last executing test programs: 1m19.837824049s ago: executing program 3 (id=76): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000058f2e0fa000000000e0035ba"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m19.050078282s ago: executing program 3 (id=84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000400)=0xc, 0x8) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x490c9c, &(0x7f0000000240)={[{@dax}, {@data_err_ignore}, {@nodiscard}, {@nodioread_nolock}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="0000811600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000010b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x108000) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m18.838627629s ago: executing program 3 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r7 = syz_open_pts(r4, 0x0) dup3(r7, r4, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) 1m18.367727077s ago: executing program 3 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@enum64={0x10, 0x9, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0xe}, {0xa, 0xaf, 0xffff}, {0x5, 0x86d4, 0x3}, {0xe, 0x1, 0xfffffffe}, {0x7, 0xfffffff7, 0x9}, {0x5, 0x7fffffff, 0x1}, {0x8, 0x3, 0x6}, {0xd, 0x8, 0x2}, {0x2, 0x6, 0x5}]}]}, {0x0, [0x6f, 0x30, 0x61, 0x30]}}, &(0x7f0000000380)=""/229, 0x96, 0xe5, 0x0, 0xe, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', r2, r3, 0x5, 0x5, 0x1}, 0x50) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getpeername(r4, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m18.167896403s ago: executing program 3 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07", 0x92, 0x880, 0x0, 0x0) 1m17.735888528s ago: executing program 3 (id=115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000240)={0xa, 0x4c20, 0x0, @empty}, 0x1c) 1m17.669491533s ago: executing program 32 (id=115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000240)={0xa, 0x4c20, 0x0, @empty}, 0x1c) 1m3.595364825s ago: executing program 2 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_register(r2, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, 'D\xb0\a\x00\xb7\x1a\xfem\x9d\xf4^\xde\"P\xa1\\xAK-\x00\x00', 0x3a, './file0'}, 0x3f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e22, 0x10000, @mcast1}}}, 0xa0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r5}, 0x18) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0010520000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000850000008200000018190000", @ANYRES32=r4, @ANYBLOB="00000000000000004d9b0400fcffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xde, &(0x7f0000000880)=""/222, 0x41100, 0x51, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x64, 0x10, &(0x7f00000005c0)={0x1, 0xc, 0x4, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000600)=[r4, r1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x2, 0x1}, {0x5, 0x2, 0xb, 0x2}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0xd, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) sysinfo(&(0x7f0000000680)=""/249) r9 = syz_io_uring_setup(0x324f, &(0x7f0000000080)={0x0, 0x4, 0x1000, 0xfffffffe}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES2(r9, 0xd, &(0x7f0000000080)={0x52, 0x1, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 1m3.515172491s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = socket$inet(0x2, 0x6, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000200)="28d47eed02fde203fa87ac3bc325b9fa03f9684493afa4ed5442ccd8bf501211879c2606ecbd4a5690b0954da09531b620f2a530768737a07f62efa2add586983064a349ba8761e517b87c", &(0x7f0000000000)=@tcp=r1, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000804000000000000d0", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x202400, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 1m3.390707281s ago: executing program 2 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffff554ec5a79aaadf5c35cac4a8eecffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xff98) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xc7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r0}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41000a, &(0x7f0000000480)={[{@nolazytime}, {@nodioread_nolock}, {@bsdgroups}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@dioread_lock}]}, 0x9, 0x625, &(0x7f0000001300)="$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") r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="fffff554ec5a79aaadf5c35cac4a8eecffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xff98) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=r3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xc7, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41000a, &(0x7f0000000480)={[{@nolazytime}, {@nodioread_nolock}, {@bsdgroups}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@dioread_lock}]}, 0x9, 0x625, &(0x7f0000001300)="$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") (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(r7) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) 1m3.270644521s ago: executing program 2 (id=312): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x4085, 0x9, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}}}}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x2a) r6 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x4000000) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 1m3.149426351s ago: executing program 2 (id=314): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001480)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001380)='bridge_slave_0\x00', 0x10) readv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0xf052, 0x400, 0x7ffd, 0x32c, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x2000ffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 59.385791823s ago: executing program 2 (id=394): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe}}, {@jqfmt_vfsold}, {@user_xattr}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) ptrace(0x8, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 59.366530035s ago: executing program 33 (id=394): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe}}, {@jqfmt_vfsold}, {@user_xattr}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) ptrace(0x8, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.189846974s ago: executing program 0 (id=1345): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x2c060000) unshare(0x2c020400) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 2.023237627s ago: executing program 6 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.998102529s ago: executing program 6 (id=1350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.974356891s ago: executing program 6 (id=1351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='contention_end\x00', r4, 0x0, 0x100020000000004}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.36666326s ago: executing program 4 (id=1359): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001480)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000001380)='bridge_slave_0\x00', 0x10) readv(0xffffffffffffffff, &(0x7f0000001780)=[{0x0}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0xf052, 0x400, 0x7ffd, 0x32c, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x2000ffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1.340202023s ago: executing program 0 (id=1361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.310723505s ago: executing program 0 (id=1362): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="b0", 0x1, 0xc000000000, 0x80000000}], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x4030582a, &(0x7f00000001c0)={0x1, 0x8, 0x6b, 0x401, 0x6b, 0x7}) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="18200000bcff1d120000000000000000186100000d000000008000000600ffff00000000040000009500"/56], &(0x7f00000006c0)='syzkaller\x00', 0x34, 0x2a, &(0x7f0000001100)=""/42, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, r7, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xd, 0x23, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000a80)=[{0x3, 0x3, 0xa, 0x16}, {0x5, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x3}, {0x2, 0x3, 0x10}, {0x4, 0x2, 0x5, 0x4}, {0x1, 0x9, 0xe}, {0x3, 0x5, 0x3, 0x2}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000500)={0x11, 0xf5, r8, 0x1, 0x3, 0x6, @multicast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x488c4) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902000000ffff07000000df25"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getcwd(&(0x7f0000000080)=""/4096, 0x1000) 1.180083315s ago: executing program 5 (id=1367): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@journal_checksum}, {@grpquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000340)='./file1\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x2) umount2(&(0x7f0000000500)='./file1/file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) 1.063081714s ago: executing program 6 (id=1368): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 900.943868ms ago: executing program 4 (id=1369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x404c484) 884.432279ms ago: executing program 4 (id=1370): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r5, 0x0, 0x800000000000000}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x435) set_mempolicy(0x3, &(0x7f0000000640)=0x6, 0x80000000) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000309078ac1e0001ac1414aa0c78fdfa0300450000000000000000000000ac1e0001e0000002000000000000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) 766.039148ms ago: executing program 6 (id=1371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 696.596194ms ago: executing program 5 (id=1373): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4) close(r0) 570.614184ms ago: executing program 5 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, 0x0, 0x8010) 541.669446ms ago: executing program 4 (id=1377): getcwd(&(0x7f0000000080)=""/4096, 0x1000) 500.30763ms ago: executing program 5 (id=1378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 482.666942ms ago: executing program 4 (id=1380): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 431.272945ms ago: executing program 5 (id=1381): openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x800000000000000}, 0x18) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 413.574777ms ago: executing program 4 (id=1383): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x24}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffff7b3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7e3}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xbc}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f00000004c0)='GPL\x00'}, 0x94) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xa8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6deb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r7, 0x9, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$UHID_CREATE2(r9, 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) 214.308293ms ago: executing program 0 (id=1385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 214.049653ms ago: executing program 1 (id=1386): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4) close(r0) 202.840324ms ago: executing program 6 (id=1387): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@journal_checksum}, {@grpquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000340)='./file1\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x2) umount2(&(0x7f0000000500)='./file1/file0\x00', 0x0) close(0x3) 144.981848ms ago: executing program 1 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) 134.677149ms ago: executing program 5 (id=1389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8e9bd1bcfa9a44cc18c7c11b454d8060"}]}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_destroy(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d0001"], 0xcc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x560f, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES16=r3], 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) 96.411142ms ago: executing program 0 (id=1390): getcwd(&(0x7f0000000080)=""/4096, 0x1000) 96.058693ms ago: executing program 1 (id=1391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000080000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 75.385824ms ago: executing program 0 (id=1392): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x23500d8, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) epoll_create1(0x0) pipe2(&(0x7f0000000040), 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001540)={0x3, 0x0, 0x0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000001180)=""/237, 0xed}, {&(0x7f0000001280)=""/39, 0x27}], &(0x7f0000001500)=[0x0, 0x4, 0x3]}, 0x20) 32.197717ms ago: executing program 1 (id=1393): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 28.132048ms ago: executing program 1 (id=1394): socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3bb}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='contention_end\x00', r5, 0x0, 0x100020000000004}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) kernel console output (not intermixed with test programs): +0x57/0x320 [ 74.453309][ T5668] ? alloc_vmap_area+0x231/0xe50 [ 74.453366][ T5668] alloc_vmap_area+0x231/0xe50 [ 74.453395][ T5668] ? should_failslab+0x8c/0xb0 [ 74.453417][ T5668] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 74.453603][ T5668] __get_vm_area_node+0x173/0x1d0 [ 74.453639][ T5668] __vmalloc_node_range_noprof+0x273/0xe00 [ 74.453734][ T5668] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.453770][ T5668] ? avc_has_perm_noaudit+0x1b1/0x200 [ 74.453798][ T5668] ? cred_has_capability+0x210/0x280 [ 74.453903][ T5668] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.453933][ T5668] __vmalloc_noprof+0x83/0xc0 [ 74.453988][ T5668] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.454013][ T5668] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.454038][ T5668] ? bpf_prog_alloc+0x2a/0x150 [ 74.454061][ T5668] bpf_prog_alloc+0x3c/0x150 [ 74.454115][ T5668] bpf_prog_load+0x514/0x1070 [ 74.454154][ T5668] ? security_bpf+0x2b/0x90 [ 74.454241][ T5668] __sys_bpf+0x462/0x7b0 [ 74.454279][ T5668] __x64_sys_bpf+0x41/0x50 [ 74.454305][ T5668] x64_sys_call+0x2aea/0x2ff0 [ 74.454392][ T5668] do_syscall_64+0xd2/0x200 [ 74.454498][ T5668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.454569][ T5668] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.454592][ T5668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.454647][ T5668] RIP: 0033:0x7f54bda5ebe9 [ 74.454665][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.454695][ T5668] RSP: 002b:00007f54bc4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.454717][ T5668] RAX: ffffffffffffffda RBX: 00007f54bdc85fa0 RCX: 00007f54bda5ebe9 [ 74.454732][ T5668] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 74.454747][ T5668] RBP: 00007f54bc4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 74.454761][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.454775][ T5668] R13: 00007f54bdc86038 R14: 00007f54bdc85fa0 R15: 00007fff88e47ac8 [ 74.454828][ T5668] [ 74.454843][ T5668] syz.1.617: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 74.565336][ T5676] FAULT_INJECTION: forcing a failure. [ 74.565336][ T5676] name failslab, interval 1, probability 0, space 0, times 0 [ 74.569727][ T5668] ,cpuset=/,mems_allowed=0 [ 74.569762][ T5668] CPU: 0 UID: 0 PID: 5668 Comm: syz.1.617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.569792][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.569805][ T5668] Call Trace: [ 74.569812][ T5668] [ 74.569820][ T5668] __dump_stack+0x1d/0x30 [ 74.569922][ T5668] dump_stack_lvl+0xe8/0x140 [ 74.569942][ T5668] dump_stack+0x15/0x1b [ 74.569959][ T5668] warn_alloc+0x12b/0x1a0 [ 74.570055][ T5668] __vmalloc_node_range_noprof+0x297/0xe00 [ 74.570090][ T5668] ? avc_has_perm_noaudit+0x1b1/0x200 [ 74.570153][ T5668] ? cred_has_capability+0x210/0x280 [ 74.570201][ T5668] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.570228][ T5668] __vmalloc_noprof+0x83/0xc0 [ 74.570336][ T5668] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.570363][ T5668] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 74.570388][ T5668] ? bpf_prog_alloc+0x2a/0x150 [ 74.570451][ T5668] bpf_prog_alloc+0x3c/0x150 [ 74.570477][ T5668] bpf_prog_load+0x514/0x1070 [ 74.570522][ T5668] ? security_bpf+0x2b/0x90 [ 74.570553][ T5668] __sys_bpf+0x462/0x7b0 [ 74.570602][ T5668] __x64_sys_bpf+0x41/0x50 [ 74.570626][ T5668] x64_sys_call+0x2aea/0x2ff0 [ 74.570647][ T5668] do_syscall_64+0xd2/0x200 [ 74.570673][ T5668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.570783][ T5668] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.570859][ T5668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.570881][ T5668] RIP: 0033:0x7f54bda5ebe9 [ 74.570897][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.570989][ T5668] RSP: 002b:00007f54bc4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.571088][ T5668] RAX: ffffffffffffffda RBX: 00007f54bdc85fa0 RCX: 00007f54bda5ebe9 [ 74.571123][ T5668] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 74.571136][ T5668] RBP: 00007f54bc4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 74.571149][ T5668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.571161][ T5668] R13: 00007f54bdc86038 R14: 00007f54bdc85fa0 R15: 00007fff88e47ac8 [ 74.571208][ T5668] [ 74.571214][ T5668] Mem-Info: [ 74.575376][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz.0.619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.575418][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.575483][ T5676] Call Trace: [ 74.575489][ T5676] [ 74.575496][ T5676] __dump_stack+0x1d/0x30 [ 74.575515][ T5676] dump_stack_lvl+0xe8/0x140 [ 74.575535][ T5676] dump_stack+0x15/0x1b [ 74.575552][ T5676] should_fail_ex+0x265/0x280 [ 74.575573][ T5676] should_failslab+0x8c/0xb0 [ 74.575659][ T5676] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 74.575688][ T5676] ? p9_client_create+0x59/0xbc0 [ 74.575710][ T5676] ? p9_client_create+0x207/0xbc0 [ 74.575730][ T5676] ? should_failslab+0x8c/0xb0 [ 74.575828][ T5676] kstrdup+0x3e/0xd0 [ 74.575852][ T5676] p9_client_create+0x207/0xbc0 [ 74.575893][ T5676] v9fs_session_init+0xf7/0xde0 [ 74.575969][ T5676] ? avc_has_perm_noaudit+0x1b1/0x200 [ 74.575993][ T5676] ? should_fail_ex+0xdb/0x280 [ 74.576070][ T5676] ? v9fs_mount+0x51/0x5c0 [ 74.576095][ T5676] ? should_failslab+0x8c/0xb0 [ 74.576118][ T5676] ? __kmalloc_cache_noprof+0x189/0x320 [ 74.576158][ T5676] v9fs_mount+0x67/0x5c0 [ 74.576182][ T5676] ? selinux_capable+0x31/0x40 [ 74.576209][ T5676] ? __pfx_v9fs_mount+0x10/0x10 [ 74.576310][ T5676] legacy_get_tree+0x78/0xd0 [ 74.576332][ T5676] vfs_get_tree+0x57/0x1d0 [ 74.576355][ T5676] do_new_mount+0x207/0x5e0 [ 74.576377][ T5676] ? security_capable+0x83/0x90 [ 74.576402][ T5676] path_mount+0x4a4/0xb20 [ 74.576441][ T5676] ? user_path_at+0x109/0x130 [ 74.576471][ T5676] __se_sys_mount+0x28f/0x2e0 [ 74.576493][ T5676] ? fput+0x8f/0xc0 [ 74.576523][ T5676] __x64_sys_mount+0x67/0x80 [ 74.576601][ T5676] x64_sys_call+0x2b4d/0x2ff0 [ 74.576622][ T5676] do_syscall_64+0xd2/0x200 [ 74.576661][ T5676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.576685][ T5676] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.576761][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.576877][ T5676] RIP: 0033:0x7f43ea61ebe9 [ 74.576892][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.576909][ T5676] RSP: 002b:00007f43e9087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.576928][ T5676] RAX: ffffffffffffffda RBX: 00007f43ea845fa0 RCX: 00007f43ea61ebe9 [ 74.576948][ T5676] RDX: 0000200000000200 RSI: 0000200000000580 RDI: 0000000000000000 [ 74.577020][ T5676] RBP: 00007f43e9087090 R08: 0000200000000240 R09: 0000000000000000 [ 74.577032][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.577044][ T5676] R13: 00007f43ea846038 R14: 00007f43ea845fa0 R15: 00007ffd3fb75818 [ 74.577064][ T5676] [ 74.630734][ T5662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.635532][ T5668] active_anon:8103 inactive_anon:5 isolated_anon:0 [ 74.635532][ T5668] active_file:12574 inactive_file:1637 isolated_file:0 [ 74.635532][ T5668] unevictable:18241 dirty:133 writeback:0 [ 74.635532][ T5668] slab_reclaimable:3377 slab_unreclaimable:16070 [ 74.635532][ T5668] mapped:39827 shmem:418 pagetables:1519 [ 74.635532][ T5668] sec_pagetables:0 bounce:0 [ 74.635532][ T5668] kernel_misc_reclaimable:0 [ 74.635532][ T5668] free:1799783 free_pcp:81842 free_cma:0 [ 74.641467][ T5662] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.659823][ T5668] Node 0 active_anon:32412kB inactive_anon:20kB active_file:50296kB inactive_file:6548kB unevictable:72964kB isolated(anon):0kB isolated(file):0kB mapped:159308kB dirty:532kB writeback:0kB shmem:1672kB kernel_stack:3776kB pagetables:6076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 74.693286][ T5683] FAULT_INJECTION: forcing a failure. [ 74.693286][ T5683] name failslab, interval 1, probability 0, space 0, times 0 [ 74.700508][ T5668] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.708590][ T5683] CPU: 1 UID: 0 PID: 5683 Comm: syz.5.620 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.708619][ T5683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.708759][ T5683] Call Trace: [ 74.708767][ T5683] [ 74.708775][ T5683] __dump_stack+0x1d/0x30 [ 74.708798][ T5683] dump_stack_lvl+0xe8/0x140 [ 74.708818][ T5683] dump_stack+0x15/0x1b [ 74.708836][ T5683] should_fail_ex+0x265/0x280 [ 74.708857][ T5683] ? tcf_proto_create+0x44/0x1a0 [ 74.708924][ T5683] should_failslab+0x8c/0xb0 [ 74.708958][ T5683] __kmalloc_cache_noprof+0x4c/0x320 [ 74.709062][ T5683] tcf_proto_create+0x44/0x1a0 [ 74.709111][ T5683] tc_new_tfilter+0x95c/0x10a0 [ 74.709138][ T5683] ? __rcu_read_unlock+0x4f/0x70 [ 74.709170][ T5683] ? ns_capable+0x7d/0xb0 [ 74.709191][ T5683] ? __pfx_tc_new_tfilter+0x10/0x10 [ 74.709265][ T5683] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 74.709292][ T5683] ? avc_has_perm_noaudit+0x1b1/0x200 [ 74.709402][ T5683] netlink_rcv_skb+0x123/0x220 [ 74.709422][ T5683] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.709453][ T5683] rtnetlink_rcv+0x1c/0x30 [ 74.709491][ T5683] netlink_unicast+0x5bd/0x690 [ 74.709553][ T5683] netlink_sendmsg+0x58b/0x6b0 [ 74.709578][ T5683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.709599][ T5683] __sock_sendmsg+0x145/0x180 [ 74.709685][ T5683] ____sys_sendmsg+0x31e/0x4e0 [ 74.709718][ T5683] ___sys_sendmsg+0x17b/0x1d0 [ 74.709752][ T5683] __x64_sys_sendmsg+0xd4/0x160 [ 74.709817][ T5683] x64_sys_call+0x191e/0x2ff0 [ 74.709907][ T5683] do_syscall_64+0xd2/0x200 [ 74.709952][ T5683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.710040][ T5683] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.710080][ T5683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.710102][ T5683] RIP: 0033:0x7f09e85aebe9 [ 74.710118][ T5683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.710239][ T5683] RSP: 002b:00007f09e7017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.710259][ T5683] RAX: ffffffffffffffda RBX: 00007f09e87d5fa0 RCX: 00007f09e85aebe9 [ 74.710273][ T5683] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000007 [ 74.710286][ T5683] RBP: 00007f09e7017090 R08: 0000000000000000 R09: 0000000000000000 [ 74.710298][ T5683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.710390][ T5683] R13: 00007f09e87d6038 R14: 00007f09e87d5fa0 R15: 00007ffd3a285198 [ 74.710461][ T5683] [ 74.832867][ T5662] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm :.#: corrupted inode contents [ 74.834169][ T5668] lowmem_reserve[]: 0 2883 7862 7862 [ 74.856913][ T5662] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm :.#: mark_inode_dirty error [ 74.857146][ T5668] [ 74.871203][ T5662] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm :.#: corrupted inode contents [ 74.873483][ T5668] Node 0 DMA32 free:2949304kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952836kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 74.911736][ T5662] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm :.#: mark_inode_dirty error [ 74.912308][ T5668] lowmem_reserve[]: [ 75.003768][ T5662] siw: device registration error -23 [ 75.008174][ T5668] 0 0 4978 4978 [ 75.008208][ T5668] Node 0 Normal free:4233512kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32880kB inactive_anon:32kB active_file:50276kB inactive_file:6496kB unevictable:72980kB writepending:552kB present:5242880kB managed:5098240kB mlocked:72980kB bounce:0kB free_pcp:322216kB local_pcp:245340kB free_cma:0kB [ 75.030310][ T5662] openvswitch: netlink: Message has 6 unknown bytes. [ 75.033238][ T5668] lowmem_reserve[]: 0 0 0 0 [ 75.033276][ T5668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.762535][ T5668] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949304kB [ 75.778680][ T5668] Node 0 Normal: 670*4kB (UME) 231*8kB (UM) 190*16kB (UME) 148*32kB (UME) 300*64kB (UME) 253*128kB (UM) 166*256kB (UM) 137*512kB (UM) 62*1024kB (UM) 40*2048kB (UME) 955*4096kB (UM) = 4233616kB [ 75.798184][ T5668] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 75.807483][ T5668] 25513 total pagecache pages [ 75.812279][ T5668] 8 pages in swap cache [ 75.816583][ T5668] Free swap = 124964kB [ 75.820736][ T5668] Total swap = 124996kB [ 75.824901][ T5668] 2097051 pages RAM [ 75.828722][ T5668] 0 pages HighMem/MovableOnly [ 75.833503][ T5668] 80442 pages reserved [ 75.845345][ T4880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.073019][ T5717] netlink: 7 bytes leftover after parsing attributes in process `syz.4.627'. [ 76.099724][ T5734] loop5: detected capacity change from 0 to 128 [ 76.108417][ T5717] netlink: 7 bytes leftover after parsing attributes in process `syz.4.627'. [ 76.167517][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 76.213647][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.631'. [ 76.218203][ T5745] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 76.249509][ T5753] FAULT_INJECTION: forcing a failure. [ 76.249509][ T5753] name failslab, interval 1, probability 0, space 0, times 0 [ 76.262241][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz.1.637 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.262344][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.262356][ T5753] Call Trace: [ 76.262363][ T5753] [ 76.262370][ T5753] __dump_stack+0x1d/0x30 [ 76.262393][ T5753] dump_stack_lvl+0xe8/0x140 [ 76.262456][ T5753] dump_stack+0x15/0x1b [ 76.262522][ T5753] should_fail_ex+0x265/0x280 [ 76.262544][ T5753] ? __pfx_ip6_dst_gc+0x10/0x10 [ 76.262575][ T5753] should_failslab+0x8c/0xb0 [ 76.262604][ T5753] kmem_cache_alloc_noprof+0x50/0x310 [ 76.262657][ T5753] ? dst_alloc+0xbd/0x100 [ 76.262676][ T5753] ? __pfx_ip6_dst_gc+0x10/0x10 [ 76.262776][ T5753] dst_alloc+0xbd/0x100 [ 76.262795][ T5753] ip6_pol_route+0x6bf/0xb40 [ 76.262828][ T5753] ? ip6_pol_route+0x389/0xb40 [ 76.262860][ T5753] ip6_pol_route_input+0x42/0x60 [ 76.262912][ T5753] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 76.263015][ T5753] fib6_rule_lookup+0x32c/0x470 [ 76.263037][ T5753] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 76.263070][ T5753] ip6_route_input+0x412/0x4e0 [ 76.263163][ T5753] ip6_rcv_finish+0x1c1/0x340 [ 76.263242][ T5753] ipv6_rcv+0x72/0x150 [ 76.263262][ T5753] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 76.263347][ T5753] __netif_receive_skb+0x9e/0x270 [ 76.263392][ T5753] ? tun_rx_batched+0xc7/0x430 [ 76.263446][ T5753] netif_receive_skb+0x4b/0x2e0 [ 76.263468][ T5753] ? tun_rx_batched+0xc7/0x430 [ 76.263532][ T5753] tun_rx_batched+0xfc/0x430 [ 76.263560][ T5753] tun_get_user+0x1eb6/0x2680 [ 76.263629][ T5753] ? ref_tracker_alloc+0x1f2/0x2f0 [ 76.263659][ T5753] tun_chr_write_iter+0x15e/0x210 [ 76.263692][ T5753] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 76.263766][ T5753] vfs_write+0x527/0x960 [ 76.263791][ T5753] ksys_write+0xda/0x1a0 [ 76.263819][ T5753] __x64_sys_write+0x40/0x50 [ 76.263846][ T5753] x64_sys_call+0x27fe/0x2ff0 [ 76.263905][ T5753] do_syscall_64+0xd2/0x200 [ 76.263929][ T5753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.263964][ T5753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.263994][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.264048][ T5753] RIP: 0033:0x7f54bda5d69f [ 76.264131][ T5753] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 76.264207][ T5753] RSP: 002b:00007f54bc4bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 76.264227][ T5753] RAX: ffffffffffffffda RBX: 00007f54bdc85fa0 RCX: 00007f54bda5d69f [ 76.264239][ T5753] RDX: 000000000000004a RSI: 0000200000000540 RDI: 00000000000000c8 [ 76.264252][ T5753] RBP: 00007f54bc4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 76.264329][ T5753] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 76.264341][ T5753] R13: 00007f54bdc86038 R14: 00007f54bdc85fa0 R15: 00007fff88e47ac8 [ 76.264362][ T5753] [ 76.549468][ T5751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.635'. [ 76.641822][ T5761] hsr_slave_0: left promiscuous mode [ 76.649215][ T5761] hsr_slave_1: left promiscuous mode [ 76.688795][ T5762] lo speed is unknown, defaulting to 1000 [ 76.698601][ T5771] FAULT_INJECTION: forcing a failure. [ 76.698601][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 76.711525][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz.5.644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.711554][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.711568][ T5771] Call Trace: [ 76.711575][ T5771] [ 76.711583][ T5771] __dump_stack+0x1d/0x30 [ 76.711619][ T5771] dump_stack_lvl+0xe8/0x140 [ 76.711637][ T5771] dump_stack+0x15/0x1b [ 76.711653][ T5771] should_fail_ex+0x265/0x280 [ 76.711676][ T5771] should_failslab+0x8c/0xb0 [ 76.711723][ T5771] __kmalloc_noprof+0xa5/0x3e0 [ 76.711747][ T5771] ? io_cache_alloc_new+0x2a/0xb0 [ 76.711777][ T5771] io_cache_alloc_new+0x2a/0xb0 [ 76.711808][ T5771] __io_prep_rw+0xcf/0x6d0 [ 76.711838][ T5771] ? __io_alloc_req_refill+0x12e/0x1d0 [ 76.711867][ T5771] io_prep_read+0x20/0xa0 [ 76.711887][ T5771] io_submit_sqes+0x5ec/0x1060 [ 76.711913][ T5771] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 76.711933][ T5771] ? 0xffffffff81000000 [ 76.711988][ T5771] ? __bpf_ringbuf_reserve+0x45a/0x530 [ 76.712044][ T5771] ? get_pid_task+0x96/0xd0 [ 76.712063][ T5771] ? proc_fail_nth_write+0x13b/0x160 [ 76.712092][ T5771] ? bpf_ringbuf_reserve+0x46/0x60 [ 76.712188][ T5771] ? __rcu_read_unlock+0x4f/0x70 [ 76.712213][ T5771] ? bpf_trace_run2+0x124/0x1c0 [ 76.712242][ T5771] ? __bpf_trace_sys_enter+0x10/0x30 [ 76.712264][ T5771] __x64_sys_io_uring_enter+0x78/0x90 [ 76.712290][ T5771] x64_sys_call+0x2de1/0x2ff0 [ 76.712374][ T5771] do_syscall_64+0xd2/0x200 [ 76.712400][ T5771] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.712426][ T5771] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.712480][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.712500][ T5771] RIP: 0033:0x7f09e85aebe9 [ 76.712515][ T5771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.712532][ T5771] RSP: 002b:00007f09e7017038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.712611][ T5771] RAX: ffffffffffffffda RBX: 00007f09e87d5fa0 RCX: 00007f09e85aebe9 [ 76.712625][ T5771] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 76.712640][ T5771] RBP: 00007f09e7017090 R08: 0000000000000000 R09: 0000000000000000 [ 76.712655][ T5771] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 76.712670][ T5771] R13: 00007f09e87d6038 R14: 00007f09e87d5fa0 R15: 00007ffd3a285198 [ 76.712699][ T5771] [ 77.009539][ T5778] loop5: detected capacity change from 0 to 128 [ 77.048320][ T5778] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.065174][ T5778] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.171281][ T5801] loop5: detected capacity change from 0 to 512 [ 77.187549][ T5801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.200265][ T5801] EXT4-fs (loop5): 1 truncate cleaned up [ 77.206639][ T5801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.234984][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.281955][ T5809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5809 comm=syz.4.657 [ 77.323872][ T5815] loop1: detected capacity change from 0 to 512 [ 77.339889][ T5815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.347989][ T5818] smc: net device bond0 applied user defined pnetid SYZ0 [ 77.352808][ T5815] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.380450][ T5818] smc: net device bond0 erased user defined pnetid SYZ0 [ 77.382823][ T5815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5815 comm=syz.1.658 [ 77.419253][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.480983][ T5816] loop5: detected capacity change from 0 to 128 [ 77.503752][ T5832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5832 comm=syz.0.663 [ 77.940797][ T5864] loop5: detected capacity change from 0 to 512 [ 77.948513][ T5864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.964368][ T5864] EXT4-fs (loop5): 1 truncate cleaned up [ 77.972165][ T5864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.993010][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.039436][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 78.039451][ T29] audit: type=1400 audit(1755925056.306:2968): avc: denied { unmount } for pid=3857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 78.136381][ T5879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.147741][ T5879] bond1 (unregistering): Released all slaves [ 78.198640][ T5879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5879 comm=syz.5.675 [ 78.216078][ T5873] loop6: detected capacity change from 0 to 128 [ 78.240987][ T5891] lo speed is unknown, defaulting to 1000 [ 78.439302][ T29] audit: type=1400 audit(1755925056.696:2969): avc: denied { execute_no_trans } for pid=5905 comm="syz.1.688" path="/118/file0" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.465603][ T5907] loop5: detected capacity change from 0 to 4096 [ 78.470897][ T5909] lo speed is unknown, defaulting to 1000 [ 78.491954][ T5907] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.500726][ T5907] System zones: 0-5 [ 78.508419][ T5914] SELinux: failed to load policy [ 78.538871][ T5907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.593061][ T29] audit: type=1400 audit(1755925056.856:2970): avc: denied { connect } for pid=5915 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.606545][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.612816][ T29] audit: type=1326 audit(1755925056.856:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 78.622524][ T5924] FAULT_INJECTION: forcing a failure. [ 78.622524][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 78.645290][ T29] audit: type=1400 audit(1755925056.856:2972): avc: denied { setopt } for pid=5915 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.657977][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.0.693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.658015][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.658106][ T5924] Call Trace: [ 78.658114][ T5924] [ 78.658123][ T5924] __dump_stack+0x1d/0x30 [ 78.658147][ T5924] dump_stack_lvl+0xe8/0x140 [ 78.658173][ T5924] dump_stack+0x15/0x1b [ 78.658191][ T5924] should_fail_ex+0x265/0x280 [ 78.658214][ T5924] should_failslab+0x8c/0xb0 [ 78.658239][ T5924] kmem_cache_alloc_noprof+0x50/0x310 [ 78.658264][ T5924] ? getname_flags+0x80/0x3b0 [ 78.658301][ T5924] getname_flags+0x80/0x3b0 [ 78.658328][ T5924] user_path_at+0x28/0x130 [ 78.658374][ T5924] __se_sys_mount+0x25b/0x2e0 [ 78.658396][ T5924] ? fput+0x8f/0xc0 [ 78.658570][ T5924] __x64_sys_mount+0x67/0x80 [ 78.658643][ T5924] x64_sys_call+0x2b4d/0x2ff0 [ 78.658665][ T5924] do_syscall_64+0xd2/0x200 [ 78.658712][ T5924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.658804][ T5924] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.658829][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.658883][ T5924] RIP: 0033:0x7f43ea61ebe9 [ 78.658964][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.658982][ T5924] RSP: 002b:00007f43e9087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.659003][ T5924] RAX: ffffffffffffffda RBX: 00007f43ea845fa0 RCX: 00007f43ea61ebe9 [ 78.659086][ T5924] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 78.659099][ T5924] RBP: 00007f43e9087090 R08: 0000200000000340 R09: 0000000000000000 [ 78.659112][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.659125][ T5924] R13: 00007f43ea846038 R14: 00007f43ea845fa0 R15: 00007ffd3fb75818 [ 78.659143][ T5924] [ 78.750246][ T5920] FAULT_INJECTION: forcing a failure. [ 78.750246][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 78.750693][ T29] audit: type=1326 audit(1755925056.856:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 78.754473][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.6.692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.754500][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.754552][ T5920] Call Trace: [ 78.754559][ T5920] [ 78.754645][ T5920] __dump_stack+0x1d/0x30 [ 78.754667][ T5920] dump_stack_lvl+0xe8/0x140 [ 78.754687][ T5920] dump_stack+0x15/0x1b [ 78.754705][ T5920] should_fail_ex+0x265/0x280 [ 78.754726][ T5920] ? audit_log_d_path+0x8d/0x150 [ 78.754807][ T5920] should_failslab+0x8c/0xb0 [ 78.754831][ T5920] __kmalloc_cache_noprof+0x4c/0x320 [ 78.754861][ T5920] audit_log_d_path+0x8d/0x150 [ 78.754897][ T5920] audit_log_d_path_exe+0x42/0x70 [ 78.754968][ T5920] audit_log_task+0x1e9/0x250 [ 78.754997][ T5920] audit_seccomp+0x61/0x100 [ 78.755101][ T5920] ? __seccomp_filter+0x68c/0x10d0 [ 78.755122][ T5920] __seccomp_filter+0x69d/0x10d0 [ 78.755145][ T5920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.755241][ T5920] ? vfs_write+0x7e8/0x960 [ 78.755263][ T5920] ? __rcu_read_unlock+0x4f/0x70 [ 78.755311][ T5920] ? __fget_files+0x184/0x1c0 [ 78.755338][ T5920] __secure_computing+0x82/0x150 [ 78.755359][ T5920] syscall_trace_enter+0xcf/0x1e0 [ 78.755432][ T5920] do_syscall_64+0xac/0x200 [ 78.755459][ T5920] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.755483][ T5920] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.755516][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.755538][ T5920] RIP: 0033:0x7f6434efebe9 [ 78.755554][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.755619][ T5920] RSP: 002b:00007f643395f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 78.755640][ T5920] RAX: ffffffffffffffda RBX: 00007f6435125fa0 RCX: 00007f6434efebe9 [ 78.755653][ T5920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.755666][ T5920] RBP: 00007f643395f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.755679][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.755692][ T5920] R13: 00007f6435126038 R14: 00007f6435125fa0 R15: 00007fffab1a5128 [ 78.755746][ T5920] [ 79.088416][ T2956] kernel write not supported for file /input/event2 (pid: 2956 comm: kworker/1:2) [ 79.091873][ T29] audit: type=1326 audit(1755925056.856:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 79.151854][ T29] audit: type=1326 audit(1755925056.856:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 79.175645][ T29] audit: type=1326 audit(1755925056.856:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 79.199303][ T29] audit: type=1326 audit(1755925056.856:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.6.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 79.308331][ T5953] SELinux: failed to load policy [ 79.361528][ T5961] loop5: detected capacity change from 0 to 128 [ 79.376438][ T5961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 79.384343][ T5961] FAT-fs (loop5): Filesystem has been set read-only [ 79.393692][ T5961] syz.5.707: attempt to access beyond end of device [ 79.393692][ T5961] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.407788][ T5961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 79.415783][ T5961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 79.424926][ T5961] syz.5.707: attempt to access beyond end of device [ 79.424926][ T5961] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.441640][ T5965] FAULT_INJECTION: forcing a failure. [ 79.441640][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 79.454415][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: syz.0.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.454442][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.454453][ T5965] Call Trace: [ 79.454462][ T5965] [ 79.454470][ T5965] __dump_stack+0x1d/0x30 [ 79.454506][ T5965] dump_stack_lvl+0xe8/0x140 [ 79.454523][ T5965] dump_stack+0x15/0x1b [ 79.454538][ T5965] should_fail_ex+0x265/0x280 [ 79.454557][ T5965] should_failslab+0x8c/0xb0 [ 79.454586][ T5965] kmem_cache_alloc_noprof+0x50/0x310 [ 79.454640][ T5965] ? security_file_alloc+0x32/0x100 [ 79.454697][ T5965] security_file_alloc+0x32/0x100 [ 79.454723][ T5965] init_file+0x5c/0x1d0 [ 79.454749][ T5965] alloc_empty_file+0x8b/0x200 [ 79.454784][ T5965] path_openat+0x68/0x2170 [ 79.454801][ T5965] ? _parse_integer_limit+0x170/0x190 [ 79.454821][ T5965] ? _parse_integer+0x27/0x40 [ 79.454839][ T5965] ? kstrtoull+0x111/0x140 [ 79.454937][ T5965] ? kstrtouint+0x76/0xc0 [ 79.454994][ T5965] do_filp_open+0x109/0x230 [ 79.455019][ T5965] do_sys_openat2+0xa6/0x110 [ 79.455048][ T5965] __x64_sys_creat+0x65/0x90 [ 79.455076][ T5965] x64_sys_call+0x2d94/0x2ff0 [ 79.455147][ T5965] do_syscall_64+0xd2/0x200 [ 79.455170][ T5965] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.455242][ T5965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.455264][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.455332][ T5965] RIP: 0033:0x7f43ea61ebe9 [ 79.455377][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.455453][ T5965] RSP: 002b:00007f43e9087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 79.455472][ T5965] RAX: ffffffffffffffda RBX: 00007f43ea845fa0 RCX: 00007f43ea61ebe9 [ 79.455483][ T5965] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000280 [ 79.455494][ T5965] RBP: 00007f43e9087090 R08: 0000000000000000 R09: 0000000000000000 [ 79.455505][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.455516][ T5965] R13: 00007f43ea846038 R14: 00007f43ea845fa0 R15: 00007ffd3fb75818 [ 79.455585][ T5965] [ 79.670354][ T5961] syz.5.707: attempt to access beyond end of device [ 79.670354][ T5961] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.684217][ T5961] syz.5.707: attempt to access beyond end of device [ 79.684217][ T5961] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.685728][ T5968] unsupported nla_type 52263 [ 79.698092][ T5961] syz.5.707: attempt to access beyond end of device [ 79.698092][ T5961] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.716905][ T5966] syz.5.707: attempt to access beyond end of device [ 79.716905][ T5966] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 79.730173][ T5966] Buffer I/O error on dev loop5, logical block 2065, async page read [ 79.761893][ T5969] lo speed is unknown, defaulting to 1000 [ 79.772316][ T5966] syz.5.707: attempt to access beyond end of device [ 79.772316][ T5966] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 79.786037][ T5966] Buffer I/O error on dev loop5, logical block 2066, async page read [ 79.806197][ T5966] syz.5.707: attempt to access beyond end of device [ 79.806197][ T5966] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 79.819490][ T5966] Buffer I/O error on dev loop5, logical block 2067, async page read [ 79.840254][ T5966] syz.5.707: attempt to access beyond end of device [ 79.840254][ T5966] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 79.853805][ T5966] Buffer I/O error on dev loop5, logical block 2068, async page read [ 79.863243][ T5966] syz.5.707: attempt to access beyond end of device [ 79.863243][ T5966] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 79.876522][ T5966] Buffer I/O error on dev loop5, logical block 2069, async page read [ 79.879584][ T5973] __nla_validate_parse: 20 callbacks suppressed [ 79.879653][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 79.899870][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 79.900122][ T5981] loop6: detected capacity change from 0 to 512 [ 79.925327][ T5966] Buffer I/O error on dev loop5, logical block 2070, async page read [ 79.934058][ T5966] Buffer I/O error on dev loop5, logical block 2071, async page read [ 79.964565][ T5966] Buffer I/O error on dev loop5, logical block 2072, async page read [ 79.973214][ T5966] Buffer I/O error on dev loop5, logical block 2065, async page read [ 79.982034][ T5966] Buffer I/O error on dev loop5, logical block 2066, async page read [ 79.984355][ T5984] FAULT_INJECTION: forcing a failure. [ 79.984355][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.003665][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.1.714 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.003692][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.003703][ T5984] Call Trace: [ 80.003727][ T5984] [ 80.003737][ T5984] __dump_stack+0x1d/0x30 [ 80.003761][ T5984] dump_stack_lvl+0xe8/0x140 [ 80.003783][ T5984] dump_stack+0x15/0x1b [ 80.003801][ T5984] should_fail_ex+0x265/0x280 [ 80.003822][ T5984] should_fail+0xb/0x20 [ 80.003838][ T5984] should_fail_usercopy+0x1a/0x20 [ 80.003866][ T5984] _copy_from_iter+0xd2/0xe80 [ 80.003891][ T5984] ? __build_skb_around+0x1a0/0x200 [ 80.003924][ T5984] ? __alloc_skb+0x223/0x320 [ 80.003962][ T5984] pfkey_sendmsg+0x126/0x900 [ 80.004068][ T5984] ? avc_has_perm+0xf7/0x180 [ 80.004095][ T5984] ? selinux_socket_sendmsg+0x175/0x1b0 [ 80.004182][ T5984] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 80.004209][ T5984] __sock_sendmsg+0x145/0x180 [ 80.004348][ T5984] ____sys_sendmsg+0x31e/0x4e0 [ 80.004377][ T5984] ___sys_sendmsg+0x17b/0x1d0 [ 80.004412][ T5984] __x64_sys_sendmsg+0xd4/0x160 [ 80.004442][ T5984] x64_sys_call+0x191e/0x2ff0 [ 80.004479][ T5984] do_syscall_64+0xd2/0x200 [ 80.004509][ T5984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.004576][ T5984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.004605][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.004629][ T5984] RIP: 0033:0x7f54bda5ebe9 [ 80.004644][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.004684][ T5984] RSP: 002b:00007f54bc4bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.004709][ T5984] RAX: ffffffffffffffda RBX: 00007f54bdc85fa0 RCX: 00007f54bda5ebe9 [ 80.004754][ T5984] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 80.004804][ T5984] RBP: 00007f54bc4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.004815][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.004827][ T5984] R13: 00007f54bdc86038 R14: 00007f54bdc85fa0 R15: 00007fff88e47ac8 [ 80.004845][ T5984] [ 80.219909][ T5981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.220011][ T5981] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.250385][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 80.250414][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 80.298499][ T5994] netlink: 2 bytes leftover after parsing attributes in process `syz.4.716'. [ 80.308070][ T5994] IPv6: Can't replace route, no match found [ 80.327208][ T5996] SELinux: failed to load policy [ 80.341224][ T5999] FAULT_INJECTION: forcing a failure. [ 80.341224][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.354696][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.4.718 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.354739][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.354754][ T5999] Call Trace: [ 80.354818][ T5999] [ 80.354826][ T5999] __dump_stack+0x1d/0x30 [ 80.354852][ T5999] dump_stack_lvl+0xe8/0x140 [ 80.354875][ T5999] dump_stack+0x15/0x1b [ 80.354893][ T5999] should_fail_ex+0x265/0x280 [ 80.354913][ T5999] should_fail+0xb/0x20 [ 80.355010][ T5999] should_fail_usercopy+0x1a/0x20 [ 80.355031][ T5999] _copy_to_user+0x20/0xa0 [ 80.355063][ T5999] simple_read_from_buffer+0xb5/0x130 [ 80.355089][ T5999] proc_fail_nth_read+0x10e/0x150 [ 80.355118][ T5999] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.355216][ T5999] vfs_read+0x1a5/0x770 [ 80.355236][ T5999] ? __rcu_read_unlock+0x4f/0x70 [ 80.355261][ T5999] ? __fget_files+0x184/0x1c0 [ 80.355292][ T5999] ksys_read+0xda/0x1a0 [ 80.355321][ T5999] __x64_sys_read+0x40/0x50 [ 80.355395][ T5999] x64_sys_call+0x27bc/0x2ff0 [ 80.355425][ T5999] do_syscall_64+0xd2/0x200 [ 80.355449][ T5999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.355514][ T5999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.355543][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.355629][ T5999] RIP: 0033:0x7f01719cd5fc [ 80.355683][ T5999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.355744][ T5999] RSP: 002b:00007f017042f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.355768][ T5999] RAX: ffffffffffffffda RBX: 00007f0171bf5fa0 RCX: 00007f01719cd5fc [ 80.355784][ T5999] RDX: 000000000000000f RSI: 00007f017042f0a0 RDI: 0000000000000006 [ 80.355862][ T5999] RBP: 00007f017042f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.355876][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.355890][ T5999] R13: 00007f0171bf6038 R14: 00007f0171bf5fa0 R15: 00007fffee9034f8 [ 80.355908][ T5999] [ 80.554944][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 80.563792][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 80.583617][ T6003] loop1: detected capacity change from 0 to 128 [ 80.635480][ T4880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.727562][ T6015] loop5: detected capacity change from 0 to 128 [ 80.746787][ T6015] vfat: Unknown parameter '01777777777777777777777' [ 80.768473][ T6007] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.719'. [ 80.805119][ T6024] FAULT_INJECTION: forcing a failure. [ 80.805119][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.818279][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.5.728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.818306][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.818356][ T6024] Call Trace: [ 80.818363][ T6024] [ 80.818371][ T6024] __dump_stack+0x1d/0x30 [ 80.818394][ T6024] dump_stack_lvl+0xe8/0x140 [ 80.818415][ T6024] dump_stack+0x15/0x1b [ 80.818485][ T6024] should_fail_ex+0x265/0x280 [ 80.818506][ T6024] should_fail+0xb/0x20 [ 80.818591][ T6024] should_fail_usercopy+0x1a/0x20 [ 80.818619][ T6024] _copy_from_iter+0xd2/0xe80 [ 80.818644][ T6024] ? __build_skb_around+0x1a0/0x200 [ 80.818681][ T6024] ? __alloc_skb+0x223/0x320 [ 80.818792][ T6024] netlink_sendmsg+0x471/0x6b0 [ 80.818833][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.818898][ T6024] __sock_sendmsg+0x145/0x180 [ 80.818952][ T6024] ____sys_sendmsg+0x31e/0x4e0 [ 80.818980][ T6024] ___sys_sendmsg+0x17b/0x1d0 [ 80.819053][ T6024] __x64_sys_sendmsg+0xd4/0x160 [ 80.819081][ T6024] x64_sys_call+0x191e/0x2ff0 [ 80.819142][ T6024] do_syscall_64+0xd2/0x200 [ 80.819166][ T6024] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 80.819192][ T6024] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.819221][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.819332][ T6024] RIP: 0033:0x7f09e85aebe9 [ 80.819350][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.819371][ T6024] RSP: 002b:00007f09e7017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.819392][ T6024] RAX: ffffffffffffffda RBX: 00007f09e87d5fa0 RCX: 00007f09e85aebe9 [ 80.819405][ T6024] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 80.819416][ T6024] RBP: 00007f09e7017090 R08: 0000000000000000 R09: 0000000000000000 [ 80.819494][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.819505][ T6024] R13: 00007f09e87d6038 R14: 00007f09e87d5fa0 R15: 00007ffd3a285198 [ 80.819523][ T6024] [ 81.061831][ T6030] netlink: 'syz.5.730': attribute type 12 has an invalid length. [ 81.131840][ T6040] FAULT_INJECTION: forcing a failure. [ 81.131840][ T6040] name failslab, interval 1, probability 0, space 0, times 0 [ 81.144638][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: syz.6.735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.144756][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.144768][ T6040] Call Trace: [ 81.144775][ T6040] [ 81.144782][ T6040] __dump_stack+0x1d/0x30 [ 81.144879][ T6040] dump_stack_lvl+0xe8/0x140 [ 81.144909][ T6040] dump_stack+0x15/0x1b [ 81.144927][ T6040] should_fail_ex+0x265/0x280 [ 81.144950][ T6040] should_failslab+0x8c/0xb0 [ 81.144976][ T6040] kmem_cache_alloc_noprof+0x50/0x310 [ 81.145045][ T6040] ? security_file_alloc+0x32/0x100 [ 81.145075][ T6040] security_file_alloc+0x32/0x100 [ 81.145103][ T6040] init_file+0x5c/0x1d0 [ 81.145152][ T6040] alloc_empty_file+0x8b/0x200 [ 81.145249][ T6040] path_openat+0x68/0x2170 [ 81.145271][ T6040] ? _parse_integer_limit+0x170/0x190 [ 81.145293][ T6040] ? kstrtoull+0x111/0x140 [ 81.145314][ T6040] ? kstrtouint+0x76/0xc0 [ 81.145417][ T6040] do_filp_open+0x109/0x230 [ 81.145445][ T6040] do_sys_openat2+0xa6/0x110 [ 81.145474][ T6040] __x64_sys_openat+0xf2/0x120 [ 81.145553][ T6040] x64_sys_call+0x2e9c/0x2ff0 [ 81.145577][ T6040] do_syscall_64+0xd2/0x200 [ 81.145620][ T6040] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.145645][ T6040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.145681][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.145763][ T6040] RIP: 0033:0x7f6434efebe9 [ 81.145780][ T6040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.145800][ T6040] RSP: 002b:00007f643395f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.145861][ T6040] RAX: ffffffffffffffda RBX: 00007f6435125fa0 RCX: 00007f6434efebe9 [ 81.145875][ T6040] RDX: 0000000000084d03 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 81.145975][ T6040] RBP: 00007f643395f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.145989][ T6040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.146004][ T6040] R13: 00007f6435126038 R14: 00007f6435125fa0 R15: 00007fffab1a5128 [ 81.146025][ T6040] [ 81.360307][ T6034] SELinux: failed to load policy [ 81.369875][ T6042] random: crng reseeded on system resumption [ 81.484752][ T6054] loop6: detected capacity change from 0 to 8192 [ 81.494402][ T6054] vfat: Unknown parameter '' [ 81.574012][ T6061] gretap1: entered promiscuous mode [ 81.580425][ T6061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6061 comm=syz.5.742 [ 81.703084][ T6077] loop1: detected capacity change from 0 to 128 [ 81.723474][ T6078] random: crng reseeded on system resumption [ 81.914618][ T6086] SELinux: failed to load policy [ 82.283363][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 82.774486][ T6156] loop1: detected capacity change from 0 to 128 [ 82.810641][ T6156] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.817205][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 82.833344][ T6156] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.892118][ T6163] pim6reg: entered allmulticast mode [ 82.929570][ T6172] SELinux: failed to load policy [ 82.965013][ T6161] pim6reg: left allmulticast mode [ 82.974567][ T6177] FAULT_INJECTION: forcing a failure. [ 82.974567][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 82.980503][ T6173] FAULT_INJECTION: forcing a failure. [ 82.980503][ T6173] name failslab, interval 1, probability 0, space 0, times 0 [ 82.987407][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.987454][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.987467][ T6177] Call Trace: [ 82.987473][ T6177] [ 82.987480][ T6177] __dump_stack+0x1d/0x30 [ 82.987503][ T6177] dump_stack_lvl+0xe8/0x140 [ 82.987588][ T6177] dump_stack+0x15/0x1b [ 82.987614][ T6177] should_fail_ex+0x265/0x280 [ 82.987635][ T6177] should_failslab+0x8c/0xb0 [ 82.987660][ T6177] kmem_cache_alloc_node_noprof+0x57/0x320 [ 82.987734][ T6177] ? __alloc_skb+0x101/0x320 [ 82.987840][ T6177] ? __alloc_skb+0x3c/0x320 [ 82.987871][ T6177] __alloc_skb+0x101/0x320 [ 82.987899][ T6177] ? audit_log_start+0x365/0x6c0 [ 82.987979][ T6177] audit_log_start+0x380/0x6c0 [ 82.988011][ T6177] audit_seccomp+0x48/0x100 [ 82.988089][ T6177] ? __seccomp_filter+0x68c/0x10d0 [ 82.988147][ T6177] __seccomp_filter+0x69d/0x10d0 [ 82.988179][ T6177] __secure_computing+0x82/0x150 [ 82.988202][ T6177] syscall_trace_enter+0xcf/0x1e0 [ 82.988227][ T6177] do_syscall_64+0xac/0x200 [ 82.988331][ T6177] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.988355][ T6177] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.988379][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.988478][ T6177] RIP: 0033:0x7f01719cd5fc [ 82.988495][ T6177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.988513][ T6177] RSP: 002b:00007f017042f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.988535][ T6177] RAX: ffffffffffffffda RBX: 00007f0171bf5fa0 RCX: 00007f01719cd5fc [ 82.988548][ T6177] RDX: 000000000000000f RSI: 00007f017042f0a0 RDI: 0000000000000007 [ 82.988561][ T6177] RBP: 00007f017042f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.988583][ T6177] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 82.988603][ T6177] R13: 00007f0171bf6038 R14: 00007f0171bf5fa0 R15: 00007fffee9034f8 [ 82.988622][ T6177] [ 83.055585][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 83.055602][ T29] audit: type=1400 audit(1755925061.316:3010): avc: denied { listen } for pid=6174 comm="syz.1.761" lport=48737 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.055642][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.5.756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.055706][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.055718][ T6173] Call Trace: [ 83.055725][ T6173] [ 83.055732][ T6173] __dump_stack+0x1d/0x30 [ 83.055772][ T6173] dump_stack_lvl+0xe8/0x140 [ 83.055792][ T6173] dump_stack+0x15/0x1b [ 83.055809][ T6173] should_fail_ex+0x265/0x280 [ 83.055831][ T6173] should_failslab+0x8c/0xb0 [ 83.055855][ T6173] __kmalloc_noprof+0xa5/0x3e0 [ 83.055930][ T6173] ? tracepoint_probe_unregister+0x168/0x650 [ 83.055961][ T6173] ? __pfx___bpf_trace_kmem_cache_free+0x10/0x10 [ 83.055991][ T6173] tracepoint_probe_unregister+0x168/0x650 [ 83.056156][ T6173] ? __pfx_bpf_link_release+0x10/0x10 [ 83.056208][ T6173] bpf_probe_unregister+0x37/0x50 [ 83.056233][ T6173] bpf_raw_tp_link_release+0x27/0x50 [ 83.056254][ T6173] bpf_link_free+0xab/0x340 [ 83.056279][ T6173] ? __pfx_bpf_link_release+0x10/0x10 [ 83.056328][ T6173] bpf_link_release+0x45/0x60 [ 83.056354][ T6173] __fput+0x29b/0x650 [ 83.056389][ T6173] ____fput+0x1c/0x30 [ 83.056417][ T6173] task_work_run+0x131/0x1a0 [ 83.056442][ T6173] exit_to_user_mode_loop+0xe4/0x100 [ 83.056464][ T6173] do_syscall_64+0x1d6/0x200 [ 83.056510][ T6173] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.056541][ T6173] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 83.056583][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.056604][ T6173] RIP: 0033:0x7f09e85aebe9 [ 83.056621][ T6173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.056639][ T6173] RSP: 002b:00007f09e6fd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 83.056660][ T6173] RAX: 0000000000000000 RBX: 00007f09e87d6180 RCX: 00007f09e85aebe9 [ 83.056719][ T6173] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 83.056819][ T6173] RBP: 00007f09e6fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.056832][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.056845][ T6173] R13: 00007f09e87d6218 R14: 00007f09e87d6180 R15: 00007ffd3a285198 [ 83.056863][ T6173] [ 83.073414][ T6178] loop6: detected capacity change from 0 to 764 [ 83.148765][ T6184] loop5: detected capacity change from 0 to 512 [ 83.156468][ T6178] iso9660: Unknown parameter '0xffffffffffffffffÿÿÿÿÿ18446744073709551615á2Õ~:<:àªçÚ—]™ÿGâÓÚþ˜)}ý&ªÜeQ2 €cö´égÂ]J\×$':Ül/' [ 83.185101][ T29] audit: type=1400 audit(1755925061.436:3011): avc: denied { setopt } for pid=6174 comm="syz.1.761" lport=48737 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.658992][ T29] audit: type=1400 audit(1755925061.926:3012): avc: denied { setopt } for pid=6199 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.719128][ T29] audit: type=1400 audit(1755925061.976:3013): avc: denied { write } for pid=6195 comm="syz.4.768" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.814843][ T6213] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 83.840173][ T29] audit: type=1326 audit(1755925062.106:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 83.944990][ T6216] loop5: detected capacity change from 0 to 128 [ 84.357496][ T29] audit: type=1326 audit(1755925062.146:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 84.380911][ T29] audit: type=1326 audit(1755925062.146:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 84.404246][ T29] audit: type=1326 audit(1755925062.146:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6209 comm="syz.1.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 84.540507][ T6238] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.550491][ T6238] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.590773][ T29] audit: type=1326 audit(1755925062.856:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 84.614164][ T29] audit: type=1326 audit(1755925062.856:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6237 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 84.661833][ T6234] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 84.671070][ T6234] SELinux: failed to load policy [ 84.678988][ T6238] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.688860][ T6238] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.706094][ T6246] loop5: detected capacity change from 0 to 128 [ 84.764537][ T6246] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 84.772612][ T6246] FAT-fs (loop5): Filesystem has been set read-only [ 84.794635][ T6246] bio_check_eod: 10643 callbacks suppressed [ 84.794654][ T6246] syz.5.789: attempt to access beyond end of device [ 84.794654][ T6246] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.820069][ T6238] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.830238][ T6238] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.870770][ T6238] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.880924][ T6238] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.927391][ T6147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.935730][ T6147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.982479][ T6147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.990874][ T6147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.003034][ T6147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.011554][ T6147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.033123][ T6269] loop6: detected capacity change from 0 to 128 [ 85.053590][ T6269] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.075097][ T6147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.083512][ T6147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095285][ T6262] loop1: detected capacity change from 0 to 128 [ 85.117804][ T6269] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.224588][ T6277] loop5: detected capacity change from 0 to 128 [ 85.388677][ T6280] netlink: 'syz.0.803': attribute type 4 has an invalid length. [ 85.448786][ T6284] SELinux: failed to load policy [ 85.725321][ T6294] __nla_validate_parse: 15 callbacks suppressed [ 85.725338][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 85.765089][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 85.786709][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 85.796717][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 85.908980][ T6304] loop5: detected capacity change from 0 to 128 [ 85.915856][ T6304] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.929206][ T6304] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.992382][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.002005][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.065156][ T6309] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 86.073679][ T6309] SELinux: failed to load policy [ 86.114544][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.123660][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.129142][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6314 comm=syz.5.818 [ 86.183470][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.192612][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 86.246795][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.263963][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.308569][ T6336] loop1: detected capacity change from 0 to 2048 [ 86.327826][ T6336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.341157][ T6339] loop6: detected capacity change from 0 to 128 [ 86.347720][ T6336] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.826: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 86.348985][ T6339] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.372042][ T6336] EXT4-fs (loop1): Remounting filesystem read-only [ 86.386214][ T6339] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.404941][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.426392][ T6347] SELinux: failed to load policy [ 86.560518][ T6353] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 86.756842][ T6357] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 86.764561][ T6357] SELinux: failed to load policy [ 86.936812][ T6363] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.993662][ T6363] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.052044][ T6363] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.086370][ T6374] SELinux: failed to load policy [ 87.128195][ T6363] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.225869][ T6124] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.267582][ T6124] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.286039][ T6124] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.286412][ T6387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6387 comm=syz.5.846 [ 87.305500][ T6124] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.770541][ T6412] loop6: detected capacity change from 0 to 128 [ 87.823980][ T6434] FAULT_INJECTION: forcing a failure. [ 87.823980][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 87.836752][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.0.863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.836784][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.836798][ T6434] Call Trace: [ 87.836805][ T6434] [ 87.836814][ T6434] __dump_stack+0x1d/0x30 [ 87.836838][ T6434] dump_stack_lvl+0xe8/0x140 [ 87.836860][ T6434] dump_stack+0x15/0x1b [ 87.836921][ T6434] should_fail_ex+0x265/0x280 [ 87.836961][ T6434] should_failslab+0x8c/0xb0 [ 87.836985][ T6434] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 87.837016][ T6434] ? sidtab_sid2str_get+0xa0/0x130 [ 87.837114][ T6434] kmemdup_noprof+0x2b/0x70 [ 87.837143][ T6434] sidtab_sid2str_get+0xa0/0x130 [ 87.837172][ T6434] security_sid_to_context_core+0x1eb/0x2e0 [ 87.837239][ T6434] security_sid_to_context_force+0x2a/0x40 [ 87.837262][ T6434] selinux_inode_getsecurity+0x2c4/0x2e0 [ 87.837305][ T6434] security_inode_getsecurity+0xcf/0xe0 [ 87.837350][ T6434] vfs_getxattr+0x140/0x250 [ 87.837377][ T6434] do_getxattr+0x124/0x2a0 [ 87.837404][ T6434] path_getxattrat+0x22c/0x2a0 [ 87.837563][ T6434] __x64_sys_fgetxattr+0x59/0x70 [ 87.837592][ T6434] x64_sys_call+0x1ab3/0x2ff0 [ 87.837616][ T6434] do_syscall_64+0xd2/0x200 [ 87.837646][ T6434] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.837698][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.837723][ T6434] RIP: 0033:0x7f43ea61ebe9 [ 87.837741][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.837760][ T6434] RSP: 002b:00007f43e9087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 87.837781][ T6434] RAX: ffffffffffffffda RBX: 00007f43ea845fa0 RCX: 00007f43ea61ebe9 [ 87.837844][ T6434] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 87.837858][ T6434] RBP: 00007f43e9087090 R08: 0000000000000000 R09: 0000000000000000 [ 87.837872][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.837886][ T6434] R13: 00007f43ea846038 R14: 00007f43ea845fa0 R15: 00007ffd3fb75818 [ 87.837908][ T6434] [ 88.228726][ T6456] loop6: detected capacity change from 0 to 128 [ 88.235614][ T6456] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.248366][ T6456] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.273140][ T6457] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 88.287034][ T6457] SELinux: failed to load policy [ 88.344903][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 88.344921][ T29] audit: type=1326 audit(1755925066.606:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.377264][ T29] audit: type=1326 audit(1755925066.646:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.400767][ T29] audit: type=1326 audit(1755925066.646:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.424546][ T29] audit: type=1326 audit(1755925066.646:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.448397][ T29] audit: type=1326 audit(1755925066.646:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.473978][ T6468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6468 comm=syz.5.877 [ 88.490193][ T29] audit: type=1326 audit(1755925066.646:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.490225][ T29] audit: type=1326 audit(1755925066.646:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.490254][ T29] audit: type=1326 audit(1755925066.646:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.490302][ T29] audit: type=1326 audit(1755925066.646:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 88.497652][ T6471] SELinux: failed to load policy [ 88.553379][ T6475] loop1: detected capacity change from 0 to 128 [ 88.764903][ T29] audit: type=1326 audit(1755925067.026:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 88.993020][ T6507] loop6: detected capacity change from 0 to 128 [ 89.602580][ T6553] loop5: detected capacity change from 0 to 128 [ 90.035497][ T6565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6565 comm=syz.4.913 [ 90.050904][ T6570] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.100240][ T6570] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.148735][ T6570] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.198282][ T6570] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.344602][ T6119] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.356987][ T6119] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.365602][ T6119] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.385618][ T6119] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.642612][ T6601] FAULT_INJECTION: forcing a failure. [ 90.642612][ T6601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.656327][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.0.926 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.656359][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.656373][ T6601] Call Trace: [ 90.656380][ T6601] [ 90.656388][ T6601] __dump_stack+0x1d/0x30 [ 90.656410][ T6601] dump_stack_lvl+0xe8/0x140 [ 90.656429][ T6601] dump_stack+0x15/0x1b [ 90.656517][ T6601] should_fail_ex+0x265/0x280 [ 90.656537][ T6601] should_fail+0xb/0x20 [ 90.656554][ T6601] should_fail_usercopy+0x1a/0x20 [ 90.656578][ T6601] strncpy_from_user+0x25/0x230 [ 90.656623][ T6601] ? kmem_cache_alloc_noprof+0x186/0x310 [ 90.656733][ T6601] ? getname_flags+0x80/0x3b0 [ 90.656767][ T6601] getname_flags+0xae/0x3b0 [ 90.656796][ T6601] __x64_sys_renameat2+0x6c/0x90 [ 90.656844][ T6601] x64_sys_call+0x3f9/0x2ff0 [ 90.656929][ T6601] do_syscall_64+0xd2/0x200 [ 90.657024][ T6601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.657049][ T6601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.657150][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.657172][ T6601] RIP: 0033:0x7f43ea61ebe9 [ 90.657188][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.657205][ T6601] RSP: 002b:00007f43e9087038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 90.657259][ T6601] RAX: ffffffffffffffda RBX: 00007f43ea845fa0 RCX: 00007f43ea61ebe9 [ 90.657274][ T6601] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000003 [ 90.657288][ T6601] RBP: 00007f43e9087090 R08: 0000000000000000 R09: 0000000000000000 [ 90.657301][ T6601] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 90.657314][ T6601] R13: 00007f43ea846038 R14: 00007f43ea845fa0 R15: 00007ffd3fb75818 [ 90.657334][ T6601] [ 91.567141][ T6623] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 91.574770][ T6623] SELinux: failed to load policy [ 91.723310][ T6630] gretap1: entered promiscuous mode [ 91.729843][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6630 comm=syz.1.938 [ 91.810486][ T6637] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 91.827589][ T6637] bond1: entered promiscuous mode [ 91.838021][ T6637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.872711][ T6637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.890848][ T6637] bond1: (slave bond2): making interface the new active one [ 91.898220][ T6637] bond2: entered promiscuous mode [ 91.919664][ T6637] bond1: (slave bond2): Enslaving as an active interface with an up link [ 91.966468][ T6652] lo speed is unknown, defaulting to 1000 [ 92.781896][ T6677] FAULT_INJECTION: forcing a failure. [ 92.781896][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.795237][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.5.952 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.795263][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.795355][ T6677] Call Trace: [ 92.795362][ T6677] [ 92.795377][ T6677] __dump_stack+0x1d/0x30 [ 92.795408][ T6677] dump_stack_lvl+0xe8/0x140 [ 92.795473][ T6677] dump_stack+0x15/0x1b [ 92.795491][ T6677] should_fail_ex+0x265/0x280 [ 92.795511][ T6677] should_fail+0xb/0x20 [ 92.795528][ T6677] should_fail_usercopy+0x1a/0x20 [ 92.795551][ T6677] _copy_from_iter+0xd2/0xe80 [ 92.795577][ T6677] ? __build_skb_around+0x1a0/0x200 [ 92.795669][ T6677] ? __alloc_skb+0x223/0x320 [ 92.795698][ T6677] netlink_sendmsg+0x471/0x6b0 [ 92.795725][ T6677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.795825][ T6677] __sock_sendmsg+0x145/0x180 [ 92.795850][ T6677] ____sys_sendmsg+0x31e/0x4e0 [ 92.795877][ T6677] ___sys_sendmsg+0x17b/0x1d0 [ 92.795917][ T6677] __x64_sys_sendmsg+0xd4/0x160 [ 92.795956][ T6677] x64_sys_call+0x191e/0x2ff0 [ 92.795982][ T6677] do_syscall_64+0xd2/0x200 [ 92.796049][ T6677] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.796071][ T6677] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.796215][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.796254][ T6677] RIP: 0033:0x7f09e85aebe9 [ 92.796272][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.796288][ T6677] RSP: 002b:00007f09e7017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.796307][ T6677] RAX: ffffffffffffffda RBX: 00007f09e87d5fa0 RCX: 00007f09e85aebe9 [ 92.796319][ T6677] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 92.796332][ T6677] RBP: 00007f09e7017090 R08: 0000000000000000 R09: 0000000000000000 [ 92.796389][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.796401][ T6677] R13: 00007f09e87d6038 R14: 00007f09e87d5fa0 R15: 00007ffd3a285198 [ 92.796423][ T6677] [ 93.004309][ T6675] FAULT_INJECTION: forcing a failure. [ 93.004309][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 93.016986][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.1.951 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.017013][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.017039][ T6675] Call Trace: [ 93.017046][ T6675] [ 93.017055][ T6675] __dump_stack+0x1d/0x30 [ 93.017077][ T6675] dump_stack_lvl+0xe8/0x140 [ 93.017100][ T6675] dump_stack+0x15/0x1b [ 93.017132][ T6675] should_fail_ex+0x265/0x280 [ 93.017152][ T6675] should_failslab+0x8c/0xb0 [ 93.017252][ T6675] kmem_cache_alloc_noprof+0x50/0x310 [ 93.017281][ T6675] ? security_inode_alloc+0x37/0x100 [ 93.017311][ T6675] security_inode_alloc+0x37/0x100 [ 93.017340][ T6675] inode_init_always_gfp+0x4b7/0x500 [ 93.017404][ T6675] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 93.017430][ T6675] alloc_inode+0x58/0x170 [ 93.017452][ T6675] new_inode+0x1d/0xe0 [ 93.017484][ T6675] hugetlbfs_get_inode+0x7b/0x370 [ 93.017521][ T6675] hugetlb_file_setup+0x192/0x3d0 [ 93.017543][ T6675] ksys_mmap_pgoff+0x157/0x310 [ 93.017581][ T6675] x64_sys_call+0x14a3/0x2ff0 [ 93.017606][ T6675] do_syscall_64+0xd2/0x200 [ 93.017633][ T6675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.017654][ T6675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.017717][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.017789][ T6675] RIP: 0033:0x7f54bda5ebe9 [ 93.017805][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.017827][ T6675] RSP: 002b:00007f54bc4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 93.017850][ T6675] RAX: ffffffffffffffda RBX: 00007f54bdc85fa0 RCX: 00007f54bda5ebe9 [ 93.017865][ T6675] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 93.017881][ T6675] RBP: 00007f54bc4bf090 R08: ffffffffffffffff R09: 0000000000000000 [ 93.017972][ T6675] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 93.017984][ T6675] R13: 00007f54bdc86038 R14: 00007f54bdc85fa0 R15: 00007fff88e47ac8 [ 93.018002][ T6675] [ 93.274594][ T6686] __nla_validate_parse: 40 callbacks suppressed [ 93.274615][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 93.318007][ T6688] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.345079][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 93.356940][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 93.356957][ T29] audit: type=1326 audit(1755925071.616:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.386826][ T29] audit: type=1326 audit(1755925071.626:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.389194][ T6696] loop5: detected capacity change from 0 to 128 [ 93.411272][ T29] audit: type=1326 audit(1755925071.626:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.420482][ T6696] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.440921][ T29] audit: type=1326 audit(1755925071.626:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.465688][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 93.487950][ T6696] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.508464][ T6688] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.508504][ T29] audit: type=1326 audit(1755925071.726:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.508615][ T29] audit: type=1326 audit(1755925071.726:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.565546][ T29] audit: type=1326 audit(1755925071.726:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.589349][ T29] audit: type=1326 audit(1755925071.726:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.613179][ T29] audit: type=1326 audit(1755925071.726:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.636772][ T29] audit: type=1326 audit(1755925071.726:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.6.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 93.663523][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 93.669511][ T6698] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 93.669631][ T6698] SELinux: failed to load policy [ 93.706645][ T6688] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.759533][ T6688] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.882523][ T6147] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.896250][ T6124] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908441][ T6147] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.920436][ T6147] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.985413][ T6715] loop5: detected capacity change from 0 to 128 [ 94.321009][ T6721] SELinux: failed to load policy [ 94.435980][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.445862][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.455488][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.465265][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.474719][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.484020][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 94.515633][ T6731] FAULT_INJECTION: forcing a failure. [ 94.515633][ T6731] name failslab, interval 1, probability 0, space 0, times 0 [ 94.528422][ T6731] CPU: 0 UID: 0 PID: 6731 Comm: syz.4.974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.528454][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.528467][ T6731] Call Trace: [ 94.528474][ T6731] [ 94.528490][ T6731] __dump_stack+0x1d/0x30 [ 94.528514][ T6731] dump_stack_lvl+0xe8/0x140 [ 94.528531][ T6731] dump_stack+0x15/0x1b [ 94.528547][ T6731] should_fail_ex+0x265/0x280 [ 94.528568][ T6731] should_failslab+0x8c/0xb0 [ 94.528695][ T6731] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 94.528725][ T6731] ? __d_alloc+0x3d/0x340 [ 94.528757][ T6731] __d_alloc+0x3d/0x340 [ 94.528785][ T6731] ? put_dec_trunc8+0x119/0x140 [ 94.528866][ T6731] d_alloc_parallel+0x53/0xc60 [ 94.528896][ T6731] ? put_dec_trunc8+0x119/0x140 [ 94.528919][ T6731] ? put_dec+0xd3/0xe0 [ 94.528939][ T6731] ? lockref_get_not_dead+0x120/0x1c0 [ 94.528972][ T6731] ? __rcu_read_unlock+0x4f/0x70 [ 94.529061][ T6731] __lookup_slow+0x8c/0x250 [ 94.529091][ T6731] lookup_slow+0x3c/0x60 [ 94.529120][ T6731] link_path_walk+0x753/0x900 [ 94.529169][ T6731] path_lookupat+0x63/0x2a0 [ 94.529243][ T6731] filename_lookup+0x147/0x340 [ 94.529354][ T6731] user_path_at+0x3e/0x130 [ 94.529381][ T6731] __se_sys_pivot_root+0x111/0x710 [ 94.529414][ T6731] __x64_sys_pivot_root+0x31/0x40 [ 94.529464][ T6731] x64_sys_call+0x144/0x2ff0 [ 94.529488][ T6731] do_syscall_64+0xd2/0x200 [ 94.529695][ T6731] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.529722][ T6731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.529751][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.529775][ T6731] RIP: 0033:0x7f01719cebe9 [ 94.529793][ T6731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.529877][ T6731] RSP: 002b:00007f017042f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 94.529900][ T6731] RAX: ffffffffffffffda RBX: 00007f0171bf5fa0 RCX: 00007f01719cebe9 [ 94.529915][ T6731] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000340 [ 94.529997][ T6731] RBP: 00007f017042f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.530011][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.530026][ T6731] R13: 00007f0171bf6038 R14: 00007f0171bf5fa0 R15: 00007fffee9034f8 [ 94.530047][ T6731] [ 94.833610][ T6729] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.856327][ T6729] SELinux: failed to load policy [ 94.915254][ T6749] FAULT_INJECTION: forcing a failure. [ 94.915254][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 94.927977][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.4.981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.928076][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.928088][ T6749] Call Trace: [ 94.928097][ T6749] [ 94.928106][ T6749] __dump_stack+0x1d/0x30 [ 94.928129][ T6749] dump_stack_lvl+0xe8/0x140 [ 94.928150][ T6749] dump_stack+0x15/0x1b [ 94.928168][ T6749] should_fail_ex+0x265/0x280 [ 94.928188][ T6749] should_failslab+0x8c/0xb0 [ 94.928253][ T6749] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 94.928280][ T6749] ? sidtab_sid2str_get+0xa0/0x130 [ 94.928300][ T6749] kmemdup_noprof+0x2b/0x70 [ 94.928339][ T6749] sidtab_sid2str_get+0xa0/0x130 [ 94.928397][ T6749] security_sid_to_context_core+0x1eb/0x2e0 [ 94.928416][ T6749] security_sid_to_context_force+0x2a/0x40 [ 94.928437][ T6749] selinux_inode_getsecurity+0x2c4/0x2e0 [ 94.928587][ T6749] security_inode_getsecurity+0xcf/0xe0 [ 94.928616][ T6749] vfs_getxattr+0x140/0x250 [ 94.928637][ T6749] do_getxattr+0x124/0x2a0 [ 94.928658][ T6749] path_getxattrat+0x22c/0x2a0 [ 94.928804][ T6749] __x64_sys_fgetxattr+0x59/0x70 [ 94.928827][ T6749] x64_sys_call+0x1ab3/0x2ff0 [ 94.928899][ T6749] do_syscall_64+0xd2/0x200 [ 94.928923][ T6749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.928945][ T6749] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.928966][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.928986][ T6749] RIP: 0033:0x7f01719cebe9 [ 94.929060][ T6749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.929077][ T6749] RSP: 002b:00007f017042f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 94.929095][ T6749] RAX: ffffffffffffffda RBX: 00007f0171bf5fa0 RCX: 00007f01719cebe9 [ 94.929107][ T6749] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 94.929118][ T6749] RBP: 00007f017042f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.929129][ T6749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.929140][ T6749] R13: 00007f0171bf6038 R14: 00007f0171bf5fa0 R15: 00007fffee9034f8 [ 94.929222][ T6749] [ 95.455976][ T6782] loop6: detected capacity change from 0 to 128 [ 95.595573][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.679524][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.884353][ T6790] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 95.910851][ T6790] SELinux: failed to load policy [ 96.237339][ T6813] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.247857][ T6813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.339149][ T6813] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.349066][ T6813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.372133][ T6816] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 96.390183][ T6816] SELinux: failed to load policy [ 96.446048][ T6813] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.455983][ T6813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.548329][ T6813] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.558534][ T6813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.568463][ T6831] FAULT_INJECTION: forcing a failure. [ 96.568463][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 96.581155][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.6.1012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.581184][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.581197][ T6831] Call Trace: [ 96.581204][ T6831] [ 96.581214][ T6831] __dump_stack+0x1d/0x30 [ 96.581239][ T6831] dump_stack_lvl+0xe8/0x140 [ 96.581342][ T6831] dump_stack+0x15/0x1b [ 96.581358][ T6831] should_fail_ex+0x265/0x280 [ 96.581383][ T6831] should_failslab+0x8c/0xb0 [ 96.581412][ T6831] __kvmalloc_node_noprof+0x123/0x4e0 [ 96.581458][ T6831] ? bpf_test_run_xdp_live+0xed/0xfe0 [ 96.581480][ T6831] bpf_test_run_xdp_live+0xed/0xfe0 [ 96.581513][ T6831] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 96.581544][ T6831] ? __pfx_autoremove_wake_function+0x10/0x10 [ 96.581619][ T6831] ? 0xffffffffa0205240 [ 96.581633][ T6831] ? synchronize_rcu+0x45/0x320 [ 96.581663][ T6831] ? 0xffffffffa0205240 [ 96.581677][ T6831] ? 0xffffffffa0205240 [ 96.581699][ T6831] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 96.581793][ T6831] ? 0xffffffffa020c618 [ 96.581817][ T6831] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.581845][ T6831] bpf_prog_test_run_xdp+0x4f5/0x910 [ 96.581891][ T6831] ? __rcu_read_unlock+0x4f/0x70 [ 96.581913][ T6831] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.581936][ T6831] bpf_prog_test_run+0x227/0x390 [ 96.582008][ T6831] __sys_bpf+0x4b9/0x7b0 [ 96.582046][ T6831] __x64_sys_bpf+0x41/0x50 [ 96.582121][ T6831] x64_sys_call+0x2aea/0x2ff0 [ 96.582140][ T6831] do_syscall_64+0xd2/0x200 [ 96.582164][ T6831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.582186][ T6831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.582248][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.582275][ T6831] RIP: 0033:0x7f6434efebe9 [ 96.582372][ T6831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.582394][ T6831] RSP: 002b:00007f643395f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.582418][ T6831] RAX: ffffffffffffffda RBX: 00007f6435125fa0 RCX: 00007f6434efebe9 [ 96.582433][ T6831] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 96.582445][ T6831] RBP: 00007f643395f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.582460][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.582475][ T6831] R13: 00007f6435126038 R14: 00007f6435125fa0 R15: 00007fffab1a5128 [ 96.582573][ T6831] [ 96.856846][ T6124] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.865197][ T6124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.869793][ T6834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.914462][ T6124] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.922781][ T6124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.959461][ T6124] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.967809][ T6124] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.015040][ T6124] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.023375][ T6124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.107887][ T6844] loop6: detected capacity change from 0 to 128 [ 97.416864][ T6847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6847 comm=syz.1.1018 [ 97.664529][ T6855] SELinux: failed to load policy [ 97.869203][ T6869] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.879255][ T6869] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.893401][ T6866] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 97.901370][ T6866] SELinux: failed to load policy [ 97.938434][ T6869] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.948352][ T6869] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.969456][ T6869] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.979326][ T6869] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.019205][ T6869] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.029116][ T6869] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.096556][ T6882] loop6: detected capacity change from 0 to 128 [ 98.103258][ T6882] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.116794][ T6882] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.448449][ T6899] loop6: detected capacity change from 0 to 128 [ 98.692021][ T6901] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 98.713033][ T6901] SELinux: failed to load policy [ 98.889387][ T6910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6910 comm=syz.4.1042 [ 98.903419][ T6903] __nla_validate_parse: 40 callbacks suppressed [ 98.903434][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 98.918769][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 98.937153][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 98.946189][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 98.965434][ T6905] loop1: detected capacity change from 0 to 128 [ 98.974432][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 98.983512][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 99.190105][ T6925] loop6: detected capacity change from 0 to 128 [ 99.197998][ T6925] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.211061][ T6925] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.262941][ T6929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6929 comm=syz.1.1046 [ 99.294495][ T6931] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1047'. [ 99.303961][ T6931] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1047'. [ 99.340380][ T6937] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 99.349287][ T6937] SELinux: failed to load policy [ 99.452287][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 99.452342][ T29] audit: type=1326 audit(1755925077.716:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.5.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x0 [ 99.591964][ T6950] loop6: detected capacity change from 0 to 128 [ 99.868338][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 99.877310][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 100.664586][ T6970] loop6: detected capacity change from 0 to 128 [ 100.672512][ T6970] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.688687][ T6970] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.895010][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6981 comm=syz.4.1064 [ 101.015886][ T7000] tmpfs: Bad value for 'mpol' [ 101.025748][ T7000] loop6: detected capacity change from 0 to 1024 [ 101.032353][ T7002] loop1: detected capacity change from 0 to 128 [ 101.040019][ T7002] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.053428][ T7000] EXT4-fs: Ignoring removed nobh option [ 101.059226][ T7000] EXT4-fs: Ignoring removed bh option [ 101.067605][ T7002] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.086640][ T7000] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 101.342732][ T7013] loop6: detected capacity change from 0 to 128 [ 101.860923][ T7035] tmpfs: Bad value for 'mpol' [ 101.875950][ T7035] loop5: detected capacity change from 0 to 1024 [ 101.883028][ T7035] EXT4-fs: Ignoring removed nobh option [ 101.888839][ T7035] EXT4-fs: Ignoring removed bh option [ 101.896858][ T7035] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 101.956545][ T29] audit: type=1326 audit(1755925080.216:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7041 comm="syz.5.1088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x0 [ 102.018745][ T7048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7048 comm=syz.4.1091 [ 102.450394][ T6124] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.458847][ T6124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.540111][ T6124] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.548994][ T6124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.620502][ T6124] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.628771][ T6124] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.718195][ T6124] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.726584][ T6124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.888773][ T7080] tmpfs: Bad value for 'mpol' [ 102.972761][ T29] audit: type=1326 audit(1755925081.236:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 102.996362][ T29] audit: type=1326 audit(1755925081.236:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.022081][ T29] audit: type=1326 audit(1755925081.286:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.046036][ T29] audit: type=1326 audit(1755925081.286:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.070718][ T29] audit: type=1326 audit(1755925081.286:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.095800][ T29] audit: type=1326 audit(1755925081.366:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.119615][ T29] audit: type=1326 audit(1755925081.366:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.143240][ T29] audit: type=1326 audit(1755925081.366:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.5.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 103.297130][ T7109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7109 comm=syz.5.1113 [ 103.350775][ T7118] tmpfs: Bad value for 'mpol' [ 103.613611][ T7135] loop6: detected capacity change from 0 to 128 [ 103.620722][ T7135] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.634452][ T7135] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.098296][ T7141] __nla_validate_parse: 20 callbacks suppressed [ 104.098318][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1124'. [ 104.193154][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1124'. [ 104.202725][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1124'. [ 104.212475][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1124'. [ 104.249660][ T7147] veth0_to_team: entered promiscuous mode [ 104.255531][ T7147] veth0_to_team: entered allmulticast mode [ 104.293304][ T7151] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1129'. [ 104.307001][ T7151] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1129'. [ 104.423651][ T7161] loop5: detected capacity change from 0 to 512 [ 104.451903][ T7161] EXT4-fs: Ignoring removed bh option [ 104.460344][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 104.460369][ T29] audit: type=1326 audit(1755925082.716:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09e85ad84a code=0x7ffc0000 [ 104.490109][ T29] audit: type=1326 audit(1755925082.716:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09e85ad84a code=0x7ffc0000 [ 104.513947][ T29] audit: type=1326 audit(1755925082.716:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f09e85ad457 code=0x7ffc0000 [ 104.521368][ T7161] EXT4-fs: dax option not supported [ 104.537537][ T29] audit: type=1326 audit(1755925082.716:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f09e85b038a code=0x7ffc0000 [ 104.583833][ T7165] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.597142][ T29] audit: type=1326 audit(1755925082.866:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09e85ad550 code=0x7ffc0000 [ 104.620888][ T29] audit: type=1326 audit(1755925082.866:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09e85ae7eb code=0x7ffc0000 [ 104.644822][ T29] audit: type=1326 audit(1755925082.866:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09e85ad84a code=0x7ffc0000 [ 104.668574][ T29] audit: type=1326 audit(1755925082.866:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 104.692722][ T29] audit: type=1326 audit(1755925082.956:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.5.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 104.721343][ T29] audit: type=1326 audit(1755925082.986:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.4.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01719cebe9 code=0x7ffc0000 [ 104.797818][ T7165] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.830430][ T7175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7175 comm=syz.5.1139 [ 104.858385][ T7165] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.908989][ T7165] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.937098][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 104.947628][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 104.957388][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 104.966815][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 104.984842][ T6134] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.998091][ T6147] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.010914][ T6147] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.023824][ T6147] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.092354][ T7196] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 105.101256][ T7196] SELinux: failed to load policy [ 105.135539][ T7200] netlink: 'syz.6.1148': attribute type 1 has an invalid length. [ 105.383135][ T7217] tmpfs: Bad value for 'mpol' [ 105.384778][ T7216] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.444961][ T7216] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.464719][ T7224] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 105.473186][ T7224] SELinux: failed to load policy [ 105.508962][ T7216] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.519056][ T7228] loop1: detected capacity change from 0 to 2048 [ 105.529718][ T7230] tmpfs: Bad value for 'mpol' [ 105.543277][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.564273][ T7228] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1160: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 105.581936][ T7228] EXT4-fs (loop1): Remounting filesystem read-only [ 105.599055][ T7216] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.614087][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.668790][ T7239] netlink: 'syz.6.1162': attribute type 4 has an invalid length. [ 106.392412][ T7257] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 106.401224][ T7257] SELinux: failed to load policy [ 106.673432][ T7264] loop1: detected capacity change from 0 to 2048 [ 106.693516][ T7264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.708935][ T7264] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1174: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 106.725673][ T7264] EXT4-fs (loop1): Remounting filesystem read-only [ 106.796651][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.244941][ T7279] tmpfs: Bad value for 'mpol' [ 107.275663][ T7279] loop6: detected capacity change from 0 to 1024 [ 107.300331][ T7279] EXT4-fs: Ignoring removed nobh option [ 107.305938][ T7279] EXT4-fs: Ignoring removed bh option [ 107.358420][ T7279] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 107.412275][ T7284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7284 comm=syz.1.1175 [ 107.435648][ T7287] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 107.443631][ T7287] SELinux: failed to load policy [ 107.480565][ T7293] tmpfs: Bad value for 'mpol' [ 107.522160][ T7296] loop5: detected capacity change from 0 to 2048 [ 107.557817][ T7296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.571060][ T7296] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1186: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 107.587998][ T7296] EXT4-fs (loop5): Remounting filesystem read-only [ 107.686993][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.117744][ T7305] veth0_to_team: entered promiscuous mode [ 108.128840][ T7305] loop5: detected capacity change from 0 to 1024 [ 108.135881][ T7305] EXT4-fs: inline encryption not supported [ 108.149513][ T7305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.461960][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.474653][ T7327] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 108.489898][ T7327] SELinux: failed to load policy [ 108.508764][ T7329] gretap1: entered promiscuous mode [ 108.528083][ T7329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7329 comm=syz.6.1198 [ 108.551543][ T7334] tmpfs: Bad value for 'mpol' [ 108.791118][ T7354] loop5: detected capacity change from 0 to 128 [ 108.979312][ T7361] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 109.018278][ T7361] SELinux: failed to load policy [ 109.352084][ T7367] veth0_to_team: entered promiscuous mode [ 109.354710][ T7371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7371 comm=syz.0.1222 [ 109.357954][ T7367] veth0_to_team: entered allmulticast mode [ 109.382673][ T7367] loop6: detected capacity change from 0 to 1024 [ 109.403275][ T7367] EXT4-fs: inline encryption not supported [ 109.440702][ T7377] tmpfs: Bad value for 'mpol' [ 109.488904][ T7367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.502612][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 109.502627][ T29] audit: type=1326 audit(1755925087.766:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6434efd550 code=0x7ffc0000 [ 109.532558][ T29] audit: type=1326 audit(1755925087.766:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6434efd937 code=0x7ffc0000 [ 109.556012][ T29] audit: type=1326 audit(1755925087.766:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6434efd550 code=0x7ffc0000 [ 109.579606][ T29] audit: type=1326 audit(1755925087.766:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 109.643114][ T7385] __nla_validate_parse: 12 callbacks suppressed [ 109.643131][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 109.671305][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 109.688687][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 109.701861][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 109.712486][ T29] audit: type=1326 audit(1755925087.766:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 109.736260][ T29] audit: type=1326 audit(1755925087.866:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 109.801315][ T7398] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 109.809640][ T7398] SELinux: failed to load policy [ 109.812570][ T7392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7392 comm=syz.0.1223 [ 109.842029][ T6138] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.852933][ T6138] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.865080][ T6138] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.886828][ T6138] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.926771][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7405 comm=syz.4.1227 [ 109.955341][ T7403] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.965491][ T29] audit: type=1326 audit(1755925088.206:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 109.965571][ T29] audit: type=1326 audit(1755925088.206:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.6.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6434efebe9 code=0x7ffc0000 [ 110.012857][ T29] audit: type=1326 audit(1755925088.216:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 110.036956][ T29] audit: type=1326 audit(1755925088.216:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09e85aebe9 code=0x7ffc0000 [ 110.088769][ T7403] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.103561][ T4880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.178848][ T7403] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.298109][ T7403] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.461333][ T6124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.515694][ T6124] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.553521][ T7425] loop6: detected capacity change from 0 to 512 [ 110.635198][ T6124] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.652282][ T7425] EXT4-fs: Ignoring removed bh option [ 110.670052][ T6124] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.678534][ T7425] EXT4-fs: dax option not supported [ 110.730181][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 110.758519][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 110.786806][ T7438] tmpfs: Bad value for 'mpol' [ 110.797435][ T7429] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 110.806502][ T7439] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 110.814330][ T7439] SELinux: failed to load policy [ 110.836266][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 110.845405][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 110.854517][ T7438] loop6: detected capacity change from 0 to 1024 [ 110.860037][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7441 comm=syz.1.1241 [ 110.866668][ T7438] EXT4-fs: Ignoring removed nobh option [ 110.879528][ T7438] EXT4-fs: Ignoring removed bh option [ 110.908477][ T7438] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 111.134970][ T7458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7458 comm=syz.6.1247 [ 111.280843][ T7465] lo speed is unknown, defaulting to 1000 [ 112.000613][ T7477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7477 comm=syz.0.1263 [ 112.017132][ T7479] smc: net device bond0 applied user defined pnetid SYZ0 [ 112.033013][ T7485] loop5: detected capacity change from 0 to 2048 [ 112.047732][ T7479] smc: net device bond0 erased user defined pnetid SYZ0 [ 112.089670][ T7485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.158207][ T7485] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1255: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 112.257672][ T7485] EXT4-fs (loop5): Remounting filesystem read-only [ 112.274078][ T7500] tmpfs: Bad value for 'mpol' [ 112.304586][ T7500] loop6: detected capacity change from 0 to 1024 [ 112.348423][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.364079][ T7500] EXT4-fs: Ignoring removed nobh option [ 112.369800][ T7500] EXT4-fs: Ignoring removed bh option [ 112.438559][ T7500] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 112.597108][ T7520] netlink: 'syz.5.1262': attribute type 4 has an invalid length. [ 112.701804][ T7527] loop6: detected capacity change from 0 to 128 [ 112.712017][ T7527] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.745304][ T7527] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.828941][ T7534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7534 comm=syz.4.1273 [ 112.994370][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 113.007068][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 113.038274][ T7550] tmpfs: Bad value for 'mpol' [ 113.129810][ T7550] loop6: detected capacity change from 0 to 1024 [ 113.142027][ T7550] EXT4-fs: Ignoring removed nobh option [ 113.147669][ T7550] EXT4-fs: Ignoring removed bh option [ 113.419808][ T7550] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 113.569781][ T7562] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.677170][ T7562] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.787530][ T7562] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.831243][ T7587] tmpfs: Bad value for 'mpol' [ 113.839183][ T7562] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.026694][ T7616] netlink: 'syz.5.1305': attribute type 4 has an invalid length. [ 114.051844][ T7619] tmpfs: Bad value for 'mpol' [ 114.065199][ T7619] loop6: detected capacity change from 0 to 1024 [ 114.074482][ T7619] EXT4-fs: Ignoring removed nobh option [ 114.080445][ T7619] EXT4-fs: Ignoring removed bh option [ 114.196356][ T7619] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 114.477610][ T7661] tmpfs: Bad value for 'mpol' [ 114.612762][ T7677] blktrace: Concurrent blktraces are not allowed on loop1 [ 114.716630][ T7684] __nla_validate_parse: 26 callbacks suppressed [ 114.716650][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 114.748456][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 114.761648][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 114.818010][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 114.929865][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 114.929959][ T29] audit: type=1326 audit(1755925093.186:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7687 comm="syz.0.1345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ea61ebe9 code=0x0 [ 114.989103][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 114.999689][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 115.009375][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 115.020236][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 115.463649][ T7714] loop5: detected capacity change from 0 to 128 [ 115.472435][ T7714] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.521796][ T7714] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.591629][ T7716] loop5: detected capacity change from 0 to 2048 [ 115.621597][ T7716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.635950][ T7716] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.1357: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 115.654683][ T7716] EXT4-fs (loop5): Remounting filesystem read-only [ 115.673980][ T3857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.778783][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 115.789659][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 115.808648][ T7733] netlink: 'syz.0.1362': attribute type 4 has an invalid length. [ 115.875368][ T7739] tmpfs: Bad value for 'mpol' [ 115.887524][ T7739] loop5: detected capacity change from 0 to 1024 [ 115.894615][ T7739] EXT4-fs: Ignoring removed nobh option [ 115.900411][ T7739] EXT4-fs: Ignoring removed bh option [ 115.967751][ T7739] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 115.979652][ T29] audit: type=1326 audit(1755925094.096:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.0.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 116.004048][ T29] audit: type=1326 audit(1755925094.096:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.0.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 116.027797][ T29] audit: type=1326 audit(1755925094.096:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.0.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 116.051410][ T29] audit: type=1326 audit(1755925094.096:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7727 comm="syz.0.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ea61ebe9 code=0x7ffc0000 [ 116.222150][ T6136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.240052][ T6136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.283676][ T6136] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.346915][ T6136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.372245][ T7749] loop6: detected capacity change from 0 to 2048 [ 116.580096][ T7768] SELinux: failed to load policy [ 116.631655][ T7749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.673480][ T29] audit: type=1326 audit(1755925094.936:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 116.697200][ T29] audit: type=1326 audit(1755925094.936:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 116.721449][ T7749] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1371: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 116.741145][ T7749] EXT4-fs (loop6): Remounting filesystem read-only [ 116.756379][ T29] audit: type=1326 audit(1755925095.016:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 116.805312][ T7774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.837479][ T4880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.845612][ T29] audit: type=1326 audit(1755925095.016:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 116.870220][ T29] audit: type=1326 audit(1755925095.046:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.1.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54bda5ebe9 code=0x7ffc0000 [ 116.910813][ T7774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.971686][ T7793] tmpfs: Bad value for 'mpol' [ 116.988338][ T7799] SELinux: failed to load policy [ 116.993597][ T7793] loop6: detected capacity change from 0 to 1024 [ 117.001996][ T7774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.020788][ T7793] EXT4-fs: Ignoring removed nobh option [ 117.026440][ T7793] EXT4-fs: Ignoring removed bh option [ 117.048629][ T7774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.060151][ T7793] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 117.073033][ T4920] ================================================================== [ 117.081151][ T4920] BUG: KCSAN: data-race in set_nlink / set_nlink [ 117.087585][ T4920] [ 117.089911][ T4920] read to 0xffff8881070f1d28 of 4 bytes by task 2993 on cpu 1: [ 117.097453][ T4920] set_nlink+0x29/0xb0 [ 117.101533][ T4920] kernfs_iop_permission+0x1e2/0x220 [ 117.106828][ T4920] inode_permission+0x1ca/0x310 [ 117.111697][ T4920] link_path_walk+0x162/0x900 [ 117.116503][ T4920] path_lookupat+0x63/0x2a0 [ 117.121035][ T4920] filename_lookup+0x147/0x340 [ 117.125822][ T4920] vfs_statx+0x9d/0x390 [ 117.130004][ T4920] vfs_fstatat+0x115/0x170 [ 117.134433][ T4920] __se_sys_newfstatat+0x55/0x260 [ 117.139508][ T4920] __x64_sys_newfstatat+0x55/0x70 [ 117.144633][ T4920] x64_sys_call+0x135a/0x2ff0 [ 117.149328][ T4920] do_syscall_64+0xd2/0x200 [ 117.153843][ T4920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.159742][ T4920] [ 117.162086][ T4920] write to 0xffff8881070f1d28 of 4 bytes by task 4920 on cpu 0: [ 117.169886][ T4920] set_nlink+0x99/0xb0 [ 117.173966][ T4920] kernfs_iop_permission+0x1e2/0x220 [ 117.179359][ T4920] inode_permission+0x1ca/0x310 [ 117.184222][ T4920] link_path_walk+0x162/0x900 [ 117.188921][ T4920] path_openat+0x1de/0x2170 [ 117.193513][ T4920] do_filp_open+0x109/0x230 [ 117.198329][ T4920] do_sys_openat2+0xa6/0x110 [ 117.202930][ T4920] __x64_sys_openat+0xf2/0x120 [ 117.207714][ T4920] x64_sys_call+0x2e9c/0x2ff0 [ 117.212398][ T4920] do_syscall_64+0xd2/0x200 [ 117.216911][ T4920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.222843][ T4920] [ 117.225169][ T4920] value changed: 0x00000009 -> 0x00000008 [ 117.230883][ T4920] [ 117.233205][ T4920] Reported by Kernel Concurrency Sanitizer on: [ 117.239366][ T4920] CPU: 0 UID: 0 PID: 4920 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.248686][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.259266][ T4920] ================================================================== [ 117.287471][ T7787] loop5: detected capacity change from 0 to 128 [ 117.313874][ T6136] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.330308][ T6138] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.341815][ T6138] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.350210][ T6138] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0