last executing test programs: 47.127727291s ago: executing program 0 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x9, 0x9}, {0xfff1, 0x6}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="850000008800000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010100, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xb60, 0x200, 0x43, 0xa0, 0x0, 0x98, 0xac8, 0x178, 0x178, 0xac8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x200, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x7, 0x4, 0x3, 0x4, 0x5], 0x3}, {0x1, [0x0, 0x3, 0x3, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x5}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x1}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xbc0) 45.606673761s ago: executing program 0 (id=104): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x92, 0x3}, 0x100002, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="779126b8280000000400000000e8b7b92dc9821f14000000000000000000000000f281f7a4eabf4cb9827b7c0f60c020414032b51511b4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x81, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x17, 0xc, &(0x7f0000000cc0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r3, @ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x35, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x800048, &(0x7f0000000180), 0x1, 0x441, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800000000000000806c0000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000029b0000fcffffff8400000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001340)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xf, 0x6, 0x300}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=[{0x2, 0x5, 0xa, 0x2}], 0x10, 0x7}, 0x94) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x8, @local, 0xa}, {0xa, 0x4e22, 0x23719885, @local, 0x8}, 0x0, {[0x5, 0x0, 0x1, 0x2, 0x4, 0x401, 0x261, 0xffffffe7]}}, 0x5c) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 45.280000843s ago: executing program 0 (id=110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) 45.234743707s ago: executing program 0 (id=112): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f0000000a00), 0x84000) (async) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x2, 0x0, 0x2, 0x7f, 0x4}, @call={0x85, 0x0, 0x0, 0xc8}, @cb_func={0x18, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xae0cee19dc6beb0f, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x9b, 0x6e, &(0x7f0000000300)=""/110, 0x41000, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x8, 0x10, 0x4}, 0x10, 0x2629b, r2, 0x5, &(0x7f0000000600)=[r2], &(0x7f0000000640)=[{0x1, 0x5, 0xd, 0x4}, {0x1, 0x3, 0x7, 0xc}, {0x2, 0x1, 0xd, 0xa}, {0x2, 0x4, 0x6, 0x7}, {0x4, 0x4, 0xb, 0x4}], 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="fffffffff55286990914593186dd6087fb00000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204", @ANYRES64], 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x18) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x4000000000000, 0x200}) (async) r8 = syz_clone(0x600, &(0x7f0000000840)="4aed19e6f25c895e17a8cc046a0fca8e276116e8a47c07ead90947642f9a860814bd86f3ae6b8f126a5d8e1155c1dc4977e2898f2782992ca310b0866517149aa9fdaef1bd6eef08fb998b2d46b4e5b024718f457911f5eea6ef6b9df3ecd14c9ef1b4d926d153fb44a8a8ae58b7a0ff9f764dc05fa9f893b675142c966f5cec0c5432cd76e576f8b0b9092d729f7cb5fcca9394b20158038f6927704d5c0b2136c5826c4c27e447c63f3eefea7a5670a468b59c06702c9a7be4d349f33a9b068273b8a2c35cfbd017413ec065e1df569a388ef6536f1d57da9245d0bed733060c829b492fb096aaa5ad5d72a2c1", 0xee, &(0x7f0000000080), &(0x7f0000000940), &(0x7f0000000980)="3ee827160e40c3d071804cb39fe2c837f5ebd185aa5bf90ac742f907ddf039a6430a6c56bc11ccbcc14092319e19fe440873dced1e00707aee6cf6807e69abb5fcc35ecffdc8b4d77dddf27444d387d91f5aaac9b29690a2e025a1525830cd1306267e") syz_pidfd_open(r8, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) listen(r1, 0x0) (async) shutdown(r0, 0x0) (async) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r9 = accept(r1, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x44000850, 0x0, 0x0) 44.935584897s ago: executing program 0 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 44.271002832s ago: executing program 0 (id=128): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 44.270797583s ago: executing program 32 (id=128): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 4.044776022s ago: executing program 5 (id=760): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de85000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.914619235s ago: executing program 5 (id=762): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0xd}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c805}, 0x84f15760e46f5ea5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 3.76641429s ago: executing program 5 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.694696347s ago: executing program 5 (id=766): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000180)="ae9a562ff5d1c26f9c94e995b4abc004f2628a", 0x13}, {0x0}], 0x2, 0xfffff, 0x10000, 0x3) r3 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) sched_getattr(0x0, &(0x7f0000000300)={0x38}, 0x38, 0x0) dup3(r3, r1, 0x0) finit_module(r3, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000005c0)={@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, {&(0x7f0000002380)=""/4096, 0x1000}, &(0x7f0000000340), 0x2}, 0xa0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='bcache_read\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.551615991s ago: executing program 5 (id=772): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de85000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.349158471s ago: executing program 4 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711872000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r4, &(0x7f00000012c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffb, 0x5, 0x3, 0x14, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001100)=0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="391f73a6269175b5230dc63b0d8874", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10048082}, 0x2404c850) syz_open_dev$vcsu(&(0x7f0000000200), 0x5, 0x803) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x10000008ebc, 0x0) splice(r9, 0x0, r12, 0x0, 0x25a5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x462d02, 0x60) 3.200052056s ago: executing program 5 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.199853226s ago: executing program 33 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.419953522s ago: executing program 4 (id=785): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) fcntl$setlease(r2, 0x400, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x2439, &(0x7f0000000700)={0x0, 0x1064, 0x1000, 0x2, 0x69}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r4, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 2.23643186s ago: executing program 4 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") fsmount(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r2, 0x1}}, 0x18) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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"/4097, 0x1001}], 0x3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(r4) 2.076679576s ago: executing program 4 (id=791): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, r0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x88, 0x1, [@m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x55, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xf4, 0x2, [@TCA_BPF_ACT={0xf0, 0x1, [@m_connmark={0xec, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x3, 0x3, 0x1}}}]}, {0x9d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f8880"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./bus\x00') perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x1, 0x0, 0xff, 0x0, 0x7, 0x80180, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x3401, 0x3, 0x96, 0x9, 0x5, 0x0, 0x5, 0x0, 0x23, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r3) r8 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x2, 0x3a1}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x6) ioctl$TCSBRKP(r9, 0x5425, 0x80000000) close_range(r8, 0xffffffffffffffff, 0x0) 1.712287882s ago: executing program 4 (id=796): sched_setscheduler(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) shmdt(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) munlockall() 1.607295172s ago: executing program 2 (id=798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 1.490769844s ago: executing program 2 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") fsmount(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r2, 0x1}}, 0x18) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a4962461caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a267600"/4097, 0x1001}], 0x3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) 1.240058168s ago: executing program 3 (id=800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 1) 1.229796379s ago: executing program 2 (id=801): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.206472952s ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") fsmount(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r2, 0x1}}, 0x18) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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"/4097, 0x1001}], 0x3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(0xffffffffffffffff) 1.142194888s ago: executing program 2 (id=803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x88c7, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f", 0x11}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {0x0}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf3", 0xb2}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 991.725833ms ago: executing program 3 (id=806): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, r0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x88, 0x1, [@m_simple={0x84, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x55, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xf4, 0x2, [@TCA_BPF_ACT={0xf0, 0x1, [@m_connmark={0xec, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x3, 0x3, 0x1}}}]}, {0x9d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f8880"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./bus\x00') perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x1, 0x0, 0xff, 0x0, 0x7, 0x80180, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x3401, 0x3, 0x96, 0x9, 0x5, 0x0, 0x5, 0x0, 0x23, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r3) r8 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x2, 0x3a1}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x6) ioctl$TCSBRKP(r9, 0x5425, 0x80000000) close_range(r8, 0xffffffffffffffff, 0x0) 952.537497ms ago: executing program 1 (id=807): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x9c00, 0x0, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40040) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001b00000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @local}, &(0x7f0000000280)=0xc) pipe2(&(0x7f0000000380), 0x800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x4) 792.914592ms ago: executing program 4 (id=808): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={[{@clone_children}, {@noprefix}, {@noprefix}, {}, {@name={'name', 0x3d, ':{*'}}], [{@obj_user={'obj_user', 0x3d, '\\(.@+^'}}, {@seclabel}]}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, &(0x7f00000021c0)=[{0x4, 0xfffffffd, 0x5}], 0x1, 0x92c, 0x0, 0x0, 0x0, 0x6}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ext4_discard_blocks\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 698.641352ms ago: executing program 1 (id=809): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cbe030000000000008500000083000000bf61090009010000000000950000007e00000000000000b7000000000000009500000000000000000000f6ffff000000eeafd09c46842662087eb5312fc36e4cd3e6a5c4650fba396a6878f61e5fbb55641664e3306b4fd1f84a0b38f589ac2c3d7166f1ee5127ba3ec28ec32bf34f7a392345acc7a01b3ed82dd7b9375687c9a8c77be60a43cbb50e68c360314136bc20a106"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x4, 0x2, 0xffffffffffffffff, 0x5, 0x7ff]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x5, 0x3, 0x44000, 0xffffffffffffffff, 0xd68, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x82, 0x1}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000002, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000000c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 698.087402ms ago: executing program 3 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 646.366997ms ago: executing program 3 (id=811): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x400000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)={&(0x7f0000000680)=""/157, 0x9d, 0x0, &(0x7f0000000740)=""/238, 0xee}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f1b}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000240)='GPL\x00', 0xe6, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x16, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x8, 0xb9fd}, 0x10, r7, r4, 0x0, &(0x7f0000000380)=[r5, r3], 0x0, 0x10, 0x9716}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 601.775421ms ago: executing program 1 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x9, 0x9}, {0xfff1, 0x6}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfb, {0x0, 0x0, 0x0, r11, {0xd}, {0xffff}, {0x7, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="850000008800000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010100, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xb60, 0x200, 0x43, 0xa0, 0x0, 0x98, 0xac8, 0x178, 0x178, 0xac8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x200, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x7, 0x4, 0x3, 0x4, 0x5], 0x3}, {0x1, [0x0, 0x3, 0x3, 0x4], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x5}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x1}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xbc0) 439.999707ms ago: executing program 3 (id=813): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r0, 0x0, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f50000030004000000000060cba70100de0601fe8000000000000000000000000000aa7f0000000000000000000000000000003a02040108500000fc0000000000000000000000000000004e214e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="41020008907806c9fe0af9891445b0695cf6080affffffff000000000303002208efbdd6acd99c040943504c27c9dc19050e0000000300000007000000050303680000007022fd014abfea2e4469e46cc69253908cbb041e17a491703784f6a155edfda24d15ce212f490a20f923e09f42c059adc4b8195fdecff2e78e625197b541c3af51566eddcf17c974c7a3e32dc6bf6883a205643a85191a11da72e909decad3c42c76d7971fdbe6c026baee0d80d660fb64ebd366196e"], 0x114) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r1], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000d4908fb3d0b89ee80770cd1823f01e343c6a4aa1e46b093f59e3c926c60c0e1b7d5d32a0f1db9997383b06f677daed94e1c4419f08a433f5db5d0576bc220380167677f265ad7b3508191f48f03ef45038094a20b7e64f851a10aa278e035686c28132a7353f36cfd2335815eb6ca181594a26cfd0b0136d1867e1eca9a57135a9ceb9e237414f4dd8c68c6678447a237139880c7f615a7754aaa465f2d5ec0842b15dc893502d96da8f7ee47f88c94fdd03efb8d79da2bb1641ef02ad784b9aa9f1330240bef92bedf4069d4377fa083156f87bc673feb2e92eb20605e277694f46399d31e1f278471e3449fc2a2fc54ce075d1ca36b0f8ee5f8bf908b23ab98ed7b932b240a584ca01c9a2eeaa94c6ff3e2246a3c3666ca4a6855de84c608ac3c4d0143688f055aa8ffd5ad283dd675cbf84bb1820cf756d1394c645199e5df5d54d1d33841a3ce5d73e20f9a385a4dcf973ca670e50bc3113552f01d28f391566afe9c24480270c33e963f6b153dac2618a44644b297806761246c81c4fcfc1b5af6596320e1ce186bf3c4f4f45d187f39d507ba4ddc704b0141feb5f4573874ad22f414064500ad7038b7ba3c96232294c231c3567f4b43009fa6d9824", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000400850000006a00006085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}, {0x7, 0xf8, 0x99, 0xc}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 335.714588ms ago: executing program 1 (id=814): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x20}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) 315.335519ms ago: executing program 1 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") fsmount(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r2, 0x1}}, 0x18) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080), 0x79}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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"/4097, 0x1001}], 0x3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(0xffffffffffffffff) 258.467805ms ago: executing program 2 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) close(r0) 87.556382ms ago: executing program 2 (id=817): sched_setscheduler(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) shmdt(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munlockall() 0s ago: executing program 1 (id=818): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x82}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): netlink: 2028 bytes leftover after parsing attributes in process `syz.5.227'. [ 57.446319][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.227'. [ 57.476686][ T4235] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 57.530261][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.566147][ T4240] loop2: detected capacity change from 0 to 256 [ 57.663249][ T4245] FAULT_INJECTION: forcing a failure. [ 57.663249][ T4245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.676440][ T4245] CPU: 0 UID: 0 PID: 4245 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.676509][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.676522][ T4245] Call Trace: [ 57.676529][ T4245] [ 57.676537][ T4245] __dump_stack+0x1d/0x30 [ 57.676608][ T4245] dump_stack_lvl+0xe8/0x140 [ 57.676631][ T4245] dump_stack+0x15/0x1b [ 57.676647][ T4245] should_fail_ex+0x265/0x280 [ 57.676747][ T4245] should_fail+0xb/0x20 [ 57.676835][ T4245] should_fail_usercopy+0x1a/0x20 [ 57.676863][ T4245] _copy_to_user+0x20/0xa0 [ 57.676889][ T4245] simple_read_from_buffer+0xb5/0x130 [ 57.676919][ T4245] proc_fail_nth_read+0x10e/0x150 [ 57.677019][ T4245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.677054][ T4245] vfs_read+0x1a8/0x770 [ 57.677082][ T4245] ? exc_page_fault+0x62/0xa0 [ 57.677104][ T4245] ? __rcu_read_unlock+0x4f/0x70 [ 57.677208][ T4245] ? __fget_files+0x184/0x1c0 [ 57.677237][ T4245] ksys_read+0xda/0x1a0 [ 57.677269][ T4245] __x64_sys_read+0x40/0x50 [ 57.677295][ T4245] x64_sys_call+0x27c0/0x3000 [ 57.677339][ T4245] do_syscall_64+0xd2/0x200 [ 57.677362][ T4245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.677397][ T4245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.677446][ T4245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.677476][ T4245] RIP: 0033:0x7f0554e0d8dc [ 57.677494][ T4245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.677516][ T4245] RSP: 002b:00007f0553877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.677541][ T4245] RAX: ffffffffffffffda RBX: 00007f0555065fa0 RCX: 00007f0554e0d8dc [ 57.677554][ T4245] RDX: 000000000000000f RSI: 00007f05538770a0 RDI: 0000000000000003 [ 57.677619][ T4245] RBP: 00007f0553877090 R08: 0000000000000000 R09: 0000000000000000 [ 57.677632][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.677645][ T4245] R13: 00007f0555066038 R14: 00007f0555065fa0 R15: 00007ffe6aae5b48 [ 57.677669][ T4245] [ 58.035863][ T4253] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 58.052528][ T4253] team0: Port device dummy0 added [ 58.128214][ T4253] syz.4.242 (4253) used greatest stack depth: 9456 bytes left [ 58.298767][ T4274] loop3: detected capacity change from 0 to 256 [ 58.315882][ T4278] sd 0:0:1:0: device reset [ 58.329122][ T4265] loop2: detected capacity change from 0 to 512 [ 58.370552][ T4270] netlink: 'syz.4.247': attribute type 4 has an invalid length. [ 58.391091][ T4265] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.409364][ T4270] netlink: 'syz.4.247': attribute type 4 has an invalid length. [ 58.429768][ T4265] EXT4-fs (loop2): mount failed [ 58.480553][ T4289] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 58.574260][ T4295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.259'. [ 59.014924][ T4321] tipc: Enabled bearer , priority 0 [ 59.043433][ T4321] syzkaller0: entered promiscuous mode [ 59.048975][ T4321] syzkaller0: entered allmulticast mode [ 59.059319][ T4321] tipc: Resetting bearer [ 59.068546][ T4321] Cannot find add_set index 2 as target [ 59.075429][ T4320] tipc: Resetting bearer [ 59.083612][ T4320] tipc: Disabling bearer [ 59.182396][ T4334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4334 comm=syz.3.268 [ 59.213317][ T4338] bond2: option miimon: invalid value (18446744073709551615) [ 59.220888][ T4338] bond2: option miimon: allowed values 0 - 2147483647 [ 59.229118][ T4338] bond2 (unregistering): Released all slaves [ 59.286691][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 59.286708][ T29] audit: type=1400 audit(1760260474.849:1506): avc: denied { create } for pid=4336 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.320278][ T29] audit: type=1400 audit(1760260474.879:1507): avc: denied { ioctl } for pid=4336 comm="syz.2.272" path="socket:[8155]" dev="sockfs" ino=8155 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.367059][ T29] audit: type=1400 audit(1760260474.929:1508): avc: denied { mounton } for pid=4336 comm="syz.2.272" path="/syzcgroup/net/syz2/devices.allow" dev="cgroup" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 59.391780][ T29] audit: type=1400 audit(1760260474.929:1509): avc: denied { setopt } for pid=4336 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.438770][ T29] audit: type=1400 audit(1760260474.999:1510): avc: denied { module_load } for pid=4349 comm="syz.2.276" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 59.445667][ T4350] syz.2.276 uses obsolete (PF_INET,SOCK_PACKET) [ 59.476198][ T4350] netlink: 'syz.2.276': attribute type 29 has an invalid length. [ 59.873175][ T29] audit: type=1326 audit(1760260475.439:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8305ceec9 code=0x7ffc0000 [ 59.896957][ T29] audit: type=1326 audit(1760260475.439:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8305ceec9 code=0x7ffc0000 [ 59.921390][ T29] audit: type=1326 audit(1760260475.439:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.5.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 59.945485][ T29] audit: type=1326 audit(1760260475.439:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.5.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 59.969028][ T29] audit: type=1326 audit(1760260475.439:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.5.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 60.158796][ T4370] tipc: Enabled bearer , priority 0 [ 60.171051][ T4370] syzkaller0: entered promiscuous mode [ 60.176698][ T4370] syzkaller0: entered allmulticast mode [ 60.205474][ T4370] tipc: Resetting bearer [ 60.257276][ T4366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 60.263859][ T4366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 60.271970][ T4366] vhci_hcd vhci_hcd.0: Device attached [ 60.434540][ T4370] Cannot find add_set index 2 as target [ 60.450912][ T3401] vhci_hcd: vhci_device speed not set [ 60.462750][ T4369] tipc: Resetting bearer [ 60.470064][ T4369] tipc: Disabling bearer [ 60.473214][ T4350] syz.2.276 (4350) used greatest stack depth: 7240 bytes left [ 60.508259][ T4374] loop3: detected capacity change from 0 to 512 [ 60.515188][ T3401] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 60.546751][ T4373] netlink: 148 bytes leftover after parsing attributes in process `syz.5.284'. [ 60.556962][ T4385] xt_CONNSECMARK: invalid mode: 66 [ 60.557949][ T4374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.576127][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.284'. [ 60.585393][ T4374] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.606598][ T4374] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.629523][ T4373] tmpfs: Bad value for 'mpol' [ 60.656946][ T4377] vhci_hcd: connection reset by peer [ 60.663617][ T52] vhci_hcd: stop threads [ 60.668122][ T52] vhci_hcd: release socket [ 60.672565][ T52] vhci_hcd: disconnect device [ 60.694301][ T4387] cgroup: Invalid name [ 60.729102][ T4382] loop9: detected capacity change from 0 to 7 [ 60.735727][ T4382] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.743656][ T4382] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.751535][ T4382] loop9: unable to read partition table [ 60.757367][ T4382] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 60.757367][ T4382] ) failed (rc=-5) [ 60.798127][ T4390] loop4: detected capacity change from 0 to 1024 [ 60.805031][ T4390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.847646][ T4390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 60.856069][ T4398] loop1: detected capacity change from 0 to 4096 [ 60.865096][ T4398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.872397][ T4390] System zones: 0-1, 3-12 [ 60.878118][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.891539][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.940466][ T4407] xt_CONNSECMARK: invalid mode: 66 [ 60.973596][ T4387] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 60.988554][ T4387] EXT4-fs (loop4): can't enable nombcache during remount [ 61.003541][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.046806][ T4413] hub 9-0:1.0: USB hub found [ 61.052429][ T4413] hub 9-0:1.0: 8 ports detected [ 61.058056][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.098901][ T4417] loop5: detected capacity change from 0 to 128 [ 61.111535][ T4419] tipc: Started in network mode [ 61.116480][ T4419] tipc: Node identity 268951b023f, cluster identity 4711 [ 61.123621][ T4419] tipc: Enabled bearer , priority 0 [ 61.149391][ T4419] syzkaller0: entered promiscuous mode [ 61.155089][ T4419] syzkaller0: entered allmulticast mode [ 61.166043][ T4420] loop4: detected capacity change from 0 to 8192 [ 61.184467][ T4419] tipc: Resetting bearer [ 61.192180][ T4419] Cannot find add_set index 2 as target [ 61.198707][ T4416] tipc: Resetting bearer [ 61.215768][ T4416] tipc: Disabling bearer [ 61.223933][ T4420] loop4: p2 p3 p4 [ 61.227919][ T4420] loop4: p2 start 164919041 is beyond EOD, truncated [ 61.234935][ T4420] loop4: p3 size 66846464 extends beyond EOD, truncated [ 61.257650][ T4420] loop4: p4 size 37048832 extends beyond EOD, truncated [ 61.288064][ T4420] bridge0: entered promiscuous mode [ 61.300623][ T4420] bridge0: port 3(macsec1) entered blocking state [ 61.307430][ T4420] bridge0: port 3(macsec1) entered disabled state [ 61.314349][ T4420] macsec1: entered allmulticast mode [ 61.319734][ T4420] bridge0: entered allmulticast mode [ 61.332933][ T4420] macsec1: left allmulticast mode [ 61.338286][ T4420] bridge0: left allmulticast mode [ 61.344061][ T4420] bridge0: left promiscuous mode [ 61.352704][ T4426] hsr0: entered promiscuous mode [ 61.358483][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 61.368251][ T4426] hsr_slave_0: left promiscuous mode [ 61.374433][ T4426] hsr_slave_1: left promiscuous mode [ 61.393958][ T4426] hsr0 (unregistering): left promiscuous mode [ 61.396879][ T4430] loop3: detected capacity change from 0 to 256 [ 61.460231][ T4435] xt_CONNSECMARK: invalid mode: 66 [ 61.585761][ T4446] hub 9-0:1.0: USB hub found [ 61.591295][ T4446] hub 9-0:1.0: 8 ports detected [ 61.610208][ T4449] netlink: 'syz.4.311': attribute type 2 has an invalid length. [ 61.618011][ T4449] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 61.626933][ T4449] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 61.644263][ T4451] tipc: Started in network mode [ 61.649328][ T4451] tipc: Node identity 4ade7baa4658, cluster identity 4711 [ 61.656683][ T4451] tipc: Enabled bearer , priority 0 [ 61.664974][ T4451] syzkaller0: entered promiscuous mode [ 61.670698][ T4451] syzkaller0: entered allmulticast mode [ 61.699868][ T4451] tipc: Resetting bearer [ 61.711775][ T4451] Cannot find add_set index 2 as target [ 61.734664][ T4450] tipc: Resetting bearer [ 61.773766][ T4450] tipc: Disabling bearer [ 61.818109][ T1458] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.886975][ T4478] netlink: 10 bytes leftover after parsing attributes in process `syz.3.320'. [ 61.904944][ T4480] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 61.987989][ T4482] FAULT_INJECTION: forcing a failure. [ 61.987989][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 62.000702][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.000750][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.000767][ T4482] Call Trace: [ 62.000776][ T4482] [ 62.000787][ T4482] __dump_stack+0x1d/0x30 [ 62.000814][ T4482] dump_stack_lvl+0xe8/0x140 [ 62.000836][ T4482] dump_stack+0x15/0x1b [ 62.000852][ T4482] should_fail_ex+0x265/0x280 [ 62.000939][ T4482] should_failslab+0x8c/0xb0 [ 62.001118][ T4482] kmem_cache_alloc_noprof+0x50/0x480 [ 62.001148][ T4482] ? copy_signal+0x53/0x360 [ 62.001186][ T4482] copy_signal+0x53/0x360 [ 62.001276][ T4482] copy_process+0xcde/0x2000 [ 62.001337][ T4482] kernel_clone+0x16c/0x5c0 [ 62.001432][ T4482] ? vfs_write+0x7e8/0x960 [ 62.001460][ T4482] __x64_sys_clone+0xe6/0x120 [ 62.001509][ T4482] x64_sys_call+0x119c/0x3000 [ 62.001550][ T4482] do_syscall_64+0xd2/0x200 [ 62.001579][ T4482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.001615][ T4482] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.001703][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.001725][ T4482] RIP: 0033:0x7fd8305ceec9 [ 62.001742][ T4482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.001759][ T4482] RSP: 002b:00007fd82efecfe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 62.001778][ T4482] RAX: ffffffffffffffda RBX: 00007fd830826180 RCX: 00007fd8305ceec9 [ 62.001793][ T4482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000e2840480 [ 62.001809][ T4482] RBP: 00007fd82efed090 R08: 0000000000000000 R09: 0000000000000000 [ 62.001881][ T4482] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 62.001893][ T4482] R13: 00007fd830826218 R14: 00007fd830826180 R15: 00007ffd53625718 [ 62.001916][ T4482] [ 62.786608][ T4486] loop9: detected capacity change from 0 to 7 [ 62.793102][ T4486] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.801308][ T4486] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.809201][ T4486] loop9: unable to read partition table [ 62.815154][ T4486] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 62.815154][ T4486] ) failed (rc=-5) [ 62.939562][ T4507] tipc: Enabled bearer , priority 0 [ 62.946727][ T4507] syzkaller0: entered promiscuous mode [ 62.952221][ T4507] syzkaller0: entered allmulticast mode [ 62.964239][ T4507] tipc: Resetting bearer [ 62.972111][ T4507] Cannot find add_set index 2 as target [ 62.979489][ T4506] tipc: Resetting bearer [ 62.995478][ T4506] tipc: Disabling bearer [ 63.258593][ T4517] loop9: detected capacity change from 0 to 7 [ 63.388150][ T23] IPVS: starting estimator thread 0... [ 63.394225][ T4517] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.402856][ T4517] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.410790][ T4517] loop9: unable to read partition table [ 63.416869][ T4517] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 63.416869][ T4517] ) failed (rc=-5) [ 63.510791][ T4521] IPVS: using max 2400 ests per chain, 120000 per kthread [ 63.947958][ T4530] loop9: detected capacity change from 0 to 7 [ 63.954229][ T4150] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.967213][ T4530] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.975219][ T4530] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.983239][ T4530] loop9: unable to read partition table [ 63.989276][ T4530] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 63.989276][ T4530] ) failed (rc=-5) [ 64.016942][ T4536] loop4: detected capacity change from 0 to 256 [ 64.034168][ T4479] Bluetooth: hci1: command 0x1003 tx timeout [ 64.044103][ T3533] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 64.249919][ T4555] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.265162][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 64.295785][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 64.402553][ T4552] bridge0: port 3(batadv1) entered blocking state [ 64.409097][ T4552] bridge0: port 3(batadv1) entered disabled state [ 64.434673][ T4552] batadv1: entered allmulticast mode [ 64.445283][ T4552] batadv1: entered promiscuous mode [ 64.456495][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 64.456514][ T29] audit: type=1326 audit(1760260479.907:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.487231][ T29] audit: type=1326 audit(1760260479.907:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.510740][ T29] audit: type=1326 audit(1760260479.936:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.534427][ T29] audit: type=1326 audit(1760260479.936:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.557959][ T29] audit: type=1326 audit(1760260479.936:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.581489][ T29] audit: type=1326 audit(1760260479.936:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.604832][ T29] audit: type=1326 audit(1760260479.936:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.628352][ T29] audit: type=1326 audit(1760260479.936:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.651708][ T29] audit: type=1326 audit(1760260479.936:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.675057][ T29] audit: type=1326 audit(1760260479.936:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4551 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 64.933548][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 64.942929][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 65.201802][ T4591] xt_CONNSECMARK: invalid mode: 66 [ 65.212583][ T4593] tipc: Enabled bearer , priority 0 [ 65.224100][ T4593] syzkaller0: entered promiscuous mode [ 65.229668][ T4593] syzkaller0: entered allmulticast mode [ 65.256313][ T4595] FAULT_INJECTION: forcing a failure. [ 65.256313][ T4595] name failslab, interval 1, probability 0, space 0, times 0 [ 65.266256][ T4593] tipc: Resetting bearer [ 65.269023][ T4595] CPU: 1 UID: 0 PID: 4595 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.269063][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.269083][ T4595] Call Trace: [ 65.269092][ T4595] [ 65.269103][ T4595] __dump_stack+0x1d/0x30 [ 65.269213][ T4595] dump_stack_lvl+0xe8/0x140 [ 65.269240][ T4595] dump_stack+0x15/0x1b [ 65.269263][ T4595] should_fail_ex+0x265/0x280 [ 65.269382][ T4595] ? do_inotify_init+0x93/0x270 [ 65.269421][ T4595] should_failslab+0x8c/0xb0 [ 65.269534][ T4595] __kmalloc_cache_noprof+0x4c/0x4a0 [ 65.269580][ T4595] do_inotify_init+0x93/0x270 [ 65.269620][ T4595] __x64_sys_inotify_init1+0x1e/0x30 [ 65.269708][ T4595] x64_sys_call+0x27ec/0x3000 [ 65.269738][ T4595] do_syscall_64+0xd2/0x200 [ 65.269810][ T4595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.269850][ T4595] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.269881][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.269996][ T4595] RIP: 0033:0x7f122602eec9 [ 65.270018][ T4595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.270044][ T4595] RSP: 002b:00007f1224a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 65.270071][ T4595] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602eec9 [ 65.270089][ T4595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.270106][ T4595] RBP: 00007f1224a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.270158][ T4595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.270176][ T4595] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 65.270259][ T4595] [ 65.316322][ T4597] FAULT_INJECTION: forcing a failure. [ 65.316322][ T4597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.377806][ T4593] Cannot find add_set index 2 as target [ 65.396126][ T4597] CPU: 1 UID: 0 PID: 4597 Comm: syz.4.363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.396159][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.396187][ T4597] Call Trace: [ 65.396197][ T4597] [ 65.396208][ T4597] __dump_stack+0x1d/0x30 [ 65.396248][ T4597] dump_stack_lvl+0xe8/0x140 [ 65.396292][ T4597] dump_stack+0x15/0x1b [ 65.396317][ T4597] should_fail_ex+0x265/0x280 [ 65.396388][ T4597] should_fail+0xb/0x20 [ 65.396431][ T4597] should_fail_usercopy+0x1a/0x20 [ 65.396460][ T4597] strncpy_from_user+0x25/0x230 [ 65.396527][ T4597] ? kmem_cache_alloc_noprof+0x242/0x480 [ 65.396568][ T4597] ? getname_flags+0x80/0x3b0 [ 65.396611][ T4597] getname_flags+0xae/0x3b0 [ 65.396690][ T4597] user_path_at+0x28/0x130 [ 65.396736][ T4597] do_fchmodat+0x9c/0x180 [ 65.396768][ T4597] __x64_sys_fchmodat+0x42/0x50 [ 65.396809][ T4597] x64_sys_call+0x2891/0x3000 [ 65.396871][ T4597] do_syscall_64+0xd2/0x200 [ 65.396956][ T4597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.396994][ T4597] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.397024][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.397056][ T4597] RIP: 0033:0x7f122602eec9 [ 65.397078][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.397159][ T4597] RSP: 002b:00007f1224a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 65.397185][ T4597] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602eec9 [ 65.397203][ T4597] RDX: 00000000fffffffb RSI: 0000200000000000 RDI: ffffffffffffff9c [ 65.397290][ T4597] RBP: 00007f1224a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.397307][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.397325][ T4597] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 65.397351][ T4597] [ 65.664788][ T4592] tipc: Resetting bearer [ 65.677420][ T4592] tipc: Disabling bearer [ 65.767109][ T3401] usb 7-1: enqueue for inactive port 0 [ 65.772790][ T3401] usb 7-1: enqueue for inactive port 0 [ 65.858552][ T3401] vhci_hcd: vhci_device speed not set [ 66.014274][ T4612] loop3: detected capacity change from 0 to 256 [ 66.022613][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 66.034316][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.055511][ T4608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.075271][ T4619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.367'. [ 66.163149][ T4627] xt_CONNSECMARK: invalid mode: 66 [ 66.219734][ T4633] tipc: Enabled bearer , priority 0 [ 66.248638][ T4633] syzkaller0: entered promiscuous mode [ 66.254161][ T4633] syzkaller0: entered allmulticast mode [ 66.266272][ T4633] tipc: Resetting bearer [ 66.280017][ T4633] Cannot find add_set index 2 as target [ 66.287305][ T4632] tipc: Resetting bearer [ 66.299979][ T4632] tipc: Disabling bearer [ 66.401168][ T4646] Driver unsupported XDP return value 0 on prog (id 246) dev N/A, expect packet loss! [ 66.424715][ T4648] loop3: detected capacity change from 0 to 256 [ 66.446736][ T4646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.473268][ T4646] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 66.507355][ T4646] capability: warning: `syz.1.381' uses 32-bit capabilities (legacy support in use) [ 66.530836][ T4651] FAULT_INJECTION: forcing a failure. [ 66.530836][ T4651] name failslab, interval 1, probability 0, space 0, times 0 [ 66.543651][ T4651] CPU: 0 UID: 0 PID: 4651 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.543687][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.543735][ T4651] Call Trace: [ 66.543743][ T4651] [ 66.543753][ T4651] __dump_stack+0x1d/0x30 [ 66.543780][ T4651] dump_stack_lvl+0xe8/0x140 [ 66.543806][ T4651] dump_stack+0x15/0x1b [ 66.543828][ T4651] should_fail_ex+0x265/0x280 [ 66.543883][ T4651] ? audit_log_d_path+0x8d/0x150 [ 66.543971][ T4651] should_failslab+0x8c/0xb0 [ 66.544012][ T4651] __kmalloc_cache_noprof+0x4c/0x4a0 [ 66.544078][ T4651] audit_log_d_path+0x8d/0x150 [ 66.544105][ T4651] audit_log_d_path_exe+0x42/0x70 [ 66.544133][ T4651] audit_log_task+0x1e9/0x250 [ 66.544174][ T4651] audit_seccomp+0x61/0x100 [ 66.544293][ T4651] ? __seccomp_filter+0x82d/0x1250 [ 66.544322][ T4651] __seccomp_filter+0x83e/0x1250 [ 66.544397][ T4651] ? _raw_spin_unlock+0x26/0x50 [ 66.544438][ T4651] __secure_computing+0x82/0x150 [ 66.544525][ T4651] syscall_trace_enter+0xcf/0x1e0 [ 66.544562][ T4651] do_syscall_64+0xac/0x200 [ 66.544674][ T4651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.544715][ T4651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.544744][ T4651] RIP: 0033:0x7ff557e4d8dc [ 66.544765][ T4651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.544789][ T4651] RSP: 002b:00007ff5568b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.544814][ T4651] RAX: ffffffffffffffda RBX: 00007ff5580a5fa0 RCX: 00007ff557e4d8dc [ 66.544831][ T4651] RDX: 000000000000000f RSI: 00007ff5568b70a0 RDI: 0000000000000005 [ 66.544847][ T4651] RBP: 00007ff5568b7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.544874][ T4651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.544886][ T4651] R13: 00007ff5580a6038 R14: 00007ff5580a5fa0 R15: 00007ffd85228fd8 [ 66.544906][ T4651] [ 66.894592][ T4654] loop9: detected capacity change from 0 to 7 [ 66.900958][ T4654] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.908930][ T4654] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.916851][ T4654] loop9: unable to read partition table [ 66.922645][ T4654] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 66.922645][ T4654] ) failed (rc=-5) [ 66.990412][ T4659] hub 9-0:1.0: USB hub found [ 66.998293][ T4661] xt_CONNSECMARK: invalid mode: 66 [ 67.004634][ T4659] hub 9-0:1.0: 8 ports detected [ 67.059871][ T4665] hub 9-0:1.0: USB hub found [ 67.069875][ T4665] hub 9-0:1.0: 8 ports detected [ 67.084516][ T4671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 67.093228][ T4669] loop3: detected capacity change from 0 to 512 [ 67.102245][ T4669] EXT4-fs: dax option not supported [ 67.178875][ T4680] loop2: detected capacity change from 0 to 2048 [ 67.186212][ T4669] Set syz1 is full, maxelem 6117 reached [ 67.209033][ T4684] FAULT_INJECTION: forcing a failure. [ 67.209033][ T4684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.222227][ T4684] CPU: 0 UID: 0 PID: 4684 Comm: syz.5.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.222257][ T4684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.222270][ T4684] Call Trace: [ 67.222277][ T4684] [ 67.222285][ T4684] __dump_stack+0x1d/0x30 [ 67.222352][ T4684] dump_stack_lvl+0xe8/0x140 [ 67.222372][ T4684] dump_stack+0x15/0x1b [ 67.222389][ T4684] should_fail_ex+0x265/0x280 [ 67.222426][ T4684] should_fail+0xb/0x20 [ 67.222476][ T4684] should_fail_usercopy+0x1a/0x20 [ 67.222498][ T4684] _copy_from_user+0x1c/0xb0 [ 67.222564][ T4684] ___sys_sendmsg+0xc1/0x1d0 [ 67.222612][ T4684] __x64_sys_sendmsg+0xd4/0x160 [ 67.222710][ T4684] x64_sys_call+0x191e/0x3000 [ 67.222733][ T4684] do_syscall_64+0xd2/0x200 [ 67.222758][ T4684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.222787][ T4684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.222810][ T4684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.222885][ T4684] RIP: 0033:0x7f22e640eec9 [ 67.222965][ T4684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.222984][ T4684] RSP: 002b:00007f22e4e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.223004][ T4684] RAX: ffffffffffffffda RBX: 00007f22e6665fa0 RCX: 00007f22e640eec9 [ 67.223017][ T4684] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 67.223030][ T4684] RBP: 00007f22e4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 67.223123][ T4684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.223135][ T4684] R13: 00007f22e6666038 R14: 00007f22e6665fa0 R15: 00007ffd1b483ed8 [ 67.223159][ T4684] [ 67.416549][ T4680] loop2: p2 p3 p7 [ 67.424995][ T48] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 67.626315][ T4705] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 67.634047][ T4705] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.403'. [ 67.748254][ T4693] loop9: detected capacity change from 0 to 7 [ 67.765118][ T4693] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.782647][ T4693] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.790687][ T4693] loop9: unable to read partition table [ 67.796880][ T4711] hub 9-0:1.0: USB hub found [ 67.807192][ T4711] hub 9-0:1.0: 8 ports detected [ 67.821050][ T4693] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 67.821050][ T4693] ) failed (rc=-5) [ 68.060480][ T4719] loop1: detected capacity change from 0 to 512 [ 68.111277][ T4719] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.135547][ T4724] loop4: detected capacity change from 0 to 256 [ 68.137053][ T4719] EXT4-fs (loop1): mount failed [ 68.161388][ T4724] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.292245][ T4727] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 68.308621][ T4727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.328909][ T4727] bond2: (slave geneve2): making interface the new active one [ 68.347168][ T4727] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 68.378626][ T4738] FAULT_INJECTION: forcing a failure. [ 68.378626][ T4738] name failslab, interval 1, probability 0, space 0, times 0 [ 68.391374][ T4738] CPU: 1 UID: 0 PID: 4738 Comm: syz.5.410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.391407][ T4738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.391438][ T4738] Call Trace: [ 68.391446][ T4738] [ 68.391455][ T4738] __dump_stack+0x1d/0x30 [ 68.391482][ T4738] dump_stack_lvl+0xe8/0x140 [ 68.391501][ T4738] dump_stack+0x15/0x1b [ 68.391517][ T4738] should_fail_ex+0x265/0x280 [ 68.391651][ T4738] ? audit_log_d_path+0x8d/0x150 [ 68.391672][ T4738] should_failslab+0x8c/0xb0 [ 68.391707][ T4738] __kmalloc_cache_noprof+0x4c/0x4a0 [ 68.391756][ T4738] audit_log_d_path+0x8d/0x150 [ 68.391775][ T4738] audit_log_d_path_exe+0x42/0x70 [ 68.391854][ T4738] audit_log_task+0x1e9/0x250 [ 68.391956][ T4738] ? kstrtouint+0x76/0xc0 [ 68.391999][ T4738] audit_seccomp+0x61/0x100 [ 68.392037][ T4738] ? __seccomp_filter+0x82d/0x1250 [ 68.392095][ T4738] __seccomp_filter+0x83e/0x1250 [ 68.392131][ T4738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.392216][ T4738] ? vfs_write+0x7e8/0x960 [ 68.392249][ T4738] __secure_computing+0x82/0x150 [ 68.392283][ T4738] syscall_trace_enter+0xcf/0x1e0 [ 68.392323][ T4738] do_syscall_64+0xac/0x200 [ 68.392491][ T4738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.392518][ T4738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.392542][ T4738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.392582][ T4738] RIP: 0033:0x7f22e640eec9 [ 68.392602][ T4738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.392626][ T4738] RSP: 002b:00007f22e4e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 68.392650][ T4738] RAX: ffffffffffffffda RBX: 00007f22e6665fa0 RCX: 00007f22e640eec9 [ 68.392662][ T4738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 68.392675][ T4738] RBP: 00007f22e4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 68.392731][ T4738] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 68.392746][ T4738] R13: 00007f22e6666038 R14: 00007f22e6665fa0 R15: 00007ffd1b483ed8 [ 68.392774][ T4738] [ 68.613609][ T4680] syz.2.395 (4680) used greatest stack depth: 7048 bytes left [ 68.789634][ T4763] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 68.860771][ T4751] cgroup: Invalid name [ 68.880602][ T4758] loop5: detected capacity change from 0 to 512 [ 68.893254][ T4758] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.911651][ T4758] EXT4-fs (loop5): mount failed [ 69.005327][ T4759] loop1: detected capacity change from 0 to 1024 [ 69.024971][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.063671][ T4759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 69.075528][ T4759] System zones: 0-1, 3-12 [ 69.085010][ T4759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.102270][ T4751] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.414: Abort forced by user [ 69.114382][ T4751] EXT4-fs (loop1): Remounting filesystem read-only [ 69.120978][ T4751] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.161571][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.241587][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 69.395006][ T4786] hub 2-0:1.0: USB hub found [ 69.399894][ T4786] hub 2-0:1.0: 8 ports detected [ 69.479833][ T4796] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.601038][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 69.601055][ T29] audit: type=1326 audit(1760260484.937:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.631150][ T29] audit: type=1326 audit(1760260484.937:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.654870][ T29] audit: type=1326 audit(1760260484.947:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.678514][ T29] audit: type=1326 audit(1760260484.947:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.701950][ T29] audit: type=1326 audit(1760260484.947:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.725342][ T29] audit: type=1326 audit(1760260484.947:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.749003][ T29] audit: type=1326 audit(1760260484.947:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.773269][ T29] audit: type=1326 audit(1760260484.947:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.797446][ T29] audit: type=1326 audit(1760260484.947:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.821275][ T29] audit: type=1326 audit(1760260484.947:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4797 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 69.936862][ T4805] tipc: Started in network mode [ 69.941981][ T4805] tipc: Node identity 2650a6ae8431, cluster identity 4711 [ 69.943110][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 69.949294][ T4805] tipc: Enabled bearer , priority 0 [ 69.975086][ T4805] syzkaller0: entered promiscuous mode [ 69.980958][ T4805] syzkaller0: entered allmulticast mode [ 70.007546][ T4805] tipc: Resetting bearer [ 70.019886][ T4805] Cannot find add_set index 2 as target [ 70.030730][ T4804] tipc: Resetting bearer [ 70.090331][ T4803] loop5: detected capacity change from 0 to 512 [ 70.119643][ T4804] tipc: Disabling bearer [ 70.127528][ T4803] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.142908][ T4803] EXT4-fs (loop5): mount failed [ 70.571617][ T4834] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 70.643418][ T4836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 70.681216][ T4834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.695086][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 70.898076][ T4853] loop2: detected capacity change from 0 to 512 [ 70.966266][ T4853] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.984193][ T4874] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.014297][ T4853] EXT4-fs (loop2): mount failed [ 71.048876][ T4880] loop3: detected capacity change from 0 to 1024 [ 71.074070][ T4880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.121583][ T4880] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.153681][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.232532][ T4893] hub 9-0:1.0: USB hub found [ 71.250818][ T4893] hub 9-0:1.0: 8 ports detected [ 71.405676][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 71.519821][ T4910] loop4: detected capacity change from 0 to 256 [ 71.666318][ T4908] loop9: detected capacity change from 0 to 7 [ 71.672688][ T4908] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.681720][ T4908] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.689686][ T4908] loop9: unable to read partition table [ 71.695558][ T4908] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 71.695558][ T4908] ) failed (rc=-5) [ 71.785933][ T4918] loop4: detected capacity change from 0 to 512 [ 71.824596][ T4918] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.860028][ T4918] EXT4-fs (loop4): mount failed [ 71.971722][ T4941] loop1: detected capacity change from 0 to 512 [ 71.995535][ T4941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.005423][ T4941] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 72.027351][ T4941] loop1: detected capacity change from 0 to 512 [ 72.058688][ T4941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.087588][ T4941] EXT4-fs (loop1): 1 truncate cleaned up [ 72.109742][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.144728][ T4941] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.475: Abort forced by user [ 72.180823][ T4941] EXT4-fs (loop1): Remounting filesystem read-only [ 72.187796][ T4941] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.241016][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.437117][ T4976] loop1: detected capacity change from 0 to 512 [ 72.463518][ T4976] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.515573][ T4976] EXT4-fs (loop1): mount failed [ 72.534676][ T4988] cgroup: Invalid name [ 72.857241][ T5007] netlink: 'syz.5.495': attribute type 1 has an invalid length. [ 72.865042][ T5007] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.495'. [ 72.874379][ T5005] netlink: 'syz.3.496': attribute type 29 has an invalid length. [ 72.952658][ T5018] netlink: 128 bytes leftover after parsing attributes in process `syz.4.499'. [ 72.961831][ T5018] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 72.990330][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 73.001933][ T5022] xt_CONNSECMARK: invalid mode: 66 [ 73.002463][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 73.043046][ T5024] hub 9-0:1.0: USB hub found [ 73.047846][ T5024] hub 9-0:1.0: 8 ports detected [ 73.168573][ T5035] netlink: 256 bytes leftover after parsing attributes in process `syz.2.507'. [ 73.317702][ T5072] xt_CONNSECMARK: invalid mode: 66 [ 73.399894][ T5076] hub 9-0:1.0: USB hub found [ 73.411984][ T5076] hub 9-0:1.0: 8 ports detected [ 73.579548][ T5083] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 73.640144][ T5106] xt_CONNSECMARK: invalid mode: 66 [ 73.674563][ T5108] loop2: detected capacity change from 0 to 128 [ 73.680040][ T5109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.697230][ T5111] hub 9-0:1.0: USB hub found [ 73.702025][ T5111] hub 9-0:1.0: 8 ports detected [ 73.766845][ T5118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 73.996340][ T5132] loop3: detected capacity change from 0 to 512 [ 74.006781][ T5132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.019647][ T5132] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.073037][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.093972][ T5145] loop3: detected capacity change from 0 to 256 [ 74.121065][ T5146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.125665][ T5148] hub 9-0:1.0: USB hub found [ 74.136831][ T5148] hub 9-0:1.0: 8 ports detected [ 74.175336][ T5146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.225829][ T5146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.261192][ T5157] loop3: detected capacity change from 0 to 512 [ 74.268004][ T5157] ext4: Bad value for 'journal_dev' [ 74.303615][ T5146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.389082][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.414460][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.448531][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.479946][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.585514][ T5177] unsupported nla_type 52263 [ 74.603981][ T5183] netlink: 'syz.2.551': attribute type 29 has an invalid length. [ 74.698002][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 74.698020][ T29] audit: type=1326 audit(1760260489.958:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.774192][ T29] audit: type=1326 audit(1760260489.958:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.775181][ T1458] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.798038][ T29] audit: type=1326 audit(1760260489.958:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.820983][ T5188] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 74.827616][ T29] audit: type=1326 audit(1760260489.958:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.827649][ T29] audit: type=1326 audit(1760260489.958:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.883185][ T29] audit: type=1326 audit(1760260489.958:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e640eec9 code=0x7ffc0000 [ 74.907036][ T29] audit: type=1326 audit(1760260489.958:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22e6410de7 code=0x7ffc0000 [ 74.930463][ T29] audit: type=1326 audit(1760260489.958:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f22e6410d5c code=0x7ffc0000 [ 74.953932][ T29] audit: type=1326 audit(1760260489.958:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22e6410c94 code=0x7ffc0000 [ 74.977265][ T29] audit: type=1326 audit(1760260489.958:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.5.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f22e6410c94 code=0x7ffc0000 [ 75.484763][ T5202] cgroup: Invalid name [ 75.581163][ T5207] loop4: detected capacity change from 0 to 1024 [ 75.616309][ T5207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.647290][ T5207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 75.655442][ T5207] System zones: 0-1, 3-12 [ 75.669356][ T5207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.794565][ T5202] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 75.823209][ T5202] EXT4-fs (loop4): can't enable nombcache during remount [ 75.912438][ T5212] loop1: detected capacity change from 0 to 512 [ 75.919702][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.952601][ T5212] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.973718][ T5212] EXT4-fs (loop1): mount failed [ 76.007606][ T5221] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 76.015437][ T5221] __nla_validate_parse: 4 callbacks suppressed [ 76.015456][ T5221] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.561'. [ 76.099473][ T5229] loop1: detected capacity change from 0 to 256 [ 76.180858][ T5233] loop4: detected capacity change from 0 to 512 [ 76.192041][ T5235] loop1: detected capacity change from 0 to 256 [ 76.207599][ T5235] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.231296][ T5235] FAULT_INJECTION: forcing a failure. [ 76.231296][ T5235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.244547][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: syz.1.564 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.244581][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.244595][ T5235] Call Trace: [ 76.244603][ T5235] [ 76.244611][ T5235] __dump_stack+0x1d/0x30 [ 76.244641][ T5235] dump_stack_lvl+0xe8/0x140 [ 76.244707][ T5235] dump_stack+0x15/0x1b [ 76.244724][ T5235] should_fail_ex+0x265/0x280 [ 76.244775][ T5235] should_fail+0xb/0x20 [ 76.244884][ T5235] should_fail_usercopy+0x1a/0x20 [ 76.244911][ T5235] strncpy_from_user+0x25/0x230 [ 76.244972][ T5235] ? kmem_cache_alloc_noprof+0x242/0x480 [ 76.245016][ T5235] ? getname_flags+0x80/0x3b0 [ 76.245056][ T5235] getname_flags+0xae/0x3b0 [ 76.245142][ T5235] user_path_at+0x28/0x130 [ 76.245182][ T5235] do_sys_truncate+0x5c/0x130 [ 76.245294][ T5235] __x64_sys_truncate+0x31/0x40 [ 76.245334][ T5235] x64_sys_call+0x1a2f/0x3000 [ 76.245363][ T5235] do_syscall_64+0xd2/0x200 [ 76.245393][ T5235] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.245438][ T5235] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.245462][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.245484][ T5235] RIP: 0033:0x7fd8305ceec9 [ 76.245500][ T5235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.245560][ T5235] RSP: 002b:00007fd82f02f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 76.245586][ T5235] RAX: ffffffffffffffda RBX: 00007fd830825fa0 RCX: 00007fd8305ceec9 [ 76.245603][ T5235] RDX: 0000000000000000 RSI: 0000000000000f62 RDI: 0000200000000080 [ 76.245619][ T5235] RBP: 00007fd82f02f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.245635][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.245651][ T5235] R13: 00007fd830826038 R14: 00007fd830825fa0 R15: 00007ffd53625718 [ 76.245676][ T5235] [ 76.445107][ T5233] EXT4-fs error (device loop4): ext4_quota_enable:7136: inode #4: comm syz.4.565: iget: checksum invalid [ 76.457372][ T5233] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.565: Bad quota inode: 4, type: 1 [ 76.468627][ T5233] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 76.494545][ T5233] EXT4-fs (loop4): mount failed [ 76.518298][ T5233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.565'. [ 76.565109][ T5233] ipvlan2: entered promiscuous mode [ 76.830852][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.976633][ T5183] syz.2.551 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 76.990772][ T5183] CPU: 1 UID: 0 PID: 5183 Comm: syz.2.551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.990866][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.990882][ T5183] Call Trace: [ 76.990891][ T5183] [ 76.990902][ T5183] __dump_stack+0x1d/0x30 [ 76.990977][ T5183] dump_stack_lvl+0xe8/0x140 [ 76.990997][ T5183] dump_stack+0x15/0x1b [ 76.991014][ T5183] dump_header+0x81/0x220 [ 76.991078][ T5183] oom_kill_process+0x342/0x400 [ 76.991120][ T5183] out_of_memory+0x979/0xb80 [ 76.991159][ T5183] try_charge_memcg+0x610/0xa10 [ 76.991263][ T5183] obj_cgroup_charge_pages+0xa6/0x150 [ 76.991329][ T5183] __memcg_kmem_charge_page+0x9f/0x170 [ 76.991366][ T5183] __alloc_frozen_pages_noprof+0x188/0x360 [ 76.991406][ T5183] alloc_pages_mpol+0x1f6/0x260 [ 76.991505][ T5183] ? alloc_pages_noprof+0x61/0x130 [ 76.991592][ T5183] alloc_pages_noprof+0x90/0x130 [ 76.991618][ T5183] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 76.991694][ T5183] ? panic_on_this_cpu+0x2d/0x40 [ 76.991714][ T5183] __kvmalloc_node_noprof+0x483/0x670 [ 76.991798][ T5183] ? ip_set_alloc+0x24/0x30 [ 76.991848][ T5183] ? ip_set_alloc+0x24/0x30 [ 76.991932][ T5183] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 76.991975][ T5183] ip_set_alloc+0x24/0x30 [ 76.992004][ T5183] hash_netiface_create+0x282/0x740 [ 76.992114][ T5183] ? __pfx_hash_netiface_create+0x10/0x10 [ 76.992150][ T5183] ip_set_create+0x3cc/0x970 [ 76.992199][ T5183] ? __nla_parse+0x40/0x60 [ 76.992278][ T5183] nfnetlink_rcv_msg+0x4c6/0x590 [ 76.992336][ T5183] netlink_rcv_skb+0x123/0x220 [ 76.992446][ T5183] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 76.992485][ T5183] nfnetlink_rcv+0x167/0x16c0 [ 76.992529][ T5183] ? kmem_cache_free+0xe4/0x3d0 [ 76.992562][ T5183] ? __kfree_skb+0x109/0x150 [ 76.992589][ T5183] ? nlmon_xmit+0x4f/0x60 [ 76.992616][ T5183] ? consume_skb+0x49/0x150 [ 76.992684][ T5183] ? nlmon_xmit+0x4f/0x60 [ 76.992707][ T5183] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 76.992838][ T5183] ? __dev_queue_xmit+0x1200/0x2000 [ 76.992877][ T5183] ? __dev_queue_xmit+0x182/0x2000 [ 76.992915][ T5183] ? merge_sched_in+0x605/0xa30 [ 76.992973][ T5183] ? ref_tracker_free+0x37d/0x3e0 [ 76.993017][ T5183] ? __netlink_deliver_tap+0x4dc/0x500 [ 76.993130][ T5183] netlink_unicast+0x5c0/0x690 [ 76.993160][ T5183] netlink_sendmsg+0x58b/0x6b0 [ 76.993193][ T5183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.993335][ T5183] __sock_sendmsg+0x145/0x180 [ 76.993357][ T5183] ____sys_sendmsg+0x31e/0x4e0 [ 76.993472][ T5183] ___sys_sendmsg+0x17b/0x1d0 [ 76.993518][ T5183] __x64_sys_sendmsg+0xd4/0x160 [ 76.993576][ T5183] x64_sys_call+0x191e/0x3000 [ 76.993600][ T5183] do_syscall_64+0xd2/0x200 [ 76.993626][ T5183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.993656][ T5183] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 76.993690][ T5183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.993713][ T5183] RIP: 0033:0x7f0554e0eec9 [ 76.993730][ T5183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.993799][ T5183] RSP: 002b:00007f0553877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.993819][ T5183] RAX: ffffffffffffffda RBX: 00007f0555065fa0 RCX: 00007f0554e0eec9 [ 76.993872][ T5183] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000009 [ 76.993885][ T5183] RBP: 00007f0554e91f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.993897][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.993910][ T5183] R13: 00007f0555066038 R14: 00007f0555065fa0 R15: 00007ffe6aae5b48 [ 76.993959][ T5183] [ 77.349054][ T5183] memory: usage 307200kB, limit 307200kB, failcnt 324 [ 77.356594][ T5183] memory+swap: usage 372952kB, limit 9007199254740988kB, failcnt 0 [ 77.364697][ T5183] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 77.372112][ T5183] Memory cgroup stats for /syz2: [ 77.472302][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 77.497323][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 77.650744][ T5183] cache 0 [ 77.653730][ T5183] rss 0 [ 77.656597][ T5183] shmem 0 [ 77.659755][ T5183] mapped_file 0 [ 77.663243][ T5183] dirty 0 [ 77.666225][ T5183] writeback 0 [ 77.669526][ T5183] workingset_refault_anon 43 [ 77.674203][ T5183] workingset_refault_file 1142 [ 77.679065][ T5183] swap 67330048 [ 77.682572][ T5183] swapcached 0 [ 77.685957][ T5183] pgpgin 47043 [ 77.689396][ T5183] pgpgout 47043 [ 77.693773][ T5183] pgfault 35271 [ 77.697251][ T5183] pgmajfault 24 [ 77.700819][ T5183] inactive_anon 0 [ 77.704470][ T5183] active_anon 0 [ 77.707944][ T5183] inactive_file 0 [ 77.711677][ T5183] active_file 0 [ 77.715147][ T5183] unevictable 0 [ 77.718658][ T5183] hierarchical_memory_limit 314572800 [ 77.724111][ T5183] hierarchical_memsw_limit 9223372036854771712 [ 77.730454][ T5183] total_cache 0 [ 77.734019][ T5183] total_rss 0 [ 77.737334][ T5183] total_shmem 0 [ 77.740871][ T5183] total_mapped_file 0 [ 77.744949][ T5183] total_dirty 0 [ 77.748419][ T5183] total_writeback 0 [ 77.752306][ T5183] total_workingset_refault_anon 43 [ 77.757438][ T5183] total_workingset_refault_file 1142 [ 77.762822][ T5183] total_swap 67330048 [ 77.766818][ T5183] total_swapcached 0 [ 77.770749][ T5183] total_pgpgin 47043 [ 77.774661][ T5183] total_pgpgout 47043 [ 77.778828][ T5183] total_pgfault 35271 [ 77.782859][ T5183] total_pgmajfault 24 [ 77.786842][ T5183] total_inactive_anon 0 [ 77.791079][ T5183] total_active_anon 0 [ 77.795066][ T5183] total_inactive_file 0 [ 77.799232][ T5183] total_active_file 0 [ 77.803247][ T5183] total_unevictable 0 [ 77.807245][ T5183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.551,pid=5182,uid=0 [ 77.821947][ T5183] Memory cgroup out of memory: Killed process 5182 (syz.2.551) total-vm:93824kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 77.920680][ T5262] xt_CONNSECMARK: invalid mode: 66 [ 78.060345][ T5270] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 78.068213][ T5270] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.574'. [ 78.145762][ T5275] loop4: detected capacity change from 0 to 256 [ 78.209812][ T5280] hub 9-0:1.0: USB hub found [ 78.215736][ T5183] syz.2.551 (5183) used greatest stack depth: 6136 bytes left [ 78.217499][ T5280] hub 9-0:1.0: 8 ports detected [ 78.286063][ T5284] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.307085][ T5283] xt_CONNSECMARK: invalid mode: 66 [ 78.351266][ T5286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 78.378985][ T5286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 79.061181][ T5313] loop3: detected capacity change from 0 to 256 [ 79.089521][ T5317] xt_CONNSECMARK: invalid mode: 66 [ 79.116617][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 79.118756][ T5322] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 79.127172][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'. [ 79.133325][ T5322] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.586'. [ 79.163265][ T5327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.197006][ T5333] FAULT_INJECTION: forcing a failure. [ 79.197006][ T5333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.210198][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: syz.4.592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.210226][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.210240][ T5333] Call Trace: [ 79.210248][ T5333] [ 79.210257][ T5333] __dump_stack+0x1d/0x30 [ 79.210321][ T5333] dump_stack_lvl+0xe8/0x140 [ 79.210340][ T5333] dump_stack+0x15/0x1b [ 79.210360][ T5333] should_fail_ex+0x265/0x280 [ 79.210477][ T5333] should_fail+0xb/0x20 [ 79.210508][ T5332] loop3: detected capacity change from 0 to 4096 [ 79.210520][ T5333] should_fail_usercopy+0x1a/0x20 [ 79.210548][ T5333] strncpy_from_user+0x25/0x230 [ 79.210621][ T5333] ? kmem_cache_alloc_noprof+0x242/0x480 [ 79.210664][ T5333] ? getname_flags+0x80/0x3b0 [ 79.210708][ T5333] getname_flags+0xae/0x3b0 [ 79.210822][ T5333] getname_uflags+0x21/0x30 [ 79.210862][ T5333] __x64_sys_execveat+0x5d/0x90 [ 79.210896][ T5333] x64_sys_call+0x1fec/0x3000 [ 79.210926][ T5333] do_syscall_64+0xd2/0x200 [ 79.211023][ T5333] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.211063][ T5333] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.211103][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.211155][ T5333] RIP: 0033:0x7f122602eec9 [ 79.211177][ T5333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.211203][ T5333] RSP: 002b:00007f1224a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 79.211229][ T5333] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602eec9 [ 79.211247][ T5333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 79.211265][ T5333] RBP: 00007f1224a8f090 R08: 0000000000000400 R09: 0000000000000000 [ 79.211282][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.211358][ T5333] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 79.211385][ T5333] [ 79.406748][ T5332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.429783][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.484233][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.573999][ T5352] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.596298][ T5353] loop4: detected capacity change from 0 to 512 [ 79.610813][ T5353] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.625904][ T5353] EXT4-fs (loop4): mount failed [ 79.636295][ T5344] cgroup: Invalid name [ 79.710691][ T5358] loop4: detected capacity change from 0 to 256 [ 79.717405][ T5349] loop1: detected capacity change from 0 to 1024 [ 79.724341][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.742071][ T5349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 79.750472][ T5349] System zones: 0-1, 3-12 [ 79.755900][ T5349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.788358][ T5349] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 79.806757][ T5349] EXT4-fs (loop1): can't enable nombcache during remount [ 79.820297][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 79.820322][ T29] audit: type=1326 audit(1760260495.020:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 79.850051][ T29] audit: type=1326 audit(1760260495.020:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 79.943278][ T29] audit: type=1326 audit(1760260495.080:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 79.966875][ T29] audit: type=1326 audit(1760260495.080:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 79.990388][ T29] audit: type=1326 audit(1760260495.080:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.013826][ T29] audit: type=1326 audit(1760260495.080:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.037259][ T29] audit: type=1326 audit(1760260495.080:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.060750][ T29] audit: type=1326 audit(1760260495.080:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.084194][ T29] audit: type=1326 audit(1760260495.080:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.107816][ T29] audit: type=1326 audit(1760260495.080:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.2.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 80.148996][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.152669][ T5372] tipc: Started in network mode [ 80.162937][ T5372] tipc: Node identity 2ad9129cec9e, cluster identity 4711 [ 80.170441][ T5372] tipc: Enabled bearer , priority 0 [ 80.178604][ T5372] syzkaller0: entered promiscuous mode [ 80.184209][ T5372] syzkaller0: entered allmulticast mode [ 80.195864][ T5372] Cannot find add_set index 2 as target [ 80.202034][ T5369] tipc: Resetting bearer [ 80.215229][ T5376] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 80.229577][ T5369] tipc: Disabling bearer [ 80.337753][ T5389] netlink: 'syz.4.608': attribute type 1 has an invalid length. [ 80.457204][ T5401] loop5: detected capacity change from 0 to 512 [ 80.469906][ T5403] loop2: detected capacity change from 0 to 512 [ 80.499373][ T5401] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.525357][ T5401] EXT4-fs (loop5): mount failed [ 80.531924][ T5403] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.582689][ T5403] EXT4-fs (loop2): mount failed [ 80.584554][ T5398] cgroup: Invalid name [ 80.718546][ T5407] loop3: detected capacity change from 0 to 1024 [ 80.725690][ T5407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.775932][ T5407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 80.790530][ T5407] System zones: 0-1, 3-12 [ 80.800906][ T5407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.858309][ T5398] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 80.899377][ T5416] loop4: detected capacity change from 0 to 512 [ 80.911724][ T5398] EXT4-fs (loop3): can't enable nombcache during remount [ 80.930783][ T5422] cgroup: Invalid name [ 80.948833][ T5416] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.995508][ T5416] EXT4-fs (loop4): mount failed [ 81.034768][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.048678][ T5426] loop5: detected capacity change from 0 to 1024 [ 81.051009][ T5435] tipc: Enabled bearer , priority 0 [ 81.063069][ T5435] syzkaller0: entered promiscuous mode [ 81.068614][ T5435] syzkaller0: entered allmulticast mode [ 81.069092][ T5426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.093548][ T5437] FAULT_INJECTION: forcing a failure. [ 81.093548][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 81.098056][ T5435] Cannot find add_set index 2 as target [ 81.106237][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.3.618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.106271][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.106288][ T5437] Call Trace: [ 81.106298][ T5437] [ 81.106310][ T5437] __dump_stack+0x1d/0x30 [ 81.106342][ T5437] dump_stack_lvl+0xe8/0x140 [ 81.106403][ T5437] dump_stack+0x15/0x1b [ 81.106505][ T5437] should_fail_ex+0x265/0x280 [ 81.106555][ T5437] should_failslab+0x8c/0xb0 [ 81.106594][ T5437] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 81.106723][ T5437] ? __alloc_skb+0x101/0x320 [ 81.106759][ T5437] __alloc_skb+0x101/0x320 [ 81.106795][ T5437] netlink_alloc_large_skb+0xbf/0xf0 [ 81.106912][ T5437] netlink_sendmsg+0x3cf/0x6b0 [ 81.106959][ T5437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.107002][ T5437] __sock_sendmsg+0x145/0x180 [ 81.107031][ T5437] ____sys_sendmsg+0x31e/0x4e0 [ 81.107176][ T5437] ___sys_sendmsg+0x17b/0x1d0 [ 81.107247][ T5437] __x64_sys_sendmsg+0xd4/0x160 [ 81.107357][ T5437] x64_sys_call+0x191e/0x3000 [ 81.107389][ T5437] do_syscall_64+0xd2/0x200 [ 81.107468][ T5437] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.107507][ T5437] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.107540][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.107570][ T5437] RIP: 0033:0x7ff557e4eec9 [ 81.107592][ T5437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.107627][ T5437] RSP: 002b:00007ff5568b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.107654][ T5437] RAX: ffffffffffffffda RBX: 00007ff5580a5fa0 RCX: 00007ff557e4eec9 [ 81.107766][ T5437] RDX: 000000002404c044 RSI: 0000200000000f00 RDI: 0000000000000003 [ 81.107784][ T5437] RBP: 00007ff5568b7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.107804][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.107908][ T5437] R13: 00007ff5580a6038 R14: 00007ff5580a5fa0 R15: 00007ffd85228fd8 [ 81.107936][ T5437] [ 81.108669][ T5426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 81.323752][ T5434] tipc: Resetting bearer [ 81.329829][ T5426] System zones: 0-1, 3-12 [ 81.337262][ T5434] tipc: Disabling bearer [ 81.345584][ T5426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.364497][ T5422] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 81.372631][ T5422] EXT4-fs (loop5): can't enable nombcache during remount [ 81.417609][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.448718][ T5447] xt_CONNSECMARK: invalid mode: 66 [ 81.512850][ T5457] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.690877][ T5473] tipc: Enabled bearer , priority 0 [ 81.709069][ T5473] syzkaller0: entered promiscuous mode [ 81.714692][ T5473] syzkaller0: entered allmulticast mode [ 81.720905][ T5475] __nla_validate_parse: 2 callbacks suppressed [ 81.720955][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.633'. [ 81.741036][ T5475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.633'. [ 81.756907][ T5473] Cannot find add_set index 2 as target [ 81.769631][ T5472] tipc: Resetting bearer [ 81.787165][ T5472] tipc: Disabling bearer [ 81.805106][ T5480] cgroup: Invalid name [ 81.864415][ T5486] loop3: detected capacity change from 0 to 512 [ 81.882446][ T5486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.895494][ T5486] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.908464][ T5477] loop1: detected capacity change from 0 to 1024 [ 81.928880][ T5477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.961571][ T5477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 81.999076][ T5477] System zones: 0-1, 3-12 [ 82.000210][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.006647][ T5477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.049789][ T5477] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 82.050707][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 82.067921][ T5477] EXT4-fs (loop1): can't enable nombcache during remount [ 82.083467][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 82.091001][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'. [ 82.110171][ T5504] FAULT_INJECTION: forcing a failure. [ 82.110171][ T5504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.123343][ T5504] CPU: 1 UID: 0 PID: 5504 Comm: syz.5.642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.123374][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.123390][ T5504] Call Trace: [ 82.123399][ T5504] [ 82.123432][ T5504] __dump_stack+0x1d/0x30 [ 82.123453][ T5504] dump_stack_lvl+0xe8/0x140 [ 82.123520][ T5504] dump_stack+0x15/0x1b [ 82.123537][ T5504] should_fail_ex+0x265/0x280 [ 82.123646][ T5504] should_fail+0xb/0x20 [ 82.123677][ T5504] should_fail_usercopy+0x1a/0x20 [ 82.123727][ T5504] _copy_from_user+0x1c/0xb0 [ 82.123770][ T5504] ___sys_sendmsg+0xc1/0x1d0 [ 82.123822][ T5504] __x64_sys_sendmsg+0xd4/0x160 [ 82.123901][ T5504] x64_sys_call+0x191e/0x3000 [ 82.123923][ T5504] do_syscall_64+0xd2/0x200 [ 82.123956][ T5504] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.123992][ T5504] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.124021][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.124103][ T5504] RIP: 0033:0x7f22e640eec9 [ 82.124121][ T5504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.124145][ T5504] RSP: 002b:00007f22e4e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.124169][ T5504] RAX: ffffffffffffffda RBX: 00007f22e6665fa0 RCX: 00007f22e640eec9 [ 82.124184][ T5504] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 82.124218][ T5504] RBP: 00007f22e4e77090 R08: 0000000000000000 R09: 0000000000000000 [ 82.124255][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.124271][ T5504] R13: 00007f22e6666038 R14: 00007f22e6665fa0 R15: 00007ffd1b483ed8 [ 82.124374][ T5504] [ 82.316011][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.337871][ T5514] tipc: Enabled bearer , priority 0 [ 82.352783][ T5514] syzkaller0: entered promiscuous mode [ 82.358357][ T5514] syzkaller0: entered allmulticast mode [ 82.394540][ T5514] Cannot find add_set index 2 as target [ 82.418002][ T5513] tipc: Resetting bearer [ 82.430767][ T5513] tipc: Disabling bearer [ 82.485424][ T1037] IPVS: starting estimator thread 0... [ 82.563854][ T5531] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 82.575480][ T5527] IPVS: using max 2400 ests per chain, 120000 per kthread [ 82.698600][ T5538] loop4: detected capacity change from 0 to 512 [ 82.748407][ T5538] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.781087][ T5538] EXT4-fs (loop4): mount failed [ 82.938260][ T5549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 82.976328][ T5549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 83.245143][ T5560] loop5: detected capacity change from 0 to 2048 [ 83.301997][ T5560] GPT:first_usable_lbas don't match. [ 83.307360][ T5560] GPT:34 != 290 [ 83.310861][ T5560] GPT: Use GNU Parted to correct GPT errors. [ 83.317146][ T5560] loop5: p1 p2 p3 [ 83.688219][ T5571] xt_CONNSECMARK: invalid mode: 66 [ 83.728484][ T5575] xt_CONNSECMARK: invalid mode: 66 [ 83.788569][ T5577] loop2: detected capacity change from 0 to 512 [ 83.918917][ T5577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.946405][ T5573] cgroup: Invalid name [ 83.965923][ T5577] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.980560][ T5581] hub 2-0:1.0: USB hub found [ 83.985456][ T5581] hub 2-0:1.0: 8 ports detected [ 84.060191][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.075152][ T5592] loop3: detected capacity change from 0 to 1024 [ 84.102952][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 84.111878][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 84.121491][ T5592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.143810][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.168162][ T5592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 84.187304][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.207599][ T5592] System zones: 0-1, 3-12 [ 84.218216][ T5592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.230464][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.255042][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.293636][ T5573] ext4: Unknown parameter 'éq‰Y’3aK' [ 84.399913][ T5596] cgroup: Invalid name [ 84.400538][ T5612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'. [ 84.440636][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.440622][ T5615] xt_CONNSECMARK: invalid mode: 66 [ 84.572861][ T5603] loop5: detected capacity change from 0 to 1024 [ 84.579833][ T5618] loop1: detected capacity change from 0 to 512 [ 84.579875][ T5603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.596265][ T5620] hub 2-0:1.0: USB hub found [ 84.601114][ T5620] hub 2-0:1.0: 8 ports detected [ 84.658275][ T5603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 84.667336][ T5603] System zones: 0-1, 3-12 [ 84.672636][ T5603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.674363][ T5618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.699299][ T5618] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.710083][ T5596] EXT4-fs error (device loop5): __ext4_remount:6748: comm syz.5.671: Abort forced by user [ 84.727209][ T5596] EXT4-fs (loop5): Remounting filesystem read-only [ 84.733939][ T5596] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 84.757544][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.790481][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.856839][ T5655] FAULT_INJECTION: forcing a failure. [ 84.856839][ T5655] name failslab, interval 1, probability 0, space 0, times 0 [ 84.869554][ T5655] CPU: 0 UID: 0 PID: 5655 Comm: syz.1.684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.869605][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.869622][ T5655] Call Trace: [ 84.869631][ T5655] [ 84.869641][ T5655] __dump_stack+0x1d/0x30 [ 84.869670][ T5655] dump_stack_lvl+0xe8/0x140 [ 84.869707][ T5655] dump_stack+0x15/0x1b [ 84.869729][ T5655] should_fail_ex+0x265/0x280 [ 84.869791][ T5655] should_failslab+0x8c/0xb0 [ 84.869827][ T5655] kmem_cache_alloc_noprof+0x50/0x480 [ 84.869873][ T5655] ? prepare_creds+0x37/0x4c0 [ 84.869911][ T5655] prepare_creds+0x37/0x4c0 [ 84.869945][ T5655] __sys_setresuid+0x464/0x6d0 [ 84.870110][ T5655] __x64_sys_setresuid+0x3f/0x50 [ 84.870148][ T5655] x64_sys_call+0x2490/0x3000 [ 84.870197][ T5655] do_syscall_64+0xd2/0x200 [ 84.870230][ T5655] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.870266][ T5655] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.870411][ T5655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.870440][ T5655] RIP: 0033:0x7fd8305ceec9 [ 84.870463][ T5655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.870487][ T5655] RSP: 002b:00007fd82f00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 84.870513][ T5655] RAX: ffffffffffffffda RBX: 00007fd830826090 RCX: 00007fd8305ceec9 [ 84.870530][ T5655] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 000000000000ee01 [ 84.870594][ T5655] RBP: 00007fd82f00e090 R08: 0000000000000000 R09: 0000000000000000 [ 84.870611][ T5655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.870637][ T5655] R13: 00007fd830826128 R14: 00007fd830826090 R15: 00007ffd53625718 [ 84.870664][ T5655] [ 84.870845][ T5649] mmap: syz.5.685 (5649): VmData 16625664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 84.983231][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 84.983316][ T29] audit: type=1326 audit(1760260500.049:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.090618][ T29] audit: type=1326 audit(1760260500.049:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.090658][ T29] audit: type=1326 audit(1760260500.049:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.137438][ T29] audit: type=1326 audit(1760260500.049:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.161560][ T29] audit: type=1326 audit(1760260500.049:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.185299][ T29] audit: type=1326 audit(1760260500.049:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.209172][ T29] audit: type=1326 audit(1760260500.049:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.233053][ T29] audit: type=1326 audit(1760260500.049:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.256404][ T29] audit: type=1326 audit(1760260500.049:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5656 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff557e4eec9 code=0x7ffc0000 [ 85.292222][ T29] audit: type=1326 audit(1760260500.298:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.4.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122602eec9 code=0x7ffc0000 [ 85.428683][ T5664] cgroup: Invalid name [ 85.469223][ T5676] xt_CONNSECMARK: invalid mode: 66 [ 85.489605][ T5671] hub 2-0:1.0: USB hub found [ 85.494323][ T5671] hub 2-0:1.0: 8 ports detected [ 85.520516][ T5665] loop5: detected capacity change from 0 to 1024 [ 85.527495][ T5665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.539197][ T5679] loop2: detected capacity change from 0 to 512 [ 85.555303][ T5665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 85.564411][ T5679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.565914][ T5665] System zones: 0-1, 3-12 [ 85.582636][ T5665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.595096][ T5679] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.617522][ T5664] ext4: Unknown parameter 'éq‰Y’3aK' [ 85.683564][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.708873][ T1458] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.753847][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.797896][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 85.824681][ T5706] vlan1: entered allmulticast mode [ 85.849761][ T5714] syzkaller0: entered promiscuous mode [ 85.855308][ T5714] syzkaller0: entered allmulticast mode [ 85.885284][ T5714] Cannot find add_set index 2 as target [ 85.958370][ T5720] FAULT_INJECTION: forcing a failure. [ 85.958370][ T5720] name failslab, interval 1, probability 0, space 0, times 0 [ 85.971192][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.971220][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.971236][ T5720] Call Trace: [ 85.971244][ T5720] [ 85.971252][ T5720] __dump_stack+0x1d/0x30 [ 85.971323][ T5720] dump_stack_lvl+0xe8/0x140 [ 85.971342][ T5720] dump_stack+0x15/0x1b [ 85.971358][ T5720] should_fail_ex+0x265/0x280 [ 85.971491][ T5720] should_failslab+0x8c/0xb0 [ 85.971527][ T5720] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 85.971640][ T5720] ? __get_vm_area_node+0x106/0x1d0 [ 85.971681][ T5720] __get_vm_area_node+0x106/0x1d0 [ 85.971725][ T5720] __vmalloc_node_range_noprof+0x28c/0xed0 [ 85.971792][ T5720] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 85.971835][ T5720] ? __rcu_read_unlock+0x4f/0x70 [ 85.971871][ T5720] ? cred_has_capability+0x210/0x280 [ 85.971903][ T5720] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 85.972019][ T5720] __vmalloc_noprof+0x83/0xc0 [ 85.972136][ T5720] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 85.972200][ T5720] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 85.972232][ T5720] ? bpf_prog_alloc+0x2a/0x150 [ 85.972278][ T5720] bpf_prog_alloc+0x3c/0x150 [ 85.972310][ T5720] bpf_prog_load+0x506/0x1100 [ 85.972343][ T5720] ? security_bpf+0x2b/0x90 [ 85.972373][ T5720] __sys_bpf+0x469/0x7c0 [ 85.972482][ T5720] __x64_sys_bpf+0x41/0x50 [ 85.972511][ T5720] x64_sys_call+0x2aee/0x3000 [ 85.972591][ T5720] do_syscall_64+0xd2/0x200 [ 85.972671][ T5720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.972749][ T5720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.972844][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.972872][ T5720] RIP: 0033:0x7f122602eec9 [ 85.972887][ T5720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.972906][ T5720] RSP: 002b:00007f1224a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.972925][ T5720] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602eec9 [ 85.973013][ T5720] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 85.973027][ T5720] RBP: 00007f1224a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.973038][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.973052][ T5720] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 85.973078][ T5720] [ 85.973119][ T5720] syz.4.708: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 86.196781][ T5729] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 86.201457][ T5720] ,cpuset=/,mems_allowed=0 [ 86.239003][ T5720] CPU: 0 UID: 0 PID: 5720 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.239042][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.239060][ T5720] Call Trace: [ 86.239070][ T5720] [ 86.239081][ T5720] __dump_stack+0x1d/0x30 [ 86.239110][ T5720] dump_stack_lvl+0xe8/0x140 [ 86.239137][ T5720] dump_stack+0x15/0x1b [ 86.239196][ T5720] warn_alloc+0x12b/0x1a0 [ 86.239245][ T5720] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 86.239499][ T5720] ? __rcu_read_unlock+0x4f/0x70 [ 86.239542][ T5720] ? cred_has_capability+0x210/0x280 [ 86.239646][ T5720] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 86.239737][ T5720] __vmalloc_noprof+0x83/0xc0 [ 86.239777][ T5720] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 86.239846][ T5720] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 86.239891][ T5720] ? bpf_prog_alloc+0x2a/0x150 [ 86.239944][ T5720] bpf_prog_alloc+0x3c/0x150 [ 86.240065][ T5720] bpf_prog_load+0x506/0x1100 [ 86.240103][ T5720] ? security_bpf+0x2b/0x90 [ 86.240139][ T5720] __sys_bpf+0x469/0x7c0 [ 86.240190][ T5720] __x64_sys_bpf+0x41/0x50 [ 86.240266][ T5720] x64_sys_call+0x2aee/0x3000 [ 86.240291][ T5720] do_syscall_64+0xd2/0x200 [ 86.240323][ T5720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 86.240375][ T5720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 86.240518][ T5720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.240546][ T5720] RIP: 0033:0x7f122602eec9 [ 86.240567][ T5720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.240593][ T5720] RSP: 002b:00007f1224a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.240619][ T5720] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602eec9 [ 86.240643][ T5720] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 86.240660][ T5720] RBP: 00007f1224a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.240676][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.240706][ T5720] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 86.240731][ T5720] [ 86.240739][ T5720] Mem-Info: [ 86.310862][ T5739] loop2: detected capacity change from 0 to 512 [ 86.311214][ T5720] active_anon:4134 inactive_anon:0 isolated_anon:0 [ 86.311214][ T5720] active_file:11365 inactive_file:2485 isolated_file:0 [ 86.311214][ T5720] unevictable:29 dirty:252 writeback:0 [ 86.311214][ T5720] slab_reclaimable:3340 slab_unreclaimable:15251 [ 86.311214][ T5720] mapped:29369 shmem:257 pagetables:1341 [ 86.311214][ T5720] sec_pagetables:0 bounce:0 [ 86.311214][ T5720] kernel_misc_reclaimable:0 [ 86.311214][ T5720] free:1841092 free_pcp:62909 free_cma:0 [ 86.343456][ T5739] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.345344][ T5720] Node 0 active_anon:16536kB inactive_anon:0kB active_file:45460kB inactive_file:9940kB unevictable:116kB isolated(anon):0kB isolated(file):0kB mapped:117476kB dirty:1008kB writeback:0kB shmem:1028kB kernel_stack:3520kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.350241][ T5739] EXT4-fs (loop2): mount failed [ 86.354653][ T5720] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.584217][ T5720] lowmem_reserve[]: 0 2883 7862 7862 [ 86.589576][ T5720] Node 0 DMA32 free:2949156kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 86.621106][ T5720] lowmem_reserve[]: 0 0 4978 4978 [ 86.626193][ T5720] Node 0 Normal free:4399852kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16536kB inactive_anon:0kB active_file:45460kB inactive_file:9940kB unevictable:116kB writepending:1008kB zspages:0kB present:5242880kB managed:5098240kB mlocked:116kB bounce:0kB free_pcp:248016kB local_pcp:141260kB free_cma:0kB [ 86.660006][ T5720] lowmem_reserve[]: 0 0 0 0 [ 86.664621][ T5720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.677478][ T5720] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 6*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949156kB [ 86.693714][ T5720] Node 0 Normal: 1603*4kB (ME) 616*8kB (UME) 421*16kB (UME) 73*32kB (UME) 312*64kB (ME) 244*128kB (UME) 99*256kB (UM) 82*512kB (UME) 91*1024kB (UME) 13*2048kB (U) 1011*4096kB (UM) = 4399804kB [ 86.712941][ T5720] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 86.722263][ T5720] 14132 total pagecache pages [ 86.726969][ T5720] 0 pages in swap cache [ 86.731197][ T5720] Free swap = 59432kB [ 86.735323][ T5720] Total swap = 124996kB [ 86.739473][ T5720] 2097051 pages RAM [ 86.743276][ T5720] 0 pages HighMem/MovableOnly [ 86.747982][ T5720] 80479 pages reserved [ 86.799060][ T5747] __nla_validate_parse: 3 callbacks suppressed [ 86.799079][ T5747] netlink: 56 bytes leftover after parsing attributes in process `syz.4.713'. [ 86.815065][ T5746] netlink: 56 bytes leftover after parsing attributes in process `syz.4.713'. [ 86.915944][ T5752] loop3: detected capacity change from 0 to 512 [ 86.930635][ T5752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.943440][ T5752] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.013366][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.040595][ T5765] syzkaller0: entered promiscuous mode [ 87.046238][ T5765] syzkaller0: entered allmulticast mode [ 87.046607][ T5767] loop3: detected capacity change from 0 to 512 [ 87.058633][ T5767] ext4: Unknown parameter 'oldalloc"data' [ 87.063012][ T5765] Cannot find add_set index 2 as target [ 87.068780][ T5767] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 87.077822][ T5767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.719'. [ 87.350317][ T5784] cgroup: Invalid name [ 87.365647][ T5784] loop3: detected capacity change from 0 to 1024 [ 87.372847][ T5784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.390133][ T5784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 87.398466][ T5784] System zones: 0-1, 3-12 [ 87.403566][ T5784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.431653][ T5786] loop2: detected capacity change from 0 to 512 [ 87.450197][ T5786] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.452211][ T5779] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 87.465281][ T5786] EXT4-fs (loop2): mount failed [ 87.478285][ T5779] EXT4-fs (loop3): can't enable nombcache during remount [ 87.519897][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.578749][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.588048][ T5793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.597024][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.606381][ T5793] netlink: 68 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.615390][ T5793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'. [ 87.631930][ T5793] xt_connbytes: Forcing CT accounting to be enabled [ 87.729222][ T5814] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 87.737114][ T5814] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.731'. [ 87.790458][ T4150] Bluetooth: hci0: command 0x1003 tx timeout [ 87.790542][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.869593][ T5819] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 87.877478][ T5819] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.734'. [ 87.881203][ T3533] Bluetooth: hci1: command 0x1003 tx timeout [ 87.886655][ T4479] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 88.034884][ T5839] netlink: 'syz.2.737': attribute type 29 has an invalid length. [ 88.167996][ T5844] loop4: detected capacity change from 0 to 512 [ 88.180750][ T5855] FAULT_INJECTION: forcing a failure. [ 88.180750][ T5855] name failslab, interval 1, probability 0, space 0, times 0 [ 88.193735][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz.3.742 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.193816][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.193829][ T5855] Call Trace: [ 88.193835][ T5855] [ 88.193843][ T5855] __dump_stack+0x1d/0x30 [ 88.193866][ T5855] dump_stack_lvl+0xe8/0x140 [ 88.193886][ T5855] dump_stack+0x15/0x1b [ 88.193943][ T5855] should_fail_ex+0x265/0x280 [ 88.193979][ T5855] should_failslab+0x8c/0xb0 [ 88.194008][ T5855] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 88.194039][ T5855] ? __alloc_skb+0x101/0x320 [ 88.194095][ T5855] __alloc_skb+0x101/0x320 [ 88.194121][ T5855] netlink_alloc_large_skb+0xbf/0xf0 [ 88.194148][ T5855] netlink_sendmsg+0x3cf/0x6b0 [ 88.194217][ T5855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.194251][ T5855] __sock_sendmsg+0x145/0x180 [ 88.194330][ T5855] ____sys_sendmsg+0x31e/0x4e0 [ 88.194364][ T5855] ___sys_sendmsg+0x17b/0x1d0 [ 88.194457][ T5855] __x64_sys_sendmsg+0xd4/0x160 [ 88.194530][ T5855] x64_sys_call+0x191e/0x3000 [ 88.194553][ T5855] do_syscall_64+0xd2/0x200 [ 88.194654][ T5855] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.194700][ T5855] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.194723][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.194772][ T5855] RIP: 0033:0x7ff557e4eec9 [ 88.194788][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.194808][ T5855] RSP: 002b:00007ff5568b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.194828][ T5855] RAX: ffffffffffffffda RBX: 00007ff5580a5fa0 RCX: 00007ff557e4eec9 [ 88.194842][ T5855] RDX: 0000000010000840 RSI: 0000200000000140 RDI: 0000000000000005 [ 88.194855][ T5855] RBP: 00007ff5568b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.194868][ T5855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.194880][ T5855] R13: 00007ff5580a6038 R14: 00007ff5580a5fa0 R15: 00007ffd85228fd8 [ 88.194930][ T5855] [ 88.415113][ T5844] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.434134][ T5844] EXT4-fs (loop4): mount failed [ 88.757452][ T5867] cgroup: Invalid name [ 88.848908][ T5875] loop4: detected capacity change from 0 to 1024 [ 88.866939][ T5875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.922123][ T5875] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 88.941017][ T5875] System zones: 0-1, 3-12 [ 88.953214][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.991665][ T5867] ext4: Unknown parameter 'éq‰Y’3aK' [ 89.084299][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.153484][ T5885] sd 0:0:1:0: device reset [ 89.163796][ T5885] FAULT_INJECTION: forcing a failure. [ 89.163796][ T5885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.177087][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: syz.4.750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.177115][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.177130][ T5885] Call Trace: [ 89.177137][ T5885] [ 89.177198][ T5885] __dump_stack+0x1d/0x30 [ 89.177225][ T5885] dump_stack_lvl+0xe8/0x140 [ 89.177251][ T5885] dump_stack+0x15/0x1b [ 89.177273][ T5885] should_fail_ex+0x265/0x280 [ 89.177326][ T5885] should_fail+0xb/0x20 [ 89.177357][ T5885] should_fail_usercopy+0x1a/0x20 [ 89.177377][ T5885] _copy_to_user+0x20/0xa0 [ 89.177410][ T5885] simple_read_from_buffer+0xb5/0x130 [ 89.177480][ T5885] proc_fail_nth_read+0x10e/0x150 [ 89.177564][ T5885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.177594][ T5885] vfs_read+0x1a8/0x770 [ 89.177625][ T5885] ? __rcu_read_unlock+0x4f/0x70 [ 89.177659][ T5885] ? __fget_files+0x184/0x1c0 [ 89.177704][ T5885] ksys_read+0xda/0x1a0 [ 89.177736][ T5885] __x64_sys_read+0x40/0x50 [ 89.177799][ T5885] x64_sys_call+0x27c0/0x3000 [ 89.177826][ T5885] do_syscall_64+0xd2/0x200 [ 89.177854][ T5885] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.177953][ T5885] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.177984][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.178013][ T5885] RIP: 0033:0x7f122602d8dc [ 89.178076][ T5885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.178100][ T5885] RSP: 002b:00007f1224a8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.178126][ T5885] RAX: ffffffffffffffda RBX: 00007f1226285fa0 RCX: 00007f122602d8dc [ 89.178189][ T5885] RDX: 000000000000000f RSI: 00007f1224a8f0a0 RDI: 0000000000000006 [ 89.178201][ T5885] RBP: 00007f1224a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.178213][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.178269][ T5885] R13: 00007f1226286038 R14: 00007f1226285fa0 R15: 00007ffcfbd379d8 [ 89.178295][ T5885] [ 89.419632][ T5889] loop5: detected capacity change from 0 to 512 [ 89.451106][ T5889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.466983][ T5891] loop2: detected capacity change from 0 to 4096 [ 89.473629][ T5889] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.487276][ T5891] EXT4-fs (loop2): unsupported descriptor size 255 [ 89.598979][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.632133][ T5891] loop2: detected capacity change from 0 to 512 [ 89.638978][ T5891] EXT4-fs: Ignoring removed bh option [ 89.642933][ T5908] loop1: detected capacity change from 0 to 512 [ 89.645222][ T5891] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.660600][ T5891] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 89.682104][ T5908] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.683577][ T5891] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 89.697350][ T5908] EXT4-fs (loop1): mount failed [ 89.705562][ T5891] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.716907][ T5891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.754: Failed to acquire dquot type 1 [ 89.730094][ T5891] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.754: Invalid block bitmap block 0 in block_group 0 [ 89.745116][ T5891] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.754: Invalid block bitmap block 0 in block_group 0 [ 89.760984][ T5891] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.754: Invalid block bitmap block 0 in block_group 0 [ 89.776566][ T5891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.754: Failed to acquire dquot type 1 [ 89.782252][ T5920] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 89.788211][ T5891] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.754: Failed to acquire dquot type 1 [ 89.819870][ T5891] EXT4-fs (loop2): 1 orphan inode deleted [ 89.826985][ T5891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.856885][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.857055][ T5927] loop3: detected capacity change from 0 to 512 [ 89.884134][ T5927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.895506][ T5930] hub 9-0:1.0: USB hub found [ 89.897273][ T5927] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.912456][ T5930] hub 9-0:1.0: 8 ports detected [ 89.987295][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.019498][ T5941] loop5: detected capacity change from 0 to 4096 [ 90.026365][ T5941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.035326][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.056936][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 90.056953][ T29] audit: type=1400 audit(1760260505.189:3601): avc: denied { module_load } for pid=5940 comm="syz.5.766" path="/101/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 90.081370][ T3901] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 90.099763][ T29] audit: type=1400 audit(1760260505.209:3602): avc: denied { remove_name } for pid=3901 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.102012][ T3901] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 90.123470][ T29] audit: type=1400 audit(1760260505.209:3603): avc: denied { rmdir } for pid=3901 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.158550][ T29] audit: type=1400 audit(1760260505.209:3604): avc: denied { unlink } for pid=3901 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.198595][ T29] audit: type=1326 audit(1760260505.329:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 90.222287][ T29] audit: type=1326 audit(1760260505.329:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5933 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0554e0eec9 code=0x7ffc0000 [ 90.327912][ T5963] batadv1: left allmulticast mode [ 90.333017][ T5963] batadv1: left promiscuous mode [ 90.338449][ T5963] bridge0: port 3(batadv1) entered disabled state [ 90.346136][ T5963] bridge_slave_1: left allmulticast mode [ 90.351945][ T5963] bridge_slave_1: left promiscuous mode [ 90.357801][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.365951][ T5963] bridge_slave_0: left promiscuous mode [ 90.371736][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.386320][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.441083][ T5971] loop2: detected capacity change from 0 to 1024 [ 90.459763][ T5971] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 90.461054][ T29] audit: type=1400 audit(1760260505.587:3607): avc: denied { mounton } for pid=5974 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.468977][ T5971] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 90.499930][ T5971] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.776: Failed to acquire dquot type 0 [ 90.512368][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.513210][ T5968] Cannot find add_set index 2 as target [ 90.525116][ T5971] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 90.543120][ T5971] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.776: corrupted inode contents [ 90.556108][ T5971] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #13: comm syz.2.776: mark_inode_dirty error [ 90.567939][ T5971] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.776: corrupted inode contents [ 90.579854][ T5971] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.776: mark_inode_dirty error [ 90.591404][ T5971] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.776: corrupted inode contents [ 90.603965][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.614626][ T5971] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 90.623848][ T5971] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #13: comm syz.2.776: corrupted inode contents [ 90.637199][ T5971] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.776: mark_inode_dirty error [ 90.649153][ T5971] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 90.668700][ T5971] EXT4-fs (loop2): 1 truncate cleaned up [ 90.681652][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.707247][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.748642][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.780810][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.828324][ T29] audit: type=1326 audit(1760260505.946:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.1.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8305ceec9 code=0x7ffc0000 [ 90.910215][ T5986] cgroup: Invalid name [ 90.912943][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 90.945491][ T12] bridge_slave_1: left allmulticast mode [ 90.951444][ T12] bridge_slave_1: left promiscuous mode [ 90.957313][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.992286][ T12] bridge_slave_0: left allmulticast mode [ 90.998107][ T12] bridge_slave_0: left promiscuous mode [ 91.003869][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.014493][ T5990] loop2: detected capacity change from 0 to 1024 [ 91.031106][ T5990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.070707][ T5990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 91.079674][ T5990] System zones: 0-1, 3-12 [ 91.101732][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.148880][ T5997] loop1: detected capacity change from 0 to 1024 [ 91.158306][ T5986] ext4: Unknown parameter 'éq‰Y’3aK' [ 91.189572][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.205729][ T5997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.230303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.249315][ T5997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 91.257816][ T5997] System zones: 0-1, 3-12 [ 91.267835][ T12] bond0 (unregistering): Released all slaves [ 91.268384][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.307395][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.336660][ T12] tipc: Left network mode [ 91.384238][ T12] hsr_slave_0: left promiscuous mode [ 91.390256][ T5997] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 91.420593][ T5997] EXT4-fs (loop1): can't enable nombcache during remount [ 91.427743][ T12] hsr_slave_1: left promiscuous mode [ 91.433649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.441169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.450752][ T6020] loop4: detected capacity change from 0 to 512 [ 91.458033][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.465591][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.483247][ T6020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.497017][ T12] veth1_macvtap: left promiscuous mode [ 91.504970][ T6020] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.509283][ T12] veth0_macvtap: left promiscuous mode [ 91.525875][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.528135][ T12] veth1_vlan: left promiscuous mode [ 91.540455][ T12] veth0_vlan: left promiscuous mode [ 91.566391][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.598720][ T6027] xt_CONNSECMARK: invalid mode: 66 [ 91.638427][ T6030] loop2: detected capacity change from 0 to 1024 [ 91.657076][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.672542][ T12] team0 (unregistering): Port device team_slave_1 removed [ 91.685061][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.698995][ T6030] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 91.709168][ T6030] System zones: 0-1, 3-12 [ 91.714718][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.752332][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.759510][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.766986][ T5974] bridge_slave_0: entered allmulticast mode [ 91.773541][ T5974] bridge_slave_0: entered promiscuous mode [ 91.777880][ T6024] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 91.781634][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.794762][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.802064][ T6024] EXT4-fs (loop2): can't enable nombcache during remount [ 91.802622][ T5974] bridge_slave_1: entered allmulticast mode [ 91.810282][ T6037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.816720][ T5974] bridge_slave_1: entered promiscuous mode [ 91.864099][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.875751][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.887206][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.918158][ T5974] team0: Port device team_slave_0 added [ 91.933663][ T6042] SELinux: failed to load policy [ 91.942213][ T5974] team0: Port device team_slave_1 added [ 91.991240][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.998377][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.024454][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.056181][ T6049] loop3: detected capacity change from 0 to 764 [ 92.077617][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.084660][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.110633][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.173250][ T12] IPVS: stop unused estimator thread 0... [ 92.181926][ T6053] loop2: detected capacity change from 0 to 512 [ 92.214354][ T5974] hsr_slave_0: entered promiscuous mode [ 92.225863][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.250910][ T5974] hsr_slave_1: entered promiscuous mode [ 92.260029][ T6053] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.413534][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.454609][ T6061] xt_CONNSECMARK: invalid mode: 66 [ 92.480188][ T6063] loop3: detected capacity change from 0 to 512 [ 92.515111][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.545433][ T5974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.562903][ T6063] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.585322][ T6067] loop2: detected capacity change from 0 to 164 [ 92.607378][ T5974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.617048][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.631188][ T6067] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.650692][ T5974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.669628][ T6067] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.695889][ T6067] Symlink component flag not implemented [ 92.701601][ T6067] Symlink component flag not implemented [ 92.708496][ T5974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 92.724941][ T6067] Symlink component flag not implemented (7) [ 92.731035][ T6067] Symlink component flag not implemented (116) [ 92.740080][ T6076] loop1: detected capacity change from 0 to 2048 [ 92.783000][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.793715][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.828977][ T6076] vhci_hcd: invalid port number 12 [ 92.829294][ T6067] __nla_validate_parse: 3 callbacks suppressed [ 92.829311][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 92.860862][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.871576][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.878846][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.911177][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.922620][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.929791][ T4828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.964542][ T6094] xt_CONNSECMARK: invalid mode: 66 [ 93.089533][ T6103] tipc: Enabled bearer , priority 0 [ 93.108750][ T6092] cgroup: Invalid name [ 93.123673][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.148126][ T6103] tipc: Resetting bearer [ 93.167362][ T6103] Cannot find add_set index 2 as target [ 93.175850][ T6102] tipc: Disabling bearer [ 93.211963][ T6111] netlink: 'syz.3.813': attribute type 29 has an invalid length. [ 93.332513][ T6097] loop4: detected capacity change from 0 to 1024 [ 93.352171][ T6122] loop1: detected capacity change from 0 to 512 [ 93.367696][ T6097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.403444][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.422153][ T6097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 93.451380][ T6097] System zones: 0-1, 3-12 [ 93.457160][ T5974] veth0_vlan: entered promiscuous mode [ 93.466189][ T6122] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.487772][ T6097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.504332][ T5974] veth1_vlan: entered promiscuous mode [ 93.566066][ T6092] EXT4-fs error (device loop4): __ext4_remount:6748: comm syz.4.808: Abort forced by user [ 93.585346][ T5974] veth0_macvtap: entered promiscuous mode [ 93.614025][ T6092] EXT4-fs (loop4): Remounting filesystem read-only [ 93.620659][ T6092] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 93.630418][ T5974] veth1_macvtap: entered promiscuous mode [ 93.653606][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.682217][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.714330][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.751694][ T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.778322][ T6111] ================================================================== [ 93.786483][ T6111] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 93.794317][ T6111] [ 93.796650][ T6111] write to 0xffffea0004781d98 of 8 bytes by task 6043 on cpu 1: [ 93.804388][ T6111] __filemap_remove_folio+0x1a5/0x2a0 [ 93.809783][ T6111] filemap_remove_folio+0x6d/0x1d0 [ 93.814908][ T6111] truncate_inode_folio+0x42/0x50 [ 93.819934][ T6111] shmem_undo_range+0x244/0xa80 [ 93.824794][ T6111] shmem_evict_inode+0x134/0x520 [ 93.829731][ T6111] evict+0x2e3/0x550 [ 93.833671][ T6111] iput+0x4ed/0x650 [ 93.837499][ T6111] dentry_unlink_inode+0x24f/0x260 [ 93.842631][ T6111] __dentry_kill+0x18d/0x4b0 [ 93.847273][ T6111] dput+0x5e/0xd0 [ 93.850922][ T6111] __fput+0x444/0x650 [ 93.855009][ T6111] ____fput+0x1c/0x30 [ 93.859028][ T6111] task_work_run+0x131/0x1a0 [ 93.863635][ T6111] do_exit+0x483/0x15c0 [ 93.867808][ T6111] do_group_exit+0xff/0x140 [ 93.872331][ T6111] get_signal+0xe58/0xf70 [ 93.876661][ T6111] arch_do_signal_or_restart+0x96/0x440 [ 93.882242][ T6111] irqentry_exit_to_user_mode+0x5b/0xa0 [ 93.887810][ T6111] irqentry_exit+0x12/0x50 [ 93.892241][ T6111] asm_exc_page_fault+0x26/0x30 [ 93.897099][ T6111] [ 93.899419][ T6111] read to 0xffffea0004781d98 of 8 bytes by task 6111 on cpu 0: [ 93.906957][ T6111] folio_mapping+0xa1/0xe0 [ 93.911455][ T6111] evict_folios+0xe05/0x3590 [ 93.916071][ T6111] try_to_shrink_lruvec+0x5b5/0x950 [ 93.921296][ T6111] shrink_lruvec+0x22e/0x1b50 [ 93.925987][ T6111] shrink_node+0x686/0x2120 [ 93.930499][ T6111] do_try_to_free_pages+0x3f6/0xcd0 [ 93.935712][ T6111] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 93.941666][ T6111] try_charge_memcg+0x383/0xa10 [ 93.946542][ T6111] obj_cgroup_charge_pages+0xa6/0x150 [ 93.951948][ T6111] __memcg_kmem_charge_page+0x9f/0x170 [ 93.957441][ T6111] __alloc_frozen_pages_noprof+0x188/0x360 [ 93.963268][ T6111] alloc_pages_mpol+0x1f6/0x260 [ 93.968143][ T6111] alloc_pages_noprof+0x90/0x130 [ 93.973271][ T6111] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 93.979102][ T6111] __kvmalloc_node_noprof+0x483/0x670 [ 93.984589][ T6111] ip_set_alloc+0x24/0x30 [ 93.988944][ T6111] hash_netiface_create+0x282/0x740 [ 93.994156][ T6111] ip_set_create+0x3cc/0x970 [ 93.998764][ T6111] nfnetlink_rcv_msg+0x4c6/0x590 [ 94.003720][ T6111] netlink_rcv_skb+0x123/0x220 [ 94.008770][ T6111] nfnetlink_rcv+0x167/0x16c0 [ 94.013466][ T6111] netlink_unicast+0x5c0/0x690 [ 94.018243][ T6111] netlink_sendmsg+0x58b/0x6b0 [ 94.023026][ T6111] __sock_sendmsg+0x145/0x180 [ 94.027707][ T6111] ____sys_sendmsg+0x31e/0x4e0 [ 94.032615][ T6111] ___sys_sendmsg+0x17b/0x1d0 [ 94.037316][ T6111] __x64_sys_sendmsg+0xd4/0x160 [ 94.042228][ T6111] x64_sys_call+0x191e/0x3000 [ 94.047009][ T6111] do_syscall_64+0xd2/0x200 [ 94.051536][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.057628][ T6111] [ 94.059956][ T6111] value changed: 0xffff88811a5e4d90 -> 0x0000000000000000 [ 94.067063][ T6111] [ 94.069393][ T6111] Reported by Kernel Concurrency Sanitizer on: [ 94.075547][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.3.813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.085443][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.095679][ T6111] ================================================================== [ 94.111454][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.130090][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0