last executing test programs: 2m2.280897974s ago: executing program 3 (id=4): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000300)=""/4096, 0x0, 0x800, 0xfffff801, 0x2}, 0x20) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1) 2m2.109440188s ago: executing program 3 (id=8): getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@resgid={'resgid', 0x3d, r0}}], [{@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') (async, rerun: 64) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000040)={0x200000, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x9}) (async) symlink(&(0x7f0000000040)='.\x02/file0\x00', &(0x7f00000000c0)='.\x02\x00') 2m1.909201214s ago: executing program 3 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) (fail_nth: 5) 2m0.633435297s ago: executing program 3 (id=37): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x1}, 0x4000, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) 2m0.581270581s ago: executing program 32 (id=37): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x1}, 0x4000, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) 46.345482328s ago: executing program 1 (id=1475): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x200000000a9b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 46.158077944s ago: executing program 1 (id=1480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e22, 0x8}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 45.978549618s ago: executing program 1 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 45.880571386s ago: executing program 1 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 45.723245168s ago: executing program 1 (id=1491): recvmsg$unix(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000000180)=""/83, 0x53}], 0x2}, 0x140) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect_ath9k(0x3, 0xfeab, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x10) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 44.292611614s ago: executing program 1 (id=1506): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8d2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x16, 0x0, 0xfc, 0x9}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) 29.271342529s ago: executing program 33 (id=1506): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8d2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x16, 0x0, 0xfc, 0x9}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) 5.588918399s ago: executing program 4 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x40}, 0x18) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0xfffffc69, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 5.320697531s ago: executing program 4 (id=2008): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x200000000a9b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.876792417s ago: executing program 4 (id=2014): readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0x4) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x6c140, 0x8) socket$unix(0x1, 0x6, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000dcc300"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x2000000000000285, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r5 = open(&(0x7f0000000080)='./file0/file0\x00', 0x200200, 0x24) pwritev2(r5, &(0x7f0000000e80)=[{0x0}, {0x0}, {&(0x7f0000001000)="68e3", 0x2}], 0x3, 0x33000, 0x0, 0x3) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) 4.575687201s ago: executing program 4 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0xee00, &(0x7f0000000600)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 4.474427179s ago: executing program 4 (id=2022): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f00000002c0)=""/1, 0x1}], 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207825000d0000002020207b1af8fe00000000bfa100000008000000b7e6ff000700000085000000110000009500"/81], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$evdev(0x0, 0x20000, 0x20080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x20000000000000ef, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="3e7e8cb146e2eae262c083e299ef6979bf187293a21b5094dd25be4f2267856910a1e41710e5ad693572729de24bb31dcaa57f6b1aa02c1a085f8b3917e32a76dc67beaaeea862c414f4089bc93a697da7037a18b5406ced3899d44660dc689e26df780c022f354183b6147aa81420fc2ba0a1691793cd848e663c9474fa058e87c97ab51e860d45b8281117dd134bc897074e508e52804fdc4ecb000000", @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='fscache_active\x00', 0xffffffffffffffff, 0x0, 0x13}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x10000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xb6e, 0x2, 0xff, 0x3, 0xfffb, 0xbae}, 0x20) socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$nl_generic(0x10, 0x3, 0x10) 4.384612236s ago: executing program 4 (id=2023): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ffff000007000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000340)={[{@resuid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@delalloc}]}, 0x1, 0x4c4, &(0x7f0000000f40)="$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") r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_clone(0x410e6080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYBLOB="28567d0de40b1262c69843924340688c462c6130ce", @ANYRESDEC=r6, @ANYBLOB="689c754e689a25807d299707facf44bebbc3ababd02e3a1d62fac9957c4da6a2fdc837fcf14a96c7716b0221c6ff12b23d00d82b5a62a9b0592af94c70d31c6bdd5323325954765aa50f284eed78601b7f786ae82d8fd30b84e46b8a0f34f6e998428ede88e93f138cd43cd7490cc035e1c0e5611ea7a320ff82fbec33122518738521c4f24d679bda28a9fd706bd8a6edb76efc0a08c578665f21fcc8dbf63ce69b856690f8f113c27d5b6036dc1771d665aa7daaa3f58f501271b4da31b8efae67", @ANYBLOB="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"], 0x50) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000000600)=0x401, 0x4) 2.791503255s ago: executing program 6 (id=2059): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f00000002c0)=""/1, 0x1}], 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207825000d0000002020207b1af8fe00000000bfa100000008000000b7e6ff000700000085000000110000009500"/81], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$evdev(0x0, 0x20000, 0x20080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x20000000000000ef, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="3e7e8cb146e2eae262c083e299ef6979bf187293a21b5094dd25be4f2267856910a1e41710e5ad693572729de24bb31dcaa57f6b1aa02c1a085f8b3917e32a76dc67beaaeea862c414f4089bc93a697da7037a18b5406ced3899d44660dc689e26df780c022f354183b6147aa81420fc2ba0a1691793cd848e663c9474fa058e87c97ab51e860d45b8281117dd134bc897074e508e52804fdc4ecb000000", @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='fscache_active\x00', 0xffffffffffffffff, 0x0, 0x13}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x10000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xb6e, 0x2, 0xff, 0x3, 0xfffb, 0xbae}, 0x20) socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$nl_generic(0x10, 0x3, 0x10) 2.218375301s ago: executing program 2 (id=2064): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@abort}, {@debug}, {@noload}, {@grpid}, {@noblock_validity}, {@noquota}, {@lazytime}, {@usrjquota}]}, 0xff, 0x46c, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000001f80)=""/4096, 0x1000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read(0xffffffffffffffff, &(0x7f0000000300)=""/211, 0xd3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_clone3(&(0x7f0000000600)={0x20000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 2.209549672s ago: executing program 6 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) clock_settime(0xfffffff8, &(0x7f0000000140)={0x0, 0x989680}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000200)={0x60, 0x6, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f00000000c0)=[{0xffffffff80000000, 0x7, 0x9}, {0x100, 0xa, 0x3}], 0x2, 0x1, 0x0, 0x2c, 0x18, 0x40}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8805}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400030c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000010000800c003000067328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949"], 0x100}, 0x1, 0x7}, 0x14) 2.199291232s ago: executing program 0 (id=2066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000900000095aeeee2abed0e21a0aaac88e9b61b4f9c489016f2ef96fee8111b2319a8210eece446bf82f48be8a08fdec1627918b6dbbb3688b88bba7e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f00000017c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002abd7000fcdbdf25280000000cf00500000000000000000006000400a1aa000005002e0040000000f3abe32793318dc493d655d4701a43ed1667042dd84e294aef1a577a8221f741439eee27227b8f3753e5035d281b9eac4ad899f2f20595f0f866c552fe4b6603c1bb5ab22774ea934b7516a019"], 0x30}}, 0x8800) unshare(0x28000400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}}]}, &(0x7f00000002c0)=0x10) get_robust_list(0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000000)=0x1, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp\x00') preadv(r9, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}], 0x1, 0x10001, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204010, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18544397abb"], 0x1, 0x56a, &(0x7f0000001100)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="9763614caaaaffffffe3ffff86dd604dc58c00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1c4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010fffd90780008"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 2.043816225s ago: executing program 0 (id=2067): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000200)={r4, 0x2, 0x6, 0x99d}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x48044) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0xf, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_settime(r10, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) writev(r9, &(0x7f00000004c0)=[{&(0x7f0000004200)="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", 0x2a0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711292000000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") remap_file_pages(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x3, 0x2000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x8}) 1.700567833s ago: executing program 0 (id=2068): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.580846962s ago: executing program 0 (id=2069): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 1.460666832s ago: executing program 0 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.265158858s ago: executing program 0 (id=2071): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) brk(0x400000ffc000) 1.126379189s ago: executing program 6 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x40}, 0x18) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000000)='\xaa\x00', &(0x7f0000000080)="fd", 0x1) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='syzkaller\x1b', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f00000002c0)='\xfcG\xd8\xc9\xa1S\xf7\xf7\xccl\x8e\a\xfb\x04\xb8\xec+O', &(0x7f0000000300)='\a', 0x1) close(r8) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000005020000020000000410"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x18) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 1.101552391s ago: executing program 2 (id=2073): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.004745749s ago: executing program 2 (id=2074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000022"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee00}}, './file0\x00'}) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, 0x0, 0xa6) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16, @ANYRES64=0xffffffffffffffff, @ANYRES32=r6, @ANYRES16=r7, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYRES64=r9, @ANYBLOB="02000200", @ANYBLOB="02b5e29b44f7cfdd17f9", @ANYRES8=r9, @ANYRESDEC, @ANYBLOB="4f9c30448838d52fe5b3a295c17cdfc3604daa51ca4172f241d5018466f3c6dbc04045fe35403720b4441248da1987a72875d2fa4b21f77091e9c0bebc49e26dacb4edfec472db86526393d14b568a6191fe0dc25430ae4ead02469f497f14f77e9e167dedeee75e96afd3262c876adfb63361531be3e983a04bf8bdf4f9a9ca04f839e661070690347b09ad195e909d86724153c96ccdd8dd6adbb3cf76071a61251eee8539d46579a29a69f3c83f7b41d4f2fcbff7a5eabd9c128a2ef7fac3cc3b529345b70f730e307bcb99ed11185c7cba6465c8c76ab3c18fd68594b67c", @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r8, @ANYBLOB="080003", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r8], 0x94, 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a80)=0x0) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r15, 0x0, 0x0, 0x2, 0x3000) msgsnd(r15, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000087fd285c63e41580364e19e4423073e6d20800000065dc40917dc07ae5a100c1570700d09e41cacbf4a5"], 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r15, 0x1, &(0x7f0000000680)={{0x3, r17, r18, r19, r22, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r23}) sendmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000001300)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r21, @ANYRESDEC=r16, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="c0f9338e53938dec6621e4ec68b76c79", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r20, @ANYRES32, @ANYRES8=r11, @ANYRESHEX=0x0, @ANYBLOB="d1e42bebbd1ca5d578f3514099a1eaf32378988a24f7a8212ff3a7b83bb004fe490281bbf6f0da47fb608b34687545", @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES8=r14, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c0000c3ac6c4ea53c70690002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r18, @ANYBLOB], 0x140, 0x40000}, 0xf33f272c127647a7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r24, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r24, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 807.474865ms ago: executing program 5 (id=2076): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207825000d0000002020207b1af8fe00000000bfa100000008000000b7e6ff000700000085000000110000009500"/81], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_open_dev$evdev(0x0, 0x20000, 0x20080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x20000000000000ef, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="3e7e8cb146e2eae262c083e299ef6979bf187293a21b5094dd25be4f2267856910a1e41710e5ad693572729de24bb31dcaa57f6b1aa02c1a085f8b3917e32a76dc67beaaeea862c414f4089bc93a697da7037a18b5406ced3899d44660dc689e26df780c022f354183b6147aa81420fc2ba0a1691793cd848e663c9474fa058e87c97ab51e860d45b8281117dd134bc897074e508e52804fdc4ecb000000", @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='fscache_active\x00', 0xffffffffffffffff, 0x0, 0x13}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x10000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xb6e, 0x2, 0xff, 0x3, 0xfffb, 0xbae}, 0x20) socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$nl_generic(0x10, 0x3, 0x10) 726.094471ms ago: executing program 5 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) eventfd(0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="30704b000d0a010800000000000000000a0000010900020073797a31000000000900020073797a32000000a4652f5f358a2ea5be2ef70bf4c00004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x14141, 0x10) 661.857047ms ago: executing program 5 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) clock_settime(0xfffffff8, &(0x7f0000000140)={0x0, 0x989680}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000200)={0x60, 0x6, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f00000000c0)=[{0xffffffff80000000, 0x7, 0x9}, {0x100, 0xa, 0x3}], 0x2, 0x1, 0x0, 0x2c, 0x18, 0x40}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8805}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400030c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000010000800c003000067328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949"], 0x100}, 0x1, 0x7}, 0x14) 608.947991ms ago: executing program 2 (id=2079): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ffff000007000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000340)={[{@resuid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@delalloc}]}, 0x1, 0x4c4, &(0x7f0000000f40)="$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") r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000600)=0x401, 0x4) 604.293161ms ago: executing program 6 (id=2080): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x200000000a9b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 575.756883ms ago: executing program 5 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) 478.919982ms ago: executing program 5 (id=2082): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 477.647962ms ago: executing program 5 (id=2083): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@abort}, {@debug}, {@noload}, {@grpid}, {@noblock_validity}, {@noquota}, {@lazytime}, {@usrjquota}]}, 0xff, 0x46c, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0xf, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff001, @private2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000001f80)=""/4096, 0x1000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read(0xffffffffffffffff, &(0x7f0000000300)=""/211, 0xd3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_clone3(&(0x7f0000000600)={0x20000000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 346.593742ms ago: executing program 2 (id=2084): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1da}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c) 121.41201ms ago: executing program 2 (id=2085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x25, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100", @ANYBLOB, @ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x26af, &(0x7f0000000680)={0x0, 0x79af, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r4, r5, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, 0x0, 0x20000000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001080)={0xf, {"6852ad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d077202b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d020000001c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841040014f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c24ffffffffffffff7fb70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bed0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f643577590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4ed134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e2bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889bce3076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b7da2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d558ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427bf6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769777c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd133d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d902952b72c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dc2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec0300068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8075ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b67804cfa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000f700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) syz_extract_tcp_res(0x0, 0x3, 0x0) write$tun(r10, 0x0, 0x1ba) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 120.37416ms ago: executing program 6 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000003c0)=0x80000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r5, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2086): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x400, 0x2, 0x5, 0x4, 0x1b4, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r6, 0x403, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x44450) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000001640)={0x1530, 0x3b, 0x400, 0x70bd27, 0x25dfdbfc, {0x15}, [@generic="bd9b8895d6ecd3d454c8b6549b1e4e1e75839a17af081f034cd46359993d4e64fb8cce34611c23e3ea", @typed={0x8, 0x3b, 0x0, 0x0, @pid=r1}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xfa, 0x77, 0x0, 0x1, [@typed={0x5, 0x3c, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x121, 0x0, 0x0, @ipv4=@multicast2}, @generic="09be7901e2b92382d6370b01bffa989f4e67", @typed={0xca, 0x10b, 0x0, 0x0, @binary="120345719a890c59e14fc0c5641e75f383c6d0d1a0b54236c18cd009f1b1423aa584d0fe9eb0b050846af47e9ec7883628ad9d11df22932b064c09e8cd3300939ed2ee1e0f593f4acb3d450f6d76832dba368104c0ee98c7fa70a8408c001018295d32c6b27912b70e35f0cad93c8d35ec858041ad4f9555d508ecf6f34f541478d00c9ab54a17a9d29ff950e5d5cfa2093ecd36c675caf0d5154e9254ddc54ad3a577666bc87a2015ce3f1e9384ddfca7e15ae06ce9aecc8ca07ff9e62d23e557e3db82d777"}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r2}]}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="794f8ab371ce2626d172d639bfc053de2271d67bb5dc8f699c32cf63409e404c4c301b2548a85012646d7147c2a8c2669f9bfab40af67ec791c5d916b48d767c6e289413e572acabcbc0792342e3c4c84fd3f578052e2bf24c2b379956740246481c199cc0870a7da550d77442a3073c27ff90f5400b3efdd89567cf457f6f91d7bad74047cd28c7a007ac44d677bcdd6e5ac4941e233e7a03bcd18fed306953743427907cf63534781e922bf7525e01ec3e10885e329a2961840fc63fdf3c29e778b4521c3db20b82abf4e5626d6af8662b9060cc488eeef6e8619ee2df32293b1d767111b1f8e7346a30c445037333653ed54a5caf80fbb4", @nested={0x12d5, 0x57, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private2}, @nested={0x125b, 0x6d, 0x0, 0x1, [@nested={0x7f, 0xd4, 0x0, 0x1, [@nested={0x4, 0x99}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r1}, @generic="1e3d9c2fa70bf3473e48f43e2d0fbc41b00d556bd297bd22c06f11d1756b664767aad4942ab76360c685983e319a753f4c4c", @generic="646f1c4c5c928e49c8c789b35925ae2507899debb43c25807519e296dc23a7724003166c88d89bec545de86302", @typed={0x8, 0x12c, 0x0, 0x0, @pid=r2}, @typed={0x8, 0xa2, 0x0, 0x0, @str='GPL\x00'}]}, @nested={0x10fa, 0x11, 0x0, 0x1, [@nested={0x4, 0x2}, @typed={0x8, 0xf0, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0xfb36}, @generic="6bd496576446e8ebc1fee871778d0bad49490472a321828c7b2fe0b1741006dcf9d538863eb1d73b251caccfdaa2fe8b119f9c60d45f48fa092ac53b72ef0220413bafc712a8589f3364347cc2893266a2e8e878d5ab9cf36279d68433", @generic="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", @generic="e197d44d8cae0b96f39b106cb925ceaec1b95d15831ba3ffdf2bf35c4f6a1c6f7b27165ba29e47673c7098e3fdc2600097a954967de855332d34669a64ba86a084f66fab951ae9f853f5ebbc862f42338bf760a58f698169c5e984e3e659f435e30830f2573eae4cbcb3b9d923cb161e082ae689b8b52dbe3f", @nested={0x4, 0xc3}, @nested={0x4, 0xad}]}, @nested={0x43, 0xc0, 0x0, 0x1, [@nested={0x4, 0x146}, @generic="02abb09b0a93856136943b7d081f9fdaaf0461e52969df9de17f48399438918015b9b9473fdaafbf6ab8506c9dcb4da8e76e7ad59260541688355f"]}, @generic="7666d1bfeb5ac37f8666d4c23e7ff9f71785043b7cddcff58122fe40eb6c10f2129a2b86a0a651a046a886bdb8c9113a6c1419d1b7c498fdf7af8424fe8fa7b34e4ebc7419c14bfe839626c3f4c692ca95fc474cd8a94a1ce18254bb3c5d409b472fc653195730272467bbaf9706267e7873db64489a9573e6263344aa23ca84bf649112c58aaa6a7a5b375ffb668c962267e105f323a1"]}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x96}, @nested={0x4, 0x138}, @generic="822eff69c60f5105d291cab40576a8c59cf2052bbd1ea43d893d3e642cb2d7a1a1883eec32c6c72653fdb5a141ab558e45aabef8283b", @typed={0x9, 0x2b, 0x0, 0x0, @str='\\[(]\x00'}, @generic="e620d69ad18117"]}]}, 0x1530}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r12}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r13, r14+10000000}) writev(r11, &(0x7f0000000940)=[{&(0x7f0000000100)='0', 0x1}], 0x1) ioctl$BLKIOMIN(r11, 0x1278, &(0x7f0000000000)) kernel console output (not intermixed with test programs): T6901] loop2: detected capacity change from 0 to 512 [ 89.870462][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.903415][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.433434][ T6943] FAULT_INJECTION: forcing a failure. [ 90.433434][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 90.446220][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.2.1216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.446253][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.446264][ T6943] Call Trace: [ 90.446269][ T6943] [ 90.446276][ T6943] __dump_stack+0x1d/0x30 [ 90.446357][ T6943] dump_stack_lvl+0xe8/0x140 [ 90.446376][ T6943] dump_stack+0x15/0x1b [ 90.446394][ T6943] should_fail_ex+0x265/0x280 [ 90.446417][ T6943] should_failslab+0x8c/0xb0 [ 90.446486][ T6943] __kmalloc_noprof+0xa5/0x3e0 [ 90.446512][ T6943] ? iovec_from_user+0x84/0x210 [ 90.446537][ T6943] ? mntput_no_expire+0x6f/0x460 [ 90.446581][ T6943] iovec_from_user+0x84/0x210 [ 90.446614][ T6943] __import_iovec+0xf3/0x540 [ 90.446653][ T6943] import_iovec+0x61/0x80 [ 90.446686][ T6943] ___sys_recvmsg+0x358/0x370 [ 90.446777][ T6943] do_recvmmsg+0x1ef/0x540 [ 90.446808][ T6943] ? get_timespec64+0xc9/0x100 [ 90.446848][ T6943] __x64_sys_recvmmsg+0xfb/0x170 [ 90.446871][ T6943] x64_sys_call+0x27a6/0x2ff0 [ 90.446895][ T6943] do_syscall_64+0xd2/0x200 [ 90.446941][ T6943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.447012][ T6943] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 90.447041][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.447123][ T6943] RIP: 0033:0x7fece4beebe9 [ 90.447140][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.447167][ T6943] RSP: 002b:00007fece364f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 90.447188][ T6943] RAX: ffffffffffffffda RBX: 00007fece4e25fa0 RCX: 00007fece4beebe9 [ 90.447202][ T6943] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 90.447272][ T6943] RBP: 00007fece364f090 R08: 0000200000003700 R09: 0000000000000000 [ 90.447286][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.447299][ T6943] R13: 00007fece4e26038 R14: 00007fece4e25fa0 R15: 00007ffcee762158 [ 90.447342][ T6943] [ 90.688377][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 90.697861][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 90.713448][ T6947] loop2: detected capacity change from 0 to 512 [ 90.724440][ T6947] EXT4-fs: inline encryption not supported [ 90.735399][ T6947] ext2: Bad value for 'commit' [ 90.817193][ T6957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1223'. [ 90.827666][ T6957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=6957 comm=syz.1.1223 [ 90.842237][ T6957] netlink: 'syz.1.1223': attribute type 1 has an invalid length. [ 90.843674][ T6961] lo speed is unknown, defaulting to 1000 [ 90.905738][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1227'. [ 90.916280][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 90.930872][ T6966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.952228][ T6965] loop2: detected capacity change from 0 to 2048 [ 91.014427][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.177201][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.430255][ T7021] lo speed is unknown, defaulting to 1000 [ 91.495741][ T7025] netlink: 'syz.2.1249': attribute type 13 has an invalid length. [ 91.495903][ T7010] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1243'. [ 91.503764][ T7025] netlink: 'syz.2.1249': attribute type 14 has an invalid length. [ 91.601246][ T7029] bridge0: port 1(syz_tun) entered blocking state [ 91.608102][ T7029] bridge0: port 1(syz_tun) entered disabled state [ 91.632422][ T7029] syz_tun: entered allmulticast mode [ 91.632984][ T7029] syz_tun: entered promiscuous mode [ 91.633456][ T7029] bridge0: port 1(syz_tun) entered blocking state [ 91.633500][ T7029] bridge0: port 1(syz_tun) entered forwarding state [ 91.674170][ T7029] syz_tun: left allmulticast mode [ 91.674234][ T7029] syz_tun: left promiscuous mode [ 91.674352][ T7029] bridge0: port 1(syz_tun) entered disabled state [ 91.732858][ T7029] FAT-fs (loop5): bogus number of reserved sectors [ 91.732877][ T7029] FAT-fs (loop5): Can't find a valid FAT filesystem [ 92.038360][ T7049] IPv6: Can't replace route, no match found [ 92.115797][ T7058] 9pnet: p9_errstr2errno: server reported unknown error [ 92.122588][ T7056] lo speed is unknown, defaulting to 1000 [ 92.136507][ T7060] lo speed is unknown, defaulting to 1000 [ 92.178397][ T7062] netlink: 'syz.4.1263': attribute type 13 has an invalid length. [ 92.186505][ T7062] netlink: 'syz.4.1263': attribute type 17 has an invalid length. [ 92.252784][ T7062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.553497][ T7099] bridge0: entered promiscuous mode [ 92.560162][ T7099] vlan0: entered promiscuous mode [ 92.561915][ T7101] netlink: 'syz.1.1273': attribute type 21 has an invalid length. [ 92.576237][ T7101] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 92.584060][ T7101] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1273'. [ 92.597744][ T7101] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1273'. [ 92.631071][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 92.631089][ T29] audit: type=1400 audit(92.615:11385): avc: denied { watch watch_reads } for pid=7100 comm="syz.1.1273" path="/324/file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.723791][ T7103] loop4: detected capacity change from 0 to 512 [ 92.743032][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.839772][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.905423][ T7114] random: crng reseeded on system resumption [ 92.916395][ T7112] lo speed is unknown, defaulting to 1000 [ 93.044939][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 93.058293][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 93.067378][ T29] audit: type=1326 audit(93.045:11386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 93.089779][ T29] audit: type=1326 audit(93.045:11387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 93.112903][ T7123] FAULT_INJECTION: forcing a failure. [ 93.112903][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 93.125622][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.2.1282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.125651][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.125684][ T7123] Call Trace: [ 93.125690][ T7123] [ 93.125698][ T7123] __dump_stack+0x1d/0x30 [ 93.125721][ T7123] dump_stack_lvl+0xe8/0x140 [ 93.125741][ T7123] dump_stack+0x15/0x1b [ 93.125767][ T7123] should_fail_ex+0x265/0x280 [ 93.125869][ T7123] should_failslab+0x8c/0xb0 [ 93.125917][ T7123] kmem_cache_alloc_node_noprof+0x57/0x320 [ 93.125948][ T7123] ? __alloc_skb+0x101/0x320 [ 93.125968][ T7123] __alloc_skb+0x101/0x320 [ 93.125989][ T7123] netlink_dump+0x10d/0x8a0 [ 93.126012][ T7123] ? __kfree_skb+0x109/0x150 [ 93.126082][ T7123] netlink_recvmsg+0x420/0x550 [ 93.126109][ T7123] ? __pfx_sock_def_readable+0x10/0x10 [ 93.126139][ T7123] ? __pfx_netlink_recvmsg+0x10/0x10 [ 93.126164][ T7123] sock_recvmsg_nosec+0x107/0x130 [ 93.126198][ T7123] ____sys_recvmsg+0x26f/0x280 [ 93.126230][ T7123] ___sys_recvmsg+0x11f/0x370 [ 93.126345][ T7123] do_recvmmsg+0x1ef/0x540 [ 93.126376][ T7123] ? fput+0x8f/0xc0 [ 93.126408][ T7123] __x64_sys_recvmmsg+0xe5/0x170 [ 93.126435][ T7123] x64_sys_call+0x27a6/0x2ff0 [ 93.126488][ T7123] do_syscall_64+0xd2/0x200 [ 93.126518][ T7123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.126595][ T7123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.126624][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.126647][ T7123] RIP: 0033:0x7fece4beebe9 [ 93.126663][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.126756][ T7123] RSP: 002b:00007fece364f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 93.126778][ T7123] RAX: ffffffffffffffda RBX: 00007fece4e25fa0 RCX: 00007fece4beebe9 [ 93.126791][ T7123] RDX: 0000000000000318 RSI: 0000200000007700 RDI: 0000000000000007 [ 93.126804][ T7123] RBP: 00007fece364f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.126824][ T7123] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 93.126837][ T7123] R13: 00007fece4e26038 R14: 00007fece4e25fa0 R15: 00007ffcee762158 [ 93.126905][ T7123] [ 93.406649][ T29] audit: type=1400 audit(93.365:11388): avc: denied { append } for pid=7128 comm="syz.4.1285" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.478943][ T7142] loop2: detected capacity change from 0 to 1024 [ 93.506544][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.518262][ T29] audit: type=1326 audit(93.505:11389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.541126][ T29] audit: type=1326 audit(93.505:11390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.548506][ T7142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.564016][ T29] audit: type=1326 audit(93.505:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.578441][ T7142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.593903][ T29] audit: type=1326 audit(93.505:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.625558][ T29] audit: type=1326 audit(93.505:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.648500][ T29] audit: type=1326 audit(93.505:11394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.5.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 93.656810][ T7156] random: crng reseeded on system resumption [ 93.724337][ T7160] loop4: detected capacity change from 0 to 512 [ 93.733869][ T7142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.757477][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.789436][ T7171] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.806584][ T7169] siw: device registration error -23 [ 93.850236][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.918171][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.115769][ T7200] siw: device registration error -23 [ 94.181240][ T7206] lo speed is unknown, defaulting to 1000 [ 94.582733][ T7217] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.709195][ T7225] FAULT_INJECTION: forcing a failure. [ 94.709195][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 94.722065][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.2.1314 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.722097][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.722110][ T7225] Call Trace: [ 94.722117][ T7225] [ 94.722125][ T7225] __dump_stack+0x1d/0x30 [ 94.722150][ T7225] dump_stack_lvl+0xe8/0x140 [ 94.722190][ T7225] dump_stack+0x15/0x1b [ 94.722208][ T7225] should_fail_ex+0x265/0x280 [ 94.722231][ T7225] should_failslab+0x8c/0xb0 [ 94.722258][ T7225] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 94.722291][ T7225] ? scm_fp_dup+0x40/0x200 [ 94.722345][ T7225] kmemdup_noprof+0x2b/0x70 [ 94.722451][ T7225] scm_fp_dup+0x40/0x200 [ 94.722473][ T7225] __unix_dgram_recvmsg+0x664/0x810 [ 94.722497][ T7225] unix_dgram_recvmsg+0x81/0x90 [ 94.722520][ T7225] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 94.722554][ T7225] sock_recvmsg_nosec+0x107/0x130 [ 94.722647][ T7225] ____sys_recvmsg+0x26f/0x280 [ 94.722713][ T7225] ___sys_recvmsg+0x11f/0x370 [ 94.722772][ T7225] do_recvmmsg+0x1ef/0x540 [ 94.722847][ T7225] ? fput+0x8f/0xc0 [ 94.722931][ T7225] __x64_sys_recvmmsg+0xe5/0x170 [ 94.723000][ T7225] x64_sys_call+0x27a6/0x2ff0 [ 94.723023][ T7225] do_syscall_64+0xd2/0x200 [ 94.723069][ T7225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.723095][ T7225] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.723123][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.723147][ T7225] RIP: 0033:0x7fece4beebe9 [ 94.723164][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.723253][ T7225] RSP: 002b:00007fece364f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 94.723276][ T7225] RAX: ffffffffffffffda RBX: 00007fece4e25fa0 RCX: 00007fece4beebe9 [ 94.723290][ T7225] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 94.723380][ T7225] RBP: 00007fece364f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.723393][ T7225] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 94.723406][ T7225] R13: 00007fece4e26038 R14: 00007fece4e25fa0 R15: 00007ffcee762158 [ 94.723425][ T7225] [ 94.750797][ T7224] siw: device registration error -23 [ 94.901667][ T7241] loop2: detected capacity change from 0 to 256 [ 95.064283][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 95.068012][ T7254] syz!: rxe_newlink: already configured on team_slave_0 [ 95.170724][ T7258] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1328'. [ 95.192885][ T7261] loop2: detected capacity change from 0 to 512 [ 95.260144][ T7264] pimreg: entered allmulticast mode [ 95.289262][ T7261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.365299][ T7273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1331'. [ 95.392125][ T7261] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1326: corrupted inode contents [ 95.435465][ T7261] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1326: mark_inode_dirty error [ 95.475270][ T7278] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 95.490944][ T7261] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1326: corrupted inode contents [ 95.510820][ T7278] ipvlan0: entered allmulticast mode [ 95.516321][ T7278] veth0_vlan: entered allmulticast mode [ 95.541565][ T7261] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1326: mark_inode_dirty error [ 95.559656][ T7278] team0: Device ipvlan0 failed to register rx_handler [ 95.623850][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.640204][ T7283] netlink: 'syz.5.1334': attribute type 10 has an invalid length. [ 95.648231][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1334'. [ 95.672017][ T7283] team0: Port device geneve1 added [ 95.681765][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698890][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725740][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.754372][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.969599][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1335'. [ 95.981180][ T7290] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=7290 comm=syz.2.1335 [ 96.010728][ T7290] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 96.025255][ T7302] FAULT_INJECTION: forcing a failure. [ 96.025255][ T7302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.038703][ T7302] CPU: 0 UID: 0 PID: 7302 Comm: syz.0.1341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.038771][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.038786][ T7302] Call Trace: [ 96.038794][ T7302] [ 96.038802][ T7302] __dump_stack+0x1d/0x30 [ 96.038827][ T7302] dump_stack_lvl+0xe8/0x140 [ 96.038849][ T7302] dump_stack+0x15/0x1b [ 96.038884][ T7302] should_fail_ex+0x265/0x280 [ 96.038903][ T7302] should_fail+0xb/0x20 [ 96.038918][ T7302] should_fail_usercopy+0x1a/0x20 [ 96.038941][ T7302] _copy_to_user+0x20/0xa0 [ 96.039049][ T7302] rfkill_fop_read+0x1bb/0x2c0 [ 96.039110][ T7302] ? obj_cgroup_charge_account+0x122/0x1a0 [ 96.039185][ T7302] ? should_fail_ex+0x30/0x280 [ 96.039204][ T7302] ? avc_policy_seqno+0x15/0x30 [ 96.039226][ T7302] loop_rw_iter+0x2c6/0x3f0 [ 96.039292][ T7302] __io_read+0xbcb/0xc20 [ 96.039310][ T7302] ? __fget_files+0x184/0x1c0 [ 96.039338][ T7302] io_read+0x1c/0x60 [ 96.039365][ T7302] __io_issue_sqe+0xfe/0x2e0 [ 96.039458][ T7302] ? io_assign_file+0x1b6/0x200 [ 96.039480][ T7302] io_issue_sqe+0x53/0x970 [ 96.039498][ T7302] io_submit_sqes+0x675/0x1060 [ 96.039523][ T7302] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 96.039617][ T7302] ? 0xffffffff81000000 [ 96.039632][ T7302] ? __rcu_read_unlock+0x4f/0x70 [ 96.039657][ T7302] ? get_pid_task+0x96/0xd0 [ 96.039678][ T7302] ? proc_fail_nth_write+0x13b/0x160 [ 96.039702][ T7302] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.039795][ T7302] ? vfs_write+0x7e8/0x960 [ 96.039816][ T7302] ? __rcu_read_unlock+0x4f/0x70 [ 96.039835][ T7302] ? __fget_files+0x184/0x1c0 [ 96.039857][ T7302] ? fput+0x8f/0xc0 [ 96.039890][ T7302] __x64_sys_io_uring_enter+0x78/0x90 [ 96.039914][ T7302] x64_sys_call+0x2de1/0x2ff0 [ 96.039937][ T7302] do_syscall_64+0xd2/0x200 [ 96.040045][ T7302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.040067][ T7302] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.040155][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.040262][ T7302] RIP: 0033:0x7f016e70ebe9 [ 96.040276][ T7302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.040292][ T7302] RSP: 002b:00007f016d16f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 96.040315][ T7302] RAX: ffffffffffffffda RBX: 00007f016e945fa0 RCX: 00007f016e70ebe9 [ 96.040401][ T7302] RDX: 00000000000004c3 RSI: 00000000000074d1 RDI: 0000000000000004 [ 96.040413][ T7302] RBP: 00007f016d16f090 R08: 0000000000000000 R09: fffffffffffffd1d [ 96.040427][ T7302] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 96.040440][ T7302] R13: 00007f016e946038 R14: 00007f016e945fa0 R15: 00007fffb0ea3a08 [ 96.040460][ T7302] [ 96.099102][ T7294] siw: device registration error -23 [ 96.242294][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 96.266438][ T7301] siw: device registration error -23 [ 96.269901][ T7307] netlink: 'syz.0.1344': attribute type 20 has an invalid length. [ 96.409505][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.442053][ T7313] macsec0: entered allmulticast mode [ 96.450653][ T7315] FAULT_INJECTION: forcing a failure. [ 96.450653][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 96.463481][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.1.1347 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.463507][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.463519][ T7315] Call Trace: [ 96.463526][ T7315] [ 96.463536][ T7315] __dump_stack+0x1d/0x30 [ 96.463586][ T7315] dump_stack_lvl+0xe8/0x140 [ 96.463604][ T7315] dump_stack+0x15/0x1b [ 96.463620][ T7315] should_fail_ex+0x265/0x280 [ 96.463672][ T7315] should_failslab+0x8c/0xb0 [ 96.463697][ T7315] __kmalloc_noprof+0xa5/0x3e0 [ 96.463727][ T7315] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 96.463783][ T7315] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 96.463887][ T7315] genl_start+0xe0/0x390 [ 96.463916][ T7315] __netlink_dump_start+0x334/0x520 [ 96.463956][ T7315] genl_family_rcv_msg_dumpit+0x115/0x180 [ 96.463981][ T7315] ? __pfx_genl_start+0x10/0x10 [ 96.464076][ T7315] ? __pfx_genl_dumpit+0x10/0x10 [ 96.464118][ T7315] ? __pfx_genl_done+0x10/0x10 [ 96.464153][ T7315] genl_rcv_msg+0x3f0/0x460 [ 96.464288][ T7315] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 96.464316][ T7315] netlink_rcv_skb+0x123/0x220 [ 96.464338][ T7315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.464367][ T7315] genl_rcv+0x28/0x40 [ 96.464446][ T7315] netlink_unicast+0x5bd/0x690 [ 96.464522][ T7315] netlink_sendmsg+0x58b/0x6b0 [ 96.464547][ T7315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.464568][ T7315] __sock_sendmsg+0x145/0x180 [ 96.464627][ T7315] ____sys_sendmsg+0x31e/0x4e0 [ 96.464655][ T7315] ___sys_sendmsg+0x17b/0x1d0 [ 96.464692][ T7315] __x64_sys_sendmsg+0xd4/0x160 [ 96.464718][ T7315] x64_sys_call+0x191e/0x2ff0 [ 96.464773][ T7315] do_syscall_64+0xd2/0x200 [ 96.464797][ T7315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.464830][ T7315] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.464857][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.464924][ T7315] RIP: 0033:0x7fa47a17ebe9 [ 96.464939][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.464956][ T7315] RSP: 002b:00007fa478bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.464977][ T7315] RAX: ffffffffffffffda RBX: 00007fa47a3b5fa0 RCX: 00007fa47a17ebe9 [ 96.465027][ T7315] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000007 [ 96.465115][ T7315] RBP: 00007fa478bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 96.465128][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.465222][ T7315] R13: 00007fa47a3b6038 R14: 00007fa47a3b5fa0 R15: 00007fff9399afc8 [ 96.465244][ T7315] [ 96.497687][ T31] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.644925][ T7325] netlink: 'syz.5.1350': attribute type 1 has an invalid length. [ 96.676617][ T31] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.749402][ T7319] lo speed is unknown, defaulting to 1000 [ 96.749522][ T7319] lo speed is unknown, defaulting to 1000 [ 96.751572][ T7319] lo speed is unknown, defaulting to 1000 [ 96.752664][ T7319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.773634][ T7319] lo speed is unknown, defaulting to 1000 [ 96.774021][ T7319] lo speed is unknown, defaulting to 1000 [ 96.774345][ T7319] lo speed is unknown, defaulting to 1000 [ 96.774601][ T7319] lo speed is unknown, defaulting to 1000 [ 96.774881][ T7319] lo speed is unknown, defaulting to 1000 [ 96.792393][ T7328] SELinux: policydb version 2093239046 does not match my version range 15-35 [ 96.792476][ T7328] SELinux: failed to load policy [ 96.891027][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.127417][ T7341] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=7341 comm=syz.1.1356 [ 97.146777][ T7341] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 97.300948][ T7357] siw: device registration error -23 [ 97.551333][ T7373] team0: Unable to change to the same mode the team is in [ 97.576874][ T7380] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 97.593141][ T7380] team0: Port device dummy0 added [ 97.609791][ T7378] lo speed is unknown, defaulting to 1000 [ 97.615763][ T7381] loop2: detected capacity change from 0 to 2048 [ 97.661917][ T7381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.751713][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 97.751732][ T29] audit: type=1326 audit(97.732:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.781163][ T29] audit: type=1326 audit(97.732:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.804068][ T29] audit: type=1326 audit(97.732:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.814343][ T7378] lo speed is unknown, defaulting to 1000 [ 97.827162][ T29] audit: type=1326 audit(97.732:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.855794][ T29] audit: type=1326 audit(97.732:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.878798][ T29] audit: type=1326 audit(97.732:11676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.901800][ T29] audit: type=1326 audit(97.732:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.925115][ T29] audit: type=1326 audit(97.732:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.948129][ T29] audit: type=1326 audit(97.732:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 97.971289][ T29] audit: type=1326 audit(97.742:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 98.048651][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.162698][ T7402] loop2: detected capacity change from 0 to 8192 [ 98.197130][ T7402] syz.2.1377: attempt to access beyond end of device [ 98.197130][ T7402] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 98.254297][ T7402] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 98.262439][ T7402] FAT-fs (loop2): Filesystem has been set read-only [ 98.340747][ T7402] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 98.348983][ T7402] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 98.398349][ T7415] team0: Failed to send options change via netlink (err -105) [ 98.426221][ T7415] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 98.448814][ T7417] __nla_validate_parse: 4 callbacks suppressed [ 98.448832][ T7417] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1383'. [ 98.451387][ T7415] team0: Port device geneve1 removed [ 98.473907][ T110] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.482397][ T110] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.491969][ T7417] team0: Unable to change to the same mode the team is in [ 98.499380][ T110] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.508114][ T110] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.541550][ T7419] siw: device registration error -23 [ 98.679690][ T7430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1389'. [ 98.689686][ T7430] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=7430 comm=syz.2.1389 [ 98.703427][ T7430] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 98.854483][ T7434] loop2: detected capacity change from 0 to 1024 [ 98.882331][ T7434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.988660][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.094041][ T7447] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1395'. [ 99.104189][ T7447] team0: Unable to change to the same mode the team is in [ 99.140931][ T7450] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in; [ 99.140931][ T7450] program syz.2.1396 not setting count and/or reply_len properly [ 99.461906][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7463 comm=syz.5.1400 [ 99.784348][ T7486] lo speed is unknown, defaulting to 1000 [ 99.841191][ T7492] lo speed is unknown, defaulting to 1000 [ 99.893456][ T7486] lo speed is unknown, defaulting to 1000 [ 99.954729][ T7492] lo speed is unknown, defaulting to 1000 [ 100.211612][ T7502] loop4: detected capacity change from 0 to 1024 [ 100.248346][ T7502] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.254945][ T7502] EXT4-fs: Ignoring removed bh option [ 100.316293][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 100.380209][ T7502] ext3: Unknown parameter 'subj_type' [ 100.635269][ T7513] syzkaller0: entered allmulticast mode [ 100.670511][ T7513] syzkaller0 (unregistering): left allmulticast mode [ 100.816806][ T7524] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 100.895459][ T7534] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 100.936253][ T7533] IPVS: stopping master sync thread 7534 ... [ 101.071920][ T7536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7536 comm=syz.4.1428 [ 101.173969][ T7555] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.203804][ T7559] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.486442][ T7626] FAULT_INJECTION: forcing a failure. [ 101.486442][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 101.499249][ T7626] CPU: 1 UID: 0 PID: 7626 Comm: syz.4.1440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.499360][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.499373][ T7626] Call Trace: [ 101.499380][ T7626] [ 101.499388][ T7626] __dump_stack+0x1d/0x30 [ 101.499408][ T7626] dump_stack_lvl+0xe8/0x140 [ 101.499430][ T7626] dump_stack+0x15/0x1b [ 101.499494][ T7626] should_fail_ex+0x265/0x280 [ 101.499513][ T7626] should_failslab+0x8c/0xb0 [ 101.499535][ T7626] kmem_cache_alloc_noprof+0x50/0x310 [ 101.499568][ T7626] ? security_inode_alloc+0x37/0x100 [ 101.499600][ T7626] security_inode_alloc+0x37/0x100 [ 101.499704][ T7626] inode_init_always_gfp+0x4b7/0x500 [ 101.499730][ T7626] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 101.499764][ T7626] alloc_inode+0x58/0x170 [ 101.499785][ T7626] new_inode+0x1d/0xe0 [ 101.499812][ T7626] __debugfs_create_file+0x109/0x330 [ 101.499911][ T7626] debugfs_create_file_full+0x3f/0x60 [ 101.499957][ T7626] ref_tracker_dir_debugfs+0x100/0x1e0 [ 101.499985][ T7626] ? __kmalloc_cache_noprof+0x189/0x320 [ 101.500009][ T7626] preinit_net+0x115/0x330 [ 101.500058][ T7626] copy_net_ns+0x18a/0x390 [ 101.500090][ T7626] create_new_namespaces+0x20e/0x3d0 [ 101.500242][ T7626] unshare_nsproxy_namespaces+0xe8/0x120 [ 101.500279][ T7626] ksys_unshare+0x3d0/0x6d0 [ 101.500368][ T7626] ? ksys_write+0x192/0x1a0 [ 101.500395][ T7626] __x64_sys_unshare+0x1f/0x30 [ 101.500420][ T7626] x64_sys_call+0x2911/0x2ff0 [ 101.500446][ T7626] do_syscall_64+0xd2/0x200 [ 101.500526][ T7626] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.500548][ T7626] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.500577][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.500596][ T7626] RIP: 0033:0x7f4f0812ebe9 [ 101.500685][ T7626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.500726][ T7626] RSP: 002b:00007f4f06b55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.500745][ T7626] RAX: ffffffffffffffda RBX: 00007f4f08366180 RCX: 00007f4f0812ebe9 [ 101.500757][ T7626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 101.500788][ T7626] RBP: 00007f4f06b55090 R08: 0000000000000000 R09: 0000000000000000 [ 101.500799][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.500811][ T7626] R13: 00007f4f08366218 R14: 00007f4f08366180 R15: 00007ffe89597cc8 [ 101.500830][ T7626] [ 101.500876][ T7626] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88810a89dfb0' [ 101.951846][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.010024][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.019204][ T7626] lo speed is unknown, defaulting to 1000 [ 102.046955][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.069594][ T7637] lo speed is unknown, defaulting to 1000 [ 102.085134][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.106139][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.109394][ T7640] FAULT_INJECTION: forcing a failure. [ 102.109394][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.127145][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.1.1446 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.127175][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.127259][ T7640] Call Trace: [ 102.127267][ T7640] [ 102.127277][ T7640] __dump_stack+0x1d/0x30 [ 102.127301][ T7640] dump_stack_lvl+0xe8/0x140 [ 102.127323][ T7640] dump_stack+0x15/0x1b [ 102.127341][ T7640] should_fail_ex+0x265/0x280 [ 102.127391][ T7640] should_fail+0xb/0x20 [ 102.127407][ T7640] should_fail_usercopy+0x1a/0x20 [ 102.127430][ T7640] _copy_from_user+0x1c/0xb0 [ 102.127462][ T7640] kstrtouint_from_user+0x69/0xf0 [ 102.127483][ T7640] ? 0xffffffff81000000 [ 102.127538][ T7640] ? selinux_file_permission+0x1e4/0x320 [ 102.127564][ T7640] proc_fail_nth_write+0x50/0x160 [ 102.127603][ T7640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.127631][ T7640] vfs_write+0x269/0x960 [ 102.127655][ T7640] ? vfs_read+0x4e6/0x770 [ 102.127707][ T7640] ? __rcu_read_unlock+0x4f/0x70 [ 102.127732][ T7640] ? __fget_files+0x184/0x1c0 [ 102.127758][ T7640] ksys_write+0xda/0x1a0 [ 102.127791][ T7640] __x64_sys_write+0x40/0x50 [ 102.127812][ T7640] x64_sys_call+0x27fe/0x2ff0 [ 102.127836][ T7640] do_syscall_64+0xd2/0x200 [ 102.127869][ T7640] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.127897][ T7640] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.127924][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.127945][ T7640] RIP: 0033:0x7fa47a17d69f [ 102.127958][ T7640] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 102.127978][ T7640] RSP: 002b:00007fa478bdf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.128001][ T7640] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa47a17d69f [ 102.128070][ T7640] RDX: 0000000000000001 RSI: 00007fa478bdf0a0 RDI: 0000000000000008 [ 102.128082][ T7640] RBP: 00007fa478bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 102.128093][ T7640] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 102.128104][ T7640] R13: 00007fa47a3b6038 R14: 00007fa47a3b5fa0 R15: 00007fff9399afc8 [ 102.128169][ T7640] [ 102.130403][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.138380][ T7638] loop2: detected capacity change from 0 to 2048 [ 102.213007][ T7626] lo speed is unknown, defaulting to 1000 [ 102.220809][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.390784][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.399321][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.411483][ T7638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.427381][ T7635] netlink: 'syz.5.1444': attribute type 46 has an invalid length. [ 102.450579][ T7637] lo speed is unknown, defaulting to 1000 [ 102.456916][ T7645] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.633601][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.731096][ T7669] can: request_module (can-proto-0) failed. [ 102.785956][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 103.007233][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 103.007252][ T29] audit: type=1400 audit(102.982:12085): avc: denied { setopt } for pid=7679 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.032749][ T29] audit: type=1400 audit(102.982:12086): avc: denied { write } for pid=7679 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.091500][ T29] audit: type=1400 audit(103.042:12087): avc: denied { write } for pid=7679 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.112117][ T29] audit: type=1400 audit(103.062:12088): avc: denied { create } for pid=7679 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.156378][ T29] audit: type=1400 audit(103.082:12089): avc: denied { setopt } for pid=7679 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.165147][ T7683] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.175863][ T29] audit: type=1400 audit(103.112:12090): avc: denied { prog_load } for pid=7682 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.201253][ T29] audit: type=1400 audit(103.112:12091): avc: denied { bpf } for pid=7682 comm="syz.0.1460" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.221514][ T29] audit: type=1400 audit(103.122:12092): avc: denied { map_create } for pid=7682 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.240232][ T29] audit: type=1400 audit(103.122:12093): avc: denied { perfmon } for pid=7682 comm="syz.0.1460" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.260841][ T29] audit: type=1400 audit(103.122:12094): avc: denied { map_read map_write } for pid=7682 comm="syz.0.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.379099][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1462'. [ 103.416485][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.439616][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.539718][ T7686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.598402][ T7693] lo speed is unknown, defaulting to 1000 [ 103.712068][ T7693] lo speed is unknown, defaulting to 1000 [ 103.732232][ T7702] openvswitch: netlink: Message has 6 unknown bytes. [ 105.031762][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1474'. [ 105.152448][ T7733] lo speed is unknown, defaulting to 1000 [ 105.306175][ T7733] lo speed is unknown, defaulting to 1000 [ 105.329606][ T7744] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.359432][ T7744] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 105.449671][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1487'. [ 105.459589][ T7753] random: crng reseeded on system resumption [ 105.480719][ T7757] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=7757 comm=syz.5.1487 [ 105.618007][ T7759] random: crng reseeded on system resumption [ 106.420523][ T7779] lo speed is unknown, defaulting to 1000 [ 106.503126][ T7764] Set syz1 is full, maxelem 65536 reached [ 106.602166][ T7779] lo speed is unknown, defaulting to 1000 [ 107.001374][ T7803] can0: slcan on ttyS3. [ 107.023780][ T7805] openvswitch: netlink: Message has 6 unknown bytes. [ 107.048917][ T7803] can0 (unregistered): slcan off ttyS3. [ 107.146896][ T7814] lo speed is unknown, defaulting to 1000 [ 107.207471][ T7817] loop4: detected capacity change from 0 to 2048 [ 107.280790][ T7817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.281218][ T7814] lo speed is unknown, defaulting to 1000 [ 107.447543][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.627431][ T7825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1512'. [ 107.788387][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.795990][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.803489][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.810896][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.818565][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.826004][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.833557][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.841130][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.849978][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.857432][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 107.929838][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.020175][ T7832] fido_id[7832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.106508][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 108.106622][ T29] audit: type=1400 audit(108.084:12602): avc: denied { mount } for pid=7837 comm="syz.0.1517" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.177484][ T29] audit: type=1400 audit(108.164:12603): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.295066][ T7842] rdma_op ffff88811af14980 conn xmit_rdma 0000000000000000 [ 108.312679][ T29] audit: type=1400 audit(108.294:12604): avc: denied { read } for pid=7841 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.508078][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 108.624632][ T7851] lo speed is unknown, defaulting to 1000 [ 108.656875][ T7852] loop4: detected capacity change from 0 to 2048 [ 108.708718][ T7852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.875657][ T7851] lo speed is unknown, defaulting to 1000 [ 108.987868][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.283810][ T7860] siw: device registration error -23 [ 109.469030][ T29] audit: type=1400 audit(109.454:12605): avc: denied { kexec_image_load } for pid=7864 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 109.595284][ T29] audit: type=1326 audit(109.574:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.618336][ T29] audit: type=1326 audit(109.574:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.688617][ T29] audit: type=1326 audit(109.634:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.711844][ T29] audit: type=1326 audit(109.634:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.734725][ T29] audit: type=1326 audit(109.634:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.757838][ T29] audit: type=1326 audit(109.644:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 109.921679][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 109.952074][ T7878] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 110.304960][ T7896] validate_nla: 26 callbacks suppressed [ 110.304977][ T7896] netlink: 'syz.0.1540': attribute type 33 has an invalid length. [ 110.318451][ T7896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1540'. [ 110.414190][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1542'. [ 110.753632][ T7917] siw: device registration error -23 [ 110.829240][ T7915] lo speed is unknown, defaulting to 1000 [ 110.931879][ T7922] lo speed is unknown, defaulting to 1000 [ 110.987450][ T7915] lo speed is unknown, defaulting to 1000 [ 111.093746][ T7922] lo speed is unknown, defaulting to 1000 [ 111.582801][ T7951] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.597929][ T7954] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 111.622104][ T7954] SELinux: failed to load policy [ 111.858525][ T7967] netlink: 'syz.4.1566': attribute type 13 has an invalid length. [ 111.866477][ T7967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1566'. [ 111.876886][ T7967] FAULT_INJECTION: forcing a failure. [ 111.876886][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.890084][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.4.1566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.890181][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.890193][ T7967] Call Trace: [ 111.890200][ T7967] [ 111.890208][ T7967] __dump_stack+0x1d/0x30 [ 111.890274][ T7967] dump_stack_lvl+0xe8/0x140 [ 111.890360][ T7967] dump_stack+0x15/0x1b [ 111.890375][ T7967] should_fail_ex+0x265/0x280 [ 111.890434][ T7967] should_fail+0xb/0x20 [ 111.890514][ T7967] should_fail_usercopy+0x1a/0x20 [ 111.890536][ T7967] _copy_from_user+0x1c/0xb0 [ 111.890566][ T7967] kstrtouint_from_user+0x69/0xf0 [ 111.890586][ T7967] ? 0xffffffff81000000 [ 111.890600][ T7967] ? selinux_file_permission+0x1e4/0x320 [ 111.890692][ T7967] proc_fail_nth_write+0x50/0x160 [ 111.890724][ T7967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.890747][ T7967] vfs_write+0x269/0x960 [ 111.890813][ T7967] ? vfs_read+0x4e6/0x770 [ 111.890831][ T7967] ? __rcu_read_unlock+0x4f/0x70 [ 111.890850][ T7967] ? __fget_files+0x184/0x1c0 [ 111.890874][ T7967] ksys_write+0xda/0x1a0 [ 111.890951][ T7967] __x64_sys_write+0x40/0x50 [ 111.890970][ T7967] x64_sys_call+0x27fe/0x2ff0 [ 111.890988][ T7967] do_syscall_64+0xd2/0x200 [ 111.891017][ T7967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.891084][ T7967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.891108][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.891132][ T7967] RIP: 0033:0x7f4f0812d69f [ 111.891147][ T7967] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.891230][ T7967] RSP: 002b:00007f4f06b97030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.891275][ T7967] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f0812d69f [ 111.891288][ T7967] RDX: 0000000000000001 RSI: 00007f4f06b970a0 RDI: 0000000000000006 [ 111.891299][ T7967] RBP: 00007f4f06b97090 R08: 0000000000000000 R09: 0000000000000000 [ 111.891310][ T7967] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 111.891321][ T7967] R13: 00007f4f08366038 R14: 00007f4f08365fa0 R15: 00007ffe89597cc8 [ 111.891340][ T7967] [ 112.160674][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'. [ 112.240069][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 112.414926][ T7981] lo speed is unknown, defaulting to 1000 [ 112.474551][ T7981] lo speed is unknown, defaulting to 1000 [ 112.485331][ T7983] loop4: detected capacity change from 0 to 2048 [ 112.550935][ T7988] vlan2: entered allmulticast mode [ 112.568504][ T7988] dummy0: entered allmulticast mode [ 112.569536][ T7983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.701699][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.046505][ T8010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.262115][ T8008] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.269937][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 113.269984][ T29] audit: type=1400 audit(113.245:12998): avc: denied { mounton } for pid=8001 comm="syz.4.1578" path="/306/file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.428594][ T29] audit: type=1400 audit(113.405:12999): avc: denied { create } for pid=8014 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.447628][ T29] audit: type=1400 audit(113.405:13000): avc: denied { bind } for pid=8014 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.467259][ T29] audit: type=1400 audit(113.405:13001): avc: denied { connect } for pid=8014 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 113.489444][ T29] audit: type=1326 audit(113.435:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.512456][ T29] audit: type=1326 audit(113.435:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.535563][ T29] audit: type=1326 audit(113.435:13004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.559197][ T29] audit: type=1326 audit(113.435:13005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.582118][ T29] audit: type=1326 audit(113.435:13006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.605042][ T29] audit: type=1326 audit(113.435:13007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8014 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 113.928705][ T8039] loop2: detected capacity change from 0 to 2048 [ 113.952118][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1591'. [ 113.972235][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.985307][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 113.996717][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 114.010792][ T8044] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 114.058635][ T8039] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1592'. [ 114.105462][ T8039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1592'. [ 114.299514][ T3411] hid_parser_main: 16 callbacks suppressed [ 114.299534][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.312908][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.320390][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.343366][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.352546][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.352576][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.352598][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.352622][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.352652][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.352753][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.397233][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.486339][ T3411] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 114.546469][ T8065] loop2: detected capacity change from 0 to 512 [ 114.648136][ T8065] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 114.702562][ T8065] EXT4-fs (loop2): mount failed [ 114.837198][ T8078] siw: device registration error -23 [ 114.935200][ T8081] 9pnet_fd: Insufficient options for proto=fd [ 114.967758][ T8080] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.310727][ T8085] random: crng reseeded on system resumption [ 115.556221][ T8090] loop2: detected capacity change from 0 to 1024 [ 115.612255][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.667474][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.792152][ T8108] lo speed is unknown, defaulting to 1000 [ 115.838633][ T8108] lo speed is unknown, defaulting to 1000 [ 115.844757][ T8107] siw: device registration error -23 [ 115.960754][ T8121] loop4: detected capacity change from 0 to 1024 [ 115.967845][ T8121] EXT4-fs: Ignoring removed bh option [ 115.973423][ T8121] EXT4-fs: inline encryption not supported [ 115.990182][ T8121] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.041855][ T8121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 116.052046][ T8121] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1617: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.384815][ T8121] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1617: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.500918][ T8121] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1617: Failed to acquire dquot type 0 [ 116.537977][ T8121] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 116.557915][ T8121] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1617: mark_inode_dirty error [ 116.583283][ T8121] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 116.595088][ T8129] sd 0:0:1:0: device reset [ 116.600667][ T8121] EXT4-fs (loop4): 1 orphan inode deleted [ 116.607050][ T8121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.622765][ T4766] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.690681][ T8121] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.1617: lblock 0 mapped to illegal pblock 16 (length 1) [ 116.705142][ T4766] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 0 [ 116.746926][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.754431][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.782672][ T8134] __nla_validate_parse: 8 callbacks suppressed [ 116.782688][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'. [ 116.798862][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.806295][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.929105][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.942709][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 116.959514][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 116.978378][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 117.128157][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1629'. [ 117.147328][ T8156] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 117.348614][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 117.687381][ T8171] loop4: detected capacity change from 0 to 1024 [ 117.703395][ T8172] FAULT_INJECTION: forcing a failure. [ 117.703395][ T8172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.716629][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.0.1633 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.716705][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.716718][ T8172] Call Trace: [ 117.716726][ T8172] [ 117.716735][ T8172] __dump_stack+0x1d/0x30 [ 117.716759][ T8172] dump_stack_lvl+0xe8/0x140 [ 117.716782][ T8172] dump_stack+0x15/0x1b [ 117.716827][ T8172] should_fail_ex+0x265/0x280 [ 117.716923][ T8172] should_fail+0xb/0x20 [ 117.716943][ T8172] should_fail_usercopy+0x1a/0x20 [ 117.717022][ T8172] _copy_from_user+0x1c/0xb0 [ 117.717046][ T8172] ucma_resolve_ip+0x4c/0x2e0 [ 117.717073][ T8172] ucma_write+0x1b3/0x250 [ 117.717097][ T8172] ? __pfx_ucma_write+0x10/0x10 [ 117.717139][ T8172] vfs_write+0x269/0x960 [ 117.717163][ T8172] ? __rcu_read_unlock+0x4f/0x70 [ 117.717186][ T8172] ? __fget_files+0x184/0x1c0 [ 117.717251][ T8172] ksys_write+0xda/0x1a0 [ 117.717277][ T8172] __x64_sys_write+0x40/0x50 [ 117.717301][ T8172] x64_sys_call+0x27fe/0x2ff0 [ 117.717327][ T8172] do_syscall_64+0xd2/0x200 [ 117.717356][ T8172] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.717430][ T8172] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.717459][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.717542][ T8172] RIP: 0033:0x7f016e70ebe9 [ 117.717560][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.717580][ T8172] RSP: 002b:00007f016d16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.717624][ T8172] RAX: ffffffffffffffda RBX: 00007f016e945fa0 RCX: 00007f016e70ebe9 [ 117.717638][ T8172] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 000000000000000b [ 117.717652][ T8172] RBP: 00007f016d16f090 R08: 0000000000000000 R09: 0000000000000000 [ 117.717666][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.717680][ T8172] R13: 00007f016e946038 R14: 00007f016e945fa0 R15: 00007fffb0ea3a08 [ 117.717699][ T8172] [ 117.968017][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 118.194466][ T8171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.299212][ T8160] lo speed is unknown, defaulting to 1000 [ 118.383195][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.719514][ T8190] loop4: detected capacity change from 0 to 1024 [ 118.759676][ T8190] EXT4-fs: Ignoring removed bh option [ 118.807302][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 118.807321][ T29] audit: type=1400 audit(118.791:13392): avc: denied { bind } for pid=8191 comm="syz.0.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.848198][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 118.857438][ T8190] EXT4-fs: inline encryption not supported [ 118.913054][ T8190] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.931629][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1641'. [ 119.019266][ T8190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 119.281000][ T8190] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1638: lblock 2 mapped to illegal pblock 2 (length 1) [ 119.316375][ T8190] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 119.324570][ T8190] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1638: lblock 0 mapped to illegal pblock 48 (length 1) [ 119.332096][ T29] audit: type=1400 audit(119.311:13393): avc: denied { create } for pid=8199 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.358391][ T8190] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 119.367261][ T8190] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1638: Failed to acquire dquot type 0 [ 119.410270][ T8205] lo speed is unknown, defaulting to 1000 [ 119.426593][ T8190] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 119.448182][ T29] audit: type=1400 audit(119.351:13394): avc: denied { connect } for pid=8199 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.467480][ T29] audit: type=1400 audit(119.351:13395): avc: denied { create } for pid=8199 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.545088][ T8190] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1638: mark_inode_dirty error [ 119.566831][ T8190] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 119.626798][ T8190] EXT4-fs (loop4): 1 orphan inode deleted [ 119.637659][ T8190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.650457][ T7593] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 119.676644][ T8190] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 16: comm syz.4.1638: lblock 0 mapped to illegal pblock 16 (length 1) [ 119.885357][ T7593] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 119.893892][ T7593] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 0 [ 120.048829][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.059495][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 120.149140][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.223637][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 120.575620][ T29] audit: type=1400 audit(120.551:13396): avc: denied { setopt } for pid=8214 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.599812][ T8215] loop4: detected capacity change from 0 to 512 [ 120.616396][ T29] audit: type=1400 audit(120.551:13397): avc: denied { connect } for pid=8214 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.635874][ T8215] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 120.661812][ T8215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 120.676770][ T8215] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1646: corrupted in-inode xattr: e_value size too large [ 120.710512][ T8215] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1646: couldn't read orphan inode 15 (err -117) [ 120.727813][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.816541][ T8160] lo speed is unknown, defaulting to 1000 [ 121.155256][ T8205] lo speed is unknown, defaulting to 1000 [ 121.581109][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 121.611019][ T29] audit: type=1326 audit(121.591:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.5.1648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ff60000 [ 121.726499][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.860314][ T8234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8234 comm=syz.4.1650 [ 121.983320][ T8237] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1652'. [ 122.010410][ T8240] loop4: detected capacity change from 0 to 512 [ 122.048648][ T8240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.123509][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.152745][ C1] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.162046][ T3301] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 122.171991][ C1] I/O error, dev loop1, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.183182][ T3301] FAT-fs (loop1): unable to read inode block for updating (i_pos 1050) [ 122.191549][ T3301] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 122.293098][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1659'. [ 122.307077][ T8256] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8256 comm=syz.4.1659 [ 122.326808][ T8256] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 122.453523][ T8264] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1661'. [ 122.499236][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 122.536066][ T8248] lo speed is unknown, defaulting to 1000 [ 122.537285][ T8271] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 122.550199][ T8264] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 122.553910][ T8271] team0: Device hsr_slave_0 failed to register rx_handler [ 122.558086][ T8264] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1661'. [ 122.603588][ T8264] netlink: 752 bytes leftover after parsing attributes in process `syz.4.1661'. [ 122.615731][ T8271] hub 9-0:1.0: USB hub found [ 122.651163][ T8271] hub 9-0:1.0: 8 ports detected [ 122.693452][ T8248] lo speed is unknown, defaulting to 1000 [ 122.868929][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 123.038970][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.046062][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.059951][ T8248] bridge_slave_0: entered allmulticast mode [ 123.075566][ T8248] bridge_slave_0: entered promiscuous mode [ 123.094961][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.102234][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.138457][ T8248] bridge_slave_1: entered allmulticast mode [ 123.164687][ T8248] bridge_slave_1: entered promiscuous mode [ 123.190569][ T8296] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1670'. [ 123.201820][ T8296] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8296 comm=syz.4.1670 [ 123.215624][ T8296] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 123.216595][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.232782][ T8294] siw: device registration error -23 [ 123.241928][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.264336][ T8248] team0: Port device team_slave_0 added [ 123.287673][ T8248] team0: Port device team_slave_1 added [ 123.342416][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 123.351549][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 123.363345][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1674'. [ 123.367468][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.379414][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.405587][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.441495][ T8305] IPVS: Error joining to the multicast group [ 123.462184][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.469397][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.495667][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.564445][ T8248] hsr_slave_0: entered promiscuous mode [ 123.571105][ T8248] hsr_slave_1: entered promiscuous mode [ 123.587425][ T8248] debugfs: 'hsr0' already exists in 'hsr' [ 123.593200][ T8248] Cannot create hsr debugfs directory [ 123.647536][ T8316] FAULT_INJECTION: forcing a failure. [ 123.647536][ T8316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.660779][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.4.1676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.660808][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.660821][ T8316] Call Trace: [ 123.660828][ T8316] [ 123.660836][ T8316] __dump_stack+0x1d/0x30 [ 123.660925][ T8316] dump_stack_lvl+0xe8/0x140 [ 123.660948][ T8316] dump_stack+0x15/0x1b [ 123.660967][ T8316] should_fail_ex+0x265/0x280 [ 123.660992][ T8316] should_fail+0xb/0x20 [ 123.661011][ T8316] should_fail_usercopy+0x1a/0x20 [ 123.661034][ T8316] _copy_from_user+0x1c/0xb0 [ 123.661065][ T8316] memdup_user+0x5e/0xd0 [ 123.661091][ T8316] strndup_user+0x68/0xb0 [ 123.661116][ T8316] __se_sys_request_key+0x11e/0x290 [ 123.661215][ T8316] ? fput+0x8f/0xc0 [ 123.661242][ T8316] __x64_sys_request_key+0x55/0x70 [ 123.661262][ T8316] x64_sys_call+0x1d98/0x2ff0 [ 123.661314][ T8316] do_syscall_64+0xd2/0x200 [ 123.661341][ T8316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 123.661421][ T8316] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.661443][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.661511][ T8316] RIP: 0033:0x7f4f0812ebe9 [ 123.661527][ T8316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.661562][ T8316] RSP: 002b:00007f4f06b97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 123.661582][ T8316] RAX: ffffffffffffffda RBX: 00007f4f08365fa0 RCX: 00007f4f0812ebe9 [ 123.661595][ T8316] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 123.661608][ T8316] RBP: 00007f4f06b97090 R08: 0000000000000000 R09: 0000000000000000 [ 123.661687][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.661700][ T8316] R13: 00007f4f08366038 R14: 00007f4f08365fa0 R15: 00007ffe89597cc8 [ 123.661722][ T8316] [ 123.869907][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 123.869923][ T29] audit: type=1400 audit(123.854:13527): avc: denied { wake_alarm } for pid=8318 comm="syz.4.1678" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.935904][ T8248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.954577][ T29] audit: type=1326 audit(123.934:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 123.977606][ T29] audit: type=1326 audit(123.934:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.004995][ T8248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.012170][ T29] audit: type=1326 audit(123.984:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.035682][ T29] audit: type=1326 audit(123.984:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.058278][ T29] audit: type=1326 audit(123.984:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.080644][ T29] audit: type=1326 audit(123.984:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.103209][ T29] audit: type=1326 audit(123.984:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.125909][ T29] audit: type=1326 audit(123.984:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.126914][ T8328] siw: device registration error -23 [ 124.148479][ T29] audit: type=1326 audit(123.984:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 124.181604][ T8248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.221332][ T8325] lo speed is unknown, defaulting to 1000 [ 124.222621][ T8248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.256886][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.266855][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.301244][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.317560][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.335964][ T8248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.346440][ T8248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.358880][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.365960][ T7567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.375304][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.382692][ T7567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.424843][ T8325] lo speed is unknown, defaulting to 1000 [ 124.460543][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.823886][ T8248] veth0_vlan: entered promiscuous mode [ 124.851499][ T8248] veth1_vlan: entered promiscuous mode [ 124.884663][ T8248] veth0_macvtap: entered promiscuous mode [ 124.893880][ T8384] loop2: detected capacity change from 0 to 512 [ 124.904570][ T8248] veth1_macvtap: entered promiscuous mode [ 124.920297][ T8384] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 124.935728][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.949802][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.962524][ T8384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 125.003626][ T8384] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1691: corrupted in-inode xattr: e_value size too large [ 125.018878][ T7567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.020540][ T8384] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1691: couldn't read orphan inode 15 (err -117) [ 125.027948][ T7567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.051379][ T8384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.162624][ T7567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.174473][ T7567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.248276][ T8398] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.866500][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.890682][ T8427] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 126.030897][ T8439] siw: device registration error -23 [ 126.464338][ T8464] loop4: detected capacity change from 0 to 512 [ 126.479594][ T8464] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 126.513405][ T8464] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 126.526666][ T8464] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1718: corrupted in-inode xattr: e_value size too large [ 126.548041][ T8464] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1718: couldn't read orphan inode 15 (err -117) [ 126.578191][ T8464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.778318][ T8482] delete_channel: no stack [ 126.791615][ T8486] hub 9-0:1.0: USB hub found [ 126.886298][ T8486] hub 9-0:1.0: 8 ports detected [ 127.210164][ T8495] __nla_validate_parse: 10 callbacks suppressed [ 127.210255][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 127.652545][ T8497] lo speed is unknown, defaulting to 1000 [ 127.712716][ T8497] lo speed is unknown, defaulting to 1000 [ 127.937307][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.013045][ T8505] FAULT_INJECTION: forcing a failure. [ 128.013045][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 128.025827][ T8505] CPU: 0 UID: 0 PID: 8505 Comm: syz.0.1736 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.025861][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.025873][ T8505] Call Trace: [ 128.025880][ T8505] [ 128.025889][ T8505] __dump_stack+0x1d/0x30 [ 128.025914][ T8505] dump_stack_lvl+0xe8/0x140 [ 128.025935][ T8505] dump_stack+0x15/0x1b [ 128.025953][ T8505] should_fail_ex+0x265/0x280 [ 128.026051][ T8505] should_failslab+0x8c/0xb0 [ 128.026076][ T8505] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 128.026179][ T8505] ? __d_alloc+0x3d/0x340 [ 128.026245][ T8505] __d_alloc+0x3d/0x340 [ 128.026289][ T8505] d_alloc_parallel+0x53/0xc60 [ 128.026391][ T8505] ? __rcu_read_unlock+0x4f/0x70 [ 128.026416][ T8505] ? __d_lookup+0x316/0x340 [ 128.026516][ T8505] ? try_to_unlazy+0x25e/0x3a0 [ 128.026568][ T8505] path_openat+0x6b5/0x2170 [ 128.026594][ T8505] do_filp_open+0x109/0x230 [ 128.026668][ T8505] do_sys_openat2+0xa6/0x110 [ 128.026704][ T8505] __x64_sys_openat+0xf2/0x120 [ 128.026739][ T8505] x64_sys_call+0x2e9c/0x2ff0 [ 128.026757][ T8505] do_syscall_64+0xd2/0x200 [ 128.026854][ T8505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.026938][ T8505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.026963][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.026981][ T8505] RIP: 0033:0x7f016e70ebe9 [ 128.026996][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.027077][ T8505] RSP: 002b:00007f016d16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.027135][ T8505] RAX: ffffffffffffffda RBX: 00007f016e945fa0 RCX: 00007f016e70ebe9 [ 128.027149][ T8505] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 128.027164][ T8505] RBP: 00007f016d16f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.027179][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.027192][ T8505] R13: 00007f016e946038 R14: 00007f016e945fa0 R15: 00007fffb0ea3a08 [ 128.027210][ T8505] [ 128.252062][ T8517] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.263333][ T8507] pimreg: entered allmulticast mode [ 128.310564][ T8524] loop6: detected capacity change from 0 to 512 [ 128.362295][ T8524] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1743: error while reading EA inode 32 err=-116 [ 128.380248][ T8528] pimreg: left allmulticast mode [ 128.394409][ T8524] EXT4-fs (loop6): Remounting filesystem read-only [ 128.401017][ T8524] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 128.411271][ T8524] EXT4-fs (loop6): 1 orphan inode deleted [ 128.418522][ T8524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.541196][ T8536] loop2: detected capacity change from 0 to 512 [ 128.562820][ T8536] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 128.586294][ T8536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 128.615586][ T8536] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1746: corrupted in-inode xattr: e_value size too large [ 128.641531][ T8536] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1746: couldn't read orphan inode 15 (err -117) [ 128.680791][ T8548] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1751'. [ 128.697530][ T8548] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8548 comm=syz.4.1751 [ 128.710961][ T8536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.724552][ T8548] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 129.207146][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.546373][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 129.546392][ T29] audit: type=1400 audit(129.480:13851): avc: denied { bind } for pid=8567 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.572042][ T29] audit: type=1400 audit(129.480:13852): avc: denied { write } for pid=8567 comm="syz.4.1760" path="socket:[23847]" dev="sockfs" ino=23847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.603220][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'. [ 129.623772][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.704982][ T8579] netlink: 'syz.2.1763': attribute type 2 has an invalid length. [ 129.710781][ T8574] lo speed is unknown, defaulting to 1000 [ 129.718022][ T8579] loop2: detected capacity change from 0 to 1024 [ 129.731068][ T8580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1764'. [ 129.744197][ T8580] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8580 comm=syz.4.1764 [ 129.767820][ T8580] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 129.778797][ T8579] EXT4-fs: dax option not supported [ 129.797347][ T29] audit: type=1326 audit(129.770:13853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.820384][ T29] audit: type=1400 audit(129.770:13854): avc: denied { remount } for pid=8578 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.821181][ T8574] lo speed is unknown, defaulting to 1000 [ 129.839710][ T29] audit: type=1326 audit(129.780:13855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.868496][ T29] audit: type=1326 audit(129.780:13856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.891388][ T29] audit: type=1326 audit(129.780:13857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.914920][ T29] audit: type=1326 audit(129.790:13858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.937908][ T29] audit: type=1326 audit(129.790:13859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 129.961041][ T29] audit: type=1326 audit(129.790:13860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8577 comm="syz.4.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0812ebe9 code=0x7ffc0000 [ 130.409068][ T8611] syz!: rxe_newlink: already configured on team_slave_0 [ 130.486479][ T8608] syzkaller1: entered promiscuous mode [ 130.492097][ T8608] syzkaller1: entered allmulticast mode [ 130.541857][ T8618] openvswitch: netlink: Message has 6 unknown bytes. [ 130.884679][ T8638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 130.907820][ T8641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.918923][ T8642] pim6reg: entered allmulticast mode [ 130.930743][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 130.940557][ T8641] netlink: 'syz.6.1788': attribute type 4 has an invalid length. [ 130.945728][ T8642] pim6reg: left allmulticast mode [ 130.982786][ T8644] lo speed is unknown, defaulting to 1000 [ 131.045532][ T8650] loop4: detected capacity change from 0 to 1024 [ 131.052617][ T8650] EXT4-fs: Ignoring removed bh option [ 131.060064][ T8650] EXT4-fs: inline encryption not supported [ 131.076461][ T8652] loop6: detected capacity change from 0 to 164 [ 131.083640][ T8650] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.096827][ T8650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 131.116542][ T8644] lo speed is unknown, defaulting to 1000 [ 131.122857][ T8652] ISOFS: unable to read i-node block [ 131.128247][ T8652] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 131.161980][ T8650] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1790: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.191965][ T8650] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1790: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.228930][ T8650] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1790: Failed to acquire dquot type 0 [ 131.244140][ T8650] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 131.265977][ T8650] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1790: mark_inode_dirty error [ 131.303055][ T8650] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 131.313466][ T8650] EXT4-fs (loop4): 1 orphan inode deleted [ 131.319964][ T8650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.336648][ T4764] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.378744][ T4764] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 131.415021][ T8650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.436028][ T8650] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.1790: Invalid inode table block 1 in block_group 0 [ 131.471577][ T8650] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 131.505783][ T8650] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.1790: mark_inode_dirty error [ 131.553873][ T8670] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.695064][ T8674] SELinux: failed to load policy [ 131.713343][ T8677] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.741441][ T8677] SELinux: failed to load policy [ 131.762495][ T8679] geneve2: entered promiscuous mode [ 131.767973][ T8679] geneve2: entered allmulticast mode [ 131.846443][ T8683] lo speed is unknown, defaulting to 1000 [ 131.880569][ T8688] lo speed is unknown, defaulting to 1000 [ 131.897895][ T8686] loop2: detected capacity change from 0 to 164 [ 131.944073][ T8686] ISOFS: unable to read i-node block [ 131.949586][ T8686] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 132.001147][ T8688] lo speed is unknown, defaulting to 1000 [ 132.070952][ T8683] lo speed is unknown, defaulting to 1000 [ 132.143281][ T3710] hid_parser_main: 18 callbacks suppressed [ 132.143311][ T3710] hid-generic 0000:0003:0000.0003: unknown main item tag 0x1 [ 132.162188][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.179536][ T3710] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.03 Device [syz0] on syz0 [ 132.195348][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.212473][ T8704] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 132.229986][ T8700] loop6: detected capacity change from 0 to 512 [ 132.330241][ T8710] loop2: detected capacity change from 0 to 512 [ 132.357480][ T8710] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 132.394480][ T8710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 132.429329][ T8710] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1813: corrupted in-inode xattr: e_value size too large [ 132.483734][ T8710] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1813: couldn't read orphan inode 15 (err -117) [ 132.503879][ T8710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.667984][ T8724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2049 sclass=netlink_audit_socket pid=8724 comm=syz.5.1819 [ 132.864079][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 132.930147][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 133.245591][ T8744] syz!: rxe_newlink: already configured on team_slave_0 [ 133.267913][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.339936][ T8748] netlink: 'syz.2.1826': attribute type 13 has an invalid length. [ 133.378469][ T8748] gretap0: refused to change device tx_queue_len [ 133.407678][ T8748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.516881][ T8761] loop2: detected capacity change from 0 to 512 [ 133.534491][ T8762] loop6: detected capacity change from 0 to 164 [ 133.550889][ T8762] ISOFS: unable to read i-node block [ 133.556274][ T8762] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 133.571938][ T8761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.777196][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.115014][ T8787] FAULT_INJECTION: forcing a failure. [ 134.115014][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 134.127877][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.6.1843 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.127920][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.127976][ T8787] Call Trace: [ 134.127984][ T8787] [ 134.127993][ T8787] __dump_stack+0x1d/0x30 [ 134.128018][ T8787] dump_stack_lvl+0xe8/0x140 [ 134.128041][ T8787] dump_stack+0x15/0x1b [ 134.128060][ T8787] should_fail_ex+0x265/0x280 [ 134.128083][ T8787] ? u32_init+0x111/0x3d0 [ 134.128155][ T8787] should_failslab+0x8c/0xb0 [ 134.128219][ T8787] __kmalloc_cache_noprof+0x4c/0x320 [ 134.128245][ T8787] ? tcf_proto_create+0x44/0x1a0 [ 134.128274][ T8787] u32_init+0x111/0x3d0 [ 134.128391][ T8787] ? __pfx_u32_reoffload+0x10/0x10 [ 134.128424][ T8787] tcf_proto_create+0x130/0x1a0 [ 134.128452][ T8787] tc_new_tfilter+0x95c/0x10a0 [ 134.128477][ T8787] ? __rcu_read_unlock+0x4f/0x70 [ 134.128509][ T8787] ? ns_capable+0x7d/0xb0 [ 134.128530][ T8787] ? __pfx_tc_new_tfilter+0x10/0x10 [ 134.128553][ T8787] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 134.128615][ T8787] netlink_rcv_skb+0x123/0x220 [ 134.128634][ T8787] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.128669][ T8787] rtnetlink_rcv+0x1c/0x30 [ 134.128805][ T8787] netlink_unicast+0x5bd/0x690 [ 134.128836][ T8787] netlink_sendmsg+0x58b/0x6b0 [ 134.128860][ T8787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.128942][ T8787] __sock_sendmsg+0x145/0x180 [ 134.128973][ T8787] ____sys_sendmsg+0x31e/0x4e0 [ 134.128996][ T8787] ___sys_sendmsg+0x17b/0x1d0 [ 134.129032][ T8787] __x64_sys_sendmsg+0xd4/0x160 [ 134.129062][ T8787] x64_sys_call+0x191e/0x2ff0 [ 134.129095][ T8787] do_syscall_64+0xd2/0x200 [ 134.129127][ T8787] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.129148][ T8787] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.129246][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.129274][ T8787] RIP: 0033:0x7fb314a1ebe9 [ 134.129300][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.129321][ T8787] RSP: 002b:00007fb313487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.129344][ T8787] RAX: ffffffffffffffda RBX: 00007fb314c55fa0 RCX: 00007fb314a1ebe9 [ 134.129356][ T8787] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000008 [ 134.129419][ T8787] RBP: 00007fb313487090 R08: 0000000000000000 R09: 0000000000000000 [ 134.129433][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.129448][ T8787] R13: 00007fb314c56038 R14: 00007fb314c55fa0 R15: 00007ffed9fd9478 [ 134.129469][ T8787] [ 134.543366][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 134.558817][ T8802] loop2: detected capacity change from 0 to 164 [ 134.591049][ T8802] ISOFS: unable to read i-node block [ 134.596497][ T8802] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 134.655644][ T8807] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 134.681953][ T8809] tmpfs: Bad value for 'mpol' [ 134.709469][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 134.709485][ T29] audit: type=1326 audit(902.820:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.721197][ T8815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1855'. [ 134.739159][ T29] audit: type=1326 audit(902.820:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.769667][ T8817] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8817 comm=syz.0.1855 [ 134.779586][ T29] audit: type=1326 audit(902.872:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.785685][ T8817] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 134.806406][ T29] audit: type=1326 audit(902.872:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.806467][ T29] audit: type=1326 audit(902.872:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.837944][ T8819] siw: device registration error -23 [ 134.860094][ T29] audit: type=1326 audit(902.872:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.860131][ T29] audit: type=1326 audit(902.872:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 134.911326][ T29] audit: type=1326 audit(902.872:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f23fd550 code=0x7ffc0000 [ 134.934390][ T29] audit: type=1326 audit(902.872:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f23fd550 code=0x7ffc0000 [ 134.957370][ T29] audit: type=1326 audit(902.872:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 135.027115][ T8821] netlink: 16 bytes leftover after parsing attributes in process `'. [ 135.133776][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1863'. [ 135.142851][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1863'. [ 135.273246][ T8843] syz!: rxe_newlink: already configured on team_slave_0 [ 135.311408][ T8849] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1868'. [ 135.344797][ T8849] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8849 comm=syz.0.1868 [ 135.363316][ T8849] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 135.428977][ T8851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8851 comm=syz.5.1869 [ 135.449570][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1869'. [ 135.462163][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'. [ 135.555299][ T8863] loop6: detected capacity change from 0 to 512 [ 135.586227][ T8863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.750387][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.752601][ T8874] vlan2: entered allmulticast mode [ 135.801173][ T8876] pim6reg1: entered promiscuous mode [ 135.806730][ T8876] pim6reg1: entered allmulticast mode [ 135.867726][ T8878] loop4: detected capacity change from 0 to 1024 [ 135.893234][ T8878] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.904330][ T8878] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.926890][ T8878] JBD2: no valid journal superblock found [ 135.932851][ T8878] EXT4-fs (loop4): Could not load journal inode [ 135.958405][ T8878] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 135.998776][ T8885] syz!: rxe_newlink: already configured on team_slave_0 [ 136.051729][ T8891] SELinux: security policydb version 17 (MLS) not backwards compatible [ 136.063364][ T8891] SELinux: failed to load policy [ 136.182403][ T8900] loop4: detected capacity change from 0 to 512 [ 136.216353][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.250113][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.383298][ T8910] lo speed is unknown, defaulting to 1000 [ 136.477850][ T8910] lo speed is unknown, defaulting to 1000 [ 136.759314][ T8935] loop6: detected capacity change from 0 to 512 [ 136.796763][ T8935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.856329][ T8949] syz!: rxe_newlink: already configured on team_slave_0 [ 136.940250][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.186483][ T8961] siw: device registration error -23 [ 137.725127][ T8978] __nla_validate_parse: 1 callbacks suppressed [ 137.725146][ T8978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1916'. [ 137.769905][ T8982] smc: net device bond0 applied user defined pnetid SYZ0 [ 137.777975][ T8982] smc: net device bond0 erased user defined pnetid SYZ0 [ 137.786564][ T8978] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=8978 comm=syz.2.1916 [ 137.820095][ T8978] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 137.858191][ T8986] lo speed is unknown, defaulting to 1000 [ 137.880407][ T8992] random: crng reseeded on system resumption [ 137.899304][ T8990] loop6: detected capacity change from 0 to 512 [ 137.940160][ T8990] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.963332][ T8986] lo speed is unknown, defaulting to 1000 [ 137.971654][ T8990] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 137.996442][ T8990] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.1921: inode #15: comm syz.6.1921: iget: illegal inode # [ 138.105197][ T8990] EXT4-fs (loop6): Remounting filesystem read-only [ 138.121544][ T8990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.427540][ T8995] lo speed is unknown, defaulting to 1000 [ 139.053488][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.307514][ T9024] loop6: detected capacity change from 0 to 1024 [ 139.329564][ T9024] EXT4-fs: Ignoring removed bh option [ 139.337244][ T9024] EXT4-fs: inline encryption not supported [ 139.352423][ T9024] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.376474][ T9024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 139.395735][ T9024] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1932: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.403769][ T9029] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1934'. [ 139.420312][ T9024] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1932: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.437639][ T9029] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9029 comm=syz.5.1934 [ 139.451160][ T9024] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1932: Failed to acquire dquot type 0 [ 139.460675][ T9029] netlink: 'syz.5.1934': attribute type 1 has an invalid length. [ 139.480302][ T9024] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.489965][ T9024] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1932: mark_inode_dirty error [ 139.502787][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 139.502802][ T29] audit: type=1326 audit(139.852:14903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.508721][ T9024] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 139.510332][ T29] audit: type=1326 audit(139.863:14904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.537272][ T9024] EXT4-fs (loop6): 1 orphan inode deleted [ 139.572531][ T9024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.573393][ T7593] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.589576][ T9024] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1932: lblock 0 mapped to illegal pblock 16 (length 1) [ 139.617237][ T29] audit: type=1326 audit(139.894:14905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.640350][ T29] audit: type=1326 audit(139.894:14906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.663303][ T29] audit: type=1326 audit(139.894:14907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.686242][ T29] audit: type=1326 audit(139.894:14908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.709201][ T29] audit: type=1326 audit(139.894:14909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.732123][ T29] audit: type=1326 audit(139.894:14910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.740003][ T7593] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 139.754985][ T29] audit: type=1326 audit(139.894:14911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f23febe9 code=0x7ffc0000 [ 139.763513][ T7593] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 0 [ 139.819528][ T9031] syz!: rxe_newlink: already configured on team_slave_0 [ 139.866001][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 139.950939][ T9035] lo speed is unknown, defaulting to 1000 [ 139.957799][ T8995] lo speed is unknown, defaulting to 1000 [ 139.965040][ T9040] netlink: 'syz.5.1937': attribute type 12 has an invalid length. [ 139.973133][ T9040] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1937'. [ 140.082238][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.092561][ T8248] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.113323][ T9040] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1937'. [ 140.360435][ T9035] lo speed is unknown, defaulting to 1000 [ 140.976740][ T8248] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 140.989827][ T8248] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 141.023992][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'. [ 141.035293][ T9059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.059244][ T9058] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9058 comm=syz.0.1945 [ 141.102708][ T9065] loop4: detected capacity change from 0 to 2048 [ 141.111218][ T9063] loop6: detected capacity change from 0 to 512 [ 141.119937][ T9058] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 141.144678][ T9063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.164536][ T9065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.213085][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.227327][ T9065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.287373][ T9065] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1948'. [ 141.534498][ T9088] random: crng reseeded on system resumption [ 141.578374][ T9090] loop6: detected capacity change from 0 to 512 [ 141.585310][ T9090] ext2: Unknown parameter 'nouser_xattr' [ 142.350526][ T9101] tipc: Started in network mode [ 142.355487][ T9101] tipc: Node identity 7aac1b1f3a2f, cluster identity 4711 [ 142.362789][ T9101] tipc: Enabled bearer , priority 0 [ 142.708595][ T9101] syzkaller0: entered promiscuous mode [ 142.714164][ T9101] syzkaller0: entered allmulticast mode [ 142.788775][ T9101] tipc: Resetting bearer [ 142.826632][ T9101] loop4: detected capacity change from 0 to 512 [ 142.882609][ T9101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.903453][ T9107] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1959'. [ 142.925272][ T9107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9107 comm=syz.5.1959 [ 142.957967][ T9107] netlink: 'syz.5.1959': attribute type 1 has an invalid length. [ 143.016051][ T9100] tipc: Resetting bearer [ 143.042508][ T9100] tipc: Disabling bearer [ 143.092679][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.117858][ T9115] random: crng reseeded on system resumption [ 143.178948][ T9124] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.265975][ T9135] tmpfs: Bad value for 'mpol' [ 143.406419][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1973'. [ 143.425013][ T9142] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 143.453589][ T9144] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9144 comm=syz.5.1973 [ 143.477469][ T9144] netlink: 'syz.5.1973': attribute type 1 has an invalid length. [ 143.503772][ T9146] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.1974'. [ 143.539376][ T9147] loop4: detected capacity change from 0 to 2048 [ 143.622068][ T9153] random: crng reseeded on system resumption [ 143.631727][ T9147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.663429][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 143.748258][ T9161] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.757778][ T9142] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 143.836412][ T9164] rdma_op ffff888119158580 conn xmit_rdma 0000000000000000 [ 143.919425][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.006731][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 144.073806][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1985'. [ 144.083432][ T9178] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9178 comm=syz.5.1985 [ 144.099834][ T9178] netlink: 'syz.5.1985': attribute type 1 has an invalid length. [ 144.186370][ T9184] random: crng reseeded on system resumption [ 144.253477][ T9186] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.401754][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 144.401771][ T29] audit: type=1326 audit(144.994:15169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.2.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.483511][ T29] audit: type=1326 audit(145.025:15170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="syz.2.1992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.506954][ T29] audit: type=1326 audit(145.025:15171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.529475][ T29] audit: type=1326 audit(145.025:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.529841][ T9196] siw: device registration error -23 [ 144.551962][ T29] audit: type=1326 audit(145.025:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.579751][ T29] audit: type=1326 audit(145.025:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.602253][ T29] audit: type=1326 audit(145.025:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.624835][ T29] audit: type=1326 audit(145.025:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.647503][ T29] audit: type=1326 audit(145.025:15177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece4beebe9 code=0x7ffc0000 [ 144.669949][ T29] audit: type=1326 audit(145.025:15178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9193 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece4bf0b07 code=0x7ffc0000 [ 144.703310][ T9202] siw: device registration error -23 [ 144.840521][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 145.002135][ T9213] lo speed is unknown, defaulting to 1000 [ 145.054130][ T9214] loop4: detected capacity change from 0 to 2048 [ 145.112014][ T9214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.142547][ T9216] tmpfs: Bad value for 'mpol' [ 145.199498][ T9221] loop6: detected capacity change from 0 to 512 [ 145.233362][ T9221] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 145.244329][ T9213] lo speed is unknown, defaulting to 1000 [ 145.277596][ T9221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 145.311641][ T9221] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2002: corrupted in-inode xattr: e_value size too large [ 145.375447][ T9221] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2002: couldn't read orphan inode 15 (err -117) [ 145.400587][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.413040][ T9221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.234637][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.578095][ T9253] lo speed is unknown, defaulting to 1000 [ 146.588314][ T9255] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2015'. [ 146.609415][ T9255] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9255 comm=syz.6.2015 [ 146.631849][ T9255] netlink: 'syz.6.2015': attribute type 1 has an invalid length. [ 146.633011][ T9253] lo speed is unknown, defaulting to 1000 [ 146.650272][ T9257] loop4: detected capacity change from 0 to 2048 [ 146.699091][ T9257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.754994][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 146.793063][ T9264] loop6: detected capacity change from 0 to 512 [ 146.808356][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.841322][ T9264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.889973][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.953480][ T9274] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 147.286872][ T9290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2028'. [ 147.337443][ T9290] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9290 comm=syz.5.2028 [ 147.370416][ T9294] lo speed is unknown, defaulting to 1000 [ 147.387887][ T9290] netlink: 'syz.5.2028': attribute type 1 has an invalid length. [ 147.496557][ T9294] lo speed is unknown, defaulting to 1000 [ 147.499650][ T9301] syz!: rxe_newlink: already configured on team_slave_0 [ 147.523921][ T9279] lo speed is unknown, defaulting to 1000 [ 147.701910][ T9314] random: crng reseeded on system resumption [ 147.772189][ T9310] syz.6.2037 (9310) used greatest stack depth: 8952 bytes left [ 148.027064][ T9340] random: crng reseeded on system resumption [ 148.190946][ T9348] loop6: detected capacity change from 0 to 164 [ 148.206800][ T9348] ISOFS: unable to read i-node block [ 148.212241][ T9348] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 148.316365][ T9352] loop6: detected capacity change from 0 to 512 [ 148.347385][ T9352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.386475][ T8248] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.099058][ T9279] lo speed is unknown, defaulting to 1000 [ 149.123396][ T9329] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.139731][ T9361] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 150.112507][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 150.112581][ T29] audit: type=1326 audit(150.981:15324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.141686][ T29] audit: type=1326 audit(150.981:15325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.164601][ T29] audit: type=1326 audit(150.981:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.187552][ T29] audit: type=1326 audit(150.981:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.210561][ T29] audit: type=1326 audit(150.981:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.233580][ T29] audit: type=1326 audit(150.981:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.256493][ T29] audit: type=1326 audit(150.981:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.279504][ T29] audit: type=1326 audit(150.981:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.302475][ T29] audit: type=1326 audit(150.981:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.325424][ T29] audit: type=1326 audit(150.981:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9390 comm="syz.0.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016e70ebe9 code=0x7ffc0000 [ 150.446174][ T9399] siw: device registration error -23 [ 150.629592][ T9405] syz!: rxe_newlink: already configured on team_slave_0 [ 150.701017][ T9407] siw: device registration error -23 [ 151.339304][ T9420] ================================================================== [ 151.347610][ T9420] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 151.355360][ T9420] [ 151.357782][ T9420] write to 0xffff88810d2bc30c of 4 bytes by task 9429 on cpu 0: [ 151.365428][ T9420] __bpf_get_stackid+0x77a/0x800 [ 151.370393][ T9420] bpf_get_stackid+0xee/0x120 [ 151.375096][ T9420] bpf_get_stackid_raw_tp+0xf6/0x120 [ 151.380406][ T9420] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 151.385881][ T9420] bpf_trace_run2+0x107/0x1c0 [ 151.390584][ T9420] __traceiter_kfree+0x2e/0x50 [ 151.395379][ T9420] kfree+0x27b/0x320 [ 151.395411][ T9420] selinux_netlbl_sk_security_free+0x18b/0x1d0 [ 151.395445][ T9420] selinux_sk_free_security+0x3b/0x50 [ 151.395475][ T9420] security_sk_free+0x65/0x80 [ 151.395504][ T9420] __sk_destruct+0x392/0x4c0 [ 151.395526][ T9420] __sk_free+0x227/0x270 [ 151.395546][ T9420] sk_common_release+0x169/0x220 [ 151.395578][ T9420] udp_lib_close+0x15/0x20 [ 151.395607][ T9420] inet_release+0xce/0xf0 [ 151.395627][ T9420] sock_close+0x68/0x150 [ 151.395653][ T9420] __fput+0x298/0x650 [ 151.395682][ T9420] ____fput+0x1c/0x30 [ 151.395713][ T9420] task_work_run+0x131/0x1a0 [ 151.395737][ T9420] exit_to_user_mode_loop+0xe4/0x100 [ 151.395759][ T9420] do_syscall_64+0x1d6/0x200 [ 151.395786][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.395809][ T9420] [ 151.395816][ T9420] read to 0xffff88810d2bc30c of 4 bytes by task 9420 on cpu 1: [ 151.395833][ T9420] __bpf_get_stackid+0x33a/0x800 [ 151.395855][ T9420] bpf_get_stackid+0xee/0x120 [ 151.395878][ T9420] bpf_get_stackid_raw_tp+0xf6/0x120 [ 151.395900][ T9420] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 151.395916][ T9420] bpf_trace_run2+0x107/0x1c0 [ 151.395938][ T9420] __traceiter_kfree+0x2e/0x50 [ 151.395959][ T9420] kfree+0x27b/0x320 [ 151.395982][ T9420] ___sys_recvmsg+0x135/0x370 [ 151.396006][ T9420] do_recvmmsg+0x1ef/0x540 [ 151.396029][ T9420] __x64_sys_recvmmsg+0xe5/0x170 [ 151.396055][ T9420] x64_sys_call+0x27a6/0x2ff0 [ 151.396079][ T9420] do_syscall_64+0xd2/0x200 [ 151.396106][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.396128][ T9420] [ 151.396133][ T9420] value changed: 0x0000000b -> 0x00000014 [ 151.396144][ T9420] [ 151.396149][ T9420] Reported by Kernel Concurrency Sanitizer on: [ 151.396161][ T9420] CPU: 1 UID: 0 PID: 9420 Comm: syz.5.2083 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.396189][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.396202][ T9420] ================================================================== [ 151.431244][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2086'. [ 151.455190][ T9431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9431 comm=syz.6.2086 [ 151.456400][ T9431] netlink: 'syz.6.2086': attribute type 1 has an invalid length.