, 0x0, r1, &(0x7f00000003c0)=0x800, 0x1e8a, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 14m20.061400199s ago: executing program 35 (id=1318): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) 14m18.141926155s ago: executing program 36 (id=1340): mount(&(0x7f0000000180)=@md0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) connect$packet(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000380)={[{@nombcache}, {@dax_inode}, {@journal_checksum}, {@noauto_da_alloc}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r7], 0x38}, 0x0) 14m17.178465924s ago: executing program 37 (id=1355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 14m15.086453163s ago: executing program 38 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xffffffffffffbfff, 0x0, 0x0, 0x0) 13m49.762243492s ago: executing program 39 (id=1756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf250a0045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 13m38.854140918s ago: executing program 40 (id=1940): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0), 0x80000) 13m38.003918304s ago: executing program 41 (id=1953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 13m34.131814857s ago: executing program 42 (id=2003): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x6}, 0x18) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x104) r11 = syz_open_dev$usbmon(0x0, 0x0, 0x240) ioctl$MON_IOCX_GETX(r11, 0x4018920a, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r12, 0x4b68, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r2}, 0x10) sync() r13 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r13, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="0800149773", 0x5}, {&(0x7f0000000440)="9d0727ae", 0x4}], 0x2}}], 0x1, 0x2004000) 13m32.535511127s ago: executing program 43 (id=2031): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 2) 13m14.665313865s ago: executing program 44 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000a0d92ebfd252fc31a9c1d036", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x6}, 0x18) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x104) r11 = syz_open_dev$usbmon(0x0, 0x0, 0x240) ioctl$MON_IOCX_GETX(r11, 0x4018920a, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r12, 0x4b68, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r2}, 0x10) sync() r13 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r13, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="0800149773", 0x5}, {&(0x7f0000000440)="9d0727ae", 0x4}], 0x2}}], 0x1, 0x2004000) 13m1.858283887s ago: executing program 45 (id=2663): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") (fail_nth: 2) 13m0.892019786s ago: executing program 46 (id=2684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x4a}]}]}, 0x28}], 0x1}, 0x0) r6 = syz_pidfd_open(r4, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000), 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") 12m59.422434353s ago: executing program 47 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 12m22.930372462s ago: executing program 48 (id=3364): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r0, 0x1276, 0x0) 11m22.326478027s ago: executing program 49 (id=4369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7cffeff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) (async) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000380)=@sr0, 0xee00, 0x0) (async) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000380)=@sr0, 0xee00, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) accept(r5, 0x0, 0x0) ioctl$sock_ifreq(r4, 0x8926, &(0x7f00000003c0)={'rose0\x00', @ifru_mtu=0x4}) write$evdev(r1, &(0x7f0000000180)=[{{0x77359400}, 0x11, 0x2, 0x80000000}], 0x18) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 10m20.488627335s ago: executing program 50 (id=6144): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff092112"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 10m11.033078044s ago: executing program 51 (id=6568): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x8, {{0x2, 0x4e22, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) 9m38.985495099s ago: executing program 52 (id=8089): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e", 0x4}], 0x1, &(0x7f0000000300)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x40000000) 9m38.910258951s ago: executing program 53 (id=8095): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000f80)="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", 0x801}, {0x0}], 0x2) 9m34.71370161s ago: executing program 54 (id=8284): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x100000}}, 0x40) 9m29.102417686s ago: executing program 55 (id=8445): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1e8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m18.406468452s ago: executing program 56 (id=10809): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x40000}}], 0x1, 0x0) 8m8.298260603s ago: executing program 57 (id=11087): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={r2, 0x84, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f2b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98606e592103c268225b716a73e48028ba4f49e9b8f3c5d6743243dfde8a6640000000000000000"}, &(0x7f0000000040)=0x8c) 8m3.116719391s ago: executing program 58 (id=11211): io_setup(0x9, &(0x7f0000000340)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 8m0.694794576s ago: executing program 8 (id=11244): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 8m0.106443437s ago: executing program 59 (id=11247): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r0, r0, 0x0, 0x4800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) 7m59.9867634s ago: executing program 60 (id=11250): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) 7m59.832523123s ago: executing program 8 (id=11254): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1c, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050e4"}}) 7m59.735105135s ago: executing program 8 (id=11255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0}]) 7m59.658163206s ago: executing program 8 (id=11257): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 7m59.592180417s ago: executing program 8 (id=11258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffc}, 0xc) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$inet_nvme(r1, &(0x7f0000000b80)=""/4096, 0x1000, 0x40, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback}, 0x0, 0x2, 0x2, 0x1}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 7m59.270402683s ago: executing program 8 (id=11260): syz_emit_ethernet(0x69, &(0x7f0000000080)=ANY=[], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000800000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 7m59.270099313s ago: executing program 61 (id=11260): syz_emit_ethernet(0x69, &(0x7f0000000080)=ANY=[], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000800000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 4m52.838886005s ago: executing program 1 (id=13262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000840), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00', 0x6}, r5}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4m52.418852213s ago: executing program 1 (id=13266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000bc000000000000000003000085acdd84f119eb05b8d81d000000000000000099c6"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x4, 0x0, 0x2}, &(0x7f0000000100)=0x14) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x10001}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='block_split\x00', 0xffffffffffffffff, 0x0, 0xb054}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, r4, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x49080}) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r10, 0x0, 0x2, 0x4000}}, 0x20) 4m52.267309356s ago: executing program 1 (id=13271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00', 0x6}, r6}}, 0x30) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa06"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4m52.016976561s ago: executing program 1 (id=13280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000150000000000000000000000f76fa6fd00000000"], 0x50) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2f6, &(0x7f0000000e40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000100)=0x8) getdents(r1, &(0x7f00000000c0)=""/43, 0x60) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, 0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000940)="2be9e8440a0570ff127b807be8c5ec539398fa2247d3c7d4e477e6f0") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = getpgid(r7) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r9, 0x5, &(0x7f00000001c0)=""/133) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x3c, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="465786a67f64d066069941b69f558aa855637402c84636a173679777a2958aadf3c00ac29bbb7242", 0x28}, {&(0x7f00000003c0)="c1f165aababa5fd2aa4d3dced3351d56bdbdd8e137f0d2543bb32c1fb867bc452212d8ff14b9efeba684bd21ab561147dfa7aa69920a72e280f76fc4ebf60d1c2145a027e39214796ae0c11552d6a7783ad7754abc00b571102453ffafc50d66e07683756a012185e55c753ed55344c5105bdfba2682b70971472e3ccd83664197add8cb783333dc987444882ecb8ca0730eaa51535a31e774b498dc1b91878852e87ddbeca2b0169e34a18a6080e0e713778073213ed53ef8447456047290454f7b54182629d596fffd24543be306a2b5a581664d5879653ddf32e06981897aa032fa5b92bedd6c0f0a710fab4bf54fa67008c3", 0xf4}, {&(0x7f00000004c0)="884f7a7c211a2b0b1fd72e1453d359337cd725a5daf9dc124f97e2a29452b4cadc4c928760301952a72533b57b430e59028f798bbc24df2fe14c53b2aec4588084b517a6", 0x44}, {&(0x7f0000000540)="9c3421c3bab660b735467ddd4b77688e7cf331766bf55b3e946b0e47123cf044e28be898c7f957e27cc9f0577b4b2a90372f966c245af78151a298ecf3fdf8a4e1463c433f65e85b7805df0a3b2572211a194a5ca6e82abc5532a06287a06cb2ce7024fe1fffb4d6a025235165b4e4f7e971213d45ea7faccf24a600589fca1bc19722f10894e372348810e909b7", 0x8e}], 0x4, &(0x7f0000000ac0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x6, 0x20c, 0x7, 0x7, 0x200, 0x4, 0x6, r4}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xc}}, @init={0x18, 0x84, 0x0, {0x8, 0xc86, 0x0, 0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0xc8, 0x800}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) 4m51.864685174s ago: executing program 1 (id=13283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 4m51.694605777s ago: executing program 1 (id=13284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0) 4m51.694525857s ago: executing program 62 (id=13284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0) 3m54.790474582s ago: executing program 0 (id=14208): syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x6}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xfffb, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m54.089549475s ago: executing program 0 (id=14224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_retopts={{0x10, 0x11}}], 0x10}}], 0x1, 0x0) 3m53.766724172s ago: executing program 0 (id=14226): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$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") 3m53.668522054s ago: executing program 0 (id=14228): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@sysvgroups}]}, 0x4, 0x46a, &(0x7f00000009c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) 3m53.433234178s ago: executing program 0 (id=14233): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000061100c0000000000620400000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219}, 0x94) 3m52.866972648s ago: executing program 0 (id=14241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100003050000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054) 3m52.82708162s ago: executing program 63 (id=14241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100003050000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054) 3m14.538202142s ago: executing program 7 (id=14873): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@exit, @cb_func={0x18, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x71, &(0x7f0000000340)=""/113, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[r2, r2, r0, r2], &(0x7f00000003c0)=[{0x4, 0x5, 0x1, 0x4}, {0x1, 0x2, 0x3, 0x4}, {0x4, 0x2}, {0x7fffffff, 0x4, 0xa, 0x1}, {0x4, 0x4, 0x3, 0x3}]}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040000000447518efbaef54445c64d5f", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fb490000000000000000000000000000000000000000004fc27dca0000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x82f3, 0x80, 0x1, 0x20e}, &(0x7f0000000180)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x40f9, 0x217, 0xa5, 0x0, 0x97ff) close_range(r5, r6, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 3m14.445769494s ago: executing program 7 (id=14876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) 3m14.359647386s ago: executing program 7 (id=14877): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = open(0x0, 0x64842, 0x389b0d52417bb201) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 3m13.856822666s ago: executing program 7 (id=14882): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@const={0xe, 0x0, 0x0, 0xa, 0x5}, @fwd={0xa}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x8}, {0x3, 0x9}, {0xf, 0x2}, {0xc, 0x8}, {0x4, 0x5}]}, @fwd={0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000400)=""/89, 0xd6, 0xfffffffffffffd85, 0x1, 0xee31}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x44}, 0x50) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r5, 0x3, 0x1) pread64(r5, &(0x7f0000001a80)=""/105, 0x69, 0x27) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941", 0x4}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x90000011}) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000100)={r9}) bind$xdp(r10, &(0x7f00000005c0)={0x2d, 0x4, 0x0, 0x14}, 0x10) ioperm(0x3, 0xffffffffffffff01, 0xffff) 3m13.678896939s ago: executing program 7 (id=14888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r2, 0x0, 0x7) 3m13.021794151s ago: executing program 7 (id=14895): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000ecff00000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={@private2, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff, 0x5, 0x400, 0x500, 0x8, 0x2000100}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x12, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) 3m13.000417852s ago: executing program 64 (id=14895): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000ecff00000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={@private2, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff, 0x5, 0x400, 0x500, 0x8, 0x2000100}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x12, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) 2m3.000176344s ago: executing program 2 (id=16264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0) 2m2.947341035s ago: executing program 2 (id=16266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0xee01, 0xee00) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 2m2.851498527s ago: executing program 2 (id=16270): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 2m2.779112508s ago: executing program 2 (id=16272): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) lchown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000240)="4937b158", 0x4}], 0x2}, 0x4004884) stat(&(0x7f0000000140)='./file0\x00', 0x0) 2m2.415958815s ago: executing program 2 (id=16277): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140), 0x0, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2m2.018459433s ago: executing program 2 (id=16286): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x2, &(0x7f0000000000)=[{0x30, 0x80, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x2}, 0x0) 2m1.998771143s ago: executing program 65 (id=16286): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x2, &(0x7f0000000000)=[{0x30, 0x80, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x2}, 0x0) 3.837962576s ago: executing program 4 (id=17966): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, 0x0}, 0x0) 3.801235876s ago: executing program 4 (id=17967): syz_usb_connect(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) 3.12661267s ago: executing program 4 (id=17977): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb050000a0000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d4db1093c60353b688e92112e06b20f72915246820609c898503112777e5d1b095781599f1b6dc3aac370f0497be950c826463826abeb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.975017882s ago: executing program 4 (id=17980): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@fallback, r0, 0x16, 0x1, 0xffffffffffffffff, @void, @value=r0}, 0x20) 2.930536943s ago: executing program 4 (id=17982): r0 = syz_io_uring_setup(0xeca, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x12d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.919899844s ago: executing program 4 (id=17983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00ffff000500"/18, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 1.316988674s ago: executing program 9 (id=18024): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c6029455091676c214569a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d040700ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e99b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe24}}, 0xffffff5c) 1.238871326s ago: executing program 6 (id=18026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x1, {0x1, 0xff}, {0x1, 0xf0, 0x1}, 0x1, 0xff}, {0x3, 0x0, {0x1, 0x0, 0x1}, {0x1, 0xff, 0x2}, 0x1, 0xff}, {0x1, 0xffffffffffffffff, {0x0, 0x0, 0x2}, {0x1, 0x1}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.238540556s ago: executing program 9 (id=18027): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 1.182626807s ago: executing program 9 (id=18028): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x500) 1.182517037s ago: executing program 9 (id=18029): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={r2, 0x101, 0x2, 0x8000, 0x2, 0x7, 0x5, 0x0, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0xffffffff, 0x401, 0x8, 0xa}}, &(0x7f0000000700)=0xb0) 1.182431427s ago: executing program 9 (id=18030): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0xeca, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x12d5}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.02179931s ago: executing program 3 (id=18034): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.006710981s ago: executing program 3 (id=18035): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x2, 0x0) 936.522552ms ago: executing program 3 (id=18036): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000017c0)=""/121, 0x79}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) 446.617352ms ago: executing program 9 (id=18037): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 216.878106ms ago: executing program 5 (id=18038): r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000300)='./file0\x00', 0x4) 202.426796ms ago: executing program 5 (id=18039): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') getdents(r0, &(0x7f00000000c0)=""/35, 0x23) getdents64(r0, 0xffffffffffffffff, 0x43) 151.204337ms ago: executing program 5 (id=18040): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x500) 150.983197ms ago: executing program 6 (id=18041): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@multicast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {0x3, 0xe22, 0x15, 0x0, @opaque="7dc2c7c577ee7fd51eb4bf8764"}}}}}}, 0x0) 150.809887ms ago: executing program 5 (id=18042): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 150.581087ms ago: executing program 6 (id=18043): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32], 0x20) 131.698907ms ago: executing program 6 (id=18044): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) 131.384087ms ago: executing program 5 (id=18045): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 109.691898ms ago: executing program 6 (id=18046): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x2, 0x0) 109.354658ms ago: executing program 5 (id=18047): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = syz_io_uring_setup(0xeca, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x12d5}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 82.680768ms ago: executing program 6 (id=18048): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}, 0xd18}, {{0x0, 0x0, &(0x7f0000002d40)=[{0x0}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x10000}], 0x2, 0x600181a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540), 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 40.375019ms ago: executing program 3 (id=18049): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1) 21.47359ms ago: executing program 3 (id=18050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x8000) 0s ago: executing program 3 (id=18051): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x1) listen(r3, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)={0x38, 0x0, 0x4, 0x70bd25, 0x25cfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) r6 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): eaned up [ 929.675563][T20598] EXT4-fs (loop6): 1 truncate cleaned up [ 929.710130][T20598] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 929.719973][T20598] SELinux: failed to load policy [ 929.982209][T20610] loop6: detected capacity change from 0 to 2048 [ 930.173413][T20614] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 930.208127][T20614] SELinux: failed to load policy [ 930.213212][ T29] audit: type=1326 audit(2000000185.239:54066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.9.17013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 930.236982][ T29] audit: type=1326 audit(2000000185.249:54067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.9.17013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 930.260812][ T29] audit: type=1326 audit(2000000185.249:54068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.9.17013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 930.284604][ T29] audit: type=1326 audit(2000000185.249:54069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.9.17013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 930.309243][ T29] audit: type=1326 audit(2000000185.249:54070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20615 comm="syz.9.17013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 930.469541][T20630] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 930.481259][T20630] SELinux: failed to load policy [ 930.892809][T20659] loop6: detected capacity change from 0 to 2048 [ 930.930162][T20661] loop5: detected capacity change from 0 to 512 [ 930.941954][T20661] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 931.035126][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17024'. [ 931.044304][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17024'. [ 931.053434][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17024'. [ 931.078800][T20661] EXT4-fs (loop5): 1 truncate cleaned up [ 931.207448][T20670] netlink: 68 bytes leftover after parsing attributes in process `syz.5.17023'. [ 931.224760][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17024'. [ 931.233958][T20667] netlink: 'syz.4.17024': attribute type 6 has an invalid length. [ 931.636161][T20705] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 931.642744][T20705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 931.650337][T20705] vhci_hcd vhci_hcd.0: Device attached [ 932.056102][T20707] vhci_hcd: connection closed [ 932.056379][T19130] vhci_hcd: stop threads [ 932.065497][T19130] vhci_hcd: release socket [ 932.070005][T19130] vhci_hcd: disconnect device [ 932.104915][ T10] vhci_hcd: vhci_device speed not set [ 932.150264][T20725] serio: Serial port ptm0 [ 932.401914][T20745] loop3: detected capacity change from 0 to 512 [ 932.409013][T20745] EXT4-fs: Ignoring removed mblk_io_submit option [ 932.422155][T20745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 932.443159][T20745] EXT4-fs (loop3): 1 truncate cleaned up [ 932.514698][T20757] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 932.524733][T20757] SELinux: failed to load policy [ 932.530114][T20759] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 932.570699][T20759] SELinux: failed to load policy [ 932.777160][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17037'. [ 932.786362][T20785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17037'. [ 932.795525][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17037'. [ 932.827710][T20785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17037'. [ 932.836942][T20785] netlink: 'syz.6.17037': attribute type 6 has an invalid length. [ 933.100812][T20811] loop6: detected capacity change from 0 to 2048 [ 934.186126][T20836] loop5: detected capacity change from 0 to 2048 [ 934.287584][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 934.287602][ T29] audit: type=1400 audit(2000000189.330:54129): avc: denied { ioctl } for pid=20837 comm="syz.9.17042" path="socket:[195316]" dev="sockfs" ino=195316 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 934.402289][T20841] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 934.414766][T20841] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 934.517770][T20841] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 934.591422][T20852] loop6: detected capacity change from 0 to 512 [ 934.598399][T20852] EXT4-fs: Ignoring removed mblk_io_submit option [ 934.613525][T20852] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 934.630959][T20852] EXT4-fs (loop6): 1 truncate cleaned up [ 934.641755][T20849] ref_ctr_offset mismatch. inode: 0xce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 934.659618][ T29] audit: type=1326 audit(2000000189.700:54130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.684057][ T29] audit: type=1326 audit(2000000189.700:54132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.708725][ T29] audit: type=1326 audit(2000000189.700:54133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.732561][ T29] audit: type=1326 audit(2000000189.700:54134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.735686][T20852] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 934.757201][ T29] audit: type=1326 audit(2000000189.700:54135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.790644][ T29] audit: type=1326 audit(2000000189.700:54136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.814523][ T29] audit: type=1326 audit(2000000189.700:54137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.835575][T20852] SELinux: failed to load policy [ 934.839007][ T29] audit: type=1326 audit(2000000189.700:54138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.844758][T12909] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 934.867864][ T29] audit: type=1326 audit(2000000189.700:54139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20853 comm="syz.5.17046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 934.876672][T12909] ref_tracker: netdev@ffff888119fe5550 has 1/1 users at [ 934.876672][T12909] netdev_get_by_index+0x13e/0x1b0 [ 934.876672][T12909] fib6_nh_init+0xeb/0x15a0 [ 934.876672][T12909] rtm_new_nexthop+0x1ddb/0x4530 [ 934.876672][T12909] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 934.876672][T12909] netlink_rcv_skb+0x123/0x220 [ 934.876672][T12909] rtnetlink_rcv+0x1c/0x30 [ 934.876672][T12909] netlink_unicast+0x5bd/0x690 [ 934.876672][T12909] netlink_sendmsg+0x58b/0x6b0 [ 934.876672][T12909] __sock_sendmsg+0x142/0x180 [ 934.876672][T12909] ____sys_sendmsg+0x31e/0x4e0 [ 934.876672][T12909] ___sys_sendmsg+0x17b/0x1d0 [ 934.876672][T12909] __x64_sys_sendmsg+0xd4/0x160 [ 934.876672][T12909] x64_sys_call+0x191e/0x2ff0 [ 934.876672][T12909] do_syscall_64+0xd2/0x200 [ 934.876672][T12909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.876672][T12909] [ 935.019056][T20854] netlink: 272 bytes leftover after parsing attributes in process `syz.5.17046'. [ 935.052112][T20868] serio: Serial port ptm0 [ 935.085270][T20871] loop5: detected capacity change from 0 to 512 [ 935.092019][T20871] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.101963][T20871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 935.115818][T20871] EXT4-fs (loop5): 1 truncate cleaned up [ 935.229511][T20871] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 935.239625][T20871] SELinux: failed to load policy [ 935.312395][T20891] loop5: detected capacity change from 0 to 512 [ 935.319157][T20891] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.327084][T20891] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 935.340140][T20891] EXT4-fs (loop5): 1 truncate cleaned up [ 935.366669][T20891] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 935.377012][T20891] SELinux: failed to load policy [ 935.517701][T20899] FAULT_INJECTION: forcing a failure. [ 935.517701][T20899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.530968][T20899] CPU: 0 UID: 0 PID: 20899 Comm: syz.5.17063 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 935.531061][T20899] Tainted: [W]=WARN [ 935.531070][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.531158][T20899] Call Trace: [ 935.531166][T20899] [ 935.531176][T20899] __dump_stack+0x1d/0x30 [ 935.531202][T20899] dump_stack_lvl+0xe8/0x140 [ 935.531228][T20899] dump_stack+0x15/0x1b [ 935.531249][T20899] should_fail_ex+0x265/0x280 [ 935.531309][T20899] should_fail+0xb/0x20 [ 935.531329][T20899] should_fail_usercopy+0x1a/0x20 [ 935.531353][T20899] strncpy_from_user+0x25/0x230 [ 935.531422][T20899] ? kmem_cache_alloc_noprof+0x186/0x310 [ 935.531450][T20899] ? getname_flags+0x80/0x3b0 [ 935.531485][T20899] getname_flags+0xae/0x3b0 [ 935.531521][T20899] do_sys_openat2+0x60/0x110 [ 935.531619][T20899] __x64_sys_open+0xe6/0x110 [ 935.531733][T20899] x64_sys_call+0x1457/0x2ff0 [ 935.531761][T20899] do_syscall_64+0xd2/0x200 [ 935.531880][T20899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 935.531904][T20899] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 935.531934][T20899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.531963][T20899] RIP: 0033:0x7fd7b479ebe9 [ 935.532001][T20899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.532032][T20899] RSP: 002b:00007fd7b31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 935.532052][T20899] RAX: ffffffffffffffda RBX: 00007fd7b49d5fa0 RCX: 00007fd7b479ebe9 [ 935.532064][T20899] RDX: 00000000000001f6 RSI: 0000000000145142 RDI: 0000200000000040 [ 935.532077][T20899] RBP: 00007fd7b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 935.532088][T20899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.532100][T20899] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 935.532125][T20899] [ 935.945091][T20918] loop6: detected capacity change from 0 to 512 [ 935.958509][T20918] EXT4-fs: Ignoring removed mblk_io_submit option [ 935.969108][T20918] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 935.982930][T20918] EXT4-fs (loop6): 1 truncate cleaned up [ 936.010947][T20918] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 936.020704][T20918] SELinux: failed to load policy [ 936.102526][T20938] serio: Serial port ptm0 [ 936.160982][T20940] __nla_validate_parse: 3 callbacks suppressed [ 936.161004][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17080'. [ 936.262040][T20953] loop6: detected capacity change from 0 to 512 [ 936.277824][T20953] EXT4-fs: Ignoring removed mblk_io_submit option [ 936.288785][T20953] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 936.300359][T20953] EXT4-fs (loop6): 1 truncate cleaned up [ 936.343233][T20953] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 936.370780][T20953] SELinux: failed to load policy [ 936.575075][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17094'. [ 936.668895][T20977] loop6: detected capacity change from 0 to 128 [ 936.910954][T20984] FAULT_INJECTION: forcing a failure. [ 936.910954][T20984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.924244][T20984] CPU: 0 UID: 0 PID: 20984 Comm: syz.6.17097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 936.924284][T20984] Tainted: [W]=WARN [ 936.924293][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.924309][T20984] Call Trace: [ 936.924317][T20984] [ 936.924403][T20984] __dump_stack+0x1d/0x30 [ 936.924430][T20984] dump_stack_lvl+0xe8/0x140 [ 936.924484][T20984] dump_stack+0x15/0x1b [ 936.924500][T20984] should_fail_ex+0x265/0x280 [ 936.924530][T20984] should_fail+0xb/0x20 [ 936.924579][T20984] should_fail_usercopy+0x1a/0x20 [ 936.924618][T20984] _copy_to_user+0x20/0xa0 [ 936.924660][T20984] simple_read_from_buffer+0xb5/0x130 [ 936.924690][T20984] proc_fail_nth_read+0x10e/0x150 [ 936.924803][T20984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.924835][T20984] vfs_read+0x1a8/0x770 [ 936.924856][T20984] ? __rcu_read_unlock+0x4f/0x70 [ 936.924882][T20984] ? __fget_files+0x184/0x1c0 [ 936.924905][T20984] ? finish_task_switch+0xad/0x2b0 [ 936.924936][T20984] ksys_read+0xda/0x1a0 [ 936.924966][T20984] __x64_sys_read+0x40/0x50 [ 936.924988][T20984] x64_sys_call+0x27bc/0x2ff0 [ 936.925013][T20984] do_syscall_64+0xd2/0x200 [ 936.925132][T20984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 936.925161][T20984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 936.925189][T20984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.925275][T20984] RIP: 0033:0x7f9a8850d5fc [ 936.925294][T20984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 936.925312][T20984] RSP: 002b:00007f9a86f77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 936.925331][T20984] RAX: ffffffffffffffda RBX: 00007f9a88745fa0 RCX: 00007f9a8850d5fc [ 936.925347][T20984] RDX: 000000000000000f RSI: 00007f9a86f770a0 RDI: 0000000000000007 [ 936.925364][T20984] RBP: 00007f9a86f77090 R08: 0000000000000000 R09: 0000000000000000 [ 936.925413][T20984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.925484][T20984] R13: 00007f9a88746038 R14: 00007f9a88745fa0 R15: 00007ffc5bee6f38 [ 936.925509][T20984] [ 937.202077][T20994] loop3: detected capacity change from 0 to 512 [ 937.212854][T20994] EXT4-fs: Ignoring removed mblk_io_submit option [ 937.221205][T20994] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 937.272739][T20995] loop5: detected capacity change from 0 to 2048 [ 937.296512][T20990] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 937.314496][T20990] SELinux: failed to load policy [ 937.356113][T20994] EXT4-fs (loop3): 1 truncate cleaned up [ 937.405615][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17105'. [ 937.425115][T21007] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 937.455408][T21007] SELinux: failed to load policy [ 937.502911][T10590] EXT4-fs unmount: 45 callbacks suppressed [ 937.503001][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.543100][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17108'. [ 937.552308][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17108'. [ 937.561392][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17108'. [ 937.596246][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.607028][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17108'. [ 937.616176][T21015] netlink: 'syz.4.17108': attribute type 6 has an invalid length. [ 937.649423][T21019] serio: Serial port ptm0 [ 937.668304][T21023] loop5: detected capacity change from 0 to 512 [ 937.676242][T21023] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 937.786638][T21023] EXT4-fs (loop5): 1 truncate cleaned up [ 937.796311][T21023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.147388][T21035] SELinux: syz.9.17114 (21035) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 938.633410][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.721372][T21045] loop3: detected capacity change from 0 to 512 [ 938.757866][T21045] EXT4-fs: Ignoring removed mblk_io_submit option [ 938.768025][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17119'. [ 938.768356][T21045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 938.789303][T21045] EXT4-fs (loop3): 1 truncate cleaned up [ 938.791502][T21052] FAULT_INJECTION: forcing a failure. [ 938.791502][T21052] name failslab, interval 1, probability 0, space 0, times 0 [ 938.808087][T21052] CPU: 0 UID: 0 PID: 21052 Comm: syz.5.17121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 938.808200][T21052] Tainted: [W]=WARN [ 938.808209][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 938.808225][T21052] Call Trace: [ 938.808234][T21052] [ 938.808324][T21052] __dump_stack+0x1d/0x30 [ 938.808362][T21052] dump_stack_lvl+0xe8/0x140 [ 938.808392][T21052] dump_stack+0x15/0x1b [ 938.808413][T21052] should_fail_ex+0x265/0x280 [ 938.808510][T21052] should_failslab+0x8c/0xb0 [ 938.808548][T21052] kmem_cache_alloc_noprof+0x50/0x310 [ 938.808583][T21052] ? alloc_empty_file+0x76/0x200 [ 938.808621][T21052] alloc_empty_file+0x76/0x200 [ 938.808652][T21052] path_openat+0x68/0x2170 [ 938.808718][T21052] ? __rcu_read_unlock+0x34/0x70 [ 938.808741][T21052] ? filemap_map_pages+0x86b/0xab0 [ 938.808766][T21052] ? css_rstat_updated+0xb7/0x240 [ 938.808798][T21052] do_filp_open+0x109/0x230 [ 938.808833][T21052] do_sys_openat2+0xa6/0x110 [ 938.808924][T21052] __x64_sys_openat+0xf2/0x120 [ 938.808960][T21052] x64_sys_call+0x2e9c/0x2ff0 [ 938.809013][T21052] do_syscall_64+0xd2/0x200 [ 938.809053][T21052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 938.809084][T21052] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 938.809121][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.809176][T21052] RIP: 0033:0x7fd7b479d550 [ 938.809191][T21052] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 938.809209][T21052] RSP: 002b:00007fd7b31feb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 938.809227][T21052] RAX: ffffffffffffffda RBX: 0000000000008401 RCX: 00007fd7b479d550 [ 938.809244][T21052] RDX: 0000000000008401 RSI: 00007fd7b31fec10 RDI: 00000000ffffff9c [ 938.809260][T21052] RBP: 00007fd7b31fec10 R08: 0000000000000000 R09: 0000000000000000 [ 938.809276][T21052] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 938.809317][T21052] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 938.809341][T21052] [ 938.810105][T21045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.164782][T21065] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 939.192070][T21065] SELinux: failed to load policy [ 939.281366][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.334904][T21072] loop3: detected capacity change from 0 to 512 [ 939.347913][T21072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 939.407527][T21067] loop5: detected capacity change from 0 to 2048 [ 939.463873][T21073] loop6: detected capacity change from 0 to 2048 [ 939.563201][T21067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.594108][T21073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 939.676559][T21072] EXT4-fs (loop3): 1 truncate cleaned up [ 939.716554][T21072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.026577][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.128851][T21084] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17129'. [ 940.206217][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.398422][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 940.398436][ T29] audit: type=1326 audit(2000000195.440:54214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.437411][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.502718][T21095] loop3: detected capacity change from 0 to 2048 [ 940.597366][T21095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.800070][ T29] audit: type=1326 audit(2000000195.450:54215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.824569][ T29] audit: type=1326 audit(2000000195.610:54216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.848438][ T29] audit: type=1326 audit(2000000195.610:54217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.873002][ T29] audit: type=1326 audit(2000000195.610:54218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.897973][ T29] audit: type=1326 audit(2000000195.610:54219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.921720][ T29] audit: type=1326 audit(2000000195.610:54220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.946279][ T29] audit: type=1326 audit(2000000195.610:54221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.970130][ T29] audit: type=1326 audit(2000000195.610:54222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 940.994627][ T29] audit: type=1326 audit(2000000195.610:54223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21093 comm="syz.6.17133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8850ebe9 code=0x7ffc0000 [ 941.101762][T21109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17137'. [ 941.148401][T21109] netlink: 'syz.5.17137': attribute type 6 has an invalid length. [ 941.169030][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.186091][T21116] loop5: detected capacity change from 0 to 512 [ 941.193900][T21116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 941.205248][T21116] EXT4-fs (loop5): 1 truncate cleaned up [ 941.211440][T21116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.603499][T21118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21118 comm=syz.3.17139 [ 942.050748][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.201483][T21149] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 942.211348][T21149] SELinux: failed to load policy [ 942.277993][T21150] loop5: detected capacity change from 0 to 2048 [ 942.319896][T21150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.323436][T21155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 942.347779][T21155] SELinux: failed to load policy [ 942.423332][T21162] __nla_validate_parse: 3 callbacks suppressed [ 942.423351][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17157'. [ 942.727116][T21177] loop3: detected capacity change from 0 to 512 [ 942.733906][T21177] EXT4-fs: Ignoring removed mblk_io_submit option [ 942.741694][T21177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 942.753173][T21177] EXT4-fs (loop3): 1 truncate cleaned up [ 942.759358][T21177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 942.793458][T21177] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 942.804037][T21177] SELinux: failed to load policy [ 942.827139][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.932792][T21183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17166'. [ 942.988536][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.098361][T21189] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17168'. [ 943.150437][T21191] FAULT_INJECTION: forcing a failure. [ 943.150437][T21191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.163780][T21191] CPU: 0 UID: 0 PID: 21191 Comm: syz.5.17168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 943.163863][T21191] Tainted: [W]=WARN [ 943.163873][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 943.163887][T21191] Call Trace: [ 943.163894][T21191] [ 943.163902][T21191] __dump_stack+0x1d/0x30 [ 943.163932][T21191] dump_stack_lvl+0xe8/0x140 [ 943.163951][T21191] dump_stack+0x15/0x1b [ 943.163967][T21191] should_fail_ex+0x265/0x280 [ 943.163991][T21191] should_fail+0xb/0x20 [ 943.164015][T21191] should_fail_usercopy+0x1a/0x20 [ 943.164047][T21191] _copy_from_user+0x1c/0xb0 [ 943.164125][T21191] vt_resizex+0x4a/0x350 [ 943.164167][T21191] vt_ioctl+0x107a/0x1880 [ 943.164220][T21191] ? tty_jobctrl_ioctl+0x29e/0x810 [ 943.164255][T21191] tty_ioctl+0x7db/0xb80 [ 943.164276][T21191] ? __pfx_tty_ioctl+0x10/0x10 [ 943.164297][T21191] __se_sys_ioctl+0xcb/0x140 [ 943.164319][T21191] __x64_sys_ioctl+0x43/0x50 [ 943.164376][T21191] x64_sys_call+0x1816/0x2ff0 [ 943.164403][T21191] do_syscall_64+0xd2/0x200 [ 943.164443][T21191] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 943.164474][T21191] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 943.164569][T21191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.164670][T21191] RIP: 0033:0x7fd7b479ebe9 [ 943.164690][T21191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.164713][T21191] RSP: 002b:00007fd7b31de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.164737][T21191] RAX: ffffffffffffffda RBX: 00007fd7b49d6090 RCX: 00007fd7b479ebe9 [ 943.164754][T21191] RDX: 0000200000000240 RSI: 000000000000560a RDI: 0000000000000003 [ 943.164766][T21191] RBP: 00007fd7b31de090 R08: 0000000000000000 R09: 0000000000000000 [ 943.164851][T21191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.164871][T21191] R13: 00007fd7b49d6128 R14: 00007fd7b49d6090 R15: 00007ffea656f328 [ 943.164890][T21191] [ 943.167816][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17169'. [ 943.481335][T21211] netlink: 'syz.3.17175': attribute type 1 has an invalid length. [ 943.489339][T21211] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17175'. [ 943.555240][T21225] 9pnet_fd: Insufficient options for proto=fd [ 943.808589][T21252] loop5: detected capacity change from 0 to 512 [ 943.815895][T21252] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 943.836786][T21252] EXT4-fs (loop5): 1 truncate cleaned up [ 943.848790][T21252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.934727][T21261] loop6: detected capacity change from 0 to 2048 [ 944.166294][T21261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.213963][T21271] loop3: detected capacity change from 0 to 2048 [ 944.297631][T21271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.311709][T21288] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 944.587805][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.686551][T21325] serio: Serial port ptm0 [ 944.710719][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.762014][T21335] loop5: detected capacity change from 0 to 512 [ 944.784609][T21335] EXT4-fs: Ignoring removed mblk_io_submit option [ 944.797359][T21335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 944.800446][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17190'. [ 944.816380][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17190'. [ 944.825473][T21333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17190'. [ 944.835655][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17190'. [ 944.844808][T21333] netlink: 'syz.4.17190': attribute type 6 has an invalid length. [ 944.850997][T21335] EXT4-fs (loop5): 1 truncate cleaned up [ 944.872233][T21335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.062596][T21368] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 945.113528][T21368] SELinux: failed to load policy [ 945.314612][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.398056][T17830] block device autoloading is deprecated and will be removed. [ 945.446916][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.486703][T21406] netlink: 'syz.6.17198': attribute type 1 has an invalid length. [ 945.494622][T21406] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17198'. [ 945.511575][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 945.511597][ T29] audit: type=1400 audit(2000000200.550:54354): avc: denied { getopt } for pid=21405 comm="syz.6.17198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 945.569998][ T29] audit: type=1326 audit(2000000200.610:54355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.5.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 945.594909][ T29] audit: type=1326 audit(2000000200.610:54356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.5.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 945.618750][ T29] audit: type=1326 audit(2000000200.610:54357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.5.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 945.659535][T21402] bridge0: entered promiscuous mode [ 945.667489][T21402] bridge0: port 1(macvlan2) entered blocking state [ 945.674366][T21402] bridge0: port 1(macvlan2) entered disabled state [ 945.674355][ T29] audit: type=1326 audit(2000000200.720:54358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.5.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 945.674421][ T29] audit: type=1326 audit(2000000200.720:54359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21407 comm="syz.5.17199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 945.681624][T21402] macvlan2: entered allmulticast mode [ 945.733912][T21402] bridge0: entered allmulticast mode [ 945.754799][T21402] macvlan2: left allmulticast mode [ 945.759992][T21402] bridge0: left allmulticast mode [ 945.777100][T21402] bridge0: left promiscuous mode [ 945.908094][T21421] netlink: 'syz.6.17202': attribute type 6 has an invalid length. [ 945.916246][T21419] loop5: detected capacity change from 0 to 2048 [ 945.937109][T21426] wireguard0: entered promiscuous mode [ 945.942654][T21426] wireguard0: entered allmulticast mode [ 945.948778][T21432] loop6: detected capacity change from 0 to 512 [ 945.949159][T21432] EXT4-fs: Ignoring removed mblk_io_submit option [ 945.962294][T21419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.981731][T21432] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 945.993490][T21432] EXT4-fs (loop6): 1 truncate cleaned up [ 945.999742][T21432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.102227][T21432] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 946.112980][T21432] SELinux: failed to load policy [ 946.191469][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.253876][T21449] serio: Serial port ptm0 [ 946.264316][ T29] audit: type=1326 audit(2000000201.310:54360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.9.17211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 946.288922][ T29] audit: type=1326 audit(2000000201.310:54361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.9.17211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 946.313428][ T29] audit: type=1326 audit(2000000201.310:54362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.9.17211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 946.341608][ T29] audit: type=1326 audit(2000000201.360:54363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21450 comm="syz.9.17211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 946.626822][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.797421][T21518] loop5: detected capacity change from 0 to 1024 [ 946.804281][T21518] EXT4-fs: dax option not supported [ 947.288595][T21587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 947.299162][T21587] SELinux: failed to load policy [ 947.430777][T21609] 9pnet_fd: Insufficient options for proto=fd [ 947.618890][T21630] __nla_validate_parse: 9 callbacks suppressed [ 947.618932][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17232'. [ 947.635165][T21630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17232'. [ 947.644293][T21626] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 947.644321][T21626] SELinux: failed to load policy [ 947.659958][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17232'. [ 947.674473][T21630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17232'. [ 947.683582][T21630] netlink: 'syz.3.17232': attribute type 6 has an invalid length. [ 947.769006][T21638] serio: Serial port ptm0 [ 947.803264][T21637] vxcan1 speed is unknown, defaulting to 1000 [ 948.134155][T21644] loop3: detected capacity change from 0 to 2048 [ 948.187782][T21644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.336991][T21637] lo speed is unknown, defaulting to 1000 [ 948.456415][T21657] loop6: detected capacity change from 0 to 512 [ 948.463344][T21657] EXT4-fs: Ignoring removed mblk_io_submit option [ 948.471105][T21657] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 948.482416][T21657] EXT4-fs (loop6): 1 truncate cleaned up [ 948.491025][T21657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.533408][T21657] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 948.560645][T21657] SELinux: failed to load policy [ 948.636136][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.726583][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.848186][T21663] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 948.909834][T21663] SELinux: failed to load policy [ 949.047293][ T36] hid_parser_main: 16 callbacks suppressed [ 949.047313][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.060662][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.068790][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.078885][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17247'. [ 949.105007][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.112478][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.119986][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.128336][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.135798][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.143242][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.150729][ T36] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 949.168424][ T36] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz1 [ 949.195513][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17248'. [ 949.204714][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17248'. [ 949.213761][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17248'. [ 949.315628][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17248'. [ 949.324957][T21682] netlink: 'syz.3.17248': attribute type 6 has an invalid length. [ 949.366658][T21690] loop5: detected capacity change from 0 to 512 [ 949.376596][T21690] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.383490][T21690] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 949.428639][T21690] EXT4-fs (loop5): 1 truncate cleaned up [ 949.444727][T21695] loop3: detected capacity change from 0 to 512 [ 949.452097][T21690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.465332][T21695] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.487130][T21695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 949.533345][T21695] EXT4-fs (loop3): 1 truncate cleaned up [ 949.547477][T21695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.614398][T21704] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 949.691730][T21710] loop6: detected capacity change from 0 to 512 [ 949.714367][T21710] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.721356][T21710] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 949.739283][T21710] EXT4-fs (loop6): 1 truncate cleaned up [ 949.751468][T21704] SELinux: failed to load policy [ 949.754461][T21710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.757785][T21712] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 949.904060][T21712] SELinux: failed to load policy [ 949.909280][T21714] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 949.919083][T21714] SELinux: failed to load policy [ 950.050361][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.093212][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.115979][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.194677][T21716] netlink: 'syz.5.17258': attribute type 1 has an invalid length. [ 950.202591][T21716] netlink: 224 bytes leftover after parsing attributes in process `syz.5.17258'. [ 950.310812][T21722] serio: Serial port ptm0 [ 950.360383][T21729] FAULT_INJECTION: forcing a failure. [ 950.360383][T21729] name failslab, interval 1, probability 0, space 0, times 0 [ 950.373364][T21729] CPU: 1 UID: 0 PID: 21729 Comm: syz.5.17264 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 950.373404][T21729] Tainted: [W]=WARN [ 950.373413][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 950.373429][T21729] Call Trace: [ 950.373438][T21729] [ 950.373445][T21729] __dump_stack+0x1d/0x30 [ 950.373468][T21729] dump_stack_lvl+0xe8/0x140 [ 950.373500][T21729] dump_stack+0x15/0x1b [ 950.373516][T21729] should_fail_ex+0x265/0x280 [ 950.373547][T21729] should_failslab+0x8c/0xb0 [ 950.373574][T21729] kmem_cache_alloc_node_noprof+0x57/0x320 [ 950.373671][T21729] ? alloc_vmap_area+0x231/0xe50 [ 950.373708][T21729] alloc_vmap_area+0x231/0xe50 [ 950.373771][T21729] ? should_failslab+0x8c/0xb0 [ 950.373800][T21729] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 950.373845][T21729] __get_vm_area_node+0x173/0x1d0 [ 950.374013][T21729] __vmalloc_node_range_noprof+0x273/0xe00 [ 950.374132][T21729] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.374164][T21729] ? avc_has_perm_noaudit+0x1b1/0x200 [ 950.374364][T21729] ? cred_has_capability+0x210/0x280 [ 950.374391][T21729] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.374426][T21729] __vmalloc_noprof+0x83/0xc0 [ 950.374459][T21729] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.374567][T21729] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.374592][T21729] ? bpf_prog_alloc+0x2a/0x150 [ 950.374640][T21729] bpf_prog_alloc+0x3c/0x150 [ 950.374676][T21729] bpf_prog_load+0x514/0x1070 [ 950.374761][T21729] ? security_bpf+0x2b/0x90 [ 950.374797][T21729] __sys_bpf+0x462/0x7b0 [ 950.374832][T21729] __x64_sys_bpf+0x41/0x50 [ 950.374892][T21729] x64_sys_call+0x2aea/0x2ff0 [ 950.374984][T21729] do_syscall_64+0xd2/0x200 [ 950.375025][T21729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 950.375050][T21729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 950.375196][T21729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.375219][T21729] RIP: 0033:0x7fd7b479ebe9 [ 950.375233][T21729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.375274][T21729] RSP: 002b:00007fd7b31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 950.375300][T21729] RAX: ffffffffffffffda RBX: 00007fd7b49d5fa0 RCX: 00007fd7b479ebe9 [ 950.375313][T21729] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 950.375326][T21729] RBP: 00007fd7b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 950.375337][T21729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.375348][T21729] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 950.375395][T21729] [ 950.634346][T21729] syz.5.17264: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 950.650544][T21729] CPU: 1 UID: 0 PID: 21729 Comm: syz.5.17264 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 950.650580][T21729] Tainted: [W]=WARN [ 950.650588][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 950.650601][T21729] Call Trace: [ 950.650609][T21729] [ 950.650691][T21729] __dump_stack+0x1d/0x30 [ 950.650738][T21729] dump_stack_lvl+0xe8/0x140 [ 950.650763][T21729] dump_stack+0x15/0x1b [ 950.650831][T21729] warn_alloc+0x12b/0x1a0 [ 950.650908][T21729] __vmalloc_node_range_noprof+0x297/0xe00 [ 950.650948][T21729] ? avc_has_perm_noaudit+0x1b1/0x200 [ 950.650978][T21729] ? cred_has_capability+0x210/0x280 [ 950.651003][T21729] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.651113][T21729] __vmalloc_noprof+0x83/0xc0 [ 950.651168][T21729] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.651249][T21729] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 950.651282][T21729] ? bpf_prog_alloc+0x2a/0x150 [ 950.651392][T21729] bpf_prog_alloc+0x3c/0x150 [ 950.651492][T21729] bpf_prog_load+0x514/0x1070 [ 950.651535][T21729] ? security_bpf+0x2b/0x90 [ 950.651616][T21729] __sys_bpf+0x462/0x7b0 [ 950.651656][T21729] __x64_sys_bpf+0x41/0x50 [ 950.651753][T21729] x64_sys_call+0x2aea/0x2ff0 [ 950.651779][T21729] do_syscall_64+0xd2/0x200 [ 950.651827][T21729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 950.651858][T21729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 950.651904][T21729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.651928][T21729] RIP: 0033:0x7fd7b479ebe9 [ 950.651946][T21729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.652001][T21729] RSP: 002b:00007fd7b31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 950.652023][T21729] RAX: ffffffffffffffda RBX: 00007fd7b49d5fa0 RCX: 00007fd7b479ebe9 [ 950.652038][T21729] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 950.652053][T21729] RBP: 00007fd7b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 950.652139][T21729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.652198][T21729] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 950.652220][T21729] [ 950.652229][T21729] Mem-Info: [ 950.879553][T21729] active_anon:12394 inactive_anon:41 isolated_anon:0 [ 950.879553][T21729] active_file:25825 inactive_file:3207 isolated_file:0 [ 950.879553][T21729] unevictable:0 dirty:560 writeback:18 [ 950.879553][T21729] slab_reclaimable:8380 slab_unreclaimable:167712 [ 950.879553][T21729] mapped:37299 shmem:9127 pagetables:1190 [ 950.879553][T21729] sec_pagetables:0 bounce:0 [ 950.879553][T21729] kernel_misc_reclaimable:0 [ 950.879553][T21729] free:1692170 free_pcp:2523 free_cma:0 [ 950.925553][T21729] Node 0 active_anon:49576kB inactive_anon:164kB active_file:103300kB inactive_file:12828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149196kB dirty:2240kB writeback:72kB shmem:36508kB kernel_stack:9232kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 950.953486][T21729] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.982880][T21729] lowmem_reserve[]: 0 2883 7862 7862 [ 950.988268][T21729] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 951.018944][T21729] lowmem_reserve[]: 0 0 4978 4978 [ 951.024103][T21729] Node 0 Normal free:3804032kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50852kB inactive_anon:164kB active_file:103300kB inactive_file:12828kB unevictable:0kB writepending:2312kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:5220kB local_pcp:1432kB free_cma:0kB [ 951.057024][T21729] lowmem_reserve[]: 0 0 0 0 [ 951.061583][T21729] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 951.074433][T21729] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 951.091335][T21729] Node 0 Normal: 2*4kB (ME) 35*8kB (U) 606*16kB (UM) 902*32kB (UME) 507*64kB (UM) 366*128kB (UME) 276*256kB (UME) 153*512kB (UME) 68*1024kB (UME) 69*2048kB (UM) 812*4096kB (UME) = 3804032kB [ 951.110360][T21729] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 951.120371][T21729] 38810 total pagecache pages [ 951.125130][T21729] 47 pages in swap cache [ 951.129375][T21729] Free swap = 124808kB [ 951.133581][T21729] Total swap = 124996kB [ 951.137774][T21729] 2097051 pages RAM [ 951.141587][T21729] 0 pages HighMem/MovableOnly [ 951.147025][T21729] 80446 pages reserved [ 951.275619][T21738] loop5: detected capacity change from 0 to 512 [ 951.327659][T21738] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.17268: bad orphan inode 11862016 [ 951.340082][T21738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 951.360380][T21738] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.439196][T21747] FAULT_INJECTION: forcing a failure. [ 951.439196][T21747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.452354][T21747] CPU: 0 UID: 0 PID: 21747 Comm: syz.9.17270 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 951.452401][T21747] Tainted: [W]=WARN [ 951.452408][T21747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 951.452420][T21747] Call Trace: [ 951.452425][T21747] [ 951.452432][T21747] __dump_stack+0x1d/0x30 [ 951.452452][T21747] dump_stack_lvl+0xe8/0x140 [ 951.452553][T21747] dump_stack+0x15/0x1b [ 951.452575][T21747] should_fail_ex+0x265/0x280 [ 951.452611][T21747] should_fail+0xb/0x20 [ 951.452702][T21747] should_fail_usercopy+0x1a/0x20 [ 951.452731][T21747] _copy_from_user+0x1c/0xb0 [ 951.452811][T21747] ___sys_sendmsg+0xc1/0x1d0 [ 951.452855][T21747] __x64_sys_sendmsg+0xd4/0x160 [ 951.452894][T21747] x64_sys_call+0x191e/0x2ff0 [ 951.452992][T21747] do_syscall_64+0xd2/0x200 [ 951.453035][T21747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 951.453064][T21747] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 951.453116][T21747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.453144][T21747] RIP: 0033:0x7fdfb55febe9 [ 951.453163][T21747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.453255][T21747] RSP: 002b:00007fdfb405f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.453279][T21747] RAX: ffffffffffffffda RBX: 00007fdfb5835fa0 RCX: 00007fdfb55febe9 [ 951.453295][T21747] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 951.453357][T21747] RBP: 00007fdfb405f090 R08: 0000000000000000 R09: 0000000000000000 [ 951.453369][T21747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.453381][T21747] R13: 00007fdfb5836038 R14: 00007fdfb5835fa0 R15: 00007ffea26d26e8 [ 951.453400][T21747] [ 951.720093][T21754] netlink: 'syz.3.17269': attribute type 6 has an invalid length. [ 951.789878][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 951.898236][T21758] loop5: detected capacity change from 0 to 512 [ 951.929342][T21758] EXT4-fs: Ignoring removed mblk_io_submit option [ 951.951751][T21758] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 951.975284][T21758] EXT4-fs (loop5): 1 truncate cleaned up [ 951.981310][T21758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.163929][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 952.163948][ T29] audit: type=1400 audit(2000000207.201:54452): avc: denied { execute_no_trans } for pid=21763 comm="syz.4.17273" path="/78/file0" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 952.268115][T21777] loop6: detected capacity change from 0 to 2048 [ 952.416403][T21777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.447589][T21772] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 952.494823][T21772] SELinux: failed to load policy [ 952.585375][ T29] audit: type=1326 audit(2000000207.621:54453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.9.17276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 952.616967][ T29] audit: type=1326 audit(2000000207.631:54454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.9.17276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 952.619401][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.640904][ T29] audit: type=1326 audit(2000000207.631:54455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.9.17276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 952.675198][ T29] audit: type=1326 audit(2000000207.631:54456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.9.17276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 952.698897][ T29] audit: type=1326 audit(2000000207.631:54457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.9.17276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb55febe9 code=0x7ffc0000 [ 952.780927][T21759] vxcan1 speed is unknown, defaulting to 1000 [ 952.824912][T21797] serio: Serial port ptm0 [ 952.856775][T21759] lo speed is unknown, defaulting to 1000 [ 953.059457][T11100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.080356][T21759] chnl_net:caif_netlink_parms(): no params data found [ 953.139642][ T29] audit: type=1400 audit(2000000208.181:54458): avc: denied { nlmsg_read } for pid=21804 comm="syz.5.17281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 953.222568][T21759] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.230452][T21759] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.274341][T21759] bridge_slave_0: entered allmulticast mode [ 953.281438][T21759] bridge_slave_0: entered promiscuous mode [ 953.289305][T21759] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.296460][T21759] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.303876][T21759] bridge_slave_1: entered allmulticast mode [ 953.310948][T21759] bridge_slave_1: entered promiscuous mode [ 953.340756][T21759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.353166][T21759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.397016][T21759] team0: Port device team_slave_0 added [ 953.419228][T21759] team0: Port device team_slave_1 added [ 953.476412][T21759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.483402][T21759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.509507][T21759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.665245][T21759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.672246][T21759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.698264][T21759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.757341][T21759] hsr_slave_0: entered promiscuous mode [ 953.764504][T21759] hsr_slave_1: entered promiscuous mode [ 953.770866][T21759] debugfs: 'hsr0' already exists in 'hsr' [ 953.776785][T21759] Cannot create hsr debugfs directory [ 953.845058][T21825] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 953.887512][T21825] SELinux: failed to load policy [ 954.049921][ T29] audit: type=1400 audit(2000000209.081:54459): avc: denied { name_bind } for pid=21827 comm="syz.4.17288" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 954.084485][T21830] __nla_validate_parse: 5 callbacks suppressed [ 954.084507][T21830] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17289'. [ 954.101383][T21759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.190428][T21759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.215195][T21830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17289'. [ 954.251249][T21759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.340256][T21841] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 954.350337][T21841] SELinux: failed to load policy [ 954.395040][T21759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.419463][T21844] serio: Serial port ptm0 [ 954.440973][T21843] vxcan1 speed is unknown, defaulting to 1000 [ 954.504654][T21759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 954.517424][T21759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 954.552189][T21843] lo speed is unknown, defaulting to 1000 [ 954.552342][T21759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 954.582871][T21759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 954.798960][T21759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.834456][T21759] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.867618][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.874765][T12753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.028548][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.035714][T11097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.178118][T21759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.381374][T21759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.603761][ T29] audit: type=1326 audit(2000000210.641:54460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21883 comm="syz.5.17303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 955.628274][ T29] audit: type=1326 audit(2000000210.641:54461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21883 comm="syz.5.17303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x7ffc0000 [ 955.685276][T21880] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 955.689017][T21759] veth0_vlan: entered promiscuous mode [ 955.706707][T21880] SELinux: failed to load policy [ 955.736288][T21759] veth1_vlan: entered promiscuous mode [ 955.754347][T21865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17300'. [ 955.761769][T21759] veth0_macvtap: entered promiscuous mode [ 955.763475][T21865] netlink: 'syz.6.17300': attribute type 7 has an invalid length. [ 955.763490][T21865] netlink: 'syz.6.17300': attribute type 8 has an invalid length. [ 955.772167][T21759] veth1_macvtap: entered promiscuous mode [ 955.777317][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17300'. [ 955.821648][T21759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.842701][T21759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.969297][T11097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.980027][T11097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.989017][T19106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.026361][T19106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.063849][T21904] loop3: detected capacity change from 0 to 1024 [ 956.070591][T21904] EXT4-fs: Ignoring removed orlov option [ 956.076457][T21904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 956.098593][T21908] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 956.147926][T21904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.344942][T21759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.389236][T21927] loop3: detected capacity change from 0 to 512 [ 956.429902][T21927] EXT4-fs: Ignoring removed mblk_io_submit option [ 956.443427][T21927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 956.483433][T21927] EXT4-fs (loop3): 1 truncate cleaned up [ 956.584569][T21927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.659946][T21927] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 956.670367][T21927] SELinux: failed to load policy [ 956.691322][T21759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.757418][T21943] loop3: detected capacity change from 0 to 512 [ 956.769324][T21943] EXT4-fs: Ignoring removed mblk_io_submit option [ 956.787016][T21943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 956.810822][T21943] EXT4-fs (loop3): 1 truncate cleaned up [ 956.827923][T21943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.897890][T21937] vxcan1 speed is unknown, defaulting to 1000 [ 957.023116][T21951] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 957.073120][T21951] SELinux: failed to load policy [ 957.092662][T21937] lo speed is unknown, defaulting to 1000 [ 957.229920][T21759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.286210][T21964] vxcan1 speed is unknown, defaulting to 1000 [ 957.371700][T21964] lo speed is unknown, defaulting to 1000 [ 957.416141][T21937] chnl_net:caif_netlink_parms(): no params data found [ 957.436649][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 957.436667][ T29] audit: type=1400 audit(2000000212.481:54475): avc: denied { write } for pid=21971 comm="syz.3.17328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 957.457733][T21972] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21972 comm=syz.3.17328 [ 957.462565][ T29] audit: type=1400 audit(2000000212.481:54476): avc: denied { connect } for pid=21971 comm="syz.3.17328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 957.495553][ T29] audit: type=1400 audit(2000000212.481:54477): avc: denied { name_connect } for pid=21971 comm="syz.3.17328" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 957.519479][ T29] audit: type=1400 audit(2000000212.481:54478): avc: denied { write } for pid=21971 comm="syz.3.17328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.539337][ T29] audit: type=1400 audit(2000000212.481:54479): avc: denied { getopt } for pid=21971 comm="syz.3.17328" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 957.568693][ T29] audit: type=1326 audit(2000000212.611:54480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.3.17329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b008ebe9 code=0x7ffc0000 [ 957.593291][ T29] audit: type=1326 audit(2000000212.611:54481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.3.17329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f00b008ebe9 code=0x7ffc0000 [ 957.689129][T21937] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.696382][T21937] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.709648][T21937] bridge_slave_0: entered allmulticast mode [ 957.755029][T21937] bridge_slave_0: entered promiscuous mode [ 957.791103][T21937] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.797739][T21982] 9pnet_fd: Insufficient options for proto=fd [ 957.798359][T21937] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.826806][T21937] bridge_slave_1: entered allmulticast mode [ 957.846750][T21937] bridge_slave_1: entered promiscuous mode [ 957.908627][T21937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.938691][T21937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.948476][T21987] openvswitch: netlink: Message has 6 unknown bytes. [ 957.955993][T21987] FAULT_INJECTION: forcing a failure. [ 957.955993][T21987] name failslab, interval 1, probability 0, space 0, times 0 [ 957.968927][T21987] CPU: 0 UID: 0 PID: 21987 Comm: syz.4.17333 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 957.969029][T21987] Tainted: [W]=WARN [ 957.969037][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.969051][T21987] Call Trace: [ 957.969057][T21987] [ 957.969064][T21987] __dump_stack+0x1d/0x30 [ 957.969134][T21987] dump_stack_lvl+0xe8/0x140 [ 957.969169][T21987] dump_stack+0x15/0x1b [ 957.969188][T21987] should_fail_ex+0x265/0x280 [ 957.969213][T21987] ? do_kimage_alloc_init+0x2f/0x170 [ 957.969326][T21987] should_failslab+0x8c/0xb0 [ 957.969386][T21987] __kmalloc_cache_noprof+0x4c/0x320 [ 957.969422][T21987] do_kimage_alloc_init+0x2f/0x170 [ 957.969497][T21987] do_kexec_load+0x8b/0x500 [ 957.969522][T21987] __se_sys_kexec_load+0x134/0x160 [ 957.969550][T21987] __x64_sys_kexec_load+0x55/0x70 [ 957.969574][T21987] x64_sys_call+0x2898/0x2ff0 [ 957.969641][T21987] do_syscall_64+0xd2/0x200 [ 957.969716][T21987] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 957.969751][T21987] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 957.969794][T21987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.969839][T21987] RIP: 0033:0x7f73d4b9ebe9 [ 957.969860][T21987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.969912][T21987] RSP: 002b:00007f73d35ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 957.969969][T21987] RAX: ffffffffffffffda RBX: 00007f73d4dd5fa0 RCX: 00007f73d4b9ebe9 [ 957.969987][T21987] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 957.970005][T21987] RBP: 00007f73d35ff090 R08: 0000000000000000 R09: 0000000000000000 [ 957.970022][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.970080][T21987] R13: 00007f73d4dd6038 R14: 00007f73d4dd5fa0 R15: 00007fffed3c3c08 [ 957.970103][T21987] [ 958.236233][T21937] team0: Port device team_slave_0 added [ 958.249107][T21937] team0: Port device team_slave_1 added [ 958.254802][ T29] audit: type=1326 audit(2000000213.281:54482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21988 comm="syz.4.17336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 958.279261][ T29] audit: type=1326 audit(2000000213.281:54483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21988 comm="syz.4.17336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 958.303080][ T29] audit: type=1326 audit(2000000213.281:54484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21988 comm="syz.4.17336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 958.411492][T21999] loop5: detected capacity change from 0 to 512 [ 958.458378][T21999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 958.473364][T21937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.480731][T21937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.506778][T21937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.521897][T21937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.521982][T22006] 9pnet_fd: Insufficient options for proto=fd [ 958.529001][T21937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.561763][T21937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.579212][T21999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.598558][T21999] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.631704][T22013] netlink: 'syz.4.17342': attribute type 1 has an invalid length. [ 958.639660][T22013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17342'. [ 958.658292][T21937] hsr_slave_0: entered promiscuous mode [ 958.659276][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.667029][T21937] hsr_slave_1: entered promiscuous mode [ 958.679947][T21937] debugfs: 'hsr0' already exists in 'hsr' [ 958.685903][T21937] Cannot create hsr debugfs directory [ 958.715169][T22019] FAULT_INJECTION: forcing a failure. [ 958.715169][T22019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.728420][T22019] CPU: 1 UID: 0 PID: 22019 Comm: syz.5.17344 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 958.728464][T22019] Tainted: [W]=WARN [ 958.728472][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 958.728489][T22019] Call Trace: [ 958.728543][T22019] [ 958.728553][T22019] __dump_stack+0x1d/0x30 [ 958.728580][T22019] dump_stack_lvl+0xe8/0x140 [ 958.728605][T22019] dump_stack+0x15/0x1b [ 958.728692][T22019] should_fail_ex+0x265/0x280 [ 958.728723][T22019] should_fail+0xb/0x20 [ 958.728750][T22019] should_fail_usercopy+0x1a/0x20 [ 958.728808][T22019] _copy_from_user+0x1c/0xb0 [ 958.728891][T22019] ___sys_sendmsg+0xc1/0x1d0 [ 958.728939][T22019] __x64_sys_sendmsg+0xd4/0x160 [ 958.729046][T22019] x64_sys_call+0x191e/0x2ff0 [ 958.729079][T22019] do_syscall_64+0xd2/0x200 [ 958.729110][T22019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 958.729201][T22019] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 958.729239][T22019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.729266][T22019] RIP: 0033:0x7fd7b479ebe9 [ 958.729285][T22019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.729356][T22019] RSP: 002b:00007fd7b31ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.729379][T22019] RAX: ffffffffffffffda RBX: 00007fd7b49d5fa0 RCX: 00007fd7b479ebe9 [ 958.729396][T22019] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000004 [ 958.729412][T22019] RBP: 00007fd7b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 958.729429][T22019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.729445][T22019] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 958.729477][T22019] [ 958.970771][T22025] loop5: detected capacity change from 0 to 512 [ 958.977816][T22025] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.989939][T22025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 959.002447][T22025] EXT4-fs (loop5): 1 truncate cleaned up [ 959.009417][T22025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.267692][T22025] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 959.288495][T22025] SELinux: failed to load policy [ 959.338630][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.469892][T22040] 9pnet_fd: Insufficient options for proto=fd [ 959.532635][T22042] loop5: detected capacity change from 0 to 512 [ 959.546318][T22042] EXT4-fs: Ignoring removed orlov option [ 959.552439][T22042] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 959.568711][T22042] EXT4-fs (loop5): 1 truncate cleaned up [ 959.578027][T22042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.660955][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.690036][T21937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 959.845909][T21937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 959.856150][T21937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 959.867039][T21937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 959.982723][T22047] loop5: detected capacity change from 0 to 2048 [ 960.094802][T22047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.287423][T21937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.294607][T22062] netlink: 'syz.4.17357': attribute type 1 has an invalid length. [ 960.302547][T22062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17357'. [ 960.303637][T21937] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.345844][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.352948][T12753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.368636][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.375787][T12753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.474596][T21937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.591707][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.702550][T21937] veth0_vlan: entered promiscuous mode [ 960.815774][T21937] veth1_vlan: entered promiscuous mode [ 960.873038][T21937] veth0_macvtap: entered promiscuous mode [ 960.889850][T21937] veth1_macvtap: entered promiscuous mode [ 960.921277][T21937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.945345][T21937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.986464][T19122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.008281][T19122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.032192][T19122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.063094][T19122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.131696][T22102] loop5: detected capacity change from 0 to 512 [ 961.148364][T22102] EXT4-fs: Ignoring removed mblk_io_submit option [ 961.164185][T22102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 961.205818][T22102] EXT4-fs (loop5): 1 truncate cleaned up [ 961.211974][T22102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.289478][T22097] netlink: 'syz.9.17364': attribute type 21 has an invalid length. [ 961.290794][T22102] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 961.297574][T22097] netlink: 'syz.9.17364': attribute type 1 has an invalid length. [ 961.307227][T22102] SELinux: failed to load policy [ 961.315854][T22097] netlink: 100 bytes leftover after parsing attributes in process `syz.9.17364'. [ 961.432577][T17830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.503574][T22113] unsupported nla_type 52263 [ 961.611226][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17376'. [ 961.621049][T22133] IPVS: Error joining to the multicast group [ 961.741649][T22134] loop3: detected capacity change from 0 to 2048 [ 962.078895][T22145] netlink: 36 bytes leftover after parsing attributes in process `syz.9.17374'. [ 962.094878][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17374'. [ 962.238743][T22148] loop6: detected capacity change from 0 to 512 [ 962.246187][T22148] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.253048][T22148] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 962.264577][T22148] EXT4-fs (loop6): 1 truncate cleaned up [ 962.386739][T22150] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 962.386741][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17382'. [ 962.386763][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17382'. [ 962.415529][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17382'. [ 962.425989][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17382'. [ 962.435211][T22155] netlink: 'syz.9.17382': attribute type 6 has an invalid length. [ 962.441257][T22150] SELinux: failed to load policy [ 962.450274][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 962.450323][ T29] audit: type=1326 audit(2000000217.491:54755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22154 comm="syz.3.17380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b008ebe9 code=0x7ffc0000 [ 962.480598][ T29] audit: type=1326 audit(2000000217.491:54756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22154 comm="syz.3.17380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b008ebe9 code=0x7ffc0000 [ 962.602969][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17386'. [ 962.629280][T22168] netlink: 'syz.6.17386': attribute type 6 has an invalid length. [ 962.675275][ T29] audit: type=1326 audit(2000000217.721:54757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22170 comm="syz.5.17388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7b479ebe9 code=0x0 [ 962.734019][ T29] audit: type=1400 audit(2000000217.771:54758): avc: denied { accept } for pid=22175 comm="syz.4.17390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 962.811554][T22177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.819798][ T29] audit: type=1326 audit(2000000217.831:54759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.4.17390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 962.846426][ T29] audit: type=1326 audit(2000000217.831:54760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.4.17390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 962.870260][ T29] audit: type=1326 audit(2000000217.831:54761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.4.17390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 962.894684][ T29] audit: type=1326 audit(2000000217.831:54762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.4.17390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 962.918439][ T29] audit: type=1400 audit(2000000217.831:54763): avc: denied { create } for pid=22175 comm="syz.4.17390" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 962.940254][ T29] audit: type=1326 audit(2000000217.831:54764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22175 comm="syz.4.17390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 962.975286][T22181] vxcan1 speed is unknown, defaulting to 1000 [ 962.994502][T22178] loop6: detected capacity change from 0 to 512 [ 963.001193][T22178] journal_path: Lookup failure for './file0/../file0' [ 963.008028][T22178] EXT4-fs: error: could not find journal device path [ 963.043535][T22181] lo speed is unknown, defaulting to 1000 [ 963.107827][T22177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.166743][T22177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.234479][T22177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.367342][T22187] loop3: detected capacity change from 0 to 2048 [ 963.673383][ T1399] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.683079][T22197] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 963.691345][T22203] loop5: detected capacity change from 0 to 512 [ 963.695224][ T1399] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.701213][T22197] SELinux: failed to load policy [ 963.714269][T22203] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 963.724972][ T1399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.735896][ T1399] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.747299][T22212] netlink: 'syz.4.17400': attribute type 6 has an invalid length. [ 963.765037][T22203] EXT4-fs (loop5): 1 truncate cleaned up [ 963.800652][T22219] loop6: detected capacity change from 0 to 512 [ 963.808339][T22219] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 963.835794][T22219] EXT4-fs (loop6): 1 truncate cleaned up [ 964.581439][T22247] loop5: detected capacity change from 0 to 512 [ 964.609553][T22247] EXT4-fs: Ignoring removed mblk_io_submit option [ 964.637612][T22247] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 964.687326][T22247] EXT4-fs (loop5): 1 truncate cleaned up [ 964.883989][T22263] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 964.938414][T22263] SELinux: failed to load policy [ 965.134247][T22278] serio: Serial port ptm0 [ 965.138787][T22266] loop6: detected capacity change from 0 to 512 [ 965.163393][T22266] FAT-fs (loop6): bogus number of FAT sectors [ 965.169584][T22266] FAT-fs (loop6): Can't find a valid FAT filesystem [ 965.206922][T22280] bridge_slave_0: left allmulticast mode [ 965.212652][T22280] bridge_slave_0: left promiscuous mode [ 965.219150][T22280] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.251877][T22266] loop6: detected capacity change from 0 to 512 [ 965.296494][T22280] bridge_slave_1: left allmulticast mode [ 965.302193][T22280] bridge_slave_1: left promiscuous mode [ 965.308035][T22280] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.351595][T22266] ext4 filesystem being mounted at /12 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.389754][T22280] bond0: (slave bond_slave_0): Releasing backup interface [ 965.480255][T22272] __nla_validate_parse: 10 callbacks suppressed [ 965.480278][T22272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17419'. [ 965.663491][T22280] bond0: (slave bond_slave_1): Releasing backup interface [ 965.689096][T22280] team0: Port device team_slave_0 removed [ 965.714075][T22280] team0: Port device team_slave_1 removed [ 965.727245][T22280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.734753][T22280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.750338][T22280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.758324][T22280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.861241][T22290] loop3: detected capacity change from 0 to 512 [ 965.871335][T22290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 965.902752][T22290] EXT4-fs (loop3): 1 truncate cleaned up [ 966.063644][T22309] loop3: detected capacity change from 0 to 512 [ 966.121917][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17434'. [ 966.128962][T22309] EXT4-fs (loop3): failed to initialize system zone (-117) [ 966.131166][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17434'. [ 966.149012][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17434'. [ 966.263221][T22312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17434'. [ 966.272404][T22312] netlink: 'syz.6.17434': attribute type 6 has an invalid length. [ 966.304543][T22309] EXT4-fs (loop3): mount failed [ 966.462706][T22317] loop6: detected capacity change from 0 to 2048 [ 966.601123][T22317] loop6: p3 p4 < > [ 966.606332][T22317] loop6: p3 start 11362048 is beyond EOD, truncated [ 966.662628][T22322] loop5: detected capacity change from 0 to 2048 [ 966.808414][T22331] serio: Serial port ptm0 [ 966.853403][T22333] loop6: detected capacity change from 0 to 512 [ 966.881060][T22333] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 966.929513][T22333] EXT4-fs (loop6): 1 truncate cleaned up [ 967.106213][T22354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17447'. [ 967.165695][T22361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17448'. [ 967.174841][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17448'. [ 967.183962][T22361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17448'. [ 967.385886][T22366] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 967.402174][T22366] SELinux: failed to load policy [ 967.415944][T22368] FAULT_INJECTION: forcing a failure. [ 967.415944][T22368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.429326][T22368] CPU: 0 UID: 0 PID: 22368 Comm: syz.5.17451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 967.429367][T22368] Tainted: [W]=WARN [ 967.429375][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.429391][T22368] Call Trace: [ 967.429398][T22368] [ 967.429407][T22368] __dump_stack+0x1d/0x30 [ 967.429429][T22368] dump_stack_lvl+0xe8/0x140 [ 967.429489][T22368] dump_stack+0x15/0x1b [ 967.429512][T22368] should_fail_ex+0x265/0x280 [ 967.429543][T22368] should_fail+0xb/0x20 [ 967.429569][T22368] should_fail_usercopy+0x1a/0x20 [ 967.429606][T22368] _copy_to_user+0x20/0xa0 [ 967.429638][T22368] simple_read_from_buffer+0xb5/0x130 [ 967.429667][T22368] proc_fail_nth_read+0x10e/0x150 [ 967.429737][T22368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.429773][T22368] vfs_read+0x1a8/0x770 [ 967.429801][T22368] ? __rcu_read_unlock+0x4f/0x70 [ 967.429824][T22368] ? __fget_files+0x184/0x1c0 [ 967.429850][T22368] ksys_read+0xda/0x1a0 [ 967.429945][T22368] __x64_sys_read+0x40/0x50 [ 967.430035][T22368] x64_sys_call+0x27bc/0x2ff0 [ 967.430093][T22368] do_syscall_64+0xd2/0x200 [ 967.430155][T22368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 967.430179][T22368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 967.430261][T22368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.430352][T22368] RIP: 0033:0x7fd7b479d5fc [ 967.430367][T22368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 967.430385][T22368] RSP: 002b:00007fd7b31ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 967.430404][T22368] RAX: ffffffffffffffda RBX: 00007fd7b49d5fa0 RCX: 00007fd7b479d5fc [ 967.430421][T22368] RDX: 000000000000000f RSI: 00007fd7b31ff0a0 RDI: 0000000000000003 [ 967.430437][T22368] RBP: 00007fd7b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 967.430496][T22368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.430512][T22368] R13: 00007fd7b49d6038 R14: 00007fd7b49d5fa0 R15: 00007ffea656f328 [ 967.430539][T22368] [ 967.732081][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 967.732095][ T29] audit: type=1326 audit(2000000222.771:54955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 967.763581][T22381] FAULT_INJECTION: forcing a failure. [ 967.763581][T22381] name failslab, interval 1, probability 0, space 0, times 0 [ 967.763628][T22381] CPU: 0 UID: 0 PID: 22381 Comm: syz.4.17457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 967.763658][T22381] Tainted: [W]=WARN [ 967.763664][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.763676][T22381] Call Trace: [ 967.763683][T22381] [ 967.763691][T22381] __dump_stack+0x1d/0x30 [ 967.763716][T22381] dump_stack_lvl+0xe8/0x140 [ 967.763768][T22381] dump_stack+0x15/0x1b [ 967.763793][T22381] should_fail_ex+0x265/0x280 [ 967.763828][T22381] should_failslab+0x8c/0xb0 [ 967.763863][T22381] kmem_cache_alloc_noprof+0x50/0x310 [ 967.763941][T22381] ? audit_log_start+0x365/0x6c0 [ 967.763984][T22381] audit_log_start+0x365/0x6c0 [ 967.764030][T22381] audit_seccomp+0x48/0x100 [ 967.764128][T22381] ? __seccomp_filter+0x68c/0x10d0 [ 967.764226][T22381] __seccomp_filter+0x69d/0x10d0 [ 967.764323][T22381] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 967.764361][T22381] ? vfs_write+0x7e8/0x960 [ 967.764392][T22381] ? __rcu_read_unlock+0x4f/0x70 [ 967.764421][T22381] ? __fget_files+0x184/0x1c0 [ 967.764505][T22381] __secure_computing+0x82/0x150 [ 967.764534][T22381] syscall_trace_enter+0xcf/0x1e0 [ 967.764569][T22381] do_syscall_64+0xac/0x200 [ 967.764613][T22381] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 967.764707][T22381] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 967.764748][T22381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.764787][T22381] RIP: 0033:0x7f73d4b9ebe9 [ 967.764807][T22381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.764831][T22381] RSP: 002b:00007f73d35ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 967.764882][T22381] RAX: ffffffffffffffda RBX: 00007f73d4dd5fa0 RCX: 00007f73d4b9ebe9 [ 967.764900][T22381] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 967.764941][T22381] RBP: 00007f73d35ff090 R08: 0000000000000000 R09: 0000000000000000 [ 967.764957][T22381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.764975][T22381] R13: 00007f73d4dd6038 R14: 00007f73d4dd5fa0 R15: 00007fffed3c3c08 [ 967.765001][T22381] [ 967.765011][T22381] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 967.797500][ T29] audit: type=1326 audit(2000000222.811:54956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 967.802457][T22381] audit: out of memory in audit_log_start [ 967.805638][ T29] audit: type=1326 audit(2000000222.811:54957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73d4b9d550 code=0x7ffc0000 [ 968.055213][ T29] audit: type=1326 audit(2000000222.811:54958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73d4b9d69f code=0x7ffc0000 [ 968.072622][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17462'. [ 968.084554][ T29] audit: type=1326 audit(2000000222.931:54959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f73d4b9d5fc code=0x7ffc0000 [ 968.111644][ T29] audit: type=1326 audit(2000000222.931:54960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73d4b9d69f code=0x7ffc0000 [ 968.135859][ T29] audit: type=1326 audit(2000000222.931:54961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73d4b9d84a code=0x7ffc0000 [ 968.159550][ T29] audit: type=1326 audit(2000000222.931:54962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22380 comm="syz.4.17457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 968.260638][T22393] IPVS: Error joining to the multicast group [ 968.344568][T22400] loop3: detected capacity change from 0 to 2048 [ 968.473922][T22400] EXT4-fs mount: 20 callbacks suppressed [ 968.473938][T22400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.672480][T22410] IPVS: Error joining to the multicast group [ 968.712353][T21759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.759878][T22412] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 968.772231][T22416] FAULT_INJECTION: forcing a failure. [ 968.772231][T22416] name failslab, interval 1, probability 0, space 0, times 0 [ 968.772312][T22416] CPU: 1 UID: 0 PID: 22416 Comm: syz.4.17470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 968.772350][T22416] Tainted: [W]=WARN [ 968.772359][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.772371][T22416] Call Trace: [ 968.772378][T22416] [ 968.772399][T22416] __dump_stack+0x1d/0x30 [ 968.772492][T22416] dump_stack_lvl+0xe8/0x140 [ 968.772552][T22416] dump_stack+0x15/0x1b [ 968.772573][T22416] should_fail_ex+0x265/0x280 [ 968.772603][T22416] should_failslab+0x8c/0xb0 [ 968.772633][T22416] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 968.772668][T22416] ? sidtab_sid2str_get+0xa0/0x130 [ 968.772693][T22416] kmemdup_noprof+0x2b/0x70 [ 968.772762][T22416] sidtab_sid2str_get+0xa0/0x130 [ 968.772855][T22416] security_sid_to_context_core+0x1eb/0x2e0 [ 968.772880][T22416] security_sid_to_context+0x27/0x40 [ 968.772980][T22416] selinux_lsmprop_to_secctx+0x67/0xf0 [ 968.773001][T22416] security_lsmprop_to_secctx+0x43/0x80 [ 968.773090][T22416] audit_log_task_context+0x77/0x190 [ 968.773131][T22416] audit_log_task+0xf4/0x250 [ 968.773226][T22416] audit_seccomp+0x61/0x100 [ 968.773293][T22416] ? __seccomp_filter+0x68c/0x10d0 [ 968.773319][T22416] __seccomp_filter+0x69d/0x10d0 [ 968.773345][T22416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 968.773391][T22416] ? vfs_write+0x7e8/0x960 [ 968.773431][T22416] __secure_computing+0x82/0x150 [ 968.773481][T22416] syscall_trace_enter+0xcf/0x1e0 [ 968.773519][T22416] do_syscall_64+0xac/0x200 [ 968.773562][T22416] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 968.773594][T22416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 968.773702][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.773732][T22416] RIP: 0033:0x7f73d4b9ebe9 [ 968.773752][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.773786][T22416] RSP: 002b:00007f73d35ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 968.773861][T22416] RAX: ffffffffffffffda RBX: 00007f73d4dd5fa0 RCX: 00007f73d4b9ebe9 [ 968.773878][T22416] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006 [ 968.773959][T22416] RBP: 00007f73d35ff090 R08: 0000000000000000 R09: 0000000000000000 [ 968.773976][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.773991][T22416] R13: 00007f73d4dd6038 R14: 00007f73d4dd5fa0 R15: 00007fffed3c3c08 [ 968.774018][T22416] [ 968.795249][T22412] SELinux: failed to load policy [ 968.812361][T22420] loop3: detected capacity change from 0 to 512 [ 968.881107][T22426] SELinux: failed to load policy [ 968.922325][T22420] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 969.029556][T22429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 969.053133][T22420] EXT4-fs (loop3): 1 truncate cleaned up [ 969.082319][T22420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.743517][T21759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.868974][T22472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.891393][T22472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.749152][T22524] __nla_validate_parse: 2 callbacks suppressed [ 970.749170][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17509'. [ 970.759419][T22525] netlink: 68 bytes leftover after parsing attributes in process `syz.5.17510'. [ 970.911321][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.920874][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.972282][T22555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.981145][T22555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.687957][T22602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.701629][T22602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.887328][T22625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.896194][T22625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.906714][T22625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.916614][T22625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.954603][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17557'. [ 972.130490][T22632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.140272][T22632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.148184][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813b453800: rx timeout, send abort [ 972.457756][T22636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.467818][T22636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.656414][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813b453800: abort rx timeout. Force session deactivation [ 973.537662][T22677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.593389][T22677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.783531][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 973.783546][ T29] audit: type=1400 audit(2000000228.832:55058): avc: denied { name_connect } for pid=22690 comm="syz.4.17584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 973.850316][T22698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 974.007208][ T29] audit: type=1400 audit(2000000229.052:55059): avc: denied { watch } for pid=22709 comm="syz.5.17593" path="pipe:[200470]" dev="pipefs" ino=200470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 974.045714][T22712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.054335][T22712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.280952][ T29] audit: type=1400 audit(2000000229.322:55060): avc: denied { read } for pid=22725 comm="syz.9.17601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 974.645474][T22735] usb usb8: usbfs: process 22735 (syz.5.17604) did not claim interface 0 before use [ 974.651701][ T29] audit: type=1400 audit(2000000229.692:55061): avc: denied { bind } for pid=22734 comm="syz.4.17605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 974.674765][ T29] audit: type=1400 audit(2000000229.692:55062): avc: denied { name_bind } for pid=22734 comm="syz.4.17605" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 974.697150][ T29] audit: type=1400 audit(2000000229.692:55063): avc: denied { node_bind } for pid=22734 comm="syz.4.17605" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 974.993172][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17608'. [ 975.649860][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17619'. [ 975.660202][T22770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17619'. [ 975.942597][T22808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17636'. [ 975.951964][T22806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17636'. [ 976.881647][T22909] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17682'. [ 976.926513][ T29] audit: type=1400 audit(2000000231.972:55064): avc: denied { read } for pid=22915 comm="syz.4.17685" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 977.064013][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17692'. [ 977.084967][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17692'. [ 977.098836][T22933] netlink: 'syz.9.17687': attribute type 1 has an invalid length. [ 977.106753][T22933] netlink: 'syz.9.17687': attribute type 2 has an invalid length. [ 977.148884][T22935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.182371][T22935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.205352][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17695'. [ 977.650446][T22968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.660531][T22968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.727423][T22973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.740435][T22973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.924600][T23004] tipc: Enabled bearer , priority 0 [ 977.931873][T23004] syzkaller0: entered promiscuous mode [ 977.937392][T23004] syzkaller0: entered allmulticast mode [ 977.949636][T23004] tipc: Resetting bearer [ 977.957817][T23003] tipc: Resetting bearer [ 977.966621][T23003] tipc: Disabling bearer [ 978.090672][T23011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.099353][T23011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.487702][T23059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.496320][T23059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.656292][ T29] audit: type=1400 audit(2000000233.702:55065): avc: denied { ioctl } for pid=23062 comm="syz.4.17751" path="socket:[202992]" dev="sockfs" ino=202992 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 979.093653][T23096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.102375][T23096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.345458][T23114] tipc: Started in network mode [ 979.350432][T23114] tipc: Node identity 16efab757a64, cluster identity 4711 [ 979.357773][T23114] tipc: Enabled bearer , priority 0 [ 979.365219][T23114] syzkaller0: entered promiscuous mode [ 979.370708][T23114] syzkaller0: entered allmulticast mode [ 979.381526][T23114] tipc: Resetting bearer [ 979.388411][T23113] tipc: Resetting bearer [ 979.401741][T23113] tipc: Disabling bearer [ 979.467364][T23116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.476232][T23116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.761176][T23142] tipc: Started in network mode [ 979.766133][T23142] tipc: Node identity 12fdd0c40b7c, cluster identity 4711 [ 979.773487][T23142] tipc: Enabled bearer , priority 0 [ 979.781034][T23142] syzkaller0: entered promiscuous mode [ 979.786601][T23142] syzkaller0: entered allmulticast mode [ 979.801761][T23142] tipc: Resetting bearer [ 979.809816][T23140] tipc: Resetting bearer [ 979.822005][T23140] tipc: Disabling bearer [ 979.868819][T23154] vxcan1 speed is unknown, defaulting to 1000 [ 979.915736][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.927617][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.946991][T23154] lo speed is unknown, defaulting to 1000 [ 980.157118][ T29] audit: type=1400 audit(2000000235.192:55066): avc: denied { listen } for pid=23178 comm="syz.3.17807" lport=44583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 980.178176][ T29] audit: type=1400 audit(2000000235.192:55067): avc: denied { accept } for pid=23178 comm="syz.3.17807" lport=44583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 980.527304][T23191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.553624][ T29] audit: type=1400 audit(2000000235.602:55068): avc: denied { override_creds } for pid=23192 comm="syz.4.17811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 980.574149][T23191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.419313][T23259] usb usb8: usbfs: process 23259 (syz.4.17841) did not claim interface 0 before use [ 981.677363][T23277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.695163][T23277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.051185][ T29] audit: type=1400 audit(2000000237.092:55069): avc: denied { connect } for pid=23289 comm="syz.6.17856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 982.642988][ T29] audit: type=1326 audit(2000000237.692:55070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz.4.17871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 982.683796][ T29] audit: type=1326 audit(2000000237.712:55071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz.4.17871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 982.708360][ T29] audit: type=1326 audit(2000000237.712:55072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz.4.17871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 982.732934][ T29] audit: type=1326 audit(2000000237.712:55073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23323 comm="syz.4.17871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d4b9ebe9 code=0x7ffc0000 [ 983.170542][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.179572][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.447560][T23381] netlink: 'syz.3.17898': attribute type 3 has an invalid length. [ 983.615676][T23409] usb usb8: usbfs: process 23409 (syz.3.17912) did not claim interface 0 before use [ 983.735228][ T29] audit: type=1400 audit(2000000238.782:55074): avc: denied { shutdown } for pid=23416 comm="syz.9.17915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 983.735263][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.764009][T23418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.764303][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.772867][T23418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.167323][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17920'. [ 984.317321][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.326639][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.480673][ T29] audit: type=1400 audit(2000000239.522:55075): avc: denied { bind } for pid=23448 comm="syz.5.17929" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 984.514857][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17931'. [ 984.530560][T23455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.539437][T23455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.750386][T23463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.759121][T23463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.856576][T23465] sock: sock_set_timeout: `syz.9.17935' (pid 23465) tries to set negative timeout [ 984.884014][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.893176][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.239613][T23476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 985.246169][T23476] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 985.253705][T23476] vhci_hcd vhci_hcd.0: Device attached [ 985.260322][T23476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 985.278277][T23476] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 985.284918][T23476] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 985.292593][T23476] vhci_hcd vhci_hcd.0: Device attached [ 985.304809][T23476] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 985.311533][T23476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 985.319915][T23476] vhci_hcd vhci_hcd.0: Device attached [ 985.326601][T23476] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 985.333230][T23476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 985.340928][T23476] vhci_hcd vhci_hcd.0: Device attached [ 985.348432][T23476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 985.357167][T23476] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 985.369367][T23487] vhci_hcd: connection closed [ 985.369485][T19096] vhci_hcd: stop threads [ 985.369610][T23483] vhci_hcd: connection closed [ 985.374277][T19096] vhci_hcd: release socket [ 985.374290][T19096] vhci_hcd: disconnect device [ 985.396010][T23477] vhci_hcd: connection closed [ 985.396441][T23479] vhci_hcd: connection closed [ 985.401858][T19096] vhci_hcd: stop threads [ 985.411669][T19096] vhci_hcd: release socket [ 985.416171][T19096] vhci_hcd: disconnect device [ 985.443820][T19096] vhci_hcd: stop threads [ 985.448134][T19096] vhci_hcd: release socket [ 985.452677][T19096] vhci_hcd: disconnect device [ 985.457579][T19791] vhci_hcd: vhci_device speed not set [ 985.464846][T19096] vhci_hcd: stop threads [ 985.469131][T19096] vhci_hcd: release socket [ 985.473799][T19096] vhci_hcd: disconnect device [ 986.230534][T23528] tipc: Enabled bearer , priority 0 [ 986.287716][T23528] syzkaller0: entered promiscuous mode [ 986.293397][T23528] syzkaller0: entered allmulticast mode [ 986.327252][T23534] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 986.354221][T23528] tipc: Resetting bearer [ 986.364992][T23527] tipc: Resetting bearer [ 986.391123][T23527] tipc: Disabling bearer [ 986.458574][T23553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.484778][T23553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.570757][T23561] tipc: Enabled bearer , priority 0 [ 986.580335][T23561] syzkaller0: entered promiscuous mode [ 986.586075][T23561] syzkaller0: entered allmulticast mode [ 986.608338][T23561] tipc: Resetting bearer [ 986.636818][T23560] tipc: Resetting bearer [ 986.649746][T23560] tipc: Disabling bearer [ 986.737395][T23566] netlink: 'syz.3.17973': attribute type 2 has an invalid length. [ 986.745369][T23566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17973'. [ 987.392715][T23590] SELinux: syz.4.17983 (23590) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 987.559625][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 987.559644][ T29] audit: type=1326 audit(2000000242.602:55077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.590983][ T29] audit: type=1326 audit(2000000242.602:55078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.615418][ T29] audit: type=1326 audit(2000000242.602:55079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.639088][ T29] audit: type=1326 audit(2000000242.602:55080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.663558][ T29] audit: type=1326 audit(2000000242.602:55081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.687215][ T29] audit: type=1326 audit(2000000242.602:55082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.711858][ T29] audit: type=1326 audit(2000000242.602:55083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.736143][ T29] audit: type=1326 audit(2000000242.602:55084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.759801][ T29] audit: type=1326 audit(2000000242.602:55085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.784155][ T29] audit: type=1326 audit(2000000242.602:55086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23500 comm="syz.9.17948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfb559adb9 code=0x7ffc0000 [ 987.837458][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17994'. [ 987.975001][T23628] tipc: Started in network mode [ 987.979915][T23628] tipc: Node identity 062b97a1487d, cluster identity 4711 [ 987.987378][T23628] tipc: Enabled bearer , priority 0 [ 988.027140][T23628] syzkaller0: entered promiscuous mode [ 988.032712][T23628] syzkaller0: entered allmulticast mode [ 988.046204][T23628] tipc: Resetting bearer [ 988.057958][T23626] tipc: Resetting bearer [ 988.074574][T23626] tipc: Disabling bearer [ 988.166525][T23641] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 988.173118][T23641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 988.180661][T23641] vhci_hcd vhci_hcd.0: Device attached [ 988.187605][T23641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 988.196328][T23641] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 988.202872][T23641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 988.210519][T23641] vhci_hcd vhci_hcd.0: Device attached [ 988.221705][T23641] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 988.228402][T23641] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 988.236177][T23641] vhci_hcd vhci_hcd.0: Device attached [ 988.243528][T23641] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 988.250233][T23641] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 988.257879][T23641] vhci_hcd vhci_hcd.0: Device attached [ 988.264188][T23641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 988.272696][T23641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 988.282757][T23649] vhci_hcd: connection closed [ 988.282780][T23644] vhci_hcd: connection closed [ 988.282787][T23647] vhci_hcd: connection closed [ 988.287400][T23652] veth0_to_bridge: entered promiscuous mode [ 988.291868][T12753] vhci_hcd: stop threads [ 988.297056][T23642] vhci_hcd: connection closed [ 988.302933][T12753] vhci_hcd: release socket [ 988.302946][T12753] vhci_hcd: disconnect device [ 988.303603][T12753] vhci_hcd: stop threads [ 988.319598][T23652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.321255][T12753] vhci_hcd: release socket [ 988.321267][T12753] vhci_hcd: disconnect device [ 988.321544][T12753] vhci_hcd: stop threads [ 988.327204][T23652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.334010][T12753] vhci_hcd: release socket [ 988.346435][T23652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23652 comm=syz.6.18008 [ 988.347377][T12753] vhci_hcd: disconnect device [ 988.347731][T12753] vhci_hcd: stop threads [ 988.381495][T12753] vhci_hcd: release socket [ 988.381575][T12753] vhci_hcd: disconnect device [ 988.390770][T19580] vhci_hcd: vhci_device speed not set [ 988.442956][T23651] veth0_to_bridge: left promiscuous mode [ 988.579751][T23674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.588331][T23674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.844132][T23680] tipc: Enabled bearer , priority 0 [ 988.851570][T23680] syzkaller0: entered promiscuous mode [ 988.857164][T23680] syzkaller0: entered allmulticast mode [ 988.871210][T23680] tipc: Resetting bearer [ 988.878368][T23679] tipc: Resetting bearer [ 988.886764][T23679] tipc: Disabling bearer [ 988.980215][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18026'. [ 989.071166][T23697] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 989.077732][T23697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 989.086046][T23697] vhci_hcd vhci_hcd.0: Device attached [ 989.102959][T23697] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 989.116275][T23697] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(9) [ 989.122859][T23697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 989.130449][T23697] vhci_hcd vhci_hcd.0: Device attached [ 989.141692][T23697] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(11) [ 989.148329][T23697] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 989.156746][T23697] vhci_hcd vhci_hcd.0: Device attached [ 989.188145][T23697] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(13) [ 989.194790][T23697] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 989.203280][T23697] vhci_hcd vhci_hcd.0: Device attached [ 989.217339][T23697] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 989.227992][T23697] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 989.244607][T23701] vhci_hcd: connection closed [ 989.247031][T12753] vhci_hcd: stop threads [ 989.247228][T23705] vhci_hcd: connection closed [ 989.251888][T12753] vhci_hcd: release socket [ 989.256258][T23709] vhci_hcd: connection closed [ 989.260823][T12753] vhci_hcd: disconnect device [ 989.265570][T23698] vhci_hcd: connection closed [ 989.278269][ T3385] vhci_hcd: vhci_device speed not set [ 989.280898][T12753] vhci_hcd: stop threads [ 989.292864][T12753] vhci_hcd: release socket [ 989.297368][T12753] vhci_hcd: disconnect device [ 989.302411][T12753] vhci_hcd: stop threads [ 989.306676][T12753] vhci_hcd: release socket [ 989.311295][T12753] vhci_hcd: disconnect device [ 989.318468][T12753] vhci_hcd: stop threads [ 989.322828][T12753] vhci_hcd: release socket [ 989.327289][T12753] vhci_hcd: disconnect device [ 989.342914][ T3385] usb 19-1: new full-speed USB device number 3 using vhci_hcd [ 989.350552][ T3385] usb 19-1: enqueue for inactive port 0 [ 989.356502][ T3385] usb 19-1: enqueue for inactive port 0 [ 989.362944][ T3385] usb 19-1: enqueue for inactive port 0 [ 989.432111][ T3385] vhci_hcd: vhci_device speed not set [ 990.145153][T23742] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 990.151724][T23742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 990.159385][T23742] vhci_hcd vhci_hcd.0: Device attached [ 990.171136][T23742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.180056][T23742] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 990.186632][T23742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 990.194166][T23742] vhci_hcd vhci_hcd.0: Device attached [ 990.205766][T23742] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(11) [ 990.212403][T23742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 990.220415][T23742] vhci_hcd vhci_hcd.0: Device attached [ 990.227564][T23742] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 990.234241][T23742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 990.241973][T23742] vhci_hcd vhci_hcd.0: Device attached [ 990.248221][T23742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.256846][T23742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.268334][T23756] vhci_hcd: connection closed [ 990.268337][T23751] vhci_hcd: connection closed [ 990.268470][T23756] ================================================================== [ 990.268504][T23756] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 990.268560][T23756] [ 990.268570][T23756] write to 0xffffffff88e48d80 of 29 bytes by task 23751 on cpu 0: [ 990.268599][T23756] vsnprintf+0x2ce/0x890 [ 990.268628][T23756] vscnprintf+0x41/0x90 [ 990.268650][T23743] vhci_hcd: connection closed [ 990.268656][T23756] printk_sprint+0x30/0x2d0 [ 990.268673][T23756] vprintk_store+0x599/0x860 [ 990.268690][T23756] vprintk_emit+0x178/0x650 [ 990.268708][T23756] vprintk_default+0x26/0x30 [ 990.268727][T23756] vprintk+0x1d/0x30 [ 990.268758][T23756] _printk+0x79/0xa0 [ 990.268791][T23756] vhci_rx_loop+0x4ab/0x5f0 [ 990.268814][T23756] kthread+0x486/0x510 [ 990.268833][T23756] ret_from_fork+0xda/0x150 [ 990.268859][T23756] ret_from_fork_asm+0x1a/0x30 [ 990.268888][T23756] [ 990.268897][T23756] read to 0xffffffff88e48d98 of 8 bytes by task 23756 on cpu 1: [ 990.268917][T23756] data_push_tail+0xfd/0x420 [ 990.268950][T23756] data_alloc+0xbf/0x2b0 [ 990.268977][T23756] prb_reserve+0x808/0xaf0 [ 990.269008][T23756] vprintk_store+0x56d/0x860 [ 990.269029][T23756] vprintk_emit+0x178/0x650 [ 990.269051][T23756] vprintk_default+0x26/0x30 [ 990.269177][T23756] vprintk+0x1d/0x30 [ 990.269201][T23756] _printk+0x79/0xa0 [ 990.269226][T23756] vhci_rx_loop+0x4ab/0x5f0 [ 990.269248][T23756] kthread+0x486/0x510 [ 990.269267][T23756] ret_from_fork+0xda/0x150 [ 990.269295][T23756] ret_from_fork_asm+0x1a/0x30 [ 990.269316][T23756] [ 990.269321][T23756] value changed: 0x0000000100005e35 -> 0x0000006465646573 [ 990.269332][T23756] [ 990.269337][T23756] Reported by Kernel Concurrency Sanitizer on: [ 990.269351][T23756] CPU: 1 UID: 0 PID: 23756 Comm: vhci_rx Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 990.269379][T23756] Tainted: [W]=WARN [ 990.269386][T23756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 990.269399][T23756] ================================================================== [ 990.271759][T19102] vhci_hcd: stop threads [ 990.274564][T23747] vhci_hcd: connection closed [ 990.278896][T19102] vhci_hcd: release socket [ 990.489494][T19102] vhci_hcd: disconnect device [ 990.495425][T19102] vhci_hcd: stop threads [ 990.499724][T19102] vhci_hcd: release socket [ 990.504199][T19102] vhci_hcd: disconnect device [ 990.509082][T19102] vhci_hcd: stop threads [ 990.513416][T19102] vhci_hcd: release socket [ 990.517930][T19102] vhci_hcd: disconnect device [ 990.522967][T19102] vhci_hcd: stop threads [ 990.527293][T19102] vhci_hcd: release socket [ 990.531810][T19102] vhci_hcd: disconnect device [ 990.561705][T24072] vhci_hcd: vhci_device speed not set