last executing test programs: 2m15.714958383s ago: executing program 3 (id=37): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000002c0)=0x8) 2m15.463233168s ago: executing program 3 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x20000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ffffd, 0x9, 0x2, 0xca, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m14.844033459s ago: executing program 3 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x48804}, 0x0) 2m14.816693601s ago: executing program 3 (id=46): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000680)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ptrace$setsig(0x4203, r6, 0x9, &(0x7f0000000000)={0x2, 0x8, 0xc186}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r7, &(0x7f0000000100)=""/49, 0x24) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000008c0)=0x2) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2m14.62278749s ago: executing program 3 (id=48): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2m13.844138296s ago: executing program 3 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x20000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ffffd, 0x9, 0x2, 0xca, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m13.843891887s ago: executing program 32 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x20000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ffffd, 0x9, 0x2, 0xca, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m27.056296944s ago: executing program 5 (id=1131): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32], 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1m26.939558206s ago: executing program 5 (id=1138): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x923, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x7f, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 1m24.768084769s ago: executing program 5 (id=1145): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1m24.680693458s ago: executing program 5 (id=1149): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 1m23.84993997s ago: executing program 5 (id=1180): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 1m22.287969104s ago: executing program 5 (id=1184): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x177200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m22.287763723s ago: executing program 33 (id=1184): bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x177200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.524576912s ago: executing program 2 (id=2819): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x8000) 8.390948655s ago: executing program 2 (id=2824): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0xb}}}}], 0x50}}], 0x1, 0x810) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 8.355356439s ago: executing program 2 (id=2827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 8.323051182s ago: executing program 2 (id=2828): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8000) 8.228185641s ago: executing program 2 (id=2833): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002040)={0x28, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x125e00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18) write$selinux_access(r6, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 8.105260343s ago: executing program 2 (id=2836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x1b, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x227}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe6}, @map_fd={0x18, 0x4}, @map_fd={0x18, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xd, 0xc, 0x7}, 0x10, 0x0, r0, 0xa, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x5, 0x4, 0x5}, {0x6, 0x4, 0xf, 0xb}, {0x0, 0x4, 0x7}, {0x0, 0x3, 0x2, 0x27a7c49a7f6e7411}, {0x5, 0x2, 0xa, 0xb}, {0x2, 0x2, 0x4, 0x2}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xb, 0x1}, {0x5, 0x5, 0xb, 0xa}, {0x0, 0x3, 0xa, 0xb}], 0x10, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001040)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7cf4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0x1, 0x80000001, 0x7, 0xfffefffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x4, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7eff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x2, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0x3ff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x4, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0x7fff, 0x3, 0xfffffffa, 0x3, 0x6, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x9, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x0, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040804}, 0x8800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5, 0x0, 0x2000099d9}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r10 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) (async) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r11, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="01000100fe00000000001000015b097ead85847817353d2dbad05dd5", 0xfffffffffffffe33, 0xfffffffffffffffd) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40b88}, 0x0) 2.278885566s ago: executing program 6 (id=2965): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x810) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 2.249872959s ago: executing program 6 (id=2967): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$eJzs3V+IHHcdAPDv7u2m7SWYVmo11TZXq23sn73cXQmmFiSP2qbU/nkyEo9kcwm3l423G+xdLVwpQgUjofqkTwqCig8RQUF8KIj1UfBNKRUsogRCsRRFU12Z2Zmw8TZ3ud6fsTefD8zdb34ze7/v7Jfv7M4vs5sASmss+VGJ2BURr0bE7v7q1TuM9X+dn7pwMlkq0es99WYl3e/5qQsn813zx+1MflQjPpT8+nXEzvrycTsLi7PTrVZzPlsf786dGe8sLD54am56pjnTPD05NXFg/+SBiQMHN+xYf/jcy599/bnHLp+7NPr91/bs/UcS765s2+BxbJSxGMuek3p8dHBDJeLTGz1YQUYiohYRHyg6ENbsyO++/kyev3pa/7tjJF2LGJ068tbuOPdI0TECm6eXutbWkR6wnVWi6AiAYuSv9Mn1b75s1XuP2e1yEfwedulQ/wLw+Wxu5/yV/Neimu1T36Tr+71/jRiL7n0XPnPXV5MlNmkehmtbeiHSibrl9V9J58Zuzva7OyL2RcTHIuLjEXFPRNy7zrGf/kKS/z9+c7BP/rfW9eb/ExHRiIj7IuL+iHggIh5c59i3HU7yv/OLg33yXx63f67oCCjSb18qOgLS8//+Wm3Y+b+6zr991yrbe+m/Ky69Mdjn/F8eTz5VdAQU6fEDRUdAkb7zZtER8Mqh/sXc8tf/atw2sF/S/mD/UjH2JO/dI+LDEfGRiLgjIu6MiL35/UTX6SuPJvs3moN9y1//qxfXc3ys7NKhiEcG7u06P5D/zM0j2Vo9nQ+oV06cajX3R8T70jmh+g3J+sQKY3xt6VePDuv/8R1J/j/1eD7/lyzJ+PlcYBbHxdoNVz/u+HR3er3HTd+lFyJurw3LfyW7E6h/X18vIsbf5Rgv7vvJb4b1f/LJJP/3PLBy/tlMve/253GH5T9XWfn+zPH0fDCenxWWezFuPTes/4nLSf7f+IP8Fyep/9GV85+e/6/cr9tZ+xi18xe/MbR/Lsn/n3/5bs7/OypPpwHuyPqene525ycidlQeW94/ufaYt6v8+cifryT/++4e/vr//uwxyROaVPa/I+I/EfHPiPhXRFyOiHci4m8R8dYKY/7i5Yd/Pqx/6pkk/395Vf0XJ8n/8VXqv3JV/a+98e07D3552Ng/+F6S/9HG6vX/UBrMvqzH+7/VXW+Cio4TAAAAAAAAgI1RTb8Dr1JtXGlXq41G/zv8bo3Raqvd6d5/on329PHIPg9ar+Z3eu0euB90IvusaL4++T/rUxFxS0S8NHJTut441m4dL/rgoZxquyJe/+mXju3YeY36T7w2UnSYwGZI6v/Et0aWkvbb6hxKJan/H709l34uS/1Duah/KJvaO3lL/UN5qX8oL/UP5aX+obzUP5SX+ofyUv9QXoP1D5TTE4cPJ0sv/97P0+2ZU7Mnzxyc3N+YO3uscaw9f6Yx027PpJ/YmVv977Xa7TMTD8XZZ8e7zU53vLOweHSuffZ092j6vdFHm/UtOCZgdX//0+d/dsveV35fiYilh29Klxj47my1CtubS38or1rRAQCF8R4fqKyy/cZrbTiy8bEAW2O9/8c/8N517x7z/1BW5v+hvMz/Q3l5jw+Y/4fyMf8P5dWc7ywszk63WssaRUcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFBOnYXF2elWqzmvsfmNG7Mn/f8lHo3SN/4bAAD//x/0RNY=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@generic={0xfd, 0x7, 0x1, 0x4, 0x4}, @alu={0x4, 0x1, 0xb, 0xa, 0x1, 0x2, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x85, 0x13, &(0x7f0000000140)=""/19, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x7ff, 0xb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x5, 0xd, 0xa}, {0x5, 0x5, 0x6, 0x17}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x2, 0xa}, {0x3, 0x3, 0xe, 0x3}, {0x1, 0x5, 0x7, 0xee745c0fb02c92ee}, {0x1, 0x1, 0xb, 0x4}, {0x2, 0x5, 0x8, 0xd}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x5}, 0x94) ptrace$getregs(0x14, r1, 0x5, &(0x7f0000000440)=""/109) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x4, 0x6, {{0x2b, 0x4, 0x1, 0x5, 0xac, 0x68, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}, @noop, @cipso={0x86, 0x29, 0x0, [{0x2, 0x6, "32f207a1"}, {0x2, 0xc, "09759a2ffd03e643a998"}, {0x7, 0x11, "aa8838653d24f120cca18d7c694f7a"}]}, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x9, "5057451e60af81"}, {0x5, 0x6, "9b507001"}, {0x2, 0x5, "0f3b08"}]}, @rr={0x7, 0x1f, 0xd1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0x34, [@dev={0xac, 0x14, 0x14, 0x1e}, @local, @multicast2]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) rt_sigtimedwait(&(0x7f0000000ac0)={[0x2]}, &(0x7f0000000b00), &(0x7f0000000b80)={0x0, 0x989680}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x0, 0x90000000, {{0x26, 0x4, 0x0, 0x26, 0x98, 0x65, 0x0, 0xf7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xeb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @ssrr={0x89, 0x17, 0x1a, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @broadcast, @remote]}, @cipso={0x86, 0x54, 0xffffffffffffffff, [{0x1, 0x7, "907c0d0d4b"}, {0x2, 0xd, "ad44d9887332dc6334a921"}, {0x0, 0xc, "39fae84d1eb6a5503df7"}, {0x1, 0x12, "b562dff3c5997b1019e7385bb05a0b3f"}, {0x6, 0x7, "a93cb1503d"}, {0x6, 0x11, "bb05a82a380db2147170e257ba55dd"}, {0x5, 0x4, "2e03"}]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000009c0)={@empty, 0x0}, &(0x7f0000000a00)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001640)=ANY=[@ANYBLOB="4004008bddad329f36a29a35ea8c79eff457ebb7fd458f6d3eb027c62358", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002006772657461703000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030002000000440001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=r11, @ANYBLOB="0800030000000000140002006772657461703000000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x440}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='mm_compaction_end\x00', r2, 0x0, 0x401}, 0x18) write$rfkill(r0, &(0x7f00000004c0)={0x4, 0x8, 0x2, 0x1}, 0x8) open_tree(r13, &(0x7f0000000500)='./file0\x00', 0x81000) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.081239325s ago: executing program 6 (id=2975): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) open(0x0, 0xe180, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000000)={0x7ff, 0xfff7, 0xff, 0xfd, 0x5, 0xc, 0xa2, "131cbf42e80ba3e602c58af665776984bf478c86", "06bc7964e1cc711de1ebf298e7fc73d839ae23fb"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) writev(r8, &(0x7f0000000b00)=[{&(0x7f0000000a00)="ea88", 0x2}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.152090157s ago: executing program 6 (id=3002): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) 833.198478ms ago: executing program 4 (id=3011): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 788.941923ms ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fbff000400"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fbff000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='rxrpc_call\x00', r0}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="f0", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) fcntl$dupfd(r5, 0x0, r0) (async) r6 = fcntl$dupfd(r5, 0x0, r0) r7 = syz_io_uring_complete(0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b703000000000000850000090100000000009500000000000000bf91000000000000b702000000000000850000006f00"/75], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b703000000000000850000090100000000009500000000000000bf91000000000000b702000000000000850000006f00"/75], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x3fd}]}, 0x10) bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x9e, 0x1, @vifc_lcl_addr=@empty, @empty}, 0x10) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x9e, 0x1, @vifc_lcl_addr=@empty, @empty}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='btrfs_inode_mod_outstanding_extents\x00', r11, 0x0, 0x1}, 0x18) faccessat2(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x2, 0x1100) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRESOCT=r1], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r5, @ANYRESOCT=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) io_uring_setup(0x3c21, &(0x7f0000000580)={0x0, 0x400826e, 0x20000, 0xffffffff, 0xf4}) 664.170595ms ago: executing program 4 (id=3015): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) write$selinux_access(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 628.392538ms ago: executing program 4 (id=3016): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000001080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2], 0x50) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) 600.052901ms ago: executing program 4 (id=3017): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 439.543147ms ago: executing program 4 (id=3018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 336.078717ms ago: executing program 0 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 325.175368ms ago: executing program 0 (id=3021): perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x704, 0x30, 0x1, 0x0, 0x0, {}, [{0x6f0, 0x1, [@m_ctinfo={0x90, 0x7, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x683d}]}, {0x52, 0x6, "2fc6f026e479c2e9a86554928af0cc76bd0b0d2b5fd47beedac26eb9b2103f5bb36f80ec49c1b10c308a6dd899210d21be02c5396f81917fce10ab87360977a86e3f903db2db00b71ffdb9fad80d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0xac, 0xb, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffbff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x8, 0x4, 0x9, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x55, 0x6, "6e2df99177ad35eb67b2d55c6dfe294e5644afa60f9d288f693e93212fb6b029ead40362ccfed7329f188e641ef8554b3e601a7a23f06681a4a648be8174197f229f03192057be8bc12cb678baca6bfcc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x743fb85b40e37b4a}}}}, @m_mirred={0x1d4, 0x1b, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x82, 0x800, 0x8, 0x70c1, 0xff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x80, 0x6, 0x7, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6c, 0x80, 0xffffffffffffffff, 0x7fff, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0xfffffffffffffff8, 0x7c1, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x5, 0x8, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x8, 0x80000001, 0x5}, 0x3}}]}, {0xe8, 0x6, "288ce2169b53fa2959018b0e4428adf16206c004f6050d8f370b3166c36210026f7de2fc423cdd5977a0a5f76b42198bc5005ffd922ccdb27798d27ca03199e8d7153d458b32fe9d374e52ef2c3f88d7eac67582ec19daa1f167cee41bf654ffc7a649194910dafc9101d8aa9aebfcc19b1da4788e80b89e871cb5b763f40c943feedad939ca7fd6c8e6f5956a93f7130895c1bb598fbe96625966d26b2ff23bdddc475965858346bb4207b6e871ba89df399c400fbf07c1be13cb4f2a256dffaf4e069d364ab255fd68b1ee7c580f1b36f53f4aa5d15a5ca89d80e98c67db9f5f6b0aec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x168, 0x14, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb98a3}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x623e4d05, 0x3, 0xffffffffffffffff, 0x49d, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0xef, 0x6, "1f1c6685a963482f13117c36de1272b08a7a89ad01914d70acaad4723f991910cc9a5292c9183334395a4e5b5367c4c8da21c6bc5da66c8516f594a7ccee4d757eab5263bf7661a0c2600d59c6da3eef858f5476d106f6d27e7a83ce71f36ef99d12639a039ef5b03a23b14e4ebf5783c4fa378b102d296ded5800c5872b050287a5cf03b438dd016254f2f077c5eadaacc4d97fd6b1c92447dcfb52e5dd513d70978361f794d414606810363bfafe491a7e1229d351210a85dd052204cb3fe14b008d1ad25285c1efdbaf1a0b7ae83f682ec2b2d3e44213d9744c9075e3576e3caf3928cc7b0793982a85"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x100, 0x6, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x6, 0x470567b1, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x20000000, 0x80000001, 0xfffffff8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x8, 0x0, 0x8000}, 0x1}}]}, {0x71, 0x6, "5354bfc07e03cf1ddb562d89804c8d628117a3e868ac63c74f3e93eeeeecf42b0ee8d322ddc6588a7aefe8c8fc0f14a0f7393ca71d4cfd5c9e2b93e09bef2293143dececd5df8aa13955cc3ef2f42f5d425ba50e0aa9e621f2c7b772abc41c9d57296de9c8106d2a5e0c4d4e89"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x174, 0x15, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x18, 0x0, 0x7, 0x0, 0x40}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xa}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc1fd, 0x80000000, 0x6, 0x0, 0x10}, 0x4}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x704}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) 318.049849ms ago: executing program 6 (id=3022): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 270.823144ms ago: executing program 1 (id=3023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = fspick(0xffffffffffffff9c, &(0x7f0000003f80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000000)='\xf5', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000d40)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000c1010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000059729ec6850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002340)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000001040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x9c, 0xd, 0x1, 0xe, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xed, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xea, &(0x7f0000001140)=""/234, 0x41000, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x1, 0xffffffd8, 0x1b1e}, 0x10, 0x1fc41, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, r5, r5, r7], &(0x7f0000002300), 0x10, 0x8}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/1, 0x1, 0x0, &(0x7f0000000f40)=""/246, 0xf6}, &(0x7f0000000380)=0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 253.510085ms ago: executing program 0 (id=3024): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 213.571949ms ago: executing program 6 (id=3025): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="092e7acacbfb3f17958b1ef000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) getgroups(0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYBLOB="9eea2d701552c8efee9778a9baaa899b5cf239c424e7d79db14b7703102130faf7d670fc32677627305379aa5f54fdb944e09113011597e85a19b54691051d8fe53ed18156c8021d7d1eb5559d88fda624ca6e7796e9cf55ac3e19836c8a03dba7437b840f4991da6417e690d6a6b2ee2465c1ef86", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x34, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffcc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x4, {{0x2, 0x4e22, @local}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket(0x2b, 0x2, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x2c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @fixed}, 0x0, 0x1800) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e0001"], 0x110}}, 0x0) socket(0x10, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) 212.920279ms ago: executing program 0 (id=3026): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) write$selinux_access(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 187.193602ms ago: executing program 1 (id=3027): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 123.972278ms ago: executing program 1 (id=3028): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r2, r0}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x8000) 122.813958ms ago: executing program 0 (id=3029): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c0, &(0x7f0000000c40)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@generic={0xfd, 0x7, 0x1, 0x4, 0x4}, @alu={0x4, 0x1, 0xb, 0xa, 0x1, 0x2, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x85, 0x13, &(0x7f0000000140)=""/19, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x7ff, 0xb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x5, 0xd, 0xa}, {0x5, 0x5, 0x6, 0x17}, {0x1, 0x4, 0x4, 0xb}, {0x0, 0x2, 0xa}, {0x3, 0x3, 0xe, 0x3}, {0x1, 0x5, 0x7, 0xee745c0fb02c92ee}, {0x1, 0x1, 0xb, 0x4}, {0x2, 0x5, 0x8, 0xd}, {0x0, 0x3, 0x7, 0x4}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x5}, 0x94) ptrace$getregs(0x14, r1, 0x5, &(0x7f0000000440)=""/109) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x4, 0x6, {{0x2b, 0x4, 0x1, 0x5, 0xac, 0x68, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @remote, @multicast1, @remote]}, @cipso={0x86, 0x2c, 0x0, [{0x2, 0x9, "32f207a1192c8f"}, {0x2, 0xc, "09759a2ffd03e643a998"}, {0x7, 0x11, "aa8838653d24f120cca18d7c694f7a"}]}, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x9, "5057451e60af81"}, {0x5, 0x6, "9b507001"}, {0x2, 0x5, "0f3b08"}]}, @rr={0x7, 0x1f, 0xd1, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0x34, [@dev={0xac, 0x14, 0x14, 0x1e}, @local, @multicast2]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) rt_sigtimedwait(&(0x7f0000000ac0)={[0x2]}, &(0x7f0000000b00), &(0x7f0000000b80)={0x0, 0x989680}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x0, 0x90000000, {{0x26, 0x4, 0x0, 0x26, 0x98, 0x65, 0x0, 0xf7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xeb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @ssrr={0x89, 0x17, 0x1a, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @broadcast, @remote]}, @cipso={0x86, 0x54, 0xffffffffffffffff, [{0x1, 0x7, "907c0d0d4b"}, {0x2, 0xd, "ad44d9887332dc6334a921"}, {0x0, 0xc, "39fae84d1eb6a5503df7"}, {0x1, 0x12, "b562dff3c5997b1019e7385bb05a0b3f"}, {0x6, 0x7, "a93cb1503d"}, {0x6, 0x11, "bb05a82a380db2147170e257ba55dd"}, {0x5, 0x4, "2e03"}]}, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000009c0)={@empty, 0x0}, &(0x7f0000000a00)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001640)=ANY=[@ANYBLOB="4004008bddad329f36a29a35ea8c79eff457ebb7fd458f6d3eb027c62358", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250c0000002800038004000100040001001b00040053f818b7843ac06ed53240d25711dc18869f8cd1cb789800ac0003806b0004009009885ad5b8d5adef8e2a79edd6fb8f5adade71ac98c246c501e79984e1684cd4fd0242e3b18772ea27045af1be4287f47e4b5c79d45ec6461a53465c94087c527cc4060be59c706dbb4afce0c479272e1079804461f5173c9059146309b8a0682b2c7ecf893c0038000500791c48260ad656eb841704ceb6445dd6b5094c3bb5c28a0ba7267ec2f1bcf02702f3beafc3dcf591859ef6f5647a8cd7c1564a5304000100180203800800020003000000200003801c000180080001000000000008000100008000000800010005000000040001000400010004000100a2000400e7cfdd02c12a9427671cf09a1a85ad8e128821b4f6dc7095aded5a48e6d190da05057803cd927e690ffa424f3d60c3f8dd220c2adf34a6e06e3f6a7abe48c46f43b3ec69868a8f507d58a1ef420b97b910b7c9f89a04e4e29a0722297b8b2b93c065b423e0d78d5dce568c7baed1d1ac64505e8a49d8267d91f3b127db36ed30c46a372788b3980d732675bb26dabe24a8e0a6cb336725eaf00eefc9095d00003c01038014000180070002005c5e00000800010004000000500001800800010007000000080001000700000015000200272626292f2e2923212329285e2d253a00000000080001009b0800000d0002002f6465762f6c6f6f70000000090002006578743400000000300001800800010002950000040003000d0002002f6465762f6c6f6f7000000008000100000000000800010003000000680001801100020026585b232a5e277b3a2a2961000000000800010008000000070002005b2f0000070002002829000008000200253a2800160002006d6d5f636f6d70616374696f6e5f656e6400000008000100000000000e00020073797a6b616c6c65720000000c000180080001000c000000300001800800010001000000040003000800010002000000090002005d2f2921000000000400030004000300040003009c000380600003801c0001800400030008000100ffffffff0c0002007b25212c2d26260024000180080001000f00000004000300080001000100000004000300060002005b0000001c0001800e00020073797a6b616c6c657200000008000100020000002b000400f3d8f72b2eff6ced1a46bf487ce300df7834a200344a9f21aa08475e36d26774d970f6305574680008000200f8030000040001006000018008000300020000000800030002000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002006772657461703000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030002000000440001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=r11, @ANYBLOB="0800030000000000140002006772657461703000000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x440}, 0x1, 0x0, 0x0, 0x20000044}, 0x1) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='mm_compaction_end\x00', r2, 0x0, 0x401}, 0x18) write$rfkill(r0, &(0x7f00000004c0)={0x4, 0x8, 0x2, 0x1}, 0x8) open_tree(r13, &(0x7f0000000500)='./file0\x00', 0x81000) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 90.788971ms ago: executing program 1 (id=3030): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0xb}}}}], 0x50}}], 0x1, 0x810) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000000000001b0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 71.886333ms ago: executing program 1 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 703.67µs ago: executing program 1 (id=3032): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) 0s ago: executing program 0 (id=3033): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e21, 0xfffb, 0xa, 0x20, 0x0, 0x1d, r2, 0xee01}, {0x72, 0x1, 0x5, 0x5, 0x6, 0x3, 0x2, 0x2}, {0x42c6, 0x6, 0x1, 0x2}, 0xff, 0x6e6bb3, 0x2}, {{@in=@remote, 0x4d6, 0x6c}, 0xa, @in=@multicast2, 0x3505, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1ebd}}, 0xe8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) kernel console output (not intermixed with test programs): 23.153610][ T8966] xt_connbytes: Forcing CT accounting to be enabled [ 123.174877][ T8966] Cannot find set identified by id 0 to match [ 123.186144][ T8966] binfmt_misc: register: failed to install interpreter file ./file0 [ 123.369007][ T8991] loop2: detected capacity change from 0 to 2048 [ 123.374315][ T8985] lo speed is unknown, defaulting to 1000 [ 123.381552][ T8984] siw: device registration error -23 [ 123.389594][ T8989] loop6: detected capacity change from 0 to 512 [ 123.399503][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.409430][ T8989] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.418160][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.439757][ T8989] EXT4-fs (loop6): 1 truncate cleaned up [ 123.592752][ T9014] loop6: detected capacity change from 0 to 512 [ 123.711732][ T9028] loop6: detected capacity change from 0 to 1024 [ 123.721240][ T9028] EXT4-fs: Ignoring removed nobh option [ 123.727781][ T9028] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.739352][ T9028] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1839: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 123.758284][ T9028] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1839: couldn't read orphan inode 11 (err -117) [ 123.832911][ T9034] loop6: detected capacity change from 0 to 512 [ 123.839612][ T9034] EXT4-fs: Ignoring removed oldalloc option [ 123.846124][ T9034] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.858318][ T9034] EXT4-fs (loop6): 1 truncate cleaned up [ 123.937879][ T9039] siw: device registration error -23 [ 123.949906][ T9039] loop6: detected capacity change from 0 to 512 [ 123.958094][ T9039] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.969419][ T9039] EXT4-fs (loop6): 1 truncate cleaned up [ 124.010376][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'. [ 124.189831][ T9042] lo speed is unknown, defaulting to 1000 [ 124.601137][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.624835][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.633069][ T9071] lo speed is unknown, defaulting to 1000 [ 124.642949][ T9073] siw: device registration error -23 [ 124.725162][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1861'. [ 124.886200][ T9054] lo speed is unknown, defaulting to 1000 [ 125.057785][ T9100] lo speed is unknown, defaulting to 1000 [ 125.259698][ T9112] FAULT_INJECTION: forcing a failure. [ 125.259698][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 125.272445][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.0.1867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.272483][ T9112] Tainted: [W]=WARN [ 125.272491][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.272530][ T9112] Call Trace: [ 125.272537][ T9112] [ 125.272544][ T9112] __dump_stack+0x1d/0x30 [ 125.272575][ T9112] dump_stack_lvl+0xe8/0x140 [ 125.272668][ T9112] dump_stack+0x15/0x1b [ 125.272700][ T9112] should_fail_ex+0x265/0x280 [ 125.272784][ T9112] should_failslab+0x8c/0xb0 [ 125.272812][ T9112] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 125.272841][ T9112] ? __d_alloc+0x3d/0x340 [ 125.272868][ T9112] __d_alloc+0x3d/0x340 [ 125.272937][ T9112] d_alloc+0x2e/0x100 [ 125.272959][ T9112] lookup_one_qstr_excl+0x99/0x250 [ 125.273038][ T9112] do_renameat2+0x380/0x9e0 [ 125.273127][ T9112] __x64_sys_rename+0x58/0x70 [ 125.273147][ T9112] x64_sys_call+0x1f9/0x3000 [ 125.273179][ T9112] do_syscall_64+0xd2/0x200 [ 125.273291][ T9112] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.273343][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.273368][ T9112] RIP: 0033:0x7f6a6321efc9 [ 125.273384][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.273442][ T9112] RSP: 002b:00007f6a61c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 125.273520][ T9112] RAX: ffffffffffffffda RBX: 00007f6a63475fa0 RCX: 00007f6a6321efc9 [ 125.273533][ T9112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 125.273552][ T9112] RBP: 00007f6a61c87090 R08: 0000000000000000 R09: 0000000000000000 [ 125.273568][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.273583][ T9112] R13: 00007f6a63476038 R14: 00007f6a63475fa0 R15: 00007ffff69dafa8 [ 125.273602][ T9112] [ 125.585571][ T29] kauditd_printk_skb: 6356 callbacks suppressed [ 125.585600][ T29] audit: type=1326 audit(1761146472.133:14948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.652225][ T9128] siw: device registration error -23 [ 125.664885][ T29] audit: type=1326 audit(1761146472.163:14949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.688548][ T29] audit: type=1326 audit(1761146472.163:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.712028][ T29] audit: type=1326 audit(1761146472.163:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.735693][ T29] audit: type=1326 audit(1761146472.163:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.759378][ T29] audit: type=1326 audit(1761146472.163:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.782878][ T29] audit: type=1326 audit(1761146472.163:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.806397][ T29] audit: type=1326 audit(1761146472.163:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.830007][ T29] audit: type=1326 audit(1761146472.163:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 125.853590][ T29] audit: type=1326 audit(1761146472.173:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.6.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 126.116792][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.308933][ T9153] lo speed is unknown, defaulting to 1000 [ 126.341079][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.583348][ T9168] loop2: detected capacity change from 0 to 512 [ 126.662726][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'. [ 126.966965][ T9177] lo speed is unknown, defaulting to 1000 [ 127.193788][ T9217] netlink: 5336 bytes leftover after parsing attributes in process `syz.0.1903'. [ 127.423571][ T9238] FAULT_INJECTION: forcing a failure. [ 127.423571][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 127.436272][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.4.1910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.436358][ T9238] Tainted: [W]=WARN [ 127.436366][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.436382][ T9238] Call Trace: [ 127.436389][ T9238] [ 127.436398][ T9238] __dump_stack+0x1d/0x30 [ 127.436433][ T9238] dump_stack_lvl+0xe8/0x140 [ 127.436531][ T9238] dump_stack+0x15/0x1b [ 127.436555][ T9238] should_fail_ex+0x265/0x280 [ 127.436684][ T9238] should_failslab+0x8c/0xb0 [ 127.436706][ T9238] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 127.436729][ T9238] ? __alloc_skb+0x101/0x320 [ 127.436755][ T9238] __alloc_skb+0x101/0x320 [ 127.436781][ T9238] netlink_alloc_large_skb+0xbf/0xf0 [ 127.436819][ T9238] netlink_sendmsg+0x3cf/0x6b0 [ 127.436850][ T9238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.436881][ T9238] __sock_sendmsg+0x145/0x180 [ 127.436942][ T9238] ____sys_sendmsg+0x31e/0x4e0 [ 127.436975][ T9238] ___sys_sendmsg+0x17b/0x1d0 [ 127.437041][ T9238] __x64_sys_sendmsg+0xd4/0x160 [ 127.437076][ T9238] x64_sys_call+0x191e/0x3000 [ 127.437111][ T9238] do_syscall_64+0xd2/0x200 [ 127.437207][ T9238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.437277][ T9238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.437382][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.437464][ T9238] RIP: 0033:0x7f82100cefc9 [ 127.437480][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.437498][ T9238] RSP: 002b:00007f820eaf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.437517][ T9238] RAX: ffffffffffffffda RBX: 00007f8210326180 RCX: 00007f82100cefc9 [ 127.437530][ T9238] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000008 [ 127.437616][ T9238] RBP: 00007f820eaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 127.437628][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.437641][ T9238] R13: 00007f8210326218 R14: 00007f8210326180 R15: 00007ffe72528ea8 [ 127.437666][ T9238] [ 127.870908][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.907384][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.922719][ T9244] lo speed is unknown, defaulting to 1000 [ 127.943321][ T9252] tipc: Started in network mode [ 127.948348][ T9252] tipc: Node identity ac14140f, cluster identity 4711 [ 127.955294][ T9252] tipc: New replicast peer: 255.255.255.255 [ 127.961508][ T9252] tipc: Enabled bearer , priority 10 [ 128.051653][ T9256] loop2: detected capacity change from 0 to 1024 [ 128.058590][ T9256] EXT4-fs: Ignoring removed nobh option [ 128.065371][ T9256] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.084484][ T9256] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.1918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 128.103816][ T9256] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1918: couldn't read orphan inode 11 (err -117) [ 128.175727][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1926'. [ 128.332798][ T9292] loop9: detected capacity change from 0 to 7 [ 128.339403][ T9292] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.347314][ T9292] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.355280][ T9292] loop9: unable to read partition table [ 128.363447][ T9292] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 128.363447][ T9292] ) failed (rc=-5) [ 128.499272][ T9287] lo speed is unknown, defaulting to 1000 [ 128.573549][ T9312] vhci_hcd: invalid port number 65 [ 128.578903][ T9312] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 128.629055][ T9311] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1936'. [ 128.650934][ T9316] loop6: detected capacity change from 0 to 1024 [ 128.664978][ T9316] EXT4-fs: Ignoring removed nobh option [ 128.676793][ T9316] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.705156][ T9316] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1937: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 128.728790][ T9316] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1937: couldn't read orphan inode 11 (err -117) [ 128.827817][ T9321] lo speed is unknown, defaulting to 1000 [ 128.875434][ T9325] loop6: detected capacity change from 0 to 512 [ 129.085094][ T3382] tipc: Node number set to 2886997007 [ 129.318271][ T9359] loop6: detected capacity change from 0 to 512 [ 129.326145][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 129.500131][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.516299][ T9362] lo speed is unknown, defaulting to 1000 [ 129.543993][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.709756][ T9367] lo speed is unknown, defaulting to 1000 [ 129.920949][ T9391] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1961'. [ 130.325774][ T9425] FAULT_INJECTION: forcing a failure. [ 130.325774][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.338933][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: syz.6.1976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.339007][ T9425] Tainted: [W]=WARN [ 130.339014][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.339026][ T9425] Call Trace: [ 130.339034][ T9425] [ 130.339043][ T9425] __dump_stack+0x1d/0x30 [ 130.339080][ T9425] dump_stack_lvl+0xe8/0x140 [ 130.339171][ T9425] dump_stack+0x15/0x1b [ 130.339204][ T9425] should_fail_ex+0x265/0x280 [ 130.339273][ T9425] should_fail+0xb/0x20 [ 130.339299][ T9425] should_fail_usercopy+0x1a/0x20 [ 130.339403][ T9425] _copy_from_iter+0xd2/0xe80 [ 130.339436][ T9425] ? __build_skb_around+0x1ab/0x200 [ 130.339493][ T9425] ? __alloc_skb+0x223/0x320 [ 130.339598][ T9425] netlink_sendmsg+0x471/0x6b0 [ 130.339633][ T9425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.339662][ T9425] __sock_sendmsg+0x145/0x180 [ 130.339687][ T9425] ____sys_sendmsg+0x31e/0x4e0 [ 130.339799][ T9425] ___sys_sendmsg+0x17b/0x1d0 [ 130.339853][ T9425] __x64_sys_sendmsg+0xd4/0x160 [ 130.339994][ T9425] x64_sys_call+0x191e/0x3000 [ 130.340109][ T9425] do_syscall_64+0xd2/0x200 [ 130.340266][ T9425] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.340288][ T9425] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.340319][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.340340][ T9425] RIP: 0033:0x7f72bbd3efc9 [ 130.340355][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.340396][ T9425] RSP: 002b:00007f72ba79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.340417][ T9425] RAX: ffffffffffffffda RBX: 00007f72bbf95fa0 RCX: 00007f72bbd3efc9 [ 130.340490][ T9425] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000007 [ 130.340509][ T9425] RBP: 00007f72ba79f090 R08: 0000000000000000 R09: 0000000000000000 [ 130.340523][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.340613][ T9425] R13: 00007f72bbf96038 R14: 00007f72bbf95fa0 R15: 00007ffcf1263ec8 [ 130.340638][ T9425] [ 130.579879][ T9422] wireguard0: entered promiscuous mode [ 130.585473][ T9422] wireguard0: entered allmulticast mode [ 130.621159][ T9440] vhci_hcd: invalid port number 85 [ 130.626411][ T9440] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 130.634778][ T9429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9429 comm=syz.4.1975 [ 130.669195][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1984'. [ 130.795177][ T29] kauditd_printk_skb: 1099 callbacks suppressed [ 130.795192][ T29] audit: type=1326 audit(1761146477.343:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.832066][ T29] audit: type=1326 audit(1761146477.343:16058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.855812][ T29] audit: type=1326 audit(1761146477.343:16059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.879523][ T29] audit: type=1326 audit(1761146477.343:16060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.903085][ T29] audit: type=1326 audit(1761146477.343:16061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.926639][ T29] audit: type=1326 audit(1761146477.343:16062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.950267][ T29] audit: type=1326 audit(1761146477.343:16063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.973810][ T29] audit: type=1326 audit(1761146477.343:16064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 130.997468][ T29] audit: type=1326 audit(1761146477.343:16065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 131.021015][ T29] audit: type=1326 audit(1761146477.343:16066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz.1.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 131.141449][ T9455] lo speed is unknown, defaulting to 1000 [ 131.270224][ T9480] FAULT_INJECTION: forcing a failure. [ 131.270224][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 131.283058][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz.4.1996 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.283088][ T9480] Tainted: [W]=WARN [ 131.283094][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.283105][ T9480] Call Trace: [ 131.283111][ T9480] [ 131.283119][ T9480] __dump_stack+0x1d/0x30 [ 131.283214][ T9480] dump_stack_lvl+0xe8/0x140 [ 131.283289][ T9480] dump_stack+0x15/0x1b [ 131.283311][ T9480] should_fail_ex+0x265/0x280 [ 131.283424][ T9480] should_failslab+0x8c/0xb0 [ 131.283443][ T9480] kmem_cache_alloc_noprof+0x50/0x480 [ 131.283462][ T9480] ? getname_flags+0x80/0x3b0 [ 131.283485][ T9480] getname_flags+0x80/0x3b0 [ 131.283568][ T9480] do_sys_openat2+0x60/0x110 [ 131.283594][ T9480] __x64_sys_openat+0xf2/0x120 [ 131.283621][ T9480] x64_sys_call+0x2eab/0x3000 [ 131.283703][ T9480] do_syscall_64+0xd2/0x200 [ 131.283812][ T9480] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.283831][ T9480] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.283855][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.283874][ T9480] RIP: 0033:0x7f82100cefc9 [ 131.283893][ T9480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.283941][ T9480] RSP: 002b:00007f820eb37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.283958][ T9480] RAX: ffffffffffffffda RBX: 00007f8210325fa0 RCX: 00007f82100cefc9 [ 131.283969][ T9480] RDX: 0000000000414f02 RSI: 0000200000000200 RDI: 0000000000000006 [ 131.283980][ T9480] RBP: 00007f820eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 131.283990][ T9480] R10: 52abe154ad664fa4 R11: 0000000000000246 R12: 0000000000000001 [ 131.284001][ T9480] R13: 00007f8210326038 R14: 00007f8210325fa0 R15: 00007ffe72528ea8 [ 131.284018][ T9480] [ 131.596714][ T9494] netlink: 660 bytes leftover after parsing attributes in process `syz.6.2003'. [ 131.607975][ T9495] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 131.615842][ T9494] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 131.769341][ T9520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2012'. [ 131.963309][ T9532] netlink: 12 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 132.075591][ T9521] lo speed is unknown, defaulting to 1000 [ 132.237882][ T9570] loop6: detected capacity change from 0 to 128 [ 132.245921][ T9570] FAULT_INJECTION: forcing a failure. [ 132.245921][ T9570] name failslab, interval 1, probability 0, space 0, times 0 [ 132.258642][ T9570] CPU: 0 UID: 0 PID: 9570 Comm: syz.6.2030 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.258681][ T9570] Tainted: [W]=WARN [ 132.258729][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.258745][ T9570] Call Trace: [ 132.258754][ T9570] [ 132.258764][ T9570] __dump_stack+0x1d/0x30 [ 132.258804][ T9570] dump_stack_lvl+0xe8/0x140 [ 132.258840][ T9570] dump_stack+0x15/0x1b [ 132.258936][ T9570] should_fail_ex+0x265/0x280 [ 132.258967][ T9570] should_failslab+0x8c/0xb0 [ 132.258995][ T9570] __kvmalloc_node_noprof+0x12e/0x670 [ 132.259028][ T9570] ? seq_read_iter+0x143/0x950 [ 132.259070][ T9570] seq_read_iter+0x143/0x950 [ 132.259138][ T9570] ? __alloc_frozen_pages_noprof+0x15f/0x360 [ 132.259188][ T9570] kernfs_fop_read_iter+0xc1/0x330 [ 132.259222][ T9570] ? iov_iter_bvec+0xa4/0xd0 [ 132.259338][ T9570] copy_splice_read+0x442/0x660 [ 132.259388][ T9570] ? __pfx_copy_splice_read+0x10/0x10 [ 132.259500][ T9570] splice_direct_to_actor+0x26f/0x680 [ 132.259543][ T9570] ? __pfx_direct_splice_actor+0x10/0x10 [ 132.259649][ T9570] do_splice_direct+0xda/0x150 [ 132.259692][ T9570] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 132.259813][ T9570] do_sendfile+0x380/0x650 [ 132.259896][ T9570] __x64_sys_sendfile64+0x105/0x150 [ 132.259921][ T9570] x64_sys_call+0x2bb4/0x3000 [ 132.260008][ T9570] do_syscall_64+0xd2/0x200 [ 132.260043][ T9570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.260086][ T9570] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.260177][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.260206][ T9570] RIP: 0033:0x7f72bbd3efc9 [ 132.260223][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.260288][ T9570] RSP: 002b:00007f72ba79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 132.260393][ T9570] RAX: ffffffffffffffda RBX: 00007f72bbf95fa0 RCX: 00007f72bbd3efc9 [ 132.260411][ T9570] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 132.260482][ T9570] RBP: 00007f72ba79f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.260497][ T9570] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 132.260511][ T9570] R13: 00007f72bbf96038 R14: 00007f72bbf95fa0 R15: 00007ffcf1263ec8 [ 132.260535][ T9570] [ 132.575223][ T9573] lo speed is unknown, defaulting to 1000 [ 132.599869][ T9586] FAULT_INJECTION: forcing a failure. [ 132.599869][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 132.612652][ T9586] CPU: 0 UID: 0 PID: 9586 Comm: syz.6.2035 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 132.612684][ T9586] Tainted: [W]=WARN [ 132.612690][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.612739][ T9586] Call Trace: [ 132.612746][ T9586] [ 132.612755][ T9586] __dump_stack+0x1d/0x30 [ 132.612808][ T9586] dump_stack_lvl+0xe8/0x140 [ 132.612858][ T9586] dump_stack+0x15/0x1b [ 132.612891][ T9586] should_fail_ex+0x265/0x280 [ 132.612939][ T9586] ? audit_log_d_path+0x8d/0x150 [ 132.612975][ T9586] should_failslab+0x8c/0xb0 [ 132.613006][ T9586] __kmalloc_cache_noprof+0x4c/0x4a0 [ 132.613168][ T9586] audit_log_d_path+0x8d/0x150 [ 132.613197][ T9586] audit_log_d_path_exe+0x42/0x70 [ 132.613325][ T9586] audit_log_task+0x1e9/0x250 [ 132.613359][ T9586] ? kstrtouint+0x76/0xc0 [ 132.613395][ T9586] audit_seccomp+0x61/0x100 [ 132.613426][ T9586] ? __seccomp_filter+0x82d/0x1250 [ 132.613520][ T9586] __seccomp_filter+0x83e/0x1250 [ 132.613547][ T9586] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.613575][ T9586] ? vfs_write+0x7e8/0x960 [ 132.613596][ T9586] ? __rcu_read_unlock+0x4f/0x70 [ 132.613655][ T9586] ? __fget_files+0x184/0x1c0 [ 132.613686][ T9586] __secure_computing+0x82/0x150 [ 132.613713][ T9586] syscall_trace_enter+0xcf/0x1e0 [ 132.613799][ T9586] do_syscall_64+0xac/0x200 [ 132.613930][ T9586] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.613957][ T9586] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.613994][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.614015][ T9586] RIP: 0033:0x7f72bbd3efc9 [ 132.614030][ T9586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.614090][ T9586] RSP: 002b:00007f72ba79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 132.614115][ T9586] RAX: ffffffffffffffda RBX: 00007f72bbf95fa0 RCX: 00007f72bbd3efc9 [ 132.614131][ T9586] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000007 [ 132.614148][ T9586] RBP: 00007f72ba79f090 R08: 0000000000000000 R09: 0000000000000000 [ 132.614163][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.614182][ T9586] R13: 00007f72bbf96038 R14: 00007f72bbf95fa0 R15: 00007ffcf1263ec8 [ 132.614207][ T9586] [ 132.842372][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.861319][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.890337][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2038'. [ 133.058139][ T9605] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 133.097793][ T9605] serio: Serial port ttyS3 [ 133.136368][ T9597] lo speed is unknown, defaulting to 1000 [ 133.216340][ T9613] mmap: syz.4.2046 (9613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.336645][ T9622] bond1: (slave erspan0): Device is not bonding slave [ 133.343471][ T9622] bond1: option active_slave: invalid value (erspan0) [ 133.351473][ T9622] bond1 (unregistering): Released all slaves [ 133.908990][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 133.946520][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2073'. [ 134.056923][ T9686] usb usb1: usbfs: process 9686 (syz.0.2077) did not claim interface 4 before use [ 134.069728][ T9686] pim6reg1: entered promiscuous mode [ 134.070003][ T9688] FAULT_INJECTION: forcing a failure. [ 134.070003][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.075096][ T9686] pim6reg1: entered allmulticast mode [ 134.088141][ T9688] CPU: 0 UID: 0 PID: 9688 Comm: syz.4.2079 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.088181][ T9688] Tainted: [W]=WARN [ 134.088192][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.088283][ T9688] Call Trace: [ 134.088291][ T9688] [ 134.088301][ T9688] __dump_stack+0x1d/0x30 [ 134.088342][ T9688] dump_stack_lvl+0xe8/0x140 [ 134.088379][ T9688] dump_stack+0x15/0x1b [ 134.088421][ T9688] should_fail_ex+0x265/0x280 [ 134.088463][ T9688] should_fail+0xb/0x20 [ 134.088491][ T9688] should_fail_usercopy+0x1a/0x20 [ 134.088576][ T9688] _copy_from_user+0x1c/0xb0 [ 134.088605][ T9688] ___sys_sendmsg+0xc1/0x1d0 [ 134.088664][ T9688] __x64_sys_sendmsg+0xd4/0x160 [ 134.088762][ T9688] x64_sys_call+0x191e/0x3000 [ 134.088802][ T9688] do_syscall_64+0xd2/0x200 [ 134.088840][ T9688] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.088948][ T9688] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.088985][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.089015][ T9688] RIP: 0033:0x7f82100cefc9 [ 134.089034][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.089058][ T9688] RSP: 002b:00007f820eb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.089161][ T9688] RAX: ffffffffffffffda RBX: 00007f8210325fa0 RCX: 00007f82100cefc9 [ 134.089178][ T9688] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 134.089195][ T9688] RBP: 00007f820eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 134.089209][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.089225][ T9688] R13: 00007f8210326038 R14: 00007f8210325fa0 R15: 00007ffe72528ea8 [ 134.089252][ T9688] [ 134.339896][ T9699] loop6: detected capacity change from 0 to 1024 [ 134.347412][ T9699] EXT4-fs: Ignoring removed nobh option [ 134.359547][ T9699] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.373087][ T9699] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2082: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 134.387632][ T9695] lo speed is unknown, defaulting to 1000 [ 134.394571][ T9699] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2082: couldn't read orphan inode 11 (err -117) [ 134.414429][ T9699] EXT4-fs mount: 164 callbacks suppressed [ 134.414443][ T9699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.487327][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.541608][ T9718] loop6: detected capacity change from 0 to 512 [ 134.591191][ T9718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.639330][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.664610][ T9740] loop6: detected capacity change from 0 to 512 [ 134.684483][ T9742] loop2: detected capacity change from 0 to 1024 [ 134.692018][ T9742] EXT4-fs: Ignoring removed nobh option [ 134.698899][ T9740] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 26 (err -116) [ 134.708781][ T9742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.720998][ T9740] EXT4-fs (loop6): Remounting filesystem read-only [ 134.731892][ T9740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.742805][ T9742] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2098: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 134.745537][ T9740] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.778427][ T9742] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2098: couldn't read orphan inode 11 (err -117) [ 134.791231][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.805575][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 134.814680][ T9752] IPVS: Error connecting to the multicast addr [ 134.834386][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.867487][ T9740] 9pnet_fd: Insufficient options for proto=fd [ 134.874757][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2103'. [ 135.010149][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.051348][ T9759] lo speed is unknown, defaulting to 1000 [ 135.086137][ T9765] loop6: detected capacity change from 0 to 512 [ 135.106889][ T9765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.230847][ T9762] lo speed is unknown, defaulting to 1000 [ 135.266135][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.408139][ T9788] loop6: detected capacity change from 0 to 1024 [ 135.415382][ T9788] EXT4-fs: Ignoring removed nobh option [ 135.429164][ T9788] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.441727][ T9788] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2114: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 135.462252][ T9788] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2114: couldn't read orphan inode 11 (err -117) [ 135.481648][ T9788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.512235][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.650336][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.665153][ T9801] FAULT_INJECTION: forcing a failure. [ 135.665153][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.678410][ T9801] CPU: 0 UID: 0 PID: 9801 Comm: syz.4.2117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.678447][ T9801] Tainted: [W]=WARN [ 135.678456][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.678472][ T9801] Call Trace: [ 135.678481][ T9801] [ 135.678490][ T9801] __dump_stack+0x1d/0x30 [ 135.678608][ T9801] dump_stack_lvl+0xe8/0x140 [ 135.678644][ T9801] dump_stack+0x15/0x1b [ 135.678736][ T9801] should_fail_ex+0x265/0x280 [ 135.678782][ T9801] should_fail+0xb/0x20 [ 135.678877][ T9801] should_fail_usercopy+0x1a/0x20 [ 135.678942][ T9801] _copy_from_user+0x1c/0xb0 [ 135.678962][ T9801] sock_do_ioctl+0xe6/0x220 [ 135.678988][ T9801] sock_ioctl+0x41b/0x610 [ 135.679048][ T9801] ? __pfx_sock_ioctl+0x10/0x10 [ 135.679090][ T9801] __se_sys_ioctl+0xce/0x140 [ 135.679123][ T9801] __x64_sys_ioctl+0x43/0x50 [ 135.679225][ T9801] x64_sys_call+0x1816/0x3000 [ 135.679256][ T9801] do_syscall_64+0xd2/0x200 [ 135.679287][ T9801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.679314][ T9801] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.679402][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.679423][ T9801] RIP: 0033:0x7f82100cefc9 [ 135.679438][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.679488][ T9801] RSP: 002b:00007f820eb37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.679506][ T9801] RAX: ffffffffffffffda RBX: 00007f8210325fa0 RCX: 00007f82100cefc9 [ 135.679518][ T9801] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 000000000000000e [ 135.679530][ T9801] RBP: 00007f820eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 135.679544][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.679558][ T9801] R13: 00007f8210326038 R14: 00007f8210325fa0 R15: 00007ffe72528ea8 [ 135.679582][ T9801] [ 135.689646][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.911587][ T9803] netlink: 'syz.6.2115': attribute type 1 has an invalid length. [ 136.008184][ T9793] lo speed is unknown, defaulting to 1000 [ 136.090025][ T29] kauditd_printk_skb: 1165 callbacks suppressed [ 136.090044][ T29] audit: type=1326 audit(1761146482.633:17232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.099735][ T9823] loop6: detected capacity change from 0 to 1024 [ 136.120177][ T29] audit: type=1326 audit(1761146482.633:17233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.150230][ T29] audit: type=1326 audit(1761146482.633:17234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.153205][ T9821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=9821 comm=syz.2.2125 [ 136.173762][ T29] audit: type=1326 audit(1761146482.633:17235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.173798][ T29] audit: type=1326 audit(1761146482.633:17236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.233588][ T29] audit: type=1326 audit(1761146482.633:17237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.257129][ T29] audit: type=1326 audit(1761146482.633:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.280744][ T29] audit: type=1326 audit(1761146482.633:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.304559][ T29] audit: type=1326 audit(1761146482.633:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.314624][ T9823] EXT4-fs: Ignoring removed nobh option [ 136.328118][ T29] audit: type=1326 audit(1761146482.633:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 136.334234][ T9823] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.367904][ T9825] wg2: entered promiscuous mode [ 136.369161][ T9823] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2126: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.372801][ T9825] wg2: entered allmulticast mode [ 136.392290][ T9823] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2126: couldn't read orphan inode 11 (err -117) [ 136.410872][ T9823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.430382][ T9824] wg2: entered promiscuous mode [ 136.435328][ T9824] wg2: entered allmulticast mode [ 136.468880][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.519322][ T9838] syzkaller0: entered promiscuous mode [ 136.524907][ T9838] syzkaller0: entered allmulticast mode [ 136.586974][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2133'. [ 136.615767][ T9848] loop6: detected capacity change from 0 to 512 [ 136.634572][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2135'. [ 136.647859][ T9848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.700230][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.861795][ T9865] loop6: detected capacity change from 0 to 1024 [ 136.870774][ T9865] EXT4-fs: Ignoring removed nobh option [ 136.873624][ T9855] lo speed is unknown, defaulting to 1000 [ 136.879109][ T9865] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.894113][ T9865] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2140: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.913274][ T9865] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2140: couldn't read orphan inode 11 (err -117) [ 136.926192][ T9865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.965335][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.041454][ T9883] loop2: detected capacity change from 0 to 512 [ 137.057311][ T9883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.105843][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.186873][ T9903] can0: slcan on ptm0. [ 137.232588][ T9910] loop2: detected capacity change from 0 to 1024 [ 137.239613][ T9910] EXT4-fs: Ignoring removed nobh option [ 137.245708][ T9910] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.257107][ T9910] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 137.275928][ T9910] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2157: couldn't read orphan inode 11 (err -117) [ 137.288242][ T9910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.322615][ T9913] process 'syz.0.2158' launched './file0' with NULL argv: empty string added [ 137.332176][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.375034][ T9919] loop2: detected capacity change from 0 to 512 [ 137.400683][ T9919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.450107][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.545580][ T9936] loop2: detected capacity change from 0 to 1024 [ 137.552676][ T9936] EXT4-fs: Ignoring removed nobh option [ 137.558732][ T9936] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.570568][ T9936] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 137.589411][ T9936] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2167: couldn't read orphan inode 11 (err -117) [ 137.601936][ T9936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.631466][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.651949][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.659339][ T9947] bridge0: entered allmulticast mode [ 137.669461][ T9947] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.676557][ T9947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.993344][ T9950] bridge0: port 3(batadv1) entered blocking state [ 138.000429][ T9950] bridge0: port 3(batadv1) entered disabled state [ 138.007311][ T9950] batadv1: entered allmulticast mode [ 138.013416][ T9950] batadv1: entered promiscuous mode [ 138.025126][ T9896] can0 (unregistered): slcan off ptm0. [ 138.057039][ T9964] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2177'. [ 138.219154][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2186'. [ 138.246811][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'. [ 138.356085][ T9972] lo speed is unknown, defaulting to 1000 [ 138.418655][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.436594][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.475179][ T9991] lo speed is unknown, defaulting to 1000 [ 138.494794][ T1070] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 138.504096][ T1070] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 138.564038][ T9985] loop2: detected capacity change from 0 to 8192 [ 138.830136][T10014] netem: change failed [ 138.899180][ T9989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.125820][T10036] loop6: detected capacity change from 0 to 512 [ 139.140191][T10036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.203275][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.206035][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.226898][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.245045][T10034] lo speed is unknown, defaulting to 1000 [ 139.349392][ T37] syzkaller0: tun_net_xmit 76 [ 139.354215][ T37] syzkaller0: tun_net_xmit 48 [ 139.373972][T10052] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 139.374986][ T10] syzkaller0: tun_net_xmit 76 [ 139.379994][T10052] syzkaller0: Linktype set failed because interface is up [ 139.408787][T10057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2211'. [ 139.583615][T10066] loop6: detected capacity change from 0 to 512 [ 139.599739][T10066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.637060][T10060] lo speed is unknown, defaulting to 1000 [ 139.654010][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.888598][T10088] netem: change failed [ 139.909816][T10090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 139.916389][T10090] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.923951][T10090] vhci_hcd vhci_hcd.0: Device attached [ 139.930665][T10091] usbip_core: unknown command [ 139.935459][T10091] vhci_hcd: unknown pdu 2844066640 [ 139.940719][T10091] usbip_core: unknown command [ 139.945884][ T31] vhci_hcd: stop threads [ 139.950242][ T31] vhci_hcd: release socket [ 139.954690][ T31] vhci_hcd: disconnect device [ 140.138127][T10076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.230453][T10101] lo speed is unknown, defaulting to 1000 [ 140.279188][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.305402][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.628630][T10116] lo speed is unknown, defaulting to 1000 [ 140.656574][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.672328][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.816219][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'. [ 141.043505][T10149] lo speed is unknown, defaulting to 1000 [ 141.246723][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 141.246741][ T29] audit: type=1400 audit(1761146487.793:17905): avc: denied { create } for pid=10154 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.274179][ T29] audit: type=1400 audit(1761146487.823:17906): avc: denied { write } for pid=10154 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.346771][T10157] loop2: detected capacity change from 0 to 8192 [ 141.354051][ T29] audit: type=1400 audit(1761146487.893:17907): avc: denied { mounton } for pid=10156 comm="syz.2.2240" path="/421/file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.385741][ T29] audit: type=1400 audit(1761146487.933:17908): avc: denied { mount } for pid=10156 comm="syz.2.2240" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 141.463174][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10164 comm=syz.2.2240 [ 141.495011][ T29] audit: type=1400 audit(1761146488.023:17909): avc: denied { watch watch_reads } for pid=10156 comm="syz.2.2240" path="/421/file0/file0" dev="loop2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 141.589311][ T29] audit: type=1400 audit(1761146488.133:17910): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 141.629690][T10172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2245'. [ 141.644673][ T29] audit: type=1400 audit(1761146488.183:17911): avc: denied { create } for pid=10173 comm="syz.0.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.693298][ T29] audit: type=1326 audit(1761146488.193:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.2.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30266cefc9 code=0x7ffc0000 [ 141.717118][ T29] audit: type=1326 audit(1761146488.193:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.2.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30266cefc9 code=0x7ffc0000 [ 141.740806][ T29] audit: type=1326 audit(1761146488.193:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10171 comm="syz.2.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30266cefc9 code=0x7ffc0000 [ 141.769834][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.802955][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.835143][T10170] lo speed is unknown, defaulting to 1000 [ 142.223838][T10195] vhci_hcd: default hub control req: 0006 v0321 i0001 l0 [ 142.969908][T10235] loop2: detected capacity change from 0 to 512 [ 142.987932][T10235] journal_path: Non-blockdev passed as './bus' [ 142.994114][T10235] EXT4-fs: error: could not find journal device path [ 143.146568][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 143.167847][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.168089][T10238] lo speed is unknown, defaulting to 1000 [ 143.182913][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.309485][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 143.398148][T10268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2279'. [ 143.506207][T10268] lo speed is unknown, defaulting to 1000 [ 143.563206][T10282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2284'. [ 143.575510][T10282] ip6gre1: entered allmulticast mode [ 143.758470][T10292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.766096][T10292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.774359][T10292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.781904][T10292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.816152][T10293] netlink: 'syz.0.2289': attribute type 13 has an invalid length. [ 144.127303][T10311] FAULT_INJECTION: forcing a failure. [ 144.127303][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 144.140060][T10311] CPU: 1 UID: 0 PID: 10311 Comm: syz.2.2296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.140099][T10311] Tainted: [W]=WARN [ 144.140108][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.140199][T10311] Call Trace: [ 144.140208][T10311] [ 144.140216][T10311] __dump_stack+0x1d/0x30 [ 144.140254][T10311] dump_stack_lvl+0xe8/0x140 [ 144.140290][T10311] dump_stack+0x15/0x1b [ 144.140387][T10311] should_fail_ex+0x265/0x280 [ 144.140426][T10311] should_failslab+0x8c/0xb0 [ 144.140453][T10311] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 144.140489][T10311] ? __alloc_skb+0x101/0x320 [ 144.140517][T10311] ? __rtnl_unlock+0x95/0xb0 [ 144.140555][T10311] __alloc_skb+0x101/0x320 [ 144.140586][T10311] netlink_ack+0xfd/0x500 [ 144.140619][T10311] netlink_rcv_skb+0x192/0x220 [ 144.140646][T10311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.140772][T10311] rtnetlink_rcv+0x1c/0x30 [ 144.140810][T10311] netlink_unicast+0x5c0/0x690 [ 144.140837][T10311] netlink_sendmsg+0x58b/0x6b0 [ 144.140909][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.140948][T10311] __sock_sendmsg+0x145/0x180 [ 144.140975][T10311] ____sys_sendmsg+0x31e/0x4e0 [ 144.141072][T10311] ___sys_sendmsg+0x17b/0x1d0 [ 144.141120][T10311] __x64_sys_sendmsg+0xd4/0x160 [ 144.141235][T10311] x64_sys_call+0x191e/0x3000 [ 144.141276][T10311] do_syscall_64+0xd2/0x200 [ 144.141337][T10311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.141397][T10311] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.141444][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.141496][T10311] RIP: 0033:0x7f30266cefc9 [ 144.141514][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.141536][T10311] RSP: 002b:00007f302512f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.141631][T10311] RAX: ffffffffffffffda RBX: 00007f3026925fa0 RCX: 00007f30266cefc9 [ 144.141647][T10311] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 144.141659][T10311] RBP: 00007f302512f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.141673][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.141702][T10311] R13: 00007f3026926038 R14: 00007f3026925fa0 R15: 00007ffcf5a2e258 [ 144.141739][T10311] [ 144.142807][T10313] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 144.144282][T10314] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 144.210102][T10318] loop2: detected capacity change from 0 to 1024 [ 144.404962][T10318] EXT4-fs: Ignoring removed nobh option [ 144.421499][T10318] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.445930][T10318] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2299: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 144.472449][T10327] FAULT_INJECTION: forcing a failure. [ 144.472449][T10327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.485670][T10327] CPU: 0 UID: 0 PID: 10327 Comm: syz.6.2302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.485710][T10327] Tainted: [W]=WARN [ 144.485718][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.485734][T10327] Call Trace: [ 144.485743][T10327] [ 144.485809][T10327] __dump_stack+0x1d/0x30 [ 144.485847][T10327] dump_stack_lvl+0xe8/0x140 [ 144.485930][T10327] dump_stack+0x15/0x1b [ 144.485983][T10327] should_fail_ex+0x265/0x280 [ 144.486022][T10327] should_fail+0xb/0x20 [ 144.486110][T10327] should_fail_usercopy+0x1a/0x20 [ 144.486197][T10327] _copy_from_user+0x1c/0xb0 [ 144.486217][T10327] __sys_bpf+0x183/0x7c0 [ 144.486257][T10327] __x64_sys_bpf+0x41/0x50 [ 144.486294][T10327] x64_sys_call+0x2aee/0x3000 [ 144.486334][T10327] do_syscall_64+0xd2/0x200 [ 144.486365][T10327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.486386][T10327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.486499][T10327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.486583][T10327] RIP: 0033:0x7f72bbd3efc9 [ 144.486602][T10327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.486645][T10327] RSP: 002b:00007f72ba79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.486663][T10327] RAX: ffffffffffffffda RBX: 00007f72bbf95fa0 RCX: 00007f72bbd3efc9 [ 144.486681][T10327] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.486693][T10327] RBP: 00007f72ba79f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.486708][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.486723][T10327] R13: 00007f72bbf96038 R14: 00007f72bbf95fa0 R15: 00007ffcf1263ec8 [ 144.486747][T10327] [ 144.492062][T10318] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2299: couldn't read orphan inode 11 (err -117) [ 144.620478][T10332] loop6: detected capacity change from 0 to 512 [ 144.640928][T10333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2314'. [ 144.651179][T10318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.658187][ T10] IPVS: starting estimator thread 0... [ 144.691457][T10332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.694629][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.744281][T10333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.777324][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.794793][T10334] IPVS: using max 1920 ests per chain, 96000 per kthread [ 144.805813][T10342] loop2: detected capacity change from 0 to 1024 [ 144.812899][T10342] EXT4-fs: Ignoring removed nobh option [ 144.819458][T10342] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.830899][T10342] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2316: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 144.850265][T10342] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2316: couldn't read orphan inode 11 (err -117) [ 144.850965][T10333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.864854][T10342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.905068][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.936987][T10333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.966272][T10352] 9pnet_fd: Insufficient options for proto=fd [ 145.001786][T10356] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 145.045839][T10333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.072735][T10368] netlink: 'syz.4.2318': attribute type 21 has an invalid length. [ 145.095230][T10368] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2318'. [ 145.104326][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 145.127021][T10368] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.2318'. [ 145.154038][ T1070] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.166313][ T1070] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.182290][ T1070] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.229002][ T1070] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.412628][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.420100][T10382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.428519][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.436019][T10382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.484661][T10386] netlink: 'syz.4.2323': attribute type 13 has an invalid length. [ 145.625517][T10396] FAULT_INJECTION: forcing a failure. [ 145.625517][T10396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.638856][T10396] CPU: 0 UID: 0 PID: 10396 Comm: syz.1.2329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.638896][T10396] Tainted: [W]=WARN [ 145.638905][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.638977][T10396] Call Trace: [ 145.638983][T10396] [ 145.638993][T10396] __dump_stack+0x1d/0x30 [ 145.639030][T10396] dump_stack_lvl+0xe8/0x140 [ 145.639113][T10396] dump_stack+0x15/0x1b [ 145.639140][T10396] should_fail_ex+0x265/0x280 [ 145.639169][T10396] should_fail+0xb/0x20 [ 145.639198][T10396] should_fail_usercopy+0x1a/0x20 [ 145.639288][T10396] _copy_to_user+0x20/0xa0 [ 145.639390][T10396] simple_read_from_buffer+0xb5/0x130 [ 145.639498][T10396] proc_fail_nth_read+0x10e/0x150 [ 145.639553][T10396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.639582][T10396] vfs_read+0x1a8/0x770 [ 145.639621][T10396] ? __rcu_read_unlock+0x4f/0x70 [ 145.639659][T10396] ? __fget_files+0x184/0x1c0 [ 145.639711][T10396] ksys_read+0xda/0x1a0 [ 145.639735][T10396] __x64_sys_read+0x40/0x50 [ 145.639757][T10396] x64_sys_call+0x27c0/0x3000 [ 145.639795][T10396] do_syscall_64+0xd2/0x200 [ 145.639825][T10396] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.639867][T10396] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.639901][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.639924][T10396] RIP: 0033:0x7f5ebaadd9dc [ 145.639940][T10396] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.639957][T10396] RSP: 002b:00007f5eb953f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.640049][T10396] RAX: ffffffffffffffda RBX: 00007f5ebad35fa0 RCX: 00007f5ebaadd9dc [ 145.640069][T10396] RDX: 000000000000000f RSI: 00007f5eb953f0a0 RDI: 0000000000000008 [ 145.640082][T10396] RBP: 00007f5eb953f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.640097][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.640112][T10396] R13: 00007f5ebad36038 R14: 00007f5ebad35fa0 R15: 00007ffec7d80b58 [ 145.640168][T10396] [ 145.939074][T10411] loop6: detected capacity change from 0 to 2048 [ 146.005203][T10411] loop6: p2 < > p4 [ 146.009934][T10411] loop6: p4 size 262144 extends beyond EOD, truncated [ 146.115283][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 146.345260][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 146.345276][ T29] audit: type=1400 audit(1761146492.893:18481): avc: denied { mounton } for pid=10444 comm="syz.0.2349" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 146.345366][T10445] tmpfs: Unknown parameter 'uid<00000000000000033188' [ 146.395885][T10442] lo speed is unknown, defaulting to 1000 [ 146.429855][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'. [ 146.639882][ T29] audit: type=1400 audit(1761146493.183:18482): avc: denied { read } for pid=10458 comm="syz.6.2353" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 146.663531][ T29] audit: type=1400 audit(1761146493.183:18483): avc: denied { open } for pid=10458 comm="syz.6.2353" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 146.834912][T10472] loop6: detected capacity change from 0 to 512 [ 146.859212][T10472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.882461][ T29] audit: type=1400 audit(1761146493.423:18484): avc: denied { remount } for pid=10480 comm="syz.1.2359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.921215][ T29] audit: type=1326 audit(1761146493.463:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 146.944942][ T29] audit: type=1326 audit(1761146493.463:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 146.968789][ T29] audit: type=1326 audit(1761146493.463:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 146.992502][ T29] audit: type=1326 audit(1761146493.463:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 147.016429][ T29] audit: type=1326 audit(1761146493.463:18489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 147.040035][ T29] audit: type=1326 audit(1761146493.463:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10485 comm="syz.1.2361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebaadefc9 code=0x7ffc0000 [ 147.065487][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.088373][T10490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49841 sclass=netlink_route_socket pid=10490 comm=syz.6.2362 [ 147.131899][T10499] FAULT_INJECTION: forcing a failure. [ 147.131899][T10499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.145175][T10499] CPU: 0 UID: 0 PID: 10499 Comm: syz.4.2367 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.145208][T10499] Tainted: [W]=WARN [ 147.145214][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.145234][T10499] Call Trace: [ 147.145241][T10499] [ 147.145248][T10499] __dump_stack+0x1d/0x30 [ 147.145352][T10499] dump_stack_lvl+0xe8/0x140 [ 147.145498][T10499] dump_stack+0x15/0x1b [ 147.145523][T10499] should_fail_ex+0x265/0x280 [ 147.145582][T10499] should_fail+0xb/0x20 [ 147.145610][T10499] should_fail_usercopy+0x1a/0x20 [ 147.145707][T10499] _copy_from_user+0x1c/0xb0 [ 147.145729][T10499] ___sys_sendmsg+0xc1/0x1d0 [ 147.145830][T10499] __x64_sys_sendmsg+0xd4/0x160 [ 147.145865][T10499] x64_sys_call+0x191e/0x3000 [ 147.145976][T10499] do_syscall_64+0xd2/0x200 [ 147.146009][T10499] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.146030][T10499] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.146148][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.146170][T10499] RIP: 0033:0x7f82100cefc9 [ 147.146227][T10499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.146321][T10499] RSP: 002b:00007f820eb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.146340][T10499] RAX: ffffffffffffffda RBX: 00007f8210325fa0 RCX: 00007f82100cefc9 [ 147.146489][T10499] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 147.146501][T10499] RBP: 00007f820eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 147.146513][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.146525][T10499] R13: 00007f8210326038 R14: 00007f8210325fa0 R15: 00007ffe72528ea8 [ 147.146574][T10499] [ 147.447030][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.476414][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.535467][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.544220][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.563647][T10504] lo speed is unknown, defaulting to 1000 [ 147.711467][T10511] lo speed is unknown, defaulting to 1000 [ 147.813834][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 147.841256][T10539] tap0: tun_chr_ioctl cmd 1074025673 [ 148.305951][T10575] tap0: tun_chr_ioctl cmd 1074025673 [ 148.418128][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'. [ 148.872627][T10588] FAULT_INJECTION: forcing a failure. [ 148.872627][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 148.885498][T10588] CPU: 0 UID: 0 PID: 10588 Comm: syz.0.2393 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.885531][T10588] Tainted: [W]=WARN [ 148.885539][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.885636][T10588] Call Trace: [ 148.885643][T10588] [ 148.885651][T10588] __dump_stack+0x1d/0x30 [ 148.885688][T10588] dump_stack_lvl+0xe8/0x140 [ 148.885744][T10588] dump_stack+0x15/0x1b [ 148.885771][T10588] should_fail_ex+0x265/0x280 [ 148.885882][T10588] should_failslab+0x8c/0xb0 [ 148.885910][T10588] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 148.885970][T10588] ? __alloc_skb+0x101/0x320 [ 148.886011][T10588] __alloc_skb+0x101/0x320 [ 148.886045][T10588] netlink_alloc_large_skb+0xbf/0xf0 [ 148.886157][T10588] netlink_sendmsg+0x3cf/0x6b0 [ 148.886198][T10588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.886237][T10588] __sock_sendmsg+0x145/0x180 [ 148.886266][T10588] ____sys_sendmsg+0x31e/0x4e0 [ 148.886308][T10588] ___sys_sendmsg+0x17b/0x1d0 [ 148.886434][T10588] __x64_sys_sendmsg+0xd4/0x160 [ 148.886475][T10588] x64_sys_call+0x191e/0x3000 [ 148.886514][T10588] do_syscall_64+0xd2/0x200 [ 148.886552][T10588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.886642][T10588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.886677][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.886699][T10588] RIP: 0033:0x7f6a6321efc9 [ 148.886714][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.886732][T10588] RSP: 002b:00007f6a61c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.886773][T10588] RAX: ffffffffffffffda RBX: 00007f6a63475fa0 RCX: 00007f6a6321efc9 [ 148.886785][T10588] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 148.886797][T10588] RBP: 00007f6a61c87090 R08: 0000000000000000 R09: 0000000000000000 [ 148.886812][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.886827][T10588] R13: 00007f6a63476038 R14: 00007f6a63475fa0 R15: 00007ffff69dafa8 [ 148.886911][T10588] [ 149.189404][T10592] bridge: RTM_NEWNEIGH with invalid ether address [ 149.251819][T10594] loop2: detected capacity change from 0 to 1024 [ 149.285532][T10594] EXT4-fs: Ignoring removed nobh option [ 149.318069][T10594] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.329988][T10594] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2396: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 149.358879][T10594] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2396: couldn't read orphan inode 11 (err -117) [ 149.382883][T10594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.405571][T10599] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.428135][T10599] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 149.464457][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.678262][T10604] lo speed is unknown, defaulting to 1000 [ 149.846904][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2409'. [ 149.869012][T10635] loop2: detected capacity change from 0 to 1024 [ 149.877763][T10635] EXT4-fs: Ignoring removed nobh option [ 149.910443][T10635] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.922344][T10635] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 149.941339][T10635] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2411: couldn't read orphan inode 11 (err -117) [ 149.953823][T10635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.005033][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.022424][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2419'. [ 150.223792][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.234427][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.243678][T10665] lo speed is unknown, defaulting to 1000 [ 150.251728][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.273966][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.318083][T10682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 150.324775][T10682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 150.332437][T10682] vhci_hcd vhci_hcd.0: Device attached [ 150.344344][T10667] lo speed is unknown, defaulting to 1000 [ 150.358231][T10684] vhci_hcd: connection closed [ 150.358560][ T1387] vhci_hcd: stop threads [ 150.367596][ T1387] vhci_hcd: release socket [ 150.372015][ T1387] vhci_hcd: disconnect device [ 150.397168][T10666] lo speed is unknown, defaulting to 1000 [ 150.904070][T10695] loop2: detected capacity change from 0 to 512 [ 150.927912][T10695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.941935][T10700] xt_hashlimit: max too large, truncated to 1048576 [ 150.952119][T10700] Cannot find add_set index 0 as target [ 150.982939][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.012580][T10705] loop2: detected capacity change from 0 to 1024 [ 151.019753][T10705] EXT4-fs: Ignoring removed nobh option [ 151.025860][T10705] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.037640][T10705] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2429: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 151.056330][T10705] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2429: couldn't read orphan inode 11 (err -117) [ 151.068795][T10705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.097844][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.131559][T10713] loop2: detected capacity change from 0 to 2048 [ 151.203018][T10714] lo speed is unknown, defaulting to 1000 [ 151.266976][T10710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.275655][T10710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.344598][T10720] tipc: Started in network mode [ 151.349710][T10720] tipc: Node identity 5e33bec62afb, cluster identity 4711 [ 151.356944][T10720] tipc: Enabled bearer , priority 0 [ 151.373373][T10720] tipc: Resetting bearer [ 151.381000][T10719] tipc: Disabling bearer [ 151.400232][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 151.400251][ T29] audit: type=1400 audit(1761146497.943:18949): avc: denied { write } for pid=10712 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 151.406103][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.434427][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.500874][ T29] audit: type=1400 audit(1761146498.043:18950): avc: denied { kexec_image_load } for pid=10723 comm="syz.0.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 151.549804][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 151.763321][T10727] lo speed is unknown, defaulting to 1000 [ 152.007370][ T29] audit: type=1400 audit(1761146498.553:18951): avc: denied { block_suspend } for pid=10737 comm="syz.2.2439" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.038574][T10738] loop2: detected capacity change from 0 to 1764 [ 152.046484][ T29] audit: type=1400 audit(1761146498.593:18952): avc: denied { mount } for pid=10737 comm="syz.2.2439" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 152.102508][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2439'. [ 152.111630][T10738] IPVS: Unknown mcast interface: ipvlan1 [ 152.126153][ T29] audit: type=1400 audit(1761146498.673:18953): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 152.381336][T10751] tipc: Started in network mode [ 152.386408][T10751] tipc: Node identity 12b35c84aab6, cluster identity 4711 [ 152.393582][T10751] tipc: Enabled bearer , priority 0 [ 152.405379][T10751] tipc: Resetting bearer [ 152.413221][T10750] tipc: Disabling bearer [ 152.490977][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2456'. [ 152.555520][T10757] loop6: detected capacity change from 0 to 512 [ 152.592836][T10757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.645106][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.736207][T10765] lo speed is unknown, defaulting to 1000 [ 152.868573][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.877218][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.939905][T10788] tipc: Started in network mode [ 152.944937][T10788] tipc: Node identity f2d023300063, cluster identity 4711 [ 152.952177][T10788] tipc: Enabled bearer , priority 0 [ 152.970882][T10788] tipc: Resetting bearer [ 152.978814][T10786] tipc: Disabling bearer [ 153.220246][T10797] lo speed is unknown, defaulting to 1000 [ 153.270017][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.278633][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.431235][ T29] audit: type=1400 audit(1761146499.973:18954): avc: denied { create } for pid=10800 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.432371][T10804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2459'. [ 153.451355][ T29] audit: type=1400 audit(1761146499.973:18955): avc: denied { ioctl } for pid=10800 comm="syz.0.2459" path="socket:[34073]" dev="sockfs" ino=34073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.813349][T10816] lo speed is unknown, defaulting to 1000 [ 153.829400][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.858189][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.876772][T10825] loop2: detected capacity change from 0 to 512 [ 153.886739][T10825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.953660][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.026385][T10838] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2472'. [ 154.039292][T10838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.049636][T10838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.059223][T10838] bond0 (unregistering): Released all slaves [ 154.119649][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2473'. [ 154.239011][ T29] audit: type=1400 audit(1761146500.783:18956): avc: denied { connect } for pid=10844 comm="syz.0.2474" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.417861][T10843] lo speed is unknown, defaulting to 1000 [ 154.698477][ T29] audit: type=1400 audit(1761146501.243:18957): avc: denied { egress } for pid=10844 comm="syz.0.2474" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 154.722357][ T29] audit: type=1400 audit(1761146501.243:18958): avc: denied { sendto } for pid=10844 comm="syz.0.2474" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 155.086736][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 155.195417][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2487'. [ 155.421770][T10886] lo speed is unknown, defaulting to 1000 [ 155.979009][T10898] loop2: detected capacity change from 0 to 512 [ 155.986086][T10898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.998105][T10898] EXT4-fs (loop2): 1 truncate cleaned up [ 156.004320][T10898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.409424][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 156.409443][ T29] audit: type=1326 audit(1761146502.953:19041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.440006][ T29] audit: type=1326 audit(1761146502.953:19042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.463887][ T29] audit: type=1326 audit(1761146502.973:19043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.487567][ T29] audit: type=1326 audit(1761146502.973:19044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.511160][ T29] audit: type=1326 audit(1761146502.973:19045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.534832][ T29] audit: type=1326 audit(1761146502.973:19046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.558642][ T29] audit: type=1326 audit(1761146502.973:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.582218][ T29] audit: type=1326 audit(1761146502.973:19048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.605803][ T29] audit: type=1326 audit(1761146502.973:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.629393][ T29] audit: type=1326 audit(1761146502.973:19050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10936 comm="syz.0.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 156.768631][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.849865][T10955] netlink: 96 bytes leftover after parsing attributes in process `+}[@'. [ 156.976325][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2515'. [ 157.403497][T10978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10978 comm=syz.1.2520 [ 157.596334][T10993] FAULT_INJECTION: forcing a failure. [ 157.596334][T10993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.609571][T10993] CPU: 0 UID: 0 PID: 10993 Comm: syz.4.2525 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.609693][T10993] Tainted: [W]=WARN [ 157.609702][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.609718][T10993] Call Trace: [ 157.609726][T10993] [ 157.609733][T10993] __dump_stack+0x1d/0x30 [ 157.609764][T10993] dump_stack_lvl+0xe8/0x140 [ 157.609795][T10993] dump_stack+0x15/0x1b [ 157.609834][T10993] should_fail_ex+0x265/0x280 [ 157.609873][T10993] should_fail+0xb/0x20 [ 157.609905][T10993] should_fail_usercopy+0x1a/0x20 [ 157.609964][T10993] _copy_from_user+0x1c/0xb0 [ 157.609984][T10993] vt_ioctl+0xf54/0x18a0 [ 157.610019][T10993] ? tty_jobctrl_ioctl+0x29e/0x810 [ 157.610057][T10993] tty_ioctl+0x7d8/0xb80 [ 157.610146][T10993] ? __pfx_tty_ioctl+0x10/0x10 [ 157.610170][T10993] __se_sys_ioctl+0xce/0x140 [ 157.610207][T10993] __x64_sys_ioctl+0x43/0x50 [ 157.610242][T10993] x64_sys_call+0x1816/0x3000 [ 157.610368][T10993] do_syscall_64+0xd2/0x200 [ 157.610492][T10993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.610517][T10993] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.610543][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.610575][T10993] RIP: 0033:0x7f82100cefc9 [ 157.610594][T10993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.610612][T10993] RSP: 002b:00007f820eb37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.610631][T10993] RAX: ffffffffffffffda RBX: 00007f8210325fa0 RCX: 00007f82100cefc9 [ 157.610643][T10993] RDX: 0000200000000180 RSI: 0000000000004b67 RDI: 0000000000000003 [ 157.610655][T10993] RBP: 00007f820eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 157.610724][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.610739][T10993] R13: 00007f8210326038 R14: 00007f8210325fa0 R15: 00007ffe72528ea8 [ 157.610764][T10993] [ 157.873379][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2530'. [ 157.909676][T11007] SELinux: ebitmap: truncated map [ 157.915241][T11007] SELinux: failed to load policy [ 158.046348][T11017] veth2: entered allmulticast mode [ 158.090596][T11022] netlink: 'syz.6.2539': attribute type 1 has an invalid length. [ 158.141358][T11022] bond1: (slave bridge1): making interface the new active one [ 158.149321][T11022] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 158.226174][T11014] lo speed is unknown, defaulting to 1000 [ 158.300498][T11038] loop2: detected capacity change from 0 to 256 [ 158.500549][T11056] loop6: detected capacity change from 0 to 2048 [ 158.600173][T11067] FAULT_INJECTION: forcing a failure. [ 158.600173][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 158.612922][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.2.2556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.612954][T11067] Tainted: [W]=WARN [ 158.612960][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.612972][T11067] Call Trace: [ 158.612979][T11067] [ 158.612990][T11067] __dump_stack+0x1d/0x30 [ 158.613075][T11067] dump_stack_lvl+0xe8/0x140 [ 158.613102][T11067] dump_stack+0x15/0x1b [ 158.613196][T11067] should_fail_ex+0x265/0x280 [ 158.613223][T11067] should_failslab+0x8c/0xb0 [ 158.613242][T11067] __kmalloc_noprof+0xa5/0x570 [ 158.613260][T11067] ? sel_write_relabel+0x177/0x360 [ 158.613387][T11067] sel_write_relabel+0x177/0x360 [ 158.613414][T11067] selinux_transaction_write+0xc6/0x110 [ 158.613448][T11067] ? __pfx_selinux_transaction_write+0x10/0x10 [ 158.613474][T11067] vfs_write+0x269/0x960 [ 158.613551][T11067] ? __rcu_read_unlock+0x4f/0x70 [ 158.613615][T11067] ? __fget_files+0x184/0x1c0 [ 158.613677][T11067] ksys_write+0xda/0x1a0 [ 158.613693][T11067] __x64_sys_write+0x40/0x50 [ 158.613710][T11067] x64_sys_call+0x2802/0x3000 [ 158.613736][T11067] do_syscall_64+0xd2/0x200 [ 158.613829][T11067] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.613878][T11067] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.613907][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.613926][T11067] RIP: 0033:0x7f30266cefc9 [ 158.613939][T11067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.613966][T11067] RSP: 002b:00007f302512f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.613982][T11067] RAX: ffffffffffffffda RBX: 00007f3026925fa0 RCX: 00007f30266cefc9 [ 158.613994][T11067] RDX: 0000000000000056 RSI: 0000200000001a80 RDI: 0000000000000003 [ 158.614004][T11067] RBP: 00007f302512f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.614015][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.614059][T11067] R13: 00007f3026926038 R14: 00007f3026925fa0 R15: 00007ffcf5a2e258 [ 158.614076][T11067] [ 159.328277][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2569'. [ 159.341672][T11108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11108 comm=syz.0.2568 [ 159.559598][T11125] loop6: detected capacity change from 0 to 128 [ 159.609167][T11123] lo speed is unknown, defaulting to 1000 [ 159.625828][T11125] msdos: Unknown parameter '0x00007f72ba66e00000000000000000000003' [ 159.769180][T11151] loop6: detected capacity change from 0 to 512 [ 159.838212][T11151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.943175][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.988126][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 160.018937][T11167] loop6: detected capacity change from 0 to 128 [ 160.039352][T11167] netlink: 'syz.6.2592': attribute type 3 has an invalid length. [ 160.378760][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 160.491666][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2609'. [ 160.863063][T11219] loop2: detected capacity change from 0 to 128 [ 160.869934][T11219] msdos: Unknown parameter '0x00007f3024ffe00000000000000000000003' [ 160.897608][T11210] lo speed is unknown, defaulting to 1000 [ 160.977860][T11224] loop6: detected capacity change from 0 to 2048 [ 161.109012][T11244] loop6: detected capacity change from 0 to 512 [ 161.139031][T11244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.229908][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.239485][T11258] loop2: detected capacity change from 0 to 1024 [ 161.246377][T11258] EXT4-fs: Ignoring removed nobh option [ 161.255124][T11258] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.275426][T11258] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2630: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 161.307723][T11258] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2630: couldn't read orphan inode 11 (err -117) [ 161.325109][T11258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.382566][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.456161][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 161.456175][ T29] audit: type=1326 audit(1761146508.003:19756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 161.481437][T11261] lo speed is unknown, defaulting to 1000 [ 161.491323][ T29] audit: type=1326 audit(1761146508.033:19757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72bbd3f003 code=0x7ffc0000 [ 161.515298][ T29] audit: type=1326 audit(1761146508.033:19758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f72bbd3f087 code=0x7ffc0000 [ 161.538971][ T29] audit: type=1326 audit(1761146508.033:19759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72bbcf644d code=0x7ffc0000 [ 161.562515][ T29] audit: type=1326 audit(1761146508.033:19760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f72bbd73709 code=0x7ffc0000 [ 161.586492][ T29] audit: type=1326 audit(1761146508.033:19761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72bbcf64b7 code=0x7ffc0000 [ 161.610046][ T29] audit: type=1326 audit(1761146508.033:19762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 161.633715][ T29] audit: type=1326 audit(1761146508.033:19763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bbd3efc9 code=0x7ffc0000 [ 161.658929][ T29] audit: type=1326 audit(1761146508.093:19764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72bbd71885 code=0x7ffc0000 [ 161.682787][ T29] audit: type=1326 audit(1761146508.093:19765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11260 comm="syz.6.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72bbd35e67 code=0x7ffc0000 [ 161.712292][T11277] netlink: 12 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 161.792921][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2644'. [ 162.029683][T11316] siw: device registration error -23 [ 162.080327][T11323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 162.130581][T11308] lo speed is unknown, defaulting to 1000 [ 162.247182][T11323] lo speed is unknown, defaulting to 1000 [ 162.262016][T11333] loop2: detected capacity change from 0 to 512 [ 162.293147][T11333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.322051][T11328] netlink: 12 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 162.386574][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.575663][T11392] loop2: detected capacity change from 0 to 256 [ 163.590735][T11392] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.663625][T11392] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 163.672295][T11392] FAT-fs (loop2): Filesystem has been set read-only [ 163.955088][T11438] loop2: detected capacity change from 0 to 512 [ 163.967005][T11438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.025832][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.067991][T11450] FAULT_INJECTION: forcing a failure. [ 164.067991][T11450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.081361][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.2.2703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.081477][T11450] Tainted: [W]=WARN [ 164.081485][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.081501][T11450] Call Trace: [ 164.081557][T11450] [ 164.081565][T11450] __dump_stack+0x1d/0x30 [ 164.081602][T11450] dump_stack_lvl+0xe8/0x140 [ 164.081739][T11450] dump_stack+0x15/0x1b [ 164.081835][T11450] should_fail_ex+0x265/0x280 [ 164.081869][T11450] should_fail+0xb/0x20 [ 164.081946][T11450] should_fail_usercopy+0x1a/0x20 [ 164.081985][T11450] _copy_to_user+0x20/0xa0 [ 164.082013][T11450] simple_read_from_buffer+0xb5/0x130 [ 164.082111][T11450] proc_fail_nth_read+0x10e/0x150 [ 164.082138][T11450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.082175][T11450] vfs_read+0x1a8/0x770 [ 164.082213][T11450] ? __rcu_read_unlock+0x4f/0x70 [ 164.082256][T11450] ? __fget_files+0x184/0x1c0 [ 164.082317][T11450] ? finish_task_switch+0xad/0x2b0 [ 164.082418][T11450] ksys_read+0xda/0x1a0 [ 164.082436][T11450] __x64_sys_read+0x40/0x50 [ 164.082494][T11450] x64_sys_call+0x27c0/0x3000 [ 164.082533][T11450] do_syscall_64+0xd2/0x200 [ 164.082572][T11450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.082598][T11450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.082643][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.082670][T11450] RIP: 0033:0x7f30266cd9dc [ 164.082688][T11450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.082778][T11450] RSP: 002b:00007f302512f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.082823][T11450] RAX: ffffffffffffffda RBX: 00007f3026925fa0 RCX: 00007f30266cd9dc [ 164.082836][T11450] RDX: 000000000000000f RSI: 00007f302512f0a0 RDI: 0000000000000005 [ 164.082848][T11450] RBP: 00007f302512f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.082859][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.082870][T11450] R13: 00007f3026926038 R14: 00007f3026925fa0 R15: 00007ffcf5a2e258 [ 164.082930][T11450] [ 164.114596][T11452] bond1: option tlb_dynamic_lb: invalid value (253) [ 164.304050][T11452] bond1 (unregistering): Released all slaves [ 164.327010][T11460] loop2: detected capacity change from 0 to 2048 [ 165.328061][T11543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=11543 comm=syz.1.2741 [ 165.360438][T11545] loop2: detected capacity change from 0 to 1024 [ 165.376301][T11545] EXT4-fs: Ignoring removed oldalloc option [ 165.382466][T11545] EXT4-fs: Ignoring removed bh option [ 165.385096][T11537] lo speed is unknown, defaulting to 1000 [ 165.402329][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2743'. [ 165.466861][T11553] 9pnet_fd: Insufficient options for proto=fd [ 165.476173][T11553] netlink: 'syz.6.2745': attribute type 13 has an invalid length. [ 165.498701][T11545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.511800][T11553] gretap0: refused to change device tx_queue_len [ 165.515574][T11545] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.519217][T11553] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.612976][T11563] loop6: detected capacity change from 0 to 2048 [ 165.702407][T11574] pimreg: entered allmulticast mode [ 165.714232][T11574] pimreg: left allmulticast mode [ 165.753735][T11556] lo speed is unknown, defaulting to 1000 [ 165.764672][T11577] x_tables: duplicate underflow at hook 1 [ 165.997441][T11587] lo speed is unknown, defaulting to 1000 [ 166.149731][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'. [ 166.158849][T11595] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.167552][T11595] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2761'. [ 166.176685][T11595] 0ªX¹¦À: renamed from caif0 [ 166.183346][T11595] 0ªX¹¦À: entered allmulticast mode [ 166.188768][T11595] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 166.390075][T11615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 166.396736][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.404308][T11615] vhci_hcd vhci_hcd.0: Device attached [ 166.422616][T11616] vhci_hcd: connection closed [ 166.422826][ T1739] vhci_hcd: stop threads [ 166.432065][ T1739] vhci_hcd: release socket [ 166.436541][ T1739] vhci_hcd: disconnect device [ 166.486728][T11621] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 166.486728][T11621] program syz.0.2771 not setting count and/or reply_len properly [ 166.506819][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2771'. [ 166.607511][ T29] kauditd_printk_skb: 1313 callbacks suppressed [ 166.607529][ T29] audit: type=1326 audit(1761146513.153:21076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.616784][T11625] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2773'. [ 166.638719][ T29] audit: type=1326 audit(1761146513.153:21077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.670345][ T29] audit: type=1326 audit(1761146513.153:21078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.694275][ T29] audit: type=1326 audit(1761146513.153:21079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.718053][ T29] audit: type=1326 audit(1761146513.153:21080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.741762][ T29] audit: type=1326 audit(1761146513.153:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.765300][ T29] audit: type=1326 audit(1761146513.153:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.788928][ T29] audit: type=1326 audit(1761146513.153:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.812510][ T29] audit: type=1326 audit(1761146513.153:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 166.836138][ T29] audit: type=1326 audit(1761146513.153:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.0.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a63220ee7 code=0x7ffc0000 [ 166.870885][T11631] loop2: detected capacity change from 0 to 1024 [ 166.878862][T11631] EXT4-fs: Ignoring removed nobh option [ 166.885274][T11631] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.899215][T11631] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2775: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 166.918026][T11631] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2775: couldn't read orphan inode 11 (err -117) [ 166.918490][T11631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.963495][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.144417][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2789'. [ 167.210158][T11675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 167.216835][T11675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.224288][T11675] vhci_hcd vhci_hcd.0: Device attached [ 167.242737][T11677] vhci_hcd: connection closed [ 167.242956][ T31] vhci_hcd: stop threads [ 167.252222][ T31] vhci_hcd: release socket [ 167.256788][ T31] vhci_hcd: disconnect device [ 167.300457][T11681] 9pnet_fd: Insufficient options for proto=fd [ 167.328365][T11681] SELinux: policydb string SE LiSÈn does not match my string SE Linux [ 167.336768][T11681] SELinux: failed to load policy [ 167.602840][T11711] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 167.602840][T11711] program syz.2.2807 not setting count and/or reply_len properly [ 167.624428][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 167.789695][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 167.969158][T11721] lo speed is unknown, defaulting to 1000 [ 167.986579][ T1070] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.037751][ T1070] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.076562][ T1070] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.091449][T11721] chnl_net:caif_netlink_parms(): no params data found [ 168.139219][ T1070] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.184670][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.192246][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.206063][T11721] bridge_slave_0: entered allmulticast mode [ 168.212754][T11721] bridge_slave_0: entered promiscuous mode [ 168.220506][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.227805][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.235106][T11721] bridge_slave_1: entered allmulticast mode [ 168.258821][T11721] bridge_slave_1: entered promiscuous mode [ 168.286112][T11768] bridge0: entered promiscuous mode [ 168.291368][T11768] macsec1: entered promiscuous mode [ 168.301003][T11768] bridge0: port 3(macsec1) entered blocking state [ 168.307735][T11768] bridge0: port 3(macsec1) entered disabled state [ 168.316177][T11768] macsec1: entered allmulticast mode [ 168.321647][T11768] bridge0: entered allmulticast mode [ 168.327495][T11768] macsec1: left allmulticast mode [ 168.332566][T11768] bridge0: left allmulticast mode [ 168.338357][T11768] bridge0: left promiscuous mode [ 168.366509][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.378034][T11768] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 168.386867][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.456693][T11721] team0: Port device team_slave_0 added [ 168.463238][T11789] loop6: detected capacity change from 0 to 1024 [ 168.468829][T11721] team0: Port device team_slave_1 added [ 168.477235][ T1070] bridge_slave_1: left allmulticast mode [ 168.480219][T11789] EXT4-fs: Ignoring removed nobh option [ 168.482966][ T1070] bridge_slave_1: left promiscuous mode [ 168.483078][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.491237][T11789] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.522750][ T1070] bridge_slave_0: left allmulticast mode [ 168.528541][ T1070] bridge_slave_0: left promiscuous mode [ 168.534386][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.542342][T11789] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2837: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 168.561367][T11789] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2837: couldn't read orphan inode 11 (err -117) [ 168.574405][T11789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.628406][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.787116][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.797565][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.807145][ T1070] bond0 (unregistering): Released all slaves [ 168.822630][ T36] syû: Port: 1 Link DOWN [ 168.847223][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.854197][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.880212][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.897455][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.904457][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.930539][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.941490][ T1070] tipc: Left network mode [ 168.979996][T11721] hsr_slave_0: entered promiscuous mode [ 168.991012][T11721] hsr_slave_1: entered promiscuous mode [ 168.997177][T11721] debugfs: 'hsr0' already exists in 'hsr' [ 169.002927][T11721] Cannot create hsr debugfs directory [ 169.039400][ T1070] hsr_slave_0: left promiscuous mode [ 169.046027][ T1070] hsr_slave_1: left promiscuous mode [ 169.054395][ T1070] veth1_macvtap: left promiscuous mode [ 169.060069][ T1070] veth0_macvtap: left promiscuous mode [ 169.066022][ T1070] veth1_vlan: left promiscuous mode [ 169.071535][ T1070] veth0_vlan: left promiscuous mode [ 169.166560][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 169.178032][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 169.185830][ T7986] smc: removing ib device syz! [ 169.195604][ T1739] smc: removing ib device syû [ 169.387281][T11859] loop6: detected capacity change from 0 to 1024 [ 169.408836][T11859] EXT4-fs: Ignoring removed nobh option [ 169.438260][T11859] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.570023][T11859] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.2866: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.594931][T11859] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2866: couldn't read orphan inode 11 (err -117) [ 169.610715][ T1070] IPVS: stop unused estimator thread 0... [ 169.617742][T11859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.650683][T11868] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2870'. [ 169.662419][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.812258][T11721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.845391][T11876] loop6: detected capacity change from 0 to 512 [ 169.856575][T11721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.869250][T11721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.882889][T11876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.955931][T11721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.132462][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.223569][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.269823][T11721] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.289725][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.296879][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.352169][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.359355][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.502182][T11721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.512659][T11721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.628995][T11721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.786786][T11721] veth0_vlan: entered promiscuous mode [ 170.799858][T11721] veth1_vlan: entered promiscuous mode [ 170.835634][T11721] veth0_macvtap: entered promiscuous mode [ 170.842930][T11721] veth1_macvtap: entered promiscuous mode [ 170.873230][T11721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.888013][T11721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.902385][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.919524][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.932081][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.944305][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.038992][T11954] lo speed is unknown, defaulting to 1000 [ 171.148560][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.166179][T11966] FAULT_INJECTION: forcing a failure. [ 171.166179][T11966] name failslab, interval 1, probability 0, space 0, times 0 [ 171.167465][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.178977][T11966] CPU: 0 UID: 0 PID: 11966 Comm: syz.1.2897 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.179096][T11966] Tainted: [W]=WARN [ 171.179105][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.179122][T11966] Call Trace: [ 171.179131][T11966] [ 171.179166][T11966] __dump_stack+0x1d/0x30 [ 171.179209][T11966] dump_stack_lvl+0xe8/0x140 [ 171.179248][T11966] dump_stack+0x15/0x1b [ 171.179354][T11966] should_fail_ex+0x265/0x280 [ 171.179416][T11966] should_failslab+0x8c/0xb0 [ 171.179445][T11966] kmem_cache_alloc_noprof+0x50/0x480 [ 171.179475][T11966] ? skb_clone+0x151/0x1f0 [ 171.179516][T11966] skb_clone+0x151/0x1f0 [ 171.179565][T11966] __netlink_deliver_tap+0x2c9/0x500 [ 171.179630][T11966] netlink_unicast+0x66b/0x690 [ 171.179690][T11966] netlink_sendmsg+0x58b/0x6b0 [ 171.179770][T11966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.179884][T11966] __sock_sendmsg+0x145/0x180 [ 171.179939][T11966] ____sys_sendmsg+0x31e/0x4e0 [ 171.179982][T11966] ___sys_sendmsg+0x17b/0x1d0 [ 171.180038][T11966] __x64_sys_sendmsg+0xd4/0x160 [ 171.180157][T11966] x64_sys_call+0x191e/0x3000 [ 171.180196][T11966] do_syscall_64+0xd2/0x200 [ 171.180289][T11966] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.180317][T11966] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.180390][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.180517][T11966] RIP: 0033:0x7f5ebaadefc9 [ 171.180545][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.180584][T11966] RSP: 002b:00007f5eb953f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.180609][T11966] RAX: ffffffffffffffda RBX: 00007f5ebad35fa0 RCX: 00007f5ebaadefc9 [ 171.180626][T11966] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 171.180643][T11966] RBP: 00007f5eb953f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.180658][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.180674][T11966] R13: 00007f5ebad36038 R14: 00007f5ebad35fa0 R15: 00007ffec7d80b58 [ 171.180729][T11966] [ 171.406377][T11974] tipc: New replicast peer: 255.255.255.83 [ 171.412397][T11974] tipc: Enabled bearer , priority 10 [ 171.419903][T11975] tipc: Enabling of bearer rejected, already enabled [ 171.605738][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2912'. [ 171.664952][ T29] kauditd_printk_skb: 837 callbacks suppressed [ 171.664985][ T29] audit: type=1326 audit(1761146518.183:21923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.694798][ T29] audit: type=1326 audit(1761146518.183:21924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.718477][ T29] audit: type=1326 audit(1761146518.183:21925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.742168][ T29] audit: type=1326 audit(1761146518.183:21926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.765952][ T29] audit: type=1326 audit(1761146518.183:21927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.789556][ T29] audit: type=1326 audit(1761146518.183:21928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.813092][ T29] audit: type=1326 audit(1761146518.183:21929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.836882][ T29] audit: type=1326 audit(1761146518.183:21930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.860637][ T29] audit: type=1326 audit(1761146518.183:21931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.884350][ T29] audit: type=1326 audit(1761146518.183:21932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6a6321efc9 code=0x7ffc0000 [ 171.924702][T12013] lo speed is unknown, defaulting to 1000 [ 171.994249][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2918'. [ 172.174265][T12021] lo speed is unknown, defaulting to 1000 [ 172.735838][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2929'. [ 172.904752][T12049] bridge0: entered promiscuous mode [ 172.910131][T12049] macsec1: entered promiscuous mode [ 172.916697][T12049] bridge0: port 3(macsec1) entered blocking state [ 172.923249][T12049] bridge0: port 3(macsec1) entered disabled state [ 172.930422][T12049] macsec1: entered allmulticast mode [ 172.935792][T12049] bridge0: entered allmulticast mode [ 172.943179][T12049] macsec1: left allmulticast mode [ 172.948308][T12049] bridge0: left allmulticast mode [ 172.954132][T12049] bridge0: left promiscuous mode [ 172.986453][T12050] lo speed is unknown, defaulting to 1000 [ 173.075770][T12056] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2932'. [ 173.400677][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'. [ 173.625430][T12087] lo speed is unknown, defaulting to 1000 [ 173.882686][T12113] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 173.967803][T12112] bond1: (slave erspan0): Device is not bonding slave [ 173.974628][T12112] bond1: option active_slave: invalid value (erspan0) [ 173.983174][T12112] bond1 (unregistering): Released all slaves [ 174.017215][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 174.055182][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2958'. [ 174.263725][T12145] lo speed is unknown, defaulting to 1000 [ 174.279157][T12149] loop6: detected capacity change from 0 to 512 [ 174.298236][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 174.379356][T12149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.426971][ T6964] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.719179][T12194] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 175.105400][T12227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3000'. [ 175.227003][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2999'. [ 175.335653][T12231] lo speed is unknown, defaulting to 1000 [ 175.741111][T12262] netlink: 'syz.0.3013': attribute type 13 has an invalid length. [ 175.824157][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.831450][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.029270][ T31] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.038217][ T31] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.058648][ T31] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.080884][ T31] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.559566][T12292] ================================================================== [ 176.567703][T12292] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 176.574794][T12292] [ 176.577130][T12292] write to 0xffff888237c1b2a0 of 8 bytes by interrupt on cpu 0: [ 176.584789][T12292] hrtimer_interrupt+0x193/0x460 [ 176.589756][T12292] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 176.595686][T12292] sysvec_apic_timer_interrupt+0x6f/0x80 [ 176.601358][T12292] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.607374][T12292] finish_task_switch+0xb6/0x2b0 [ 176.612366][T12292] __schedule+0x6b9/0xb30 [ 176.616724][T12292] schedule_idle+0x1e/0x40 [ 176.621164][T12292] do_idle+0x203/0x240 [ 176.625355][T12292] cpu_startup_entry+0x25/0x30 [ 176.630142][T12292] rest_init+0xee/0xf0 [ 176.634253][T12292] start_kernel+0x4dc/0x510 [ 176.638792][T12292] x86_64_start_reservations+0x24/0x30 [ 176.644286][T12292] x86_64_start_kernel+0xfc/0x100 [ 176.649342][T12292] common_startup_64+0x13e/0x147 [ 176.654320][T12292] [ 176.656663][T12292] read to 0xffff888237c1b2a0 of 8 bytes by task 12292 on cpu 1: [ 176.664309][T12292] print_cpu+0x2ea/0x660 [ 176.668584][T12292] timer_list_show+0x107/0x170 [ 176.673467][T12292] seq_read_iter+0x636/0x950 [ 176.678080][T12292] proc_reg_read_iter+0x110/0x180 [ 176.683131][T12292] copy_splice_read+0x442/0x660 [ 176.688005][T12292] splice_direct_to_actor+0x26f/0x680 [ 176.693408][T12292] do_splice_direct+0xda/0x150 [ 176.698195][T12292] do_sendfile+0x380/0x650 [ 176.702628][T12292] __x64_sys_sendfile64+0x105/0x150 [ 176.707843][T12292] x64_sys_call+0x2bb4/0x3000 [ 176.712556][T12292] do_syscall_64+0xd2/0x200 [ 176.717167][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.723079][T12292] [ 176.725416][T12292] value changed: 0x000000291a4ae744 -> 0x000000291a4ba8ea [ 176.732616][T12292] [ 176.734950][T12292] Reported by Kernel Concurrency Sanitizer on: [ 176.741120][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.4.3018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.752518][T12292] Tainted: [W]=WARN [ 176.756333][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.766399][T12292] ================================================================== [ 177.121580][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 177.121651][ T29] audit: type=1400 audit(1761146523.663:22608): avc: denied { unlink } for pid=6964 comm="syz-executor" name="file0" dev="tmpfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1