last executing test programs: 3.180511798s ago: executing program 4 (id=1082): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) get_mempolicy(0x0, &(0x7f00000003c0), 0xfd, &(0x7f00000b4000/0x1000)=nil, 0xc36e8cbdd2f4aca3) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000040)=0x7f, 0x12) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) write$selinux_validatetrans(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 3.125751344s ago: executing program 4 (id=1083): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x80000000, 0x0, 0x2, {0xa, 0x4e24, 0xe, @mcast2, 0xa}}}, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x7, 0xb, 0x8000, 0x47, 0x0, 0xcc}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000001700)="438f786a892c3f523f", 0x9}], 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000b40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x80, 0xa0, &(0x7f0000000480)="c4f9c1b9f675c63213255a9c88fe04dc370ae6b74d286c3c5da2c7fd7395298b5ddadf8565460bfa3f69a02065e69d4234014993a83f3ab29658096405820831eb85dc69c5d6e8a0aba418f9dca479b4f1", 0x51, 0xc, 0x8, 0x66, 0x3, 0x8, &(0x7f0000000580)="cda1a38c75ee5a4f1314a9130982b92772cd3b7c47c7c3241666c53aaedc53aa71312b6278807df72ab145fce72b9f6c4a68bf415b557f0c8b82135c6ee2e258b992e91b6d5d1c751ba2736c7e832886c2bbddb110717ae4661a81fdfcdc2d6468c82e0a61fd10bfde0b9d08dc80d7673795ed937a3194819dc58ca72a4653cca06e845600fd7ec0c2670d32364d47b435e2e8f9848b5243a454", [{0x1d, 0x10, 0x6}, {0x5, 0x1000000, 0x4}, {0x1000, 0x8, 0x8}, {0x9, 0x162cff16, 0xfffff4f8}, {0x3, 0x5, 0x7}, {0x7f9, 0xd00, 0x3}, {0x8000, 0x4, 0x1800}, {0xfffffff9, 0x7ff, 0x1}, {0x3, 0x200, 0x8}, {0x4, 0x2, 0x8}, {0x8, 0x3, 0x1}, {0x0, 0x2}, {0x7fff, 0x1, 0x9}, {0x7, 0x8000, 0x3071}, {0x4, 0x32, 0x1000000}, {0x8, 0x2, 0x7}, {0xb8, 0x4, 0x10001}, {0x226, 0xf1, 0xfffffc00}, {0x6, 0x3, 0xac}, {0xf3, 0x1, 0xfffffff9}, {0x8a9, 0x7, 0x80000000}, {0x200, 0x7fffffff, 0x231}, {0x2, 0x7, 0x7}, {0xffffffff, 0x1, 0x1}, {0xa, 0x401, 0x7}, {0xfffffffb, 0x6, 0xff}, {0x8001, 0x6, 0xfffffffa}, {0x5, 0x3, 0x2}, {0x2, 0x54, 0xffffffff}, {0x4, 0x5, 0x40}, {0x6cf, 0x9, 0x7}, {0x8, 0x6, 0x8f7}, {0x4, 0x80000}, {0x101, 0xfffffffa, 0x4}, {0x6, 0x5, 0x4}, {0x6, 0x1, 0x9}, {0x4, 0x8, 0x7}, {0x16, 0x36, 0x9}, {0x8, 0x400, 0x6}, {0x7b, 0x8}, {0x800, 0x2, 0x80000000}, {0x9, 0x30a1, 0x7}, {0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x201}, {0x3, 0xa, 0x400}, {0x200000, 0x4, 0x84}, {0x7, 0x3, 0x7}, {0xf, 0x9, 0xfffff800}, {0x9, 0xd49, 0x2}, {0x3, 0x6, 0x3}, {0x0, 0x5, 0x1}, {0x1, 0xa4a, 0xa8}, {0x4, 0x7}, {0x8, 0x4, 0xffff0}, {0x0, 0x5}, {0x3, 0x3, 0x7}, {0x8, 0x6, 0x7a63}, {0x7, 0xba, 0x8}, {0x4, 0x3, 0xfffffffe}, {0x7, 0x4, 0xffff}, {0xc095, 0xec4, 0xfff}, {0x4, 0x9, 0x1}, {0xd, 0x257, 0x1}, {0x7ff, 0x40, 0xfffffff7}, {0xc96, 0x4, 0x5}, {0x3, 0xa8d, 0x3}, {0x8, 0x3, 0xbb0e}, {0x6, 0xd, 0xff}, {0x1ff, 0x1, 0x2}, {0x9, 0xfffffffb, 0x80000000}, {0x1, 0x1, 0x10001}, {0x10000, 0x0, 0x3}, {0x1, 0x0, 0xa199}, {0x4, 0x4, 0x9}, {0x1, 0x2, 0x7}, {0xcb, 0x8, 0x6}, {0x6, 0x9, 0x8}, {0x3, 0x6, 0xfffffff7}, {0xffffffff, 0x80000000, 0x5}, {0x8000, 0x1, 0x7fffffff}, {0x5, 0x1}, {0x1, 0x7, 0x6}, {0x81, 0xfffffffe, 0x9e}, {0x2, 0x4, 0xc}, {0xf, 0x9, 0xb}, {0x6dd, 0x9}, {0xfffffffc, 0x4, 0x4}, {0x60, 0x2, 0xe}, {0x9, 0x3, 0x8}, {0x6, 0x0, 0xfa01}, {0x4, 0x6, 0x5}, {0x1000, 0x3, 0x6}, {0x5, 0x7, 0x2}, {0x1, 0x8, 0x10}, {0x5, 0x81, 0xf721}, {0xd6, 0xfe8, 0x81}, {0xfff, 0x9, 0x5}, {0x10000, 0x3, 0x2d37}, {0x1, 0xdc, 0x8}, {0x2, 0x4, 0x80}, {0x4, 0x0, 0x1}, {0x401, 0x3, 0x80000000}]}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 2.931189693s ago: executing program 4 (id=1086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x326, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc32, 0xfffffffd}}, 0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f00000004c0)) 1.964901578s ago: executing program 2 (id=1099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x326, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc32, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290) socket$nl_route(0x10, 0x3, 0x0) 1.947615579s ago: executing program 3 (id=1100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000e0000000f00000006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB="08000a00fa4a693a2aa0551441bfba2b74063e2e638e66c3af3bfe2c01570547b127a561a9b8b5250ce10f004b084b946ab2ce6d000000000a9a6b3bc45429e59c678ad55531f4f74472e5a2846eddfa87da", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc810) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r6 = syz_open_pts(r0, 0x42) r7 = dup3(r6, r0, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 1.862096618s ago: executing program 3 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 1.767951467s ago: executing program 1 (id=1103): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, 0x0, 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1.711249893s ago: executing program 1 (id=1104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x80000000, 0x0, 0x2, {0xa, 0x4e24, 0xe, @mcast2, 0xa}}}, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x7, 0xb, 0x8000, 0x47, 0x0, 0xcc}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000001700)="438f786a892c3f523f", 0x9}], 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000b40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x80, 0xa0, &(0x7f0000000480)="c4f9c1b9f675c63213255a9c88fe04dc370ae6b74d286c3c5da2c7fd7395298b5ddadf8565460bfa3f69a02065e69d4234014993a83f3ab29658096405820831eb85dc69c5d6e8a0aba418f9dca479b4f1", 0x51, 0xc, 0x8, 0x66, 0x3, 0x8, &(0x7f0000000580)="cda1a38c75ee5a4f1314a9130982b92772cd3b7c47c7c3241666c53aaedc53aa71312b6278807df72ab145fce72b9f6c4a68bf415b557f0c8b82135c6ee2e258b992e91b6d5d1c751ba2736c7e832886c2bbddb110717ae4661a81fdfcdc2d6468c82e0a61fd10bfde0b9d08dc80d7673795ed937a3194819dc58ca72a4653cca06e845600fd7ec0c2670d32364d47b435e2e8f9848b5243a454", [{0x1d, 0x10, 0x6}, {0x5, 0x1000000, 0x4}, {0x1000, 0x8, 0x8}, {0x9, 0x162cff16, 0xfffff4f8}, {0x3, 0x5, 0x7}, {0x7f9, 0xd00, 0x3}, {0x8000, 0x4, 0x1800}, {0xfffffff9, 0x7ff, 0x1}, {0x3, 0x200, 0x8}, {0x4, 0x2, 0x8}, {0x8, 0x3, 0x1}, {0x0, 0x2}, {0x7fff, 0x1, 0x9}, {0x7, 0x8000, 0x3071}, {0x4, 0x32, 0x1000000}, {0x8, 0x2, 0x7}, {0xb8, 0x4, 0x10001}, {0x226, 0xf1, 0xfffffc00}, {0x6, 0x3, 0xac}, {0xf3, 0x1, 0xfffffff9}, {0x8a9, 0x7, 0x80000000}, {0x200, 0x7fffffff, 0x231}, {0x2, 0x7, 0x7}, {0xffffffff, 0x1, 0x1}, {0xa, 0x401, 0x7}, {0xfffffffb, 0x6, 0xff}, {0x8001, 0x6, 0xfffffffa}, {0x5, 0x3, 0x2}, {0x2, 0x54, 0xffffffff}, {0x4, 0x5, 0x40}, {0x6cf, 0x9, 0x7}, {0x8, 0x6, 0x8f7}, {0x4, 0x80000}, {0x101, 0xfffffffa, 0x4}, {0x6, 0x5, 0x4}, {0x6, 0x1, 0x9}, {0x4, 0x8, 0x7}, {0x16, 0x36, 0x9}, {0x8, 0x400, 0x6}, {0x7b, 0x8}, {0x800, 0x2, 0x80000000}, {0x9, 0x30a1, 0x7}, {0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x201}, {0x3, 0xa, 0x400}, {0x200000, 0x4, 0x84}, {0x7, 0x3, 0x7}, {0xf, 0x9, 0xfffff800}, {0x9, 0xd49, 0x2}, {0x3, 0x6, 0x3}, {0x0, 0x5, 0x1}, {0x1, 0xa4a, 0xa8}, {0x4, 0x7}, {0x8, 0x4, 0xffff0}, {0x0, 0x5}, {0x3, 0x3, 0x7}, {0x8, 0x6, 0x7a63}, {0x7, 0xba, 0x8}, {0x4, 0x3, 0xfffffffe}, {0x7, 0x4, 0xffff}, {0xc095, 0xec4, 0xfff}, {0x4, 0x9, 0x1}, {0xd, 0x257, 0x1}, {0x7ff, 0x40, 0xfffffff7}, {0xc96, 0x4, 0x5}, {0x3, 0xa8d, 0x3}, {0x8, 0x3, 0xbb0e}, {0x6, 0xd, 0xff}, {0x1ff, 0x1, 0x2}, {0x9, 0xfffffffb, 0x80000000}, {0x1, 0x1, 0x10001}, {0x10000, 0x0, 0x3}, {0x1, 0x0, 0xa199}, {0x4, 0x4, 0x9}, {0x1, 0x2, 0x7}, {0xcb, 0x8, 0x6}, {0x6, 0x9, 0x8}, {0x3, 0x6, 0xfffffff7}, {0xffffffff, 0x80000000, 0x5}, {0x8000, 0x1, 0x7fffffff}, {0x5, 0x1}, {0x1, 0x7, 0x6}, {0x81, 0xfffffffe, 0x9e}, {0x2, 0x4, 0xc}, {0xf, 0x9, 0xb}, {0x6dd, 0x9}, {0xfffffffc, 0x4, 0x4}, {0x60, 0x2, 0xe}, {0x9, 0x3, 0x8}, {0x6, 0x0, 0xfa01}, {0x4, 0x6, 0x5}, {0x1000, 0x3, 0x6}, {0x5, 0x7, 0x2}, {0x1, 0x8, 0x10}, {0x5, 0x81, 0xf721}, {0xd6, 0xfe8, 0x81}, {0xfff, 0x9, 0x5}, {0x10000, 0x3, 0x2d37}, {0x1, 0xdc, 0x8}, {0x2, 0x4, 0x80}, {0x4, 0x0, 0x1}, {0x401, 0x3, 0x80000000}]}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 1.642749639s ago: executing program 0 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x7, 0x2007, @fd_index=0xa, 0xfffffffffffffffd, &(0x7f00000002c0)="79087d3083a747163fb525196ca0892785e6651c307fd509afcb", 0x1a, 0x7}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18008abba47087a5c80008000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000cdd0860687d50bfd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000002180)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1028822, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xd1}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r7, 0x1000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.189136894s ago: executing program 1 (id=1107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1.172090525s ago: executing program 4 (id=1108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x326, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc32, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290) 1.146156778s ago: executing program 1 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.099005673s ago: executing program 0 (id=1110): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsmount(0xffffffffffffffff, 0x0, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1c0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f63}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fb88c1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x9}, 0x18) write$binfmt_format(r8, &(0x7f0000000800)='-1\x00', 0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) 1.098225023s ago: executing program 1 (id=1111): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000e0000000f00000006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB="08000a00fa4a693a2aa0551441bfba2b74063e2e638e66c3af3bfe2c01570547b127a561a9b8b5250ce10f004b084b946ab2ce6d000000000a9a6b3bc45429e59c678ad55531f4f74472e5a2846eddfa87da", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc810) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r6 = syz_open_pts(r0, 0x42) r7 = dup3(r6, r0, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 960.188886ms ago: executing program 2 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 959.019776ms ago: executing program 3 (id=1113): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x3}, 0x18) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000), 0xfdef) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='rpcgss_update_slack\x00', r13, 0x0, 0xfffffffffffffffe}, 0x18) write$tcp_mem(r12, &(0x7f00000008c0)={0xb, 0x20, 0x0, 0x20, 0x2}, 0x48) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x11, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 842.452918ms ago: executing program 0 (id=1114): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, 0x0, 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 791.720902ms ago: executing program 2 (id=1115): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000810, &(0x7f0000000200)={0xa, 0x6e1d, 0x6, @mcast1, 0xfffffffd}, 0x1c) 781.360904ms ago: executing program 1 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x326, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc32, 0xfffffffd}}, 0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f00000004c0)) 768.852045ms ago: executing program 2 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES8=r0, @ANYBLOB="dd00000000000000b719000003000010857800000000000091ff9618f8bcb9c5e064a08356e173f372d06c8adc9555e7235b7678d70e6fbb62eaf755ce90bd03d7139216df7a8e1f67fe1717a6da9949330a4adde04b732e0bacc91b9cb290294fe8881117b3044d89eb8af134d509e26c07258a3da72d4d5741031cf0f074c103f305e4411fcd7a6b4abdca414bc02cab634f7e74838fccd0d85e93591f3c3cd4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xf7}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000640)=@assoc_value, &(0x7f0000000740)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffc}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x1, 0x4) vmsplice(r8, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)}, {0x0}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000003040)="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", 0xf92}, {&(0x7f0000000480)="37c2", 0x2}], 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0) write(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='find_free_extent\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 757.650426ms ago: executing program 3 (id=1118): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x80000000, 0x0, 0x2, {0xa, 0x4e24, 0xe, @mcast2, 0xa}}}, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x7, 0xb, 0x8000, 0x47, 0x0, 0xcc}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000001700)="438f786a892c3f523f", 0x9}], 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000b40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x80, 0xa0, &(0x7f0000000480)="c4f9c1b9f675c63213255a9c88fe04dc370ae6b74d286c3c5da2c7fd7395298b5ddadf8565460bfa3f69a02065e69d4234014993a83f3ab29658096405820831eb85dc69c5d6e8a0aba418f9dca479b4f1", 0x51, 0xc, 0x8, 0x66, 0x3, 0x8, &(0x7f0000000580)="cda1a38c75ee5a4f1314a9130982b92772cd3b7c47c7c3241666c53aaedc53aa71312b6278807df72ab145fce72b9f6c4a68bf415b557f0c8b82135c6ee2e258b992e91b6d5d1c751ba2736c7e832886c2bbddb110717ae4661a81fdfcdc2d6468c82e0a61fd10bfde0b9d08dc80d7673795ed937a3194819dc58ca72a4653cca06e845600fd7ec0c2670d32364d47b435e2e8f9848b5243a454", [{0x1d, 0x10, 0x6}, {0x5, 0x1000000, 0x4}, {0x1000, 0x8, 0x8}, {0x9, 0x162cff16, 0xfffff4f8}, {0x3, 0x5, 0x7}, {0x7f9, 0xd00, 0x3}, {0x8000, 0x4, 0x1800}, {0xfffffff9, 0x7ff, 0x1}, {0x3, 0x200, 0x8}, {0x4, 0x2, 0x8}, {0x8, 0x3, 0x1}, {0x0, 0x2}, {0x7fff, 0x1, 0x9}, {0x7, 0x8000, 0x3071}, {0x4, 0x32, 0x1000000}, {0x8, 0x2, 0x7}, {0xb8, 0x4, 0x10001}, {0x226, 0xf1, 0xfffffc00}, {0x6, 0x3, 0xac}, {0xf3, 0x1, 0xfffffff9}, {0x8a9, 0x7, 0x80000000}, {0x200, 0x7fffffff, 0x231}, {0x2, 0x7, 0x7}, {0xffffffff, 0x1, 0x1}, {0xa, 0x401, 0x7}, {0xfffffffb, 0x6, 0xff}, {0x8001, 0x6, 0xfffffffa}, {0x5, 0x3, 0x2}, {0x2, 0x54, 0xffffffff}, {0x4, 0x5, 0x40}, {0x6cf, 0x9, 0x7}, {0x8, 0x6, 0x8f7}, {0x4, 0x80000}, {0x101, 0xfffffffa, 0x4}, {0x6, 0x5, 0x4}, {0x6, 0x1, 0x9}, {0x4, 0x8, 0x7}, {0x16, 0x36, 0x9}, {0x8, 0x400, 0x6}, {0x7b, 0x8}, {0x800, 0x2, 0x80000000}, {0x9, 0x30a1, 0x7}, {0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x201}, {0x3, 0xa, 0x400}, {0x200000, 0x4, 0x84}, {0x7, 0x3, 0x7}, {0xf, 0x9, 0xfffff800}, {0x9, 0xd49, 0x2}, {0x3, 0x6, 0x3}, {0x0, 0x5, 0x1}, {0x1, 0xa4a, 0xa8}, {0x4, 0x7}, {0x8, 0x4, 0xffff0}, {0x0, 0x5}, {0x3, 0x3, 0x7}, {0x8, 0x6, 0x7a63}, {0x7, 0xba, 0x8}, {0x4, 0x3, 0xfffffffe}, {0x7, 0x4, 0xffff}, {0xc095, 0xec4, 0xfff}, {0x4, 0x9, 0x1}, {0xd, 0x257, 0x1}, {0x7ff, 0x40, 0xfffffff7}, {0xc96, 0x4, 0x5}, {0x3, 0xa8d, 0x3}, {0x8, 0x3, 0xbb0e}, {0x6, 0xd, 0xff}, {0x1ff, 0x1, 0x2}, {0x9, 0xfffffffb, 0x80000000}, {0x1, 0x1, 0x10001}, {0x10000, 0x0, 0x3}, {0x1, 0x0, 0xa199}, {0x4, 0x4, 0x9}, {0x1, 0x2, 0x7}, {0xcb, 0x8, 0x6}, {0x6, 0x9, 0x8}, {0x3, 0x6, 0xfffffff7}, {0xffffffff, 0x80000000, 0x5}, {0x8000, 0x1, 0x7fffffff}, {0x5, 0x1}, {0x1, 0x7, 0x6}, {0x81, 0xfffffffe, 0x9e}, {0x2, 0x4, 0xc}, {0xf, 0x9, 0xb}, {0x6dd, 0x9}, {0xfffffffc, 0x4, 0x4}, {0x60, 0x2, 0xe}, {0x9, 0x3, 0x8}, {0x6, 0x0, 0xfa01}, {0x4, 0x6, 0x5}, {0x1000, 0x3, 0x6}, {0x5, 0x7, 0x2}, {0x1, 0x8, 0x10}, {0x5, 0x81, 0xf721}, {0xd6, 0xfe8, 0x81}, {0xfff, 0x9, 0x5}, {0x10000, 0x3, 0x2d37}, {0x1, 0xdc, 0x8}, {0x2, 0x4, 0x80}, {0x4, 0x0, 0x1}, {0x401, 0x3, 0x80000000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 741.929438ms ago: executing program 0 (id=1119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 660.811996ms ago: executing program 0 (id=1120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0xc8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x3}, 0x18) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000), 0xfdef) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='rpcgss_update_slack\x00', r13, 0x0, 0xfffffffffffffffe}, 0x18) write$tcp_mem(r12, &(0x7f00000008c0)={0xb, 0x20, 0x0, 0x20, 0x2}, 0x48) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x11, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 622.636299ms ago: executing program 0 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0xe19, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x4237}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x1, 0x2}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc0000000000"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000380)={'hsr0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) timer_create(0x2, &(0x7f0000000400)={0x0, 0x1, 0x4, @thr={&(0x7f00000007c0)="8097780762b298ad1581f4bfd910c5297a919dafe13c9001ffad2605a026a6ef3c7b87607b6671bfb3cef4af3682b2d439fc1119db3288a2ec8df0c33bcd891c3a3e21a52b6d2e85849d75b9b9e093c82c4b8cfeb1c8fcf446c516e4bc1175e500be6dd8be410dde3676ec8fed8b91f7bbd087395e895a277d361dce2d50659d7705829ceeab1688c502489cc2665b62a11f54e3eacb930a445c04f7d035e1411c", &(0x7f0000000a00)="d389b0a20b3879fd2a3281ff81e5da04248f3a5acdaa854a18fd3bc8cc15d8f7d403a15b14cf062e34d51d26df173941e063e9724c8a7f66776648cd9016ce2ea0896c67befa1d76844e50493083b8aafebfa8e95902f43751f2ede35a677cfb59ae14a59ad4d9e6935bc51a8f985772075577ccd556548d39a92ff7654639bbe916d0173c9aece9397d6723d5de1c0047ad3989591e541aab72a25cb67d687a8d096e0ffe704647cff28b4c136426f283e216b83cba4fc28d6c4a55"}}, &(0x7f00000005c0)=0x0) timer_settime(r10, 0x1, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r9, 0x0, 0x3ffff) sendfile(r11, r9, 0x0, 0x7ffff000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x1) 516.45933ms ago: executing program 3 (id=1122): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0xc810) 453.453946ms ago: executing program 3 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="9500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x326, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc32, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290) socket$nl_route(0x10, 0x3, 0x0) 286.054112ms ago: executing program 2 (id=1124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x2000000015, 0x80005, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001680)=ANY=[@ANYRESOCT=r4], &(0x7f0000001500)=""/62, 0xd3, 0x3e, 0x1, 0x8000, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x7b, '\x00', r4, r5, 0x2, 0x3, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001640)='cachefiles_read\x00', r6, 0x0, 0x4}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 252.777476ms ago: executing program 4 (id=1125): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xce2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xb8}]}, &(0x7f0000000140)='syzkaller\x00', 0x62, 0x0, 0x0, 0x1f00, 0x11, '\x00', 0x0, @fallback=0x1, r5, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xd, 0x5, 0x6}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 193.747172ms ago: executing program 4 (id=1126): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100000000000100000000000000dd0000"], 0x50) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffb8, 0x0, 0x0) unshare(0x22020600) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r3, r4) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000700), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="380000000000000029001000360000003203000000000000c20400000007c20400000009c910ff01000000000000000000400000000100001400000000000000290000000b00000000000f9a5f000000"], 0x50}}], 0x1, 0x4c880) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='ext4_allocate_blocks\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) rmdir(&(0x7f0000000100)='./file0\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=r8, @ANYRES32=r10, @ANYRES8=r6], 0x208}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000329bd7000ffcbdf25090000005000018014000261703000000000000000000014000200726f7365300000000000003866b18c80240000000000080003000000000014000200766c616e300000000000000000000000080001003a54b0399f22dacb35575a7a3a2a73519d21347a5b6e7dcd66192de94e164e00000000007dca6c9eaf2889b6d8237c1f9b0bf44009dd21780e06e17349b70f4dc64c0b0e7e9b13478ad9", @ANYRES32=r10, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x80) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 0s ago: executing program 2 (id=1127): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002000e0000000f00000006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB="08000a00fa4a693a2aa0551441bfba2b74063e2e638e66c3af3bfe2c01570547b127a561a9b8b5250ce10f004b084b946ab2ce6d000000000a9a6b3bc45429e59c678ad55531f4f74472e5a2846eddfa87da", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc810) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r5, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r6 = syz_open_pts(r0, 0x42) r7 = dup3(r6, r0, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) kernel console output (not intermixed with test programs): T30487] vfs_read+0x1a8/0x770 [ 58.367541][T30487] ? __rcu_read_unlock+0x4f/0x70 [ 58.367563][T30487] ? __fget_files+0x184/0x1c0 [ 58.367593][T30487] ksys_read+0xda/0x1a0 [ 58.367673][T30487] __x64_sys_read+0x40/0x50 [ 58.367699][T30487] x64_sys_call+0x27c0/0x3000 [ 58.367719][T30487] do_syscall_64+0xd2/0x200 [ 58.367740][T30487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.367821][T30487] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.367848][T30487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.367871][T30487] RIP: 0033:0x7f2e72f2d8dc [ 58.367885][T30487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.367901][T30487] RSP: 002b:00007f2e7198f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.367985][T30487] RAX: ffffffffffffffda RBX: 00007f2e73185fa0 RCX: 00007f2e72f2d8dc [ 58.367997][T30487] RDX: 000000000000000f RSI: 00007f2e7198f0a0 RDI: 0000000000000004 [ 58.368007][T30487] RBP: 00007f2e7198f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.368018][T30487] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.368029][T30487] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 58.368065][T30487] [ 58.647832][T30490] loop3: detected capacity change from 0 to 1024 [ 58.719721][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.792805][T30500] netlink: 'syz.3.187': attribute type 21 has an invalid length. [ 58.873503][T30504] loop4: detected capacity change from 0 to 512 [ 58.942738][T30504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.022018][T30504] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.052570][T30508] netlink: 'syz.3.197': attribute type 6 has an invalid length. [ 59.096969][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.318921][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 59.318939][ T29] audit: type=1326 audit(1760608894.635:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8649f7ef57 code=0x7ffc0000 [ 59.353625][T30528] loop3: detected capacity change from 0 to 2048 [ 59.430471][T30528] Alternate GPT is invalid, using primary GPT. [ 59.436795][T30528] loop3: p1 p2 p3 [ 59.517388][ T29] audit: type=1326 audit(1760608894.675:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8649f7d710 code=0x7ffc0000 [ 59.541075][ T29] audit: type=1326 audit(1760608894.675:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8649f7eacb code=0x7ffc0000 [ 59.564495][ T29] audit: type=1326 audit(1760608894.715:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8649f7db2a code=0x7ffc0000 [ 59.587752][ T29] audit: type=1326 audit(1760608894.715:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8649f7eacb code=0x7ffc0000 [ 59.611105][ T29] audit: type=1326 audit(1760608894.715:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8649f7eacb code=0x7ffc0000 [ 59.634434][ T29] audit: type=1326 audit(1760608894.805:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 59.657940][ T29] audit: type=1326 audit(1760608894.805:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 59.681330][ T29] audit: type=1326 audit(1760608894.805:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 59.704798][ T29] audit: type=1326 audit(1760608894.805:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30524 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 59.763611][T30536] loop4: detected capacity change from 0 to 512 [ 59.790686][T30536] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.201: bad orphan inode 11862016 [ 59.801903][T30536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.814779][T30536] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.827825][T30527] FAULT_INJECTION: forcing a failure. [ 59.827825][T30527] name failslab, interval 1, probability 0, space 0, times 0 [ 59.840590][T30527] CPU: 0 UID: 0 PID: 30527 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.840623][T30527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.840637][T30527] Call Trace: [ 59.840720][T30527] [ 59.840730][T30527] __dump_stack+0x1d/0x30 [ 59.840756][T30527] dump_stack_lvl+0xe8/0x140 [ 59.840841][T30527] dump_stack+0x15/0x1b [ 59.840864][T30527] should_fail_ex+0x265/0x280 [ 59.840908][T30527] should_failslab+0x8c/0xb0 [ 59.840943][T30527] kmem_cache_alloc_noprof+0x50/0x480 [ 59.840987][T30527] ? mb_cache_entry_create+0xf0/0x540 [ 59.841111][T30527] mb_cache_entry_create+0xf0/0x540 [ 59.841157][T30527] ext4_xattr_get+0x298/0x470 [ 59.841220][T30527] ext4_xattr_security_get+0x32/0x40 [ 59.841252][T30527] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 59.841304][T30527] __vfs_getxattr+0x2ad/0x2c0 [ 59.841337][T30527] cap_inode_need_killpriv+0x2e/0x50 [ 59.841453][T30527] security_inode_need_killpriv+0x36/0x70 [ 59.841486][T30527] file_remove_privs_flags+0x11f/0x320 [ 59.841634][T30527] ? __rcu_read_unlock+0x4f/0x70 [ 59.841667][T30527] ? mntput_no_expire+0x6f/0x440 [ 59.841743][T30527] file_modified_flags+0x32/0x350 [ 59.841834][T30527] file_modified+0x17/0x20 [ 59.841872][T30527] ext4_file_write_iter+0xacf/0xf60 [ 59.841929][T30527] do_iter_readv_writev+0x4a1/0x540 [ 59.842039][T30527] vfs_writev+0x2df/0x8b0 [ 59.842095][T30527] ? mutex_lock+0xd/0x30 [ 59.842130][T30527] do_writev+0xe7/0x210 [ 59.842170][T30527] __x64_sys_writev+0x45/0x50 [ 59.842243][T30527] x64_sys_call+0x1e9a/0x3000 [ 59.842272][T30527] do_syscall_64+0xd2/0x200 [ 59.842304][T30527] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.842389][T30527] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.842419][T30527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.842460][T30527] RIP: 0033:0x7f1cee8eeec9 [ 59.842479][T30527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.842502][T30527] RSP: 002b:00007f1ced34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 59.842622][T30527] RAX: ffffffffffffffda RBX: 00007f1ceeb45fa0 RCX: 00007f1cee8eeec9 [ 59.842636][T30527] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 59.842647][T30527] RBP: 00007f1ced34f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.842659][T30527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.842675][T30527] R13: 00007f1ceeb46038 R14: 00007f1ceeb45fa0 R15: 00007ffeca4b85a8 [ 59.842701][T30527] [ 60.116017][T30546] __nla_validate_parse: 14 callbacks suppressed [ 60.116031][T30546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 60.180180][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 60.242735][T30556] loop3: detected capacity change from 0 to 512 [ 60.253925][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.293794][T30556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.327114][T30556] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.354509][T30566] netlink: 'syz.4.214': attribute type 10 has an invalid length. [ 60.369139][T30567] devtmpfs: Bad value for 'nr_inodes' [ 60.374904][T30566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=30566 comm=syz.4.214 [ 60.410687][T30549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=30549 comm=syz.1.208 [ 60.589947][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.815704][T30575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 60.925011][T30583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'. [ 61.776346][T30590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 61.792820][T30594] loop3: detected capacity change from 0 to 512 [ 61.917697][T30598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 61.930548][T30594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.930808][T30602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.944436][T30603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 61.951639][T30602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.960341][T30603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 61.962031][T30594] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.080965][T30613] Zero length message leads to an empty skb [ 62.101732][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.175805][T30617] FAULT_INJECTION: forcing a failure. [ 62.175805][T30617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.188925][T30617] CPU: 1 UID: 0 PID: 30617 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.188959][T30617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.188976][T30617] Call Trace: [ 62.188983][T30617] [ 62.189028][T30617] __dump_stack+0x1d/0x30 [ 62.189055][T30617] dump_stack_lvl+0xe8/0x140 [ 62.189080][T30617] dump_stack+0x15/0x1b [ 62.189176][T30617] should_fail_ex+0x265/0x280 [ 62.189222][T30617] should_fail+0xb/0x20 [ 62.189278][T30617] should_fail_usercopy+0x1a/0x20 [ 62.189377][T30617] _copy_from_user+0x1c/0xb0 [ 62.189533][T30617] ip_set_mcast_msfilter+0x11c/0x2a0 [ 62.189568][T30617] do_ip_setsockopt+0x16ca/0x2240 [ 62.189688][T30617] ip_setsockopt+0x58/0x110 [ 62.189715][T30617] udp_setsockopt+0x99/0xb0 [ 62.189747][T30617] sock_common_setsockopt+0x69/0x80 [ 62.189775][T30617] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 62.189875][T30617] __sys_setsockopt+0x184/0x200 [ 62.189912][T30617] __x64_sys_setsockopt+0x64/0x80 [ 62.189956][T30617] x64_sys_call+0x20ec/0x3000 [ 62.189978][T30617] do_syscall_64+0xd2/0x200 [ 62.190008][T30617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.190066][T30617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.190162][T30617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.190199][T30617] RIP: 0033:0x7f8649f7eec9 [ 62.190217][T30617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.190239][T30617] RSP: 002b:00007f86489df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.190263][T30617] RAX: ffffffffffffffda RBX: 00007f864a1d5fa0 RCX: 00007f8649f7eec9 [ 62.190278][T30617] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.190290][T30617] RBP: 00007f86489df090 R08: 0000000000000110 R09: 0000000000000000 [ 62.190301][T30617] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 62.190313][T30617] R13: 00007f864a1d6038 R14: 00007f864a1d5fa0 R15: 00007ffdf59fe708 [ 62.190399][T30617] [ 62.472798][T30628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.481835][T30628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.491263][T30628] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 62.511400][T30628] team0: Port device dummy0 added [ 62.518581][T30628] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 62.529709][T30628] team0: Port device dummy0 removed [ 62.540303][T30628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.171328][T30642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 63.261041][T30645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'. [ 63.326632][T30648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 63.353734][T30650] loop3: detected capacity change from 0 to 512 [ 63.395451][T30650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.654026][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.899599][T30656] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 63.919809][ T885] loop3: detected capacity change from 0 to 2048 [ 63.952568][ T885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.979655][ T885] FAULT_INJECTION: forcing a failure. [ 63.979655][ T885] name failslab, interval 1, probability 0, space 0, times 0 [ 63.992329][ T885] CPU: 1 UID: 0 PID: 885 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.992426][ T885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 63.992438][ T885] Call Trace: [ 63.992445][ T885] [ 63.992454][ T885] __dump_stack+0x1d/0x30 [ 63.992483][ T885] dump_stack_lvl+0xe8/0x140 [ 63.992508][ T885] dump_stack+0x15/0x1b [ 63.992581][ T885] should_fail_ex+0x265/0x280 [ 63.992616][ T885] should_failslab+0x8c/0xb0 [ 63.992646][ T885] __kmalloc_noprof+0xa5/0x570 [ 63.992680][ T885] ? ext4_find_extent+0x16b/0x7a0 [ 63.992711][ T885] ? _find_next_zero_bit+0x29/0xa0 [ 63.992754][ T885] ext4_find_extent+0x16b/0x7a0 [ 63.992848][ T885] ? mb_set_largest_free_order+0x1f9/0x220 [ 63.992893][ T885] ext4_ext_map_blocks+0x11f/0x38a0 [ 63.992957][ T885] ? find_get_block_common+0x736/0x960 [ 63.992994][ T885] ? invalidate_inode_pages2_range+0x397/0x3d0 [ 63.993024][ T885] ? bdev_getblk+0x66/0x3b0 [ 63.993060][ T885] ? __rcu_read_unlock+0x4f/0x70 [ 63.993088][ T885] ? ext4_es_lookup_extent+0x352/0x4f0 [ 63.993202][ T885] ext4_map_blocks+0x5ee/0xd00 [ 63.993246][ T885] ext4_iomap_begin+0x88d/0xe00 [ 63.993337][ T885] ? xas_load+0x413/0x430 [ 63.993370][ T885] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 63.993447][ T885] iomap_iter+0x332/0x730 [ 63.993495][ T885] ? should_failslab+0x8c/0xb0 [ 63.993532][ T885] __iomap_dio_rw+0x705/0x1240 [ 63.993582][ T885] ? ext4_journal_check_start+0x11a/0x1b0 [ 63.993609][ T885] iomap_dio_rw+0x40/0x90 [ 63.993633][ T885] ext4_file_write_iter+0xb3a/0xf60 [ 63.993743][ T885] do_iter_readv_writev+0x4a1/0x540 [ 63.993777][ T885] vfs_writev+0x2df/0x8b0 [ 63.993894][ T885] __se_sys_pwritev2+0xfc/0x1c0 [ 63.993931][ T885] __x64_sys_pwritev2+0x67/0x80 [ 63.993966][ T885] x64_sys_call+0x2c59/0x3000 [ 63.993993][ T885] do_syscall_64+0xd2/0x200 [ 63.994062][ T885] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.994096][ T885] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.994119][ T885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.994146][ T885] RIP: 0033:0x7f8649f7eec9 [ 63.994276][ T885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.994315][ T885] RSP: 002b:00007f86489df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 63.994391][ T885] RAX: ffffffffffffffda RBX: 00007f864a1d5fa0 RCX: 00007f8649f7eec9 [ 63.994403][ T885] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 63.994415][ T885] RBP: 00007f86489df090 R08: 0000000000000000 R09: 0000000000000003 [ 63.994426][ T885] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 63.994438][ T885] R13: 00007f864a1d6038 R14: 00007f864a1d5fa0 R15: 00007ffdf59fe708 [ 63.994457][ T885] [ 64.290789][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.299984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 64.320957][ T29] kauditd_printk_skb: 796 callbacks suppressed [ 64.320972][ T29] audit: type=1326 audit(1760608899.645:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 64.368109][ T29] audit: type=1326 audit(1760608899.645:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 64.391652][ T29] audit: type=1326 audit(1760608899.645:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 64.415185][ T29] audit: type=1400 audit(1760608899.645:3024): avc: denied { create } for pid=1806 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.434567][ T29] audit: type=1400 audit(1760608899.645:3025): avc: denied { open } for pid=1806 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.453753][ T29] audit: type=1400 audit(1760608899.645:3026): avc: denied { kernel } for pid=1806 comm="syz.3.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 64.473237][ T29] audit: type=1326 audit(1760608899.675:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 64.496746][ T29] audit: type=1326 audit(1760608899.675:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 64.520172][ T29] audit: type=1326 audit(1760608899.675:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 64.544027][ T29] audit: type=1326 audit(1760608899.675:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 64.772554][ T1833] netlink: 'syz.0.257': attribute type 142 has an invalid length. [ 65.173093][ T1859] devtmpfs: Bad value for 'nr_inodes' [ 65.405937][ T3879] loop3: detected capacity change from 0 to 2048 [ 65.562020][ T3879] Alternate GPT is invalid, using primary GPT. [ 65.568353][ T3879] loop3: p1 p2 p3 [ 65.901055][ T1853] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 66.041678][ T5925] __nla_validate_parse: 11 callbacks suppressed [ 66.041763][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 66.076058][ T5930] loop4: detected capacity change from 0 to 512 [ 66.122336][ T5927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.271'. [ 66.132552][ T5930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.144759][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 66.160376][ T5934] netlink: 'syz.0.273': attribute type 142 has an invalid length. [ 66.168321][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 66.181660][ T5936] IPVS: set_ctl: invalid protocol: 43 172.20.20.26:20000 [ 66.208920][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.249566][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.275'. [ 66.321023][ T5946] netlink: 'syz.3.278': attribute type 142 has an invalid length. [ 66.328856][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.278'. [ 66.354990][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 66.363822][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 66.384306][ T5946] loop3: detected capacity change from 0 to 1024 [ 66.391439][ T5946] EXT4-fs: Ignoring removed orlov option [ 66.402562][ T5946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.428882][ T5956] FAULT_INJECTION: forcing a failure. [ 66.428882][ T5956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.442156][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.442223][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.442239][ T5956] Call Trace: [ 66.442326][ T5956] [ 66.442335][ T5956] __dump_stack+0x1d/0x30 [ 66.442362][ T5956] dump_stack_lvl+0xe8/0x140 [ 66.442386][ T5956] dump_stack+0x15/0x1b [ 66.442450][ T5956] should_fail_ex+0x265/0x280 [ 66.442488][ T5956] should_fail+0xb/0x20 [ 66.442585][ T5956] should_fail_usercopy+0x1a/0x20 [ 66.442620][ T5956] _copy_from_user+0x1c/0xb0 [ 66.442676][ T5956] do_ip6t_set_ctl+0x3a9/0x840 [ 66.442710][ T5956] ? kstrtoull+0x111/0x140 [ 66.442750][ T5956] ? __rcu_read_unlock+0x4f/0x70 [ 66.442838][ T5956] nf_setsockopt+0x199/0x1b0 [ 66.442878][ T5956] ipv6_setsockopt+0x11a/0x130 [ 66.442941][ T5956] tcp_setsockopt+0x98/0xb0 [ 66.442980][ T5956] sock_common_setsockopt+0x69/0x80 [ 66.443023][ T5956] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 66.443053][ T5956] __sys_setsockopt+0x184/0x200 [ 66.443090][ T5956] __x64_sys_setsockopt+0x64/0x80 [ 66.443117][ T5956] x64_sys_call+0x20ec/0x3000 [ 66.443188][ T5956] do_syscall_64+0xd2/0x200 [ 66.443328][ T5956] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.443371][ T5956] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.443406][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.443427][ T5956] RIP: 0033:0x7f2e72f2eec9 [ 66.443442][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.443461][ T5956] RSP: 002b:00007f2e7198f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 66.443485][ T5956] RAX: ffffffffffffffda RBX: 00007f2e73185fa0 RCX: 00007f2e72f2eec9 [ 66.443501][ T5956] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 66.443517][ T5956] RBP: 00007f2e7198f090 R08: 0000000000000338 R09: 0000000000000000 [ 66.443573][ T5956] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 66.443608][ T5956] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 66.443632][ T5956] [ 66.679342][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.740229][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.283'. [ 66.771897][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.285'. [ 66.806185][ T5969] devtmpfs: Bad value for 'nr_inodes' [ 67.195436][ T5981] netlink: 'syz.1.288': attribute type 142 has an invalid length. [ 67.303827][ T5986] netlink: 'syz.3.293': attribute type 142 has an invalid length. [ 67.462836][ T5986] loop3: detected capacity change from 0 to 1024 [ 67.486277][ T5986] EXT4-fs: Ignoring removed orlov option [ 67.596476][ T5996] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 67.596476][ T5996] program syz.4.295 not setting count and/or reply_len properly [ 67.614145][ T5986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.834360][ T6005] loop4: detected capacity change from 0 to 512 [ 67.868074][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.878316][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.922700][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.054064][ T6016] FAULT_INJECTION: forcing a failure. [ 68.054064][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 68.066752][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.066833][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.066846][ T6016] Call Trace: [ 68.066851][ T6016] [ 68.066925][ T6016] __dump_stack+0x1d/0x30 [ 68.066945][ T6016] dump_stack_lvl+0xe8/0x140 [ 68.066968][ T6016] dump_stack+0x15/0x1b [ 68.066990][ T6016] should_fail_ex+0x265/0x280 [ 68.067064][ T6016] should_failslab+0x8c/0xb0 [ 68.067172][ T6016] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 68.067267][ T6016] ? __alloc_skb+0x101/0x320 [ 68.067297][ T6016] __alloc_skb+0x101/0x320 [ 68.067354][ T6016] netlink_alloc_large_skb+0xbf/0xf0 [ 68.067392][ T6016] netlink_sendmsg+0x3cf/0x6b0 [ 68.067487][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.067548][ T6016] __sock_sendmsg+0x145/0x180 [ 68.067572][ T6016] ____sys_sendmsg+0x31e/0x4e0 [ 68.067610][ T6016] ___sys_sendmsg+0x17b/0x1d0 [ 68.067660][ T6016] __x64_sys_sendmsg+0xd4/0x160 [ 68.067765][ T6016] x64_sys_call+0x191e/0x3000 [ 68.067791][ T6016] do_syscall_64+0xd2/0x200 [ 68.067820][ T6016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.067852][ T6016] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.067894][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.067920][ T6016] RIP: 0033:0x7f180c8beec9 [ 68.067938][ T6016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.067960][ T6016] RSP: 002b:00007f180b327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.067982][ T6016] RAX: ffffffffffffffda RBX: 00007f180cb15fa0 RCX: 00007f180c8beec9 [ 68.067997][ T6016] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 68.068041][ T6016] RBP: 00007f180b327090 R08: 0000000000000000 R09: 0000000000000000 [ 68.068056][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.068070][ T6016] R13: 00007f180cb16038 R14: 00007f180cb15fa0 R15: 00007ffdad2bed78 [ 68.068121][ T6016] [ 68.185652][ T6012] loop4: detected capacity change from 0 to 32768 [ 68.303720][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a74ca00: rx timeout, send abort [ 68.340156][ T6012] loop4: p1 p3 < > [ 68.455796][ T6034] FAULT_INJECTION: forcing a failure. [ 68.455796][ T6034] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.469136][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.469170][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.469222][ T6034] Call Trace: [ 68.469229][ T6034] [ 68.469236][ T6034] __dump_stack+0x1d/0x30 [ 68.469258][ T6034] dump_stack_lvl+0xe8/0x140 [ 68.469287][ T6034] dump_stack+0x15/0x1b [ 68.469308][ T6034] should_fail_ex+0x265/0x280 [ 68.469407][ T6034] should_fail_alloc_page+0xf2/0x100 [ 68.469437][ T6034] __alloc_frozen_pages_noprof+0xff/0x360 [ 68.469474][ T6034] alloc_pages_mpol+0xb3/0x260 [ 68.469494][ T6034] folio_alloc_mpol_noprof+0x39/0x80 [ 68.469517][ T6034] shmem_get_folio_gfp+0x3cf/0xd60 [ 68.469550][ T6034] ? simple_xattr_get+0xb9/0x120 [ 68.469586][ T6034] shmem_write_begin+0xa8/0x190 [ 68.469695][ T6034] generic_perform_write+0x184/0x490 [ 68.469793][ T6034] ? _raw_spin_unlock+0x26/0x50 [ 68.469828][ T6034] shmem_file_write_iter+0xc5/0xf0 [ 68.469852][ T6034] do_iter_readv_writev+0x4a1/0x540 [ 68.469893][ T6034] vfs_writev+0x2df/0x8b0 [ 68.470010][ T6034] __se_sys_pwritev2+0xfc/0x1c0 [ 68.470037][ T6034] __x64_sys_pwritev2+0x67/0x80 [ 68.470063][ T6034] x64_sys_call+0x2c59/0x3000 [ 68.470084][ T6034] do_syscall_64+0xd2/0x200 [ 68.470106][ T6034] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.470128][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.470157][ T6034] RIP: 0033:0x7f2c8fd6eec9 [ 68.470189][ T6034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.470214][ T6034] RSP: 002b:00007f2c8e7cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 68.470345][ T6034] RAX: ffffffffffffffda RBX: 00007f2c8ffc5fa0 RCX: 00007f2c8fd6eec9 [ 68.470358][ T6034] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 68.470371][ T6034] RBP: 00007f2c8e7cf090 R08: 0000000000000000 R09: 0000000000000003 [ 68.470383][ T6034] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 68.470395][ T6034] R13: 00007f2c8ffc6038 R14: 00007f2c8ffc5fa0 R15: 00007ffe6acd2208 [ 68.470415][ T6034] [ 68.798591][ T6050] loop4: detected capacity change from 0 to 1764 [ 68.803852][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a74ce00: rx timeout, send abort [ 68.814270][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a74ca00: abort rx timeout. Force session deactivation [ 68.846394][ T6042] netlink: 'syz.2.312': attribute type 21 has an invalid length. [ 69.037328][ T6069] loop3: detected capacity change from 0 to 512 [ 69.077789][ T6069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.297935][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.314034][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a74ce00: abort rx timeout. Force session deactivation [ 69.548627][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 69.548643][ T29] audit: type=1326 audit(1760608904.865:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2e72f2ef87 code=0x7ffc0000 [ 69.598285][ T29] audit: type=1326 audit(1760608904.865:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2e72ee632d code=0x7ffc0000 [ 69.621607][ T29] audit: type=1326 audit(1760608904.865:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2e72f63609 code=0x7ffc0000 [ 69.645090][ T29] audit: type=1326 audit(1760608904.865:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2e72ee6397 code=0x7ffc0000 [ 69.668435][ T29] audit: type=1326 audit(1760608904.865:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 69.691858][ T29] audit: type=1326 audit(1760608904.865:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 69.715227][ T29] audit: type=1326 audit(1760608904.865:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2e72ee5aa7 code=0x7ffc0000 [ 69.738586][ T29] audit: type=1326 audit(1760608904.875:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 69.761980][ T29] audit: type=1326 audit(1760608904.875:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 69.762017][ T29] audit: type=1326 audit(1760608904.865:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2e72ee5b06 code=0x7ffc0000 [ 69.847373][ T6086] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 69.992360][ T6094] loop4: detected capacity change from 0 to 1024 [ 70.044248][ T6103] syz.2.334 uses obsolete (PF_INET,SOCK_PACKET) [ 70.213656][ T6094] netlink: 'syz.4.330': attribute type 21 has an invalid length. [ 70.521223][ T6114] loop4: detected capacity change from 0 to 256 [ 70.654341][ T6108] netlink: 'syz.1.336': attribute type 21 has an invalid length. [ 70.843239][ T6138] loop4: detected capacity change from 0 to 512 [ 70.873897][ T6138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.913951][ T6138] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.135553][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.166882][ T6155] __nla_validate_parse: 30 callbacks suppressed [ 71.166900][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.350'. [ 71.287970][ T6145] netlink: 'syz.0.348': attribute type 21 has an invalid length. [ 71.301989][ T6145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.348'. [ 71.311739][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 71.352418][ T6160] loop4: detected capacity change from 0 to 256 [ 71.362828][ T6160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.351'. [ 71.464558][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.355'. [ 71.473613][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 71.542180][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'. [ 71.706993][ T6179] loop4: detected capacity change from 0 to 2048 [ 71.750278][ T6179] Alternate GPT is invalid, using primary GPT. [ 71.756577][ T6179] loop4: p1 p2 p3 [ 71.779779][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 71.857523][ T6185] loop3: detected capacity change from 0 to 512 [ 71.896656][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 71.912450][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.927933][ T6185] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.976091][ T6156] syz.2.349 (6156) used greatest stack depth: 9496 bytes left [ 72.040217][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.112100][ T6205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.364'. [ 72.230209][ T6196] netlink: 'syz.2.363': attribute type 21 has an invalid length. [ 72.233134][ T6213] loop4: detected capacity change from 0 to 256 [ 72.360354][ T6223] devtmpfs: Bad value for 'nr_inodes' [ 72.544714][ T6233] FAULT_INJECTION: forcing a failure. [ 72.544714][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 72.557535][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.376 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.557646][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.557658][ T6233] Call Trace: [ 72.557663][ T6233] [ 72.557669][ T6233] __dump_stack+0x1d/0x30 [ 72.557687][ T6233] dump_stack_lvl+0xe8/0x140 [ 72.557704][ T6233] dump_stack+0x15/0x1b [ 72.557765][ T6233] should_fail_ex+0x265/0x280 [ 72.557820][ T6233] ? netdevice_event+0x2ae/0x610 [ 72.557857][ T6233] should_failslab+0x8c/0xb0 [ 72.557890][ T6233] __kmalloc_cache_noprof+0x4c/0x4a0 [ 72.557987][ T6233] ? __pfx_netdevice_event+0x10/0x10 [ 72.558028][ T6233] netdevice_event+0x2ae/0x610 [ 72.558123][ T6233] ? __pfx_del_netdev_ips+0x10/0x10 [ 72.558153][ T6233] ? __pfx_pass_all_filter+0x10/0x10 [ 72.558187][ T6233] ? __pfx_netdevice_event+0x10/0x10 [ 72.558369][ T6233] raw_notifier_call_chain+0x6f/0x1b0 [ 72.558399][ T6233] ? call_netdevice_notifiers_info+0x9c/0x100 [ 72.558423][ T6233] call_netdevice_notifiers_info+0xae/0x100 [ 72.558524][ T6233] unregister_netdevice_many_notify+0xda9/0x15d0 [ 72.558570][ T6233] unregister_netdevice_queue+0x1f5/0x220 [ 72.558603][ T6233] __tun_detach+0x82c/0xb30 [ 72.558703][ T6233] ? __pfx_tun_chr_close+0x10/0x10 [ 72.558745][ T6233] tun_chr_close+0x5a/0x100 [ 72.558772][ T6233] __fput+0x29b/0x650 [ 72.558833][ T6233] fput_close_sync+0x6e/0x120 [ 72.558878][ T6233] __x64_sys_close+0x56/0xf0 [ 72.558902][ T6233] x64_sys_call+0x273c/0x3000 [ 72.558932][ T6233] do_syscall_64+0xd2/0x200 [ 72.558956][ T6233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.559064][ T6233] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.559133][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.559161][ T6233] RIP: 0033:0x7f2c8fd6eec9 [ 72.559180][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.559229][ T6233] RSP: 002b:00007f2c8e7cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 72.559254][ T6233] RAX: ffffffffffffffda RBX: 00007f2c8ffc5fa0 RCX: 00007f2c8fd6eec9 [ 72.559273][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 72.559289][ T6233] RBP: 00007f2c8e7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.559304][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.559319][ T6233] R13: 00007f2c8ffc6038 R14: 00007f2c8ffc5fa0 R15: 00007ffe6acd2208 [ 72.559342][ T6233] [ 73.269353][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.807083][ T6235] loop4: detected capacity change from 0 to 1024 [ 74.011097][ T6263] netlink: 'syz.4.378': attribute type 21 has an invalid length. [ 74.048642][ T6268] netlink: 'syz.0.383': attribute type 21 has an invalid length. [ 74.065042][ T6267] devtmpfs: Bad value for 'nr_inodes' [ 74.423322][ T6296] devtmpfs: Bad value for 'nr_inodes' [ 74.595900][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 74.595920][ T29] audit: type=1400 audit(1760608909.905:4910): avc: denied { create } for pid=6303 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.621472][ T29] audit: type=1400 audit(1760608909.905:4911): avc: denied { write } for pid=6303 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.664422][ T29] audit: type=1400 audit(1760608909.985:4912): avc: denied { create } for pid=6305 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.683970][ T29] audit: type=1400 audit(1760608909.985:4913): avc: denied { write } for pid=6305 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.758736][ T29] audit: type=1400 audit(1760608910.025:4914): avc: denied { read } for pid=6305 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.811058][ T29] audit: type=1326 audit(1760608910.105:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 74.834493][ T29] audit: type=1326 audit(1760608910.105:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 74.857910][ T29] audit: type=1326 audit(1760608910.105:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 74.881340][ T29] audit: type=1326 audit(1760608910.105:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 74.904686][ T29] audit: type=1326 audit(1760608910.105:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.2.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8fd6eec9 code=0x7ffc0000 [ 74.970296][ T6264] tipc: Enabling of bearer rejected, media not registered [ 75.187908][ T6323] tipc: Started in network mode [ 75.192900][ T6323] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 75.209519][ T6323] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 75.217909][ T6323] tipc: Enabled bearer , priority 10 [ 75.265684][ T6329] devtmpfs: Bad value for 'nr_inodes' [ 75.273560][ T6326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.412347][ T6326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.471633][ T6334] FAULT_INJECTION: forcing a failure. [ 75.471633][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 75.484371][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.484404][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.484420][ T6334] Call Trace: [ 75.484426][ T6334] [ 75.484434][ T6334] __dump_stack+0x1d/0x30 [ 75.484460][ T6334] dump_stack_lvl+0xe8/0x140 [ 75.484528][ T6334] dump_stack+0x15/0x1b [ 75.484567][ T6334] should_fail_ex+0x265/0x280 [ 75.484610][ T6334] should_failslab+0x8c/0xb0 [ 75.484644][ T6334] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 75.484693][ T6334] ? __alloc_skb+0x101/0x320 [ 75.484732][ T6334] __alloc_skb+0x101/0x320 [ 75.484765][ T6334] netlink_alloc_large_skb+0xbf/0xf0 [ 75.484856][ T6334] netlink_sendmsg+0x3cf/0x6b0 [ 75.484896][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.485006][ T6334] __sock_sendmsg+0x145/0x180 [ 75.485044][ T6334] ____sys_sendmsg+0x31e/0x4e0 [ 75.485083][ T6334] ___sys_sendmsg+0x17b/0x1d0 [ 75.485203][ T6334] __x64_sys_sendmsg+0xd4/0x160 [ 75.485243][ T6334] x64_sys_call+0x191e/0x3000 [ 75.485273][ T6334] do_syscall_64+0xd2/0x200 [ 75.485301][ T6334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.485334][ T6334] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.485447][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.485507][ T6334] RIP: 0033:0x7f2e72f2eec9 [ 75.485526][ T6334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.485548][ T6334] RSP: 002b:00007f2e7198f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.485573][ T6334] RAX: ffffffffffffffda RBX: 00007f2e73185fa0 RCX: 00007f2e72f2eec9 [ 75.485589][ T6334] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 75.485667][ T6334] RBP: 00007f2e7198f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.485760][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.485776][ T6334] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 75.485801][ T6334] [ 75.501486][ T6336] loop4: detected capacity change from 0 to 2048 [ 75.705353][ T6326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.738185][ T6336] Alternate GPT is invalid, using primary GPT. [ 75.744653][ T6336] loop4: p1 p2 p3 [ 75.771159][ T6326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.855751][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.872603][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.895217][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.909916][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.031098][ T6358] devtmpfs: Bad value for 'nr_inodes' [ 76.112856][ T6366] FAULT_INJECTION: forcing a failure. [ 76.112856][ T6366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.126144][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.126175][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.126192][ T6366] Call Trace: [ 76.126200][ T6366] [ 76.126209][ T6366] __dump_stack+0x1d/0x30 [ 76.126237][ T6366] dump_stack_lvl+0xe8/0x140 [ 76.126271][ T6366] dump_stack+0x15/0x1b [ 76.126295][ T6366] should_fail_ex+0x265/0x280 [ 76.126335][ T6366] should_fail_alloc_page+0xf2/0x100 [ 76.126451][ T6366] __alloc_frozen_pages_noprof+0xff/0x360 [ 76.126501][ T6366] alloc_pages_mpol+0xb3/0x260 [ 76.126529][ T6366] vma_alloc_folio_noprof+0x1aa/0x300 [ 76.126559][ T6366] handle_mm_fault+0xec2/0x2be0 [ 76.126594][ T6366] ? vma_start_read+0x141/0x1f0 [ 76.126635][ T6366] do_user_addr_fault+0x630/0x1080 [ 76.126747][ T6366] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.126847][ T6366] exc_page_fault+0x62/0xa0 [ 76.126875][ T6366] asm_exc_page_fault+0x26/0x30 [ 76.127006][ T6366] RIP: 0033:0x7f2e72edc3ab [ 76.127034][ T6366] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 76.127059][ T6366] RSP: 002b:00007f2e7198ce10 EFLAGS: 00010246 [ 76.127080][ T6366] RAX: 00007f2e7198ef30 RBX: 00007f2e73157640 RCX: 0000000000000000 [ 76.127097][ T6366] RDX: 00007f2e7198ef78 RSI: 00007f2e72f8edf8 RDI: 00007f2e7198ce30 [ 76.127114][ T6366] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 76.127131][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.127148][ T6366] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 76.127241][ T6366] [ 76.127265][ T6366] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 76.339317][ T3394] tipc: Node number set to 1 [ 76.389811][ T6379] __nla_validate_parse: 29 callbacks suppressed [ 76.389827][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 76.431227][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 76.620771][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 76.705461][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 76.735557][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 76.842809][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 76.859742][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 77.632907][ T6433] FAULT_INJECTION: forcing a failure. [ 77.632907][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.646055][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.646111][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.646126][ T6433] Call Trace: [ 77.646134][ T6433] [ 77.646143][ T6433] __dump_stack+0x1d/0x30 [ 77.646170][ T6433] dump_stack_lvl+0xe8/0x140 [ 77.646195][ T6433] dump_stack+0x15/0x1b [ 77.646217][ T6433] should_fail_ex+0x265/0x280 [ 77.646336][ T6433] should_fail+0xb/0x20 [ 77.646385][ T6433] should_fail_usercopy+0x1a/0x20 [ 77.646412][ T6433] _copy_from_user+0x1c/0xb0 [ 77.646442][ T6433] ___sys_sendmsg+0xc1/0x1d0 [ 77.646564][ T6433] __x64_sys_sendmsg+0xd4/0x160 [ 77.646645][ T6433] x64_sys_call+0x191e/0x3000 [ 77.646692][ T6433] do_syscall_64+0xd2/0x200 [ 77.646722][ T6433] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.646749][ T6433] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.646775][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.646869][ T6433] RIP: 0033:0x7f8649f7eec9 [ 77.646888][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.646912][ T6433] RSP: 002b:00007f86489df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.646935][ T6433] RAX: ffffffffffffffda RBX: 00007f864a1d5fa0 RCX: 00007f8649f7eec9 [ 77.646947][ T6433] RDX: 0000000010000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 77.646962][ T6433] RBP: 00007f86489df090 R08: 0000000000000000 R09: 0000000000000000 [ 77.646978][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.646993][ T6433] R13: 00007f864a1d6038 R14: 00007f864a1d5fa0 R15: 00007ffdf59fe708 [ 77.647094][ T6433] [ 77.937097][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 78.098374][ T6444] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 78.306795][ T6454] FAULT_INJECTION: forcing a failure. [ 78.306795][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 78.308877][ T6452] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 78.319569][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.319609][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.319647][ T6454] Call Trace: [ 78.319656][ T6454] [ 78.319668][ T6454] __dump_stack+0x1d/0x30 [ 78.319698][ T6454] dump_stack_lvl+0xe8/0x140 [ 78.319788][ T6454] dump_stack+0x15/0x1b [ 78.319812][ T6454] should_fail_ex+0x265/0x280 [ 78.319861][ T6454] should_failslab+0x8c/0xb0 [ 78.319901][ T6454] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 78.319964][ T6454] ? __alloc_skb+0x101/0x320 [ 78.320001][ T6454] __alloc_skb+0x101/0x320 [ 78.320037][ T6454] netlink_alloc_large_skb+0xbf/0xf0 [ 78.320075][ T6454] netlink_sendmsg+0x3cf/0x6b0 [ 78.320120][ T6454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.320229][ T6454] __sock_sendmsg+0x145/0x180 [ 78.320258][ T6454] ____sys_sendmsg+0x31e/0x4e0 [ 78.320362][ T6454] ___sys_sendmsg+0x17b/0x1d0 [ 78.320421][ T6454] __x64_sys_sendmsg+0xd4/0x160 [ 78.320470][ T6454] x64_sys_call+0x191e/0x3000 [ 78.320601][ T6454] do_syscall_64+0xd2/0x200 [ 78.320636][ T6454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.320677][ T6454] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.320708][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.320816][ T6454] RIP: 0033:0x7f8649f7eec9 [ 78.320837][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.320862][ T6454] RSP: 002b:00007f86489df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.320995][ T6454] RAX: ffffffffffffffda RBX: 00007f864a1d5fa0 RCX: 00007f8649f7eec9 [ 78.321015][ T6454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 78.321033][ T6454] RBP: 00007f86489df090 R08: 0000000000000000 R09: 0000000000000000 [ 78.321051][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.321069][ T6454] R13: 00007f864a1d6038 R14: 00007f864a1d5fa0 R15: 00007ffdf59fe708 [ 78.321097][ T6454] [ 78.600765][ T6463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6463 comm=syz.3.461 [ 78.635114][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 78.644094][ T6468] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 78.655244][ T6452] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 78.690485][ T6467] FAULT_INJECTION: forcing a failure. [ 78.690485][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.703586][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.703613][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.703666][ T6467] Call Trace: [ 78.703672][ T6467] [ 78.703680][ T6467] __dump_stack+0x1d/0x30 [ 78.703704][ T6467] dump_stack_lvl+0xe8/0x140 [ 78.703727][ T6467] dump_stack+0x15/0x1b [ 78.703742][ T6467] should_fail_ex+0x265/0x280 [ 78.703828][ T6467] should_fail+0xb/0x20 [ 78.703928][ T6467] should_fail_usercopy+0x1a/0x20 [ 78.703946][ T6467] _copy_from_iter+0xd2/0xe80 [ 78.703966][ T6467] ? mntput_no_expire+0x6f/0x440 [ 78.704057][ T6467] ? mntput+0x4b/0x80 [ 78.704095][ T6467] tun_get_user+0x3d0/0x26e0 [ 78.704121][ T6467] ? _parse_integer_limit+0x170/0x190 [ 78.704154][ T6467] ? ref_tracker_alloc+0x1f2/0x2f0 [ 78.704319][ T6467] ? selinux_file_permission+0x1e4/0x320 [ 78.704346][ T6467] tun_chr_write_iter+0x15e/0x210 [ 78.704450][ T6467] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 78.704550][ T6467] vfs_write+0x52a/0x960 [ 78.704602][ T6467] ksys_write+0xda/0x1a0 [ 78.704701][ T6467] __x64_sys_write+0x40/0x50 [ 78.704729][ T6467] x64_sys_call+0x2802/0x3000 [ 78.704756][ T6467] do_syscall_64+0xd2/0x200 [ 78.704778][ T6467] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.704803][ T6467] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.704825][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.704881][ T6467] RIP: 0033:0x7f8649f7eec9 [ 78.704894][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.704913][ T6467] RSP: 002b:00007f86489df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.704983][ T6467] RAX: ffffffffffffffda RBX: 00007f864a1d5fa0 RCX: 00007f8649f7eec9 [ 78.704998][ T6467] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 78.705013][ T6467] RBP: 00007f86489df090 R08: 0000000000000000 R09: 0000000000000000 [ 78.705027][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.705039][ T6467] R13: 00007f864a1d6038 R14: 00007f864a1d5fa0 R15: 00007ffdf59fe708 [ 78.705070][ T6467] [ 78.985775][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 78.994624][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 79.144028][ T6496] FAULT_INJECTION: forcing a failure. [ 79.144028][ T6496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.157145][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.0.471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.157252][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.157265][ T6496] Call Trace: [ 79.157271][ T6496] [ 79.157278][ T6496] __dump_stack+0x1d/0x30 [ 79.157298][ T6496] dump_stack_lvl+0xe8/0x140 [ 79.157322][ T6496] dump_stack+0x15/0x1b [ 79.157344][ T6496] should_fail_ex+0x265/0x280 [ 79.157389][ T6496] should_fail+0xb/0x20 [ 79.157482][ T6496] should_fail_usercopy+0x1a/0x20 [ 79.157507][ T6496] _copy_from_user+0x1c/0xb0 [ 79.157534][ T6496] addrconf_add_ifaddr+0x93/0x270 [ 79.157583][ T6496] inet6_ioctl+0xb0/0x190 [ 79.157667][ T6496] ? ioctl_has_perm+0x257/0x2a0 [ 79.157700][ T6496] sock_do_ioctl+0x73/0x220 [ 79.157720][ T6496] sock_ioctl+0x41b/0x610 [ 79.157801][ T6496] ? __pfx_sock_ioctl+0x10/0x10 [ 79.157838][ T6496] __se_sys_ioctl+0xce/0x140 [ 79.157861][ T6496] __x64_sys_ioctl+0x43/0x50 [ 79.157882][ T6496] x64_sys_call+0x1816/0x3000 [ 79.157933][ T6496] do_syscall_64+0xd2/0x200 [ 79.157956][ T6496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.157983][ T6496] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.158038][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.158063][ T6496] RIP: 0033:0x7f2e72f2eec9 [ 79.158081][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.158101][ T6496] RSP: 002b:00007f2e7198f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.158121][ T6496] RAX: ffffffffffffffda RBX: 00007f2e73185fa0 RCX: 00007f2e72f2eec9 [ 79.158159][ T6496] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000007 [ 79.158169][ T6496] RBP: 00007f2e7198f090 R08: 0000000000000000 R09: 0000000000000000 [ 79.158189][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.158200][ T6496] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 79.158217][ T6496] [ 79.637639][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 79.637660][ T29] audit: type=1326 audit(1760608914.855:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 79.667205][ T29] audit: type=1326 audit(1760608914.855:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 80.004384][ T29] audit: type=1326 audit(1760608914.855:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.021888][ T6510] loop4: detected capacity change from 0 to 512 [ 80.027779][ T29] audit: type=1326 audit(1760608915.055:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.057626][ T29] audit: type=1326 audit(1760608915.055:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.080962][ T29] audit: type=1326 audit(1760608915.065:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.104386][ T29] audit: type=1326 audit(1760608915.065:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.127808][ T29] audit: type=1326 audit(1760608915.065:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.151392][ T29] audit: type=1326 audit(1760608915.065:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.174726][ T29] audit: type=1326 audit(1760608915.065:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6491 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8649fb1785 code=0x7ffc0000 [ 80.203210][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.269674][ T6510] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.316447][ T6524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 80.323028][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.330828][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 80.375225][ T6525] vhci_hcd: connection closed [ 80.378449][ T52] vhci_hcd: stop threads [ 80.387626][ T52] vhci_hcd: release socket [ 80.392094][ T52] vhci_hcd: disconnect device [ 80.424207][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.451747][ T6533] mmap: syz.0.480 (6533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.499175][ T6537] loop4: detected capacity change from 0 to 2048 [ 80.540424][ T6537] Alternate GPT is invalid, using primary GPT. [ 80.546715][ T6537] loop4: p1 p2 p3 [ 80.741992][ T6544] netlink: 'syz.1.482': attribute type 142 has an invalid length. [ 80.901023][ T6553] FAULT_INJECTION: forcing a failure. [ 80.901023][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 80.913848][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: syz.4.485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.913874][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.913890][ T6553] Call Trace: [ 80.913897][ T6553] [ 80.913906][ T6553] __dump_stack+0x1d/0x30 [ 80.913931][ T6553] dump_stack_lvl+0xe8/0x140 [ 80.913956][ T6553] dump_stack+0x15/0x1b [ 80.914035][ T6553] should_fail_ex+0x265/0x280 [ 80.914085][ T6553] ? ipv6_flowlabel_opt+0x6e3/0x1240 [ 80.914179][ T6553] should_failslab+0x8c/0xb0 [ 80.914213][ T6553] __kmalloc_cache_noprof+0x4c/0x4a0 [ 80.914243][ T6553] ipv6_flowlabel_opt+0x6e3/0x1240 [ 80.914277][ T6553] ? __rcu_read_unlock+0x4f/0x70 [ 80.914384][ T6553] ? mntput_no_expire+0x6f/0x440 [ 80.914418][ T6553] ? mntput+0x4b/0x80 [ 80.914457][ T6553] ? _raw_spin_unlock_bh+0x36/0x40 [ 80.914492][ T6553] ? lock_sock_nested+0x112/0x140 [ 80.914570][ T6553] ? path_openat+0x1bf8/0x2170 [ 80.914592][ T6553] ? should_fail_ex+0xdb/0x280 [ 80.914637][ T6553] do_ipv6_setsockopt+0xb4e/0x2160 [ 80.914712][ T6553] ? kstrtoull+0x111/0x140 [ 80.914804][ T6553] ? avc_has_perm_noaudit+0x1b1/0x200 [ 80.914839][ T6553] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 80.914954][ T6553] ipv6_setsockopt+0x59/0x130 [ 80.914983][ T6553] udpv6_setsockopt+0x99/0xb0 [ 80.915054][ T6553] sock_common_setsockopt+0x69/0x80 [ 80.915083][ T6553] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.915116][ T6553] __sys_setsockopt+0x184/0x200 [ 80.915145][ T6553] __x64_sys_setsockopt+0x64/0x80 [ 80.915179][ T6553] x64_sys_call+0x20ec/0x3000 [ 80.915214][ T6553] do_syscall_64+0xd2/0x200 [ 80.915246][ T6553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.915282][ T6553] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.915307][ T6553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.915401][ T6553] RIP: 0033:0x7f1cee8eeec9 [ 80.915421][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.915444][ T6553] RSP: 002b:00007f1ced34f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.915462][ T6553] RAX: ffffffffffffffda RBX: 00007f1ceeb45fa0 RCX: 00007f1cee8eeec9 [ 80.915475][ T6553] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000006 [ 80.915536][ T6553] RBP: 00007f1ced34f090 R08: 0000000000000026 R09: 0000000000000000 [ 80.915553][ T6553] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 80.915568][ T6553] R13: 00007f1ceeb46038 R14: 00007f1ceeb45fa0 R15: 00007ffeca4b85a8 [ 80.915589][ T6553] [ 81.182994][ T6556] pim6reg: entered allmulticast mode [ 82.001319][ T6574] __nla_validate_parse: 13 callbacks suppressed [ 82.001334][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 82.195099][ T6579] loop4: detected capacity change from 0 to 2048 [ 82.275253][ T6579] Alternate GPT is invalid, using primary GPT. [ 82.281699][ T6579] loop4: p1 p2 p3 [ 82.362973][ T6574] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 82.477545][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.495'. [ 82.639822][ T6555] pim6reg: left allmulticast mode [ 82.664427][ T6594] netlink: 'syz.0.498': attribute type 21 has an invalid length. [ 82.679870][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.689527][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 82.755836][ T6600] netlink: 'syz.0.500': attribute type 142 has an invalid length. [ 82.763808][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 82.817843][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 82.826951][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 82.957308][ T6603] loop4: detected capacity change from 0 to 1024 [ 83.080662][ T6603] netlink: 'syz.4.502': attribute type 21 has an invalid length. [ 83.100914][ T6603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.502'. [ 83.111744][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.502'. [ 83.170635][ T6608] loop3: detected capacity change from 0 to 256 [ 83.183557][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 83.373461][ T6616] cgroup: fork rejected by pids controller in /syz4 [ 83.785369][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.844473][ T7103] loop3: detected capacity change from 0 to 2048 [ 83.955292][ T7103] loop3: detected capacity change from 0 to 512 [ 83.995760][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.024099][ T7103] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.145288][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.211739][ T7121] netlink: 'syz.3.520': attribute type 142 has an invalid length. [ 84.234232][ T7121] loop3: detected capacity change from 0 to 1024 [ 84.241610][ T7121] EXT4-fs: Ignoring removed orlov option [ 84.250550][ T7121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.480688][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.639822][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 84.639838][ T29] audit: type=1326 audit(1760608919.965:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.679602][ T29] audit: type=1326 audit(1760608919.965:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.703002][ T29] audit: type=1326 audit(1760608919.965:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.726444][ T29] audit: type=1326 audit(1760608919.965:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.749783][ T29] audit: type=1326 audit(1760608919.965:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.773145][ T29] audit: type=1326 audit(1760608919.965:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.796501][ T29] audit: type=1326 audit(1760608919.965:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.819881][ T29] audit: type=1326 audit(1760608919.975:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.843441][ T29] audit: type=1326 audit(1760608919.975:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 84.866808][ T29] audit: type=1326 audit(1760608919.975:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f180c8f1785 code=0x7ffc0000 [ 85.058515][ T7163] SELinux: failed to load policy [ 85.136690][ T7170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.241019][ T7182] loop4: detected capacity change from 0 to 1024 [ 85.418879][ T7182] netlink: 'syz.4.542': attribute type 21 has an invalid length. [ 85.548010][ T7201] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.599947][ T7199] tipc: Enabled bearer , priority 0 [ 85.606899][ T7199] syzkaller0: entered promiscuous mode [ 85.612459][ T7199] syzkaller0: entered allmulticast mode [ 85.621993][ T7199] tipc: Resetting bearer [ 85.628220][ T7197] tipc: Resetting bearer [ 85.635889][ T7197] tipc: Disabling bearer [ 86.269121][ T7265] @0Ù: renamed from bond_slave_1 (while UP) [ 86.641303][ T9625] unsupported nlmsg_type 40 [ 86.881870][ T9645] FAULT_INJECTION: forcing a failure. [ 86.881870][ T9645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.895055][ T9645] CPU: 0 UID: 0 PID: 9645 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.895085][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.895102][ T9645] Call Trace: [ 86.895110][ T9645] [ 86.895119][ T9645] __dump_stack+0x1d/0x30 [ 86.895272][ T9645] dump_stack_lvl+0xe8/0x140 [ 86.895298][ T9645] dump_stack+0x15/0x1b [ 86.895320][ T9645] should_fail_ex+0x265/0x280 [ 86.895366][ T9645] should_fail+0xb/0x20 [ 86.895469][ T9645] should_fail_usercopy+0x1a/0x20 [ 86.895493][ T9645] _copy_to_user+0x20/0xa0 [ 86.895537][ T9645] simple_read_from_buffer+0xb5/0x130 [ 86.895564][ T9645] proc_fail_nth_read+0x10e/0x150 [ 86.895605][ T9645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.895714][ T9645] vfs_read+0x1a8/0x770 [ 86.895743][ T9645] ? __rcu_read_unlock+0x4f/0x70 [ 86.895814][ T9645] ? __fget_files+0x184/0x1c0 [ 86.895858][ T9645] ksys_read+0xda/0x1a0 [ 86.895939][ T9645] __x64_sys_read+0x40/0x50 [ 86.895967][ T9645] x64_sys_call+0x27c0/0x3000 [ 86.895995][ T9645] do_syscall_64+0xd2/0x200 [ 86.896127][ T9645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.896164][ T9645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.896255][ T9645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.896284][ T9645] RIP: 0033:0x7f180c8bd8dc [ 86.896304][ T9645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.896372][ T9645] RSP: 002b:00007f180b327030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.896393][ T9645] RAX: ffffffffffffffda RBX: 00007f180cb15fa0 RCX: 00007f180c8bd8dc [ 86.896410][ T9645] RDX: 000000000000000f RSI: 00007f180b3270a0 RDI: 0000000000000004 [ 86.896437][ T9645] RBP: 00007f180b327090 R08: 0000000000000000 R09: 0000000000000003 [ 86.896454][ T9645] R10: 0000000000009c04 R11: 0000000000000246 R12: 0000000000000001 [ 86.896470][ T9645] R13: 00007f180cb16038 R14: 00007f180cb15fa0 R15: 00007ffdad2bed78 [ 86.896503][ T9645] [ 87.246026][ T9632] loop4: detected capacity change from 0 to 1024 [ 87.427181][ T9632] netlink: 'syz.4.567': attribute type 21 has an invalid length. [ 87.436664][ T9634] netlink: 'syz.0.565': attribute type 21 has an invalid length. [ 87.470928][ T9632] __nla_validate_parse: 30 callbacks suppressed [ 87.471066][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.567'. [ 87.487496][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'. [ 87.854663][ T9634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.565'. [ 87.863708][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 87.970499][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.576'. [ 88.000897][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.575'. [ 88.108051][T13903] loop4: detected capacity change from 0 to 256 [ 88.250567][T13903] netlink: 60 bytes leftover after parsing attributes in process `syz.4.581'. [ 88.409060][T13911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 88.506828][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'. [ 88.515995][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 88.775059][T13923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.814228][T13901] netlink: 'syz.2.582': attribute type 21 has an invalid length. [ 88.894872][T13932] loop4: detected capacity change from 0 to 512 [ 88.901835][T13932] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.908295][T13932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.915029][T13932] EXT4-fs: test_dummy_encryption option not supported [ 89.098458][T13948] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.289756][T13961] FAULT_INJECTION: forcing a failure. [ 89.289756][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 89.302490][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.1.602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.302522][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.302543][T13961] Call Trace: [ 89.302551][T13961] [ 89.302559][T13961] __dump_stack+0x1d/0x30 [ 89.302584][T13961] dump_stack_lvl+0xe8/0x140 [ 89.302610][T13961] dump_stack+0x15/0x1b [ 89.302702][T13961] should_fail_ex+0x265/0x280 [ 89.302736][T13961] should_failslab+0x8c/0xb0 [ 89.302770][T13961] __kmalloc_noprof+0xa5/0x570 [ 89.302867][T13961] ? sock_kmalloc+0x85/0xc0 [ 89.302903][T13961] ? iovec_from_user+0x5e/0x210 [ 89.302936][T13961] sock_kmalloc+0x85/0xc0 [ 89.302984][T13961] ____sys_sendmsg+0xf8/0x4e0 [ 89.303031][T13961] ___sys_sendmsg+0x17b/0x1d0 [ 89.303082][T13961] __sys_sendmmsg+0x178/0x300 [ 89.303127][T13961] __x64_sys_sendmmsg+0x57/0x70 [ 89.303154][T13961] x64_sys_call+0x1c4a/0x3000 [ 89.303208][T13961] do_syscall_64+0xd2/0x200 [ 89.303260][T13961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.303295][T13961] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.303323][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.303377][T13961] RIP: 0033:0x7f180c8beec9 [ 89.303395][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.303413][T13961] RSP: 002b:00007f180b327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.303430][T13961] RAX: ffffffffffffffda RBX: 00007f180cb15fa0 RCX: 00007f180c8beec9 [ 89.303475][T13961] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 89.303552][T13961] RBP: 00007f180b327090 R08: 0000000000000000 R09: 0000000000000000 [ 89.303567][T13961] R10: 0000000004000001 R11: 0000000000000246 R12: 0000000000000001 [ 89.303581][T13961] R13: 00007f180cb16038 R14: 00007f180cb15fa0 R15: 00007ffdad2bed78 [ 89.303603][T13961] [ 89.640535][T13972] atomic_op ffff888119d0e128 conn xmit_atomic 0000000000000000 [ 89.899368][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.022893][T13985] loop3: detected capacity change from 0 to 512 [ 90.087009][T13985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.188659][T13985] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.303321][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 90.303336][ T29] audit: type=1400 audit(1760608925.625:6552): avc: denied { setattr } for pid=13984 comm="syz.3.611" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.347847][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.425961][ T29] audit: type=1326 audit(1760608925.745:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.449505][ T29] audit: type=1326 audit(1760608925.745:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.490671][T13994] loop3: detected capacity change from 0 to 2048 [ 90.497811][ T29] audit: type=1326 audit(1760608925.795:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.521423][ T29] audit: type=1326 audit(1760608925.795:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.545115][ T29] audit: type=1326 audit(1760608925.795:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.568871][ T29] audit: type=1326 audit(1760608925.795:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.592394][ T29] audit: type=1326 audit(1760608925.795:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.615858][ T29] audit: type=1326 audit(1760608925.795:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 90.639419][ T29] audit: type=1326 audit(1760608925.795:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8649f7ef03 code=0x7ffc0000 [ 90.676915][T13998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.730156][T13994] Alternate GPT is invalid, using primary GPT. [ 90.736468][T13994] loop3: p1 p2 p3 [ 90.796591][T13999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.179199][T14021] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.141688][T14059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.161628][T14061] netlink: 'syz.0.636': attribute type 142 has an invalid length. [ 92.212693][T14059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.234508][T14065] netlink: 'syz.4.637': attribute type 142 has an invalid length. [ 92.277188][T14056] loop3: detected capacity change from 0 to 1024 [ 92.321916][T14059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.411087][T14059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.509171][T14056] netlink: 'syz.3.634': attribute type 21 has an invalid length. [ 92.521690][ T1085] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535470][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560637][T14056] __nla_validate_parse: 20 callbacks suppressed [ 92.560708][T14056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.634'. [ 92.577206][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 92.586587][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.625418][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811015][T14087] netlink: 'syz.2.640': attribute type 21 has an invalid length. [ 92.818833][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.640'. [ 92.827860][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'. [ 92.851410][T14088] Cannot find add_set index 2 as target [ 93.462879][T14100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 93.920559][T14128] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.659'. [ 93.945684][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 93.975559][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 93.984630][T14134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.661'. [ 93.994179][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 94.861363][T14185] capability: warning: `syz.3.677' uses deprecated v2 capabilities in a way that may be insecure [ 94.932528][T14189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14189 comm=syz.3.679 [ 95.009454][T14179] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 95.112512][T14198] loop4: detected capacity change from 0 to 2048 [ 95.160029][T14198] Alternate GPT is invalid, using primary GPT. [ 95.166459][T14198] loop4: p1 p2 p3 [ 95.336276][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 95.336294][ T29] audit: type=1326 audit(1760608930.655:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.366158][ T29] audit: type=1326 audit(1760608930.655:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.389592][ T29] audit: type=1326 audit(1760608930.655:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.413254][ T29] audit: type=1326 audit(1760608930.655:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.436746][ T29] audit: type=1326 audit(1760608930.655:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.460155][ T29] audit: type=1326 audit(1760608930.655:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.483787][ T29] audit: type=1326 audit(1760608930.655:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.507244][ T29] audit: type=1326 audit(1760608930.655:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.530702][ T29] audit: type=1326 audit(1760608930.655:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14197 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cee8eeec9 code=0x7ffc0000 [ 95.558751][ T29] audit: type=1400 audit(1760608930.875:6919): avc: denied { setopt } for pid=14211 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.703125][T14229] loop4: detected capacity change from 0 to 256 [ 96.422609][T14258] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.483638][T14258] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.048159][T14301] loop4: detected capacity change from 0 to 512 [ 97.061593][T14301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.074581][T14301] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.152509][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.240646][T14310] syzkaller1: entered promiscuous mode [ 97.246181][T14310] syzkaller1: entered allmulticast mode [ 97.315440][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.571111][T14323] __nla_validate_parse: 17 callbacks suppressed [ 97.571131][T14323] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 97.643871][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'. [ 97.676408][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 97.746076][T14333] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.774458][T14333] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.843613][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'. [ 98.397559][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.2.733'. [ 98.543508][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 98.568728][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 98.604006][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 98.712961][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 99.103786][T14380] netlink: 56 bytes leftover after parsing attributes in process `syz.0.745'. [ 99.218024][T14383] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 99.254918][T14383] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 99.339320][T14336] Bluetooth: hci0: command 0x1003 tx timeout [ 99.339920][ T3513] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.901619][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 100.042005][T14404] netlink: 'syz.2.757': attribute type 142 has an invalid length. [ 100.224363][T14419] loop3: detected capacity change from 0 to 256 [ 100.339418][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 100.339445][ T29] audit: type=1326 audit(1760608935.665:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.400970][ T29] audit: type=1326 audit(1760608935.665:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.424405][ T29] audit: type=1326 audit(1760608935.665:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.447866][ T29] audit: type=1326 audit(1760608935.685:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.471114][ T29] audit: type=1326 audit(1760608935.685:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.494650][ T29] audit: type=1326 audit(1760608935.685:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.517993][ T29] audit: type=1326 audit(1760608935.685:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.541439][ T29] audit: type=1326 audit(1760608935.685:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.564980][ T29] audit: type=1326 audit(1760608935.685:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.588395][ T29] audit: type=1326 audit(1760608935.685:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 100.819545][T14442] loop3: detected capacity change from 0 to 2048 [ 100.835428][T14442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.864761][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.898660][T14452] loop4: detected capacity change from 0 to 256 [ 101.008340][T14465] loop4: detected capacity change from 0 to 2048 [ 101.080251][T14465] Alternate GPT is invalid, using primary GPT. [ 101.086514][T14465] loop4: p1 p2 p3 [ 101.199785][T14486] netlink: 'syz.0.787': attribute type 142 has an invalid length. [ 101.218905][T14474] loop3: detected capacity change from 0 to 128 [ 101.262819][T14474] vhci_hcd: invalid port number 65 [ 101.267985][T14474] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 102.016232][T14524] loop3: detected capacity change from 0 to 2048 [ 102.062645][T14524] Alternate GPT is invalid, using primary GPT. [ 102.068992][T14524] loop3: p1 p2 p3 [ 102.129090][T14533] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.156143][T14533] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.299105][T14551] Driver unsupported XDP return value 0 on prog (id 443) dev N/A, expect packet loss! [ 102.401658][T14559] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 102.428972][T14559] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 102.658522][T14696] __nla_validate_parse: 55 callbacks suppressed [ 102.658540][T14696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'. [ 102.828154][T16589] FAULT_INJECTION: forcing a failure. [ 102.828154][T16589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.841317][T16589] CPU: 1 UID: 0 PID: 16589 Comm: syz.0.834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.841344][T16589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.841356][T16589] Call Trace: [ 102.841363][T16589] [ 102.841369][T16589] __dump_stack+0x1d/0x30 [ 102.841417][T16589] dump_stack_lvl+0xe8/0x140 [ 102.841443][T16589] dump_stack+0x15/0x1b [ 102.841464][T16589] should_fail_ex+0x265/0x280 [ 102.841499][T16589] should_fail+0xb/0x20 [ 102.841598][T16589] should_fail_usercopy+0x1a/0x20 [ 102.841652][T16589] _copy_from_iter+0xd2/0xe80 [ 102.841695][T16589] ? mntput_no_expire+0x6f/0x440 [ 102.841767][T16589] ? mntput+0x4b/0x80 [ 102.841807][T16589] tun_get_user+0x3d0/0x26e0 [ 102.841943][T16589] ? _parse_integer_limit+0x170/0x190 [ 102.841985][T16589] ? ref_tracker_alloc+0x1f2/0x2f0 [ 102.842031][T16589] ? selinux_file_permission+0x1e4/0x320 [ 102.842121][T16589] tun_chr_write_iter+0x15e/0x210 [ 102.842152][T16589] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 102.842254][T16589] vfs_write+0x52a/0x960 [ 102.842340][T16589] ksys_write+0xda/0x1a0 [ 102.842375][T16589] __x64_sys_write+0x40/0x50 [ 102.842490][T16589] x64_sys_call+0x2802/0x3000 [ 102.842519][T16589] do_syscall_64+0xd2/0x200 [ 102.842552][T16589] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.842589][T16589] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.842696][T16589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.842726][T16589] RIP: 0033:0x7f2e72f2eec9 [ 102.842744][T16589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.842809][T16589] RSP: 002b:00007f2e7198f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.842830][T16589] RAX: ffffffffffffffda RBX: 00007f2e73185fa0 RCX: 00007f2e72f2eec9 [ 102.842882][T16589] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 102.842894][T16589] RBP: 00007f2e7198f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.842910][T16589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.842926][T16589] R13: 00007f2e73186038 R14: 00007f2e73185fa0 R15: 00007ffc41026308 [ 102.842953][T16589] [ 102.848657][T16946] FAULT_INJECTION: forcing a failure. [ 102.848657][T16946] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.075684][T16946] CPU: 1 UID: 0 PID: 16946 Comm: syz.3.831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.075712][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.075734][T16946] Call Trace: [ 103.075741][T16946] [ 103.075749][T16946] __dump_stack+0x1d/0x30 [ 103.075834][T16946] dump_stack_lvl+0xe8/0x140 [ 103.075855][T16946] dump_stack+0x15/0x1b [ 103.075875][T16946] should_fail_ex+0x265/0x280 [ 103.075944][T16946] should_fail_alloc_page+0xf2/0x100 [ 103.076005][T16946] __alloc_frozen_pages_noprof+0xff/0x360 [ 103.076049][T16946] alloc_pages_mpol+0xb3/0x260 [ 103.076069][T16946] vma_alloc_folio_noprof+0x1aa/0x300 [ 103.076160][T16946] do_wp_page+0xf60/0x2510 [ 103.076235][T16946] ? __rcu_read_lock+0x37/0x50 [ 103.076336][T16946] handle_mm_fault+0x77d/0x2be0 [ 103.076366][T16946] ? __rcu_read_unlock+0x4f/0x70 [ 103.076396][T16946] ? mt_find+0x208/0x320 [ 103.076440][T16946] do_user_addr_fault+0x3fe/0x1080 [ 103.076473][T16946] exc_page_fault+0x62/0xa0 [ 103.076532][T16946] asm_exc_page_fault+0x26/0x30 [ 103.076558][T16946] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 103.076590][T16946] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff f8 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 103.076654][T16946] RSP: 0018:ffffc90000f13888 EFLAGS: 00050202 [ 103.076675][T16946] RAX: ffff88810ad08aa0 RBX: ffff88812692d000 RCX: 0000000000000480 [ 103.076692][T16946] RDX: 0000000000000000 RSI: ffff88812692da40 RDI: 0000200000002000 [ 103.076709][T16946] RBP: 00002000000015c0 R08: 000000000000022b R09: 0000000000000000 [ 103.076725][T16946] R10: 000188812692d000 R11: 000188812692debf R12: 0000200000002480 [ 103.076742][T16946] R13: ffffc90000f13e80 R14: 0000000000000ec0 R15: 00007ffffffff000 [ 103.076764][T16946] _copy_to_iter+0x141/0xe70 [ 103.076786][T16946] ? should_fail_ex+0x30/0x280 [ 103.076892][T16946] ? xas_load+0x413/0x430 [ 103.076919][T16946] ? __rcu_read_unlock+0x4f/0x70 [ 103.076951][T16946] ? xa_load+0xb1/0xe0 [ 103.076981][T16946] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 103.077077][T16946] __skb_datagram_iter+0xc6/0x690 [ 103.077129][T16946] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 103.077166][T16946] skb_copy_datagram_iter+0x3d/0x110 [ 103.077266][T16946] unix_stream_read_actor+0x43/0x70 [ 103.077296][T16946] unix_stream_read_generic+0x6b1/0x1570 [ 103.077343][T16946] unix_stream_recvmsg+0xc3/0xf0 [ 103.077382][T16946] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 103.077541][T16946] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 103.077598][T16946] sock_recvmsg+0x139/0x170 [ 103.077638][T16946] ____sys_recvmsg+0xf5/0x280 [ 103.077686][T16946] ___sys_recvmsg+0x11f/0x370 [ 103.077815][T16946] __x64_sys_recvmsg+0xd1/0x160 [ 103.077862][T16946] x64_sys_call+0x2b46/0x3000 [ 103.077892][T16946] do_syscall_64+0xd2/0x200 [ 103.077923][T16946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.077983][T16946] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.078038][T16946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.078060][T16946] RIP: 0033:0x7f8649f7eec9 [ 103.078075][T16946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.078152][T16946] RSP: 002b:00007f864898b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 103.078183][T16946] RAX: ffffffffffffffda RBX: 00007f864a1d6090 RCX: 00007f8649f7eec9 [ 103.078196][T16946] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000006 [ 103.078212][T16946] RBP: 00007f864898b090 R08: 0000000000000000 R09: 0000000000000000 [ 103.078228][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.078244][T16946] R13: 00007f864a1d6128 R14: 00007f864a1d6090 R15: 00007ffdf59fe708 [ 103.078270][T16946] [ 103.503326][ T3513] Bluetooth: hci0: command 0x1003 tx timeout [ 103.509430][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.663709][T19288] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.673996][T19288] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.697197][T19293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'. [ 103.818872][T19299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 103.827830][T19299] netlink: 108 bytes leftover after parsing attributes in process `syz.2.844'. [ 103.842998][T19299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 103.852258][T19299] netlink: 108 bytes leftover after parsing attributes in process `syz.2.844'. [ 103.861306][T19299] netlink: 84 bytes leftover after parsing attributes in process `syz.2.844'. [ 103.872508][T19291] netlink: 'syz.0.840': attribute type 21 has an invalid length. [ 103.880996][T19291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.840'. [ 103.890367][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'. [ 103.974257][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 104.226959][T20341] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 104.556423][T22375] netlink: 'syz.0.851': attribute type 142 has an invalid length. [ 104.862409][T25140] loop3: detected capacity change from 0 to 512 [ 104.980863][T25140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.119240][T25140] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.222512][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251676][T25145] loop4: detected capacity change from 0 to 1024 [ 105.359393][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 105.359414][ T29] audit: type=1326 audit(1760608940.665:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.389131][ T29] audit: type=1326 audit(1760608940.665:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.412613][ T29] audit: type=1326 audit(1760608940.665:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.436175][ T29] audit: type=1326 audit(1760608940.665:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.453784][T25145] netlink: 'syz.4.858': attribute type 21 has an invalid length. [ 105.459859][ T29] audit: type=1326 audit(1760608940.665:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.459932][ T29] audit: type=1326 audit(1760608940.665:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.459959][ T29] audit: type=1326 audit(1760608940.665:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.460010][ T29] audit: type=1326 audit(1760608940.665:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.460044][ T29] audit: type=1326 audit(1760608940.665:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.460078][ T29] audit: type=1326 audit(1760608940.665:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25153 comm="syz.1.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180c8beec9 code=0x7ffc0000 [ 105.648896][T25165] Cannot find add_set index 2 as target [ 105.864139][T25181] loop3: detected capacity change from 0 to 128 [ 106.055473][T25186] netlink: 'syz.1.874': attribute type 142 has an invalid length. [ 106.163605][T25183] cgroup: fork rejected by pids controller in /syz0 [ 106.491728][T26476] loop4: detected capacity change from 0 to 1024 [ 106.631208][T26476] netlink: 'syz.4.875': attribute type 21 has an invalid length. [ 106.840799][T29129] loop4: detected capacity change from 0 to 2048 [ 106.918693][T29129] Alternate GPT is invalid, using primary GPT. [ 106.925116][T29129] loop4: p1 p2 p3 [ 106.992044][T29443] netlink: 'syz.2.877': attribute type 21 has an invalid length. [ 107.580537][T29456] netlink: 'syz.0.889': attribute type 21 has an invalid length. [ 107.688655][T29467] __nla_validate_parse: 25 callbacks suppressed [ 107.688673][T29467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 107.703995][T29467] netlink: 108 bytes leftover after parsing attributes in process `syz.4.892'. [ 107.713243][T29467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 107.722280][T29467] netlink: 108 bytes leftover after parsing attributes in process `syz.4.892'. [ 107.731316][T29467] netlink: 84 bytes leftover after parsing attributes in process `syz.4.892'. [ 107.860865][T29684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.895'. [ 108.052912][T30299] loop4: detected capacity change from 0 to 1024 [ 108.168400][T30299] netlink: 'syz.4.898': attribute type 21 has an invalid length. [ 108.177685][T30299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.898'. [ 108.187026][T30299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 108.209083][T30568] loop3: detected capacity change from 0 to 1024 [ 108.241855][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 108.250774][T30984] tipc: Enabling of bearer rejected, media not registered [ 108.288044][T31993] loop4: detected capacity change from 0 to 2048 [ 108.359160][T31997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 108.370020][T31993] Alternate GPT is invalid, using primary GPT. [ 108.376219][T30568] netlink: 'syz.3.901': attribute type 21 has an invalid length. [ 108.376314][T31993] loop4: p1 p2 p3 [ 108.376354][T30568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.901'. [ 108.389991][T31997] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 108.417141][T32000] loop3: detected capacity change from 0 to 256 [ 108.563290][T32017] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.570725][T32017] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.620391][T32017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.630701][T32017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.670568][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.690980][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.719005][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.736971][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.962290][T32033] Cannot find add_set index 2 as target [ 109.243740][T32038] netlink: 'syz.2.915': attribute type 21 has an invalid length. [ 109.989841][T32063] tipc: Enabling of bearer rejected, media not registered [ 110.549422][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 110.549443][ T29] audit: type=1326 audit(1760608945.785:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.579284][ T29] audit: type=1326 audit(1760608945.785:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.602890][ T29] audit: type=1326 audit(1760608945.785:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.626405][ T29] audit: type=1326 audit(1760608945.785:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.649865][ T29] audit: type=1326 audit(1760608945.785:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.673286][ T29] audit: type=1326 audit(1760608945.795:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.696731][ T29] audit: type=1326 audit(1760608945.795:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.720153][ T29] audit: type=1326 audit(1760608945.795:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.743576][ T29] audit: type=1326 audit(1760608945.795:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32075 comm="syz.3.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8649f7eec9 code=0x7ffc0000 [ 110.767033][ T29] audit: type=1400 audit(1760608945.795:8553): avc: denied { watch watch_reads } for pid=32075 comm="syz.3.929" path="/183" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.302402][T32078] pim6reg: entered allmulticast mode [ 111.478446][T32076] pim6reg: left allmulticast mode [ 112.165230][T32106] loop4: detected capacity change from 0 to 512 [ 112.293894][T32106] EXT4-fs (loop4): failed to initialize system zone (-117) [ 112.308701][T32106] EXT4-fs (loop4): mount failed [ 112.351882][T32082] netlink: 'syz.2.931': attribute type 21 has an invalid length. [ 112.471001][T32110] loop3: detected capacity change from 0 to 1024 [ 112.511392][T32124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=61313 sclass=netlink_audit_socket pid=32124 comm=syz.4.946 [ 112.677310][T32133] netlink: 'syz.3.941': attribute type 21 has an invalid length. [ 112.707818][T32139] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.723294][T32139] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 113.755036][T32153] syzkaller1: entered promiscuous mode [ 113.760602][T32153] syzkaller1: entered allmulticast mode [ 113.946572][T32312] loop4: detected capacity change from 0 to 256 [ 113.964776][T32312] __nla_validate_parse: 18 callbacks suppressed [ 113.964790][T32312] netlink: 60 bytes leftover after parsing attributes in process `syz.4.959'. [ 114.522705][ T1439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 114.531715][ T1439] netlink: 108 bytes leftover after parsing attributes in process `syz.0.963'. [ 114.541082][ T1439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 114.550401][ T1439] netlink: 108 bytes leftover after parsing attributes in process `syz.0.963'. [ 114.559428][ T1439] netlink: 84 bytes leftover after parsing attributes in process `syz.0.963'. [ 114.657530][ T1583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 114.704941][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 114.939017][ T1609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.973'. [ 115.227643][ T1611] loop3: detected capacity change from 0 to 1024 [ 115.363874][ T1611] netlink: 'syz.3.978': attribute type 21 has an invalid length. [ 115.411188][ T1611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.978'. [ 116.326004][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 116.326021][ T29] audit: type=1400 audit(1760608951.645:8662): avc: denied { ioctl } for pid=4757 comm="syz.0.982" path="socket:[17796]" dev="sockfs" ino=17796 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.387502][ T29] audit: type=1400 audit(1760608951.645:8663): avc: denied { module_request } for pid=4757 comm="syz.0.982" kmod=6E65746465762D650B scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 116.449113][ T29] audit: type=1400 audit(1760608951.705:8664): avc: denied { sys_module } for pid=4757 comm="syz.0.982" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.609307][ T29] audit: type=1400 audit(1760608951.855:8665): avc: denied { write } for pid=5046 comm="syz.0.984" name="ip_vs" dev="proc" ino=4026532477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.632020][ T29] audit: type=1400 audit(1760608951.915:8666): avc: denied { prog_run } for pid=5049 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.670795][ T29] audit: type=1400 audit(1760608951.995:8667): avc: denied { bind } for pid=5048 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.690243][ T29] audit: type=1400 audit(1760608951.995:8668): avc: denied { listen } for pid=5048 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.709819][ T29] audit: type=1400 audit(1760608951.995:8669): avc: denied { write } for pid=5048 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.729176][ T29] audit: type=1400 audit(1760608951.995:8670): avc: denied { accept } for pid=5048 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.783581][ T5054] loop3: detected capacity change from 0 to 8192 [ 116.799573][ T5054] vfat: Unknown parameter '' [ 116.810499][ T29] audit: type=1400 audit(1760608952.015:8671): avc: denied { create } for pid=5053 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.508045][ T5067] netlink: 'syz.1.993': attribute type 21 has an invalid length. [ 117.843622][ T7236] netlink: 'syz.3.1001': attribute type 142 has an invalid length. [ 117.902011][ T7236] loop3: detected capacity change from 0 to 1024 [ 117.908850][ T7236] EXT4-fs: Ignoring removed orlov option [ 118.037278][ T7236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.724124][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.468145][ T7834] __nla_validate_parse: 30 callbacks suppressed [ 119.468167][ T7834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1017'. [ 119.525121][ T8453] netlink: 'syz.2.1019': attribute type 142 has an invalid length. [ 119.533142][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 119.542911][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 119.551913][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 119.930034][T11407] loop4: detected capacity change from 0 to 2048 [ 119.990061][T11407] Alternate GPT is invalid, using primary GPT. [ 119.996360][T11407] loop4: p1 p2 p3 [ 120.140708][T14460] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.152921][T14460] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.179000][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 120.372607][T14475] loop3: detected capacity change from 0 to 512 [ 120.426962][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 120.582969][T14475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.602443][T14475] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.618691][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'. [ 120.627826][T14480] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1029'. [ 120.637188][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'. [ 120.646358][T14480] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1029'. [ 121.196686][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.466144][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 121.466160][ T29] audit: type=1326 audit(1760608956.785:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.502902][ T29] audit: type=1326 audit(1760608956.815:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.526552][ T29] audit: type=1326 audit(1760608956.815:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.550087][ T29] audit: type=1326 audit(1760608956.815:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.573655][ T29] audit: type=1326 audit(1760608956.815:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.597184][ T29] audit: type=1326 audit(1760608956.815:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.620816][ T29] audit: type=1326 audit(1760608956.815:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.644480][ T29] audit: type=1326 audit(1760608956.815:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.668154][ T29] audit: type=1326 audit(1760608956.815:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 121.691729][ T29] audit: type=1326 audit(1760608956.815:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.0.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e72f2eec9 code=0x7ffc0000 [ 122.704339][T14559] netlink: 'syz.0.1044': attribute type 21 has an invalid length. [ 123.179328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.983341][T14640] netlink: 'syz.2.1074': attribute type 142 has an invalid length. [ 124.038607][T14638] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.046018][T14638] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.093673][T14638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.108377][T14638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.226271][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.280791][T14647] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 124.288320][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.380260][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.462886][T14661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14661 comm=syz.3.1081 [ 124.522571][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.531754][T14663] __nla_validate_parse: 37 callbacks suppressed [ 124.531774][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 124.547068][T14663] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1083'. [ 124.574292][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 124.609031][T14663] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1083'. [ 124.618219][T14663] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1083'. [ 124.697071][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1087'. [ 124.916818][T14684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1090'. [ 125.042528][T14688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 125.051821][T14688] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1092'. [ 125.061194][T14688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 125.180360][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.187661][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.265091][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.275811][T14691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.515259][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.600814][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.639404][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.658232][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.678492][T14724] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 125.703946][T14724] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 126.481269][T14750] netlink: 'syz.0.1106': attribute type 21 has an invalid length. [ 126.525324][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 126.525342][ T29] audit: type=1400 audit(1760608961.845:9499): avc: denied { create } for pid=14754 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.551558][ T29] audit: type=1400 audit(1760608961.845:9500): avc: denied { write } for pid=14754 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.589772][ T29] audit: type=1400 audit(1760608961.895:9501): avc: denied { read } for pid=14751 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.610200][ T29] audit: type=1400 audit(1760608961.895:9502): avc: denied { write } for pid=14754 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.647540][ T29] audit: type=1400 audit(1760608961.965:9503): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.671807][ T29] audit: type=1400 audit(1760608961.965:9504): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.696123][ T29] audit: type=1400 audit(1760608961.965:9505): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.723715][ T29] audit: type=1400 audit(1760608962.045:9506): avc: denied { prog_load } for pid=14758 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.742911][ T29] audit: type=1400 audit(1760608962.045:9507): avc: denied { bpf } for pid=14758 comm="syz.2.1112" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.763631][ T29] audit: type=1400 audit(1760608962.045:9508): avc: denied { perfmon } for pid=14758 comm="syz.2.1112" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.985593][T14780] netlink: 'syz.0.1121': attribute type 142 has an invalid length. [ 127.393699][T14794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14794 comm=syz.2.1124 [ 127.649637][T14782] ================================================================== [ 127.657862][T14782] BUG: KCSAN: data-race in touch_atime / touch_atime [ 127.664583][T14782] [ 127.666922][T14782] write to 0xffff88811a9db540 of 4 bytes by task 14780 on cpu 0: [ 127.674659][T14782] touch_atime+0x1e8/0x340 [ 127.679115][T14782] shmem_file_read_iter+0x477/0x540 [ 127.684342][T14782] copy_splice_read+0x442/0x660 [ 127.689209][T14782] splice_direct_to_actor+0x290/0x680 [ 127.694611][T14782] do_splice_direct+0xda/0x150 [ 127.699401][T14782] do_sendfile+0x380/0x650 [ 127.703852][T14782] __x64_sys_sendfile64+0x105/0x150 [ 127.709081][T14782] x64_sys_call+0x2bb4/0x3000 [ 127.713786][T14782] do_syscall_64+0xd2/0x200 [ 127.718325][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.724249][T14782] [ 127.726588][T14782] read to 0xffff88811a9db540 of 4 bytes by task 14782 on cpu 1: [ 127.734324][T14782] touch_atime+0x194/0x340 [ 127.738806][T14782] shmem_file_read_iter+0x477/0x540 [ 127.744036][T14782] copy_splice_read+0x442/0x660 [ 127.748915][T14782] splice_direct_to_actor+0x290/0x680 [ 127.754309][T14782] do_splice_direct+0xda/0x150 [ 127.759100][T14782] do_sendfile+0x380/0x650 [ 127.763547][T14782] __x64_sys_sendfile64+0x105/0x150 [ 127.768786][T14782] x64_sys_call+0x2bb4/0x3000 [ 127.773482][T14782] do_syscall_64+0xd2/0x200 [ 127.778017][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.783941][T14782] [ 127.786280][T14782] value changed: 0x39887b36 -> 0x3a2111b6 [ 127.792019][T14782] [ 127.794342][T14782] Reported by Kernel Concurrency Sanitizer on: [ 127.800501][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.0.1121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.810316][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.820373][T14782] ==================================================================