last executing test programs: 2.97674292s ago: executing program 3 (id=12233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2ac}}, 0x0) 2.942238022s ago: executing program 3 (id=12235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80802000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1c8, 0x29, 0x800, 0x70bd29, 0x25dfdbff, {0x17}, [@typed={0xc, 0x113, 0x0, 0x0, @u64=0x80000001}, @nested={0xcc, 0x75, 0x0, 0x1, [@generic="b562e3c5e8a9a2588ef49dc6590f709a1390e5192e4cf1ee2b7c192a3127483da50a77265fc91cad3c9130d88a8f75f459f76c328a4a9f6d50f87bf20517cd6b974faa70a8d5cccde93a94a1a4fd20a30e00bfed953490c8c79877ad1feace05ee930f22538d901ac962f739e62438e1482d534da571f03822fcf712937b3f47a567ccd760a765080e8d42c8c5d58d7d0ff0a97849d5dbccbb95cf7040293014eb69ae38e6255bed3165b15595fb245aa878a35e", @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x4, 0x68}, @generic="302e5f550bfd3feb150b0807197e5d66d3dbf46ccd805536c0d5ff63b0f95f3fe46da97d6cb1592b8c4efc93e2099ca900ac02ef5e314d73b75e7bcb5fdeb9259a774aaa6fdcdd993742eabfffb165d47391d758a8435cdb9d0d7a6fa5e818fd3e485bec0beee3e066", @nested={0x4, 0x9}, @nested={0x67, 0x91, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x4, 0xc4}, @generic="f614174030f287bddd2c96e8c64b2aa8304722726b565abaafab033fe15e0e59fe1a7aad06d575a039bed9b16f74aed888d55476deb385fd9888b906208badc64d5e1cc7a6aed2f06318aedb89f8a40bc8b5b83a66a7f6faff1046"]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4010841}, 0x20000082) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 2.564978453s ago: executing program 0 (id=12241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2.507015268s ago: executing program 0 (id=12246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) 2.506633588s ago: executing program 1 (id=12247): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.463765201s ago: executing program 1 (id=12249): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r0, r0, 0x4, 0x2018, 0x0, @value=r0}, 0x20) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x0, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x4000, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x75, &(0x7f0000000040), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0x2}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.359417s ago: executing program 1 (id=12251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 2.314920283s ago: executing program 0 (id=12252): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="eeb5f2"], 0x2c}}, 0x20008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000140900010073797a31e7ff000008000502000000080900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000002c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c0002800800014000000003140000001100010000000000000000000a00000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x1ac) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r5 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x5, 0x2, 0x6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 2.313921043s ago: executing program 1 (id=12253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00', 0x1000000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00', 0x30000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) truncate(&(0x7f0000000100)='./file0\x00', 0x5) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x1, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000200)={0x27, 0xfffffbff, 0x3, 0x4}, 0x10) write$selinux_context(r10, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x1, 0x11, 0x101, 0x70bd2a, 0x100000, {0x0, 0x0, 0x74, r6, {0x3, 0xb}, {0x5, 0xd}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004014}, 0xc4) 2.300252065s ago: executing program 3 (id=12254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004100)=@newtfilter={0x468, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x43c, 0x2, [@TCA_BPF_ACT={0x438, 0x1, [@m_police={0x434, 0x14, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1e71fdfe, 0x3, 0x5, 0x50, 0x9, 0x4, 0x1, 0x5d, 0xffff, 0x7ff, 0x0, 0x9, 0x200, 0xa9, 0x9, 0x1, 0x5, 0xfffffffe, 0x100, 0x8, 0x2, 0x15, 0xffff, 0x5, 0x0, 0x2, 0xe3ce, 0x1, 0x2, 0x7, 0x2, 0x80000000, 0x1, 0xe870, 0x5, 0x9, 0xfffffffd, 0x6, 0x0, 0xb, 0x80000000, 0x1, 0xfca5, 0x6, 0x8, 0xfffb, 0x4a8, 0x80000001, 0x4, 0x3, 0x5, 0x10000, 0x8, 0x3, 0xc, 0x5, 0x7, 0x80000000, 0x3, 0x800, 0x5, 0xa, 0x7, 0x3, 0x0, 0x7, 0xff, 0xd, 0x3, 0x7ff, 0x7fffffff, 0x3, 0xb18, 0x3, 0x3, 0x1000, 0x3, 0xfffffff7, 0x402, 0x6, 0x3, 0x400, 0xffffffff, 0x8001, 0x9, 0x7, 0x5, 0x5, 0x47c77d11, 0x0, 0xffff, 0x13ab59f8, 0x7ff, 0x7, 0x5, 0xc8874fe6, 0x9, 0x0, 0x4, 0x2, 0x0, 0x8, 0x3, 0x1, 0x5, 0x5, 0x18f, 0x5, 0x10, 0x7, 0xf73b, 0x2, 0x6, 0xf, 0x8, 0x85, 0x5, 0x5, 0x1, 0xf8, 0x3, 0x7, 0x0, 0xf, 0x3, 0x0, 0x2, 0x7, 0x0, 0x88, 0xb, 0x75ad9917, 0xce0, 0x5, 0x0, 0x0, 0x8000, 0x8, 0x838, 0x8, 0x7, 0x5, 0x8, 0x5, 0x2, 0x9, 0x200, 0xf4d, 0x5, 0xa5e6, 0xffff8001, 0x7, 0x8, 0x3, 0x8001, 0x3, 0x6, 0x5, 0x7f, 0xfffffffa, 0x2, 0x3ff, 0x7f4a, 0x0, 0x2, 0x9, 0x66, 0x5, 0x2, 0x0, 0xe, 0xb, 0x5, 0x1, 0x0, 0xf52, 0x8, 0x9, 0x3ff, 0x7, 0x11f, 0xf47, 0x2, 0x87, 0xece, 0x7, 0xffffffff, 0x3, 0x101, 0xf090, 0xa, 0x9, 0x6, 0x6, 0x80, 0x5, 0x3, 0x2, 0x7, 0xffffffff, 0x6, 0x8, 0x8, 0x4, 0x51ed, 0xe0, 0x7, 0x5, 0x7, 0x800000, 0x1, 0x0, 0x9, 0x6, 0xd, 0xfe44, 0x5, 0x6, 0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0xfffffffd, 0x0, 0x10001, 0x3, 0x7, 0x3ff, 0x4000000, 0x89, 0x80, 0x200, 0xd0bb, 0xfffffff9, 0x9, 0xc, 0x4, 0x4, 0x4, 0x5e, 0xf1, 0x7, 0xffffe87c, 0xc0, 0x10, 0x0, 0x9, 0x2, 0x9, 0x0, 0x0, 0x400, 0x6, 0x6]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x468}}, 0x40) 2.245854529s ago: executing program 3 (id=12255): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000240), &(0x7f0000000300)='%pK \x00'}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) acct(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x1, 0x5}, 0x9c) 1.514062508s ago: executing program 4 (id=12259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80802000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x12c, 0x29, 0x800, 0x70bd29, 0x25dfdbff, {0x17}, [@typed={0xc, 0x113, 0x0, 0x0, @u64=0x80000001}, @nested={0x18, 0x75, 0x0, 0x1, [@generic, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x1c, 0x68, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r4}, @typed={0x4, 0xf7}, @nested={0x4, 0x132}]}, @generic="302e5f550bfd3feb150b0807197e5d66d3dbf46ccd805536c0d5ff63b0f95f3fe46da97d6cb1592b8c4efc93e2099ca900ac02ef5e314d73b75e7bcb5fdeb9259a774aaa6fdcdd993742eabfffb165d47391d758a8435cdb9d0d7a6fa5e818fd3e485bec0beee3e066", @nested={0x4, 0x9}, @nested={0x67, 0x91, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x4, 0xc4}, @generic="f614174030f287bddd2c96e8c64b2aa8304722726b565abaafab033fe15e0e59fe1a7aad06d575a039bed9b16f74aed888d55476deb385fd9888b906208badc64d5e1cc7a6aed2f06318aedb89f8a40bc8b5b83a66a7f6faff1046"]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4010841}, 0x20000082) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.393594667s ago: executing program 0 (id=12260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.224244941s ago: executing program 0 (id=12261): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000be45000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) unshare(0x64000600) eventfd2(0x0, 0x0) io_setup(0x81, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x4050) 1.223845271s ago: executing program 3 (id=12262): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x4, 0x58, 0x6, 0x5, 0x0, 0x4, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x90, 0x4, 0x5, 0x0, 0x4, 0x8, 0x5, 0x0, 0x8, 0x0, 0xffffffff00000004}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = syz_pidfd_open(r2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000cc0)={[{@data_writeback}, {@norecovery}, {@dioread_lock}, {@resgid}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@lazytime}]}, 0x21, 0x5fb, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) process_madvise(r3, 0x0, 0x0, 0xe, 0x0) 970.847052ms ago: executing program 1 (id=12263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000600)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x301002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x2, 0xb8ef, 0x1, 'queue1\x00', 0x72}) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) modify_ldt$read(0x1100, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb723, 0x1002, 0x0, 0x1, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x78) 535.538646ms ago: executing program 2 (id=12266): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000300)='$\x00l\"P\xfc\xf8\b\xb9\xa6\xcdy\x05\x00\x00\x00\x00\x00\x00\x00\xbd(}\xe7t', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\xdd)o.\x7f\xeez\x8bb\xb5\xac\x0e\x03\x01\xb9T^\xb4F\xe2\x88\x8e\x90\xb3\x05\xd0\xf4x\xe4\xe3\x1a TWJ\x12\xcc\xdc&\x19I\xae\xec\xd5\x17\xb0K\xb4\x12\xf1\x1fk\xfa\xe8$\xd1\x96\x1d\xbdW\xe5\xb4\x86\x87\xc9J\x93J\xa7\xa3>\xa9ES_\xa7\xb9OK\xad\x8a,\xe5\xc0', &(0x7f0000000080)="ff42a8b6b0e876bc5c3c99be52803855217142661b036015115ed6b2ee95faa2f68685dab0c353eec3adca0ad5599735e366ff1631aad226b241f6cbaa4225ff3d5c1cd192940b577217f1d963631b324fc3e009875a42b258c2fc73028fd6673315b1c64f84d5bdc229ebd33f2238922bb6c8dc08c05d1feab55811dc8de31d0d02f23de04fceb0c976ca40527f4e08e6ac0c8fa425994c1807b50b4e4e45ab44131b590cf9906f53fd5eb6e8d38f17d096d86cf695983f53138b97204d7fa36ff26eba0650811b64f57b9afa1e68c77898bfab4187f5231b30fc34520d7bd2eedbc58e1d91a317155ac4", 0xeb) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r3, &(0x7f0000000780), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='block_plug\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000006c0)={[{@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}]}, 0xfd, 0x50f, &(0x7f0000000140)="$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") kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 533.118947ms ago: executing program 4 (id=12267): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fremovexattr(r2, &(0x7f0000000140)=@known='com.apple.system.Security\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0xf113, 0x7fa0, 0x7, 0x8, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast1, {[@generic={0x89, 0x2}, @noop, @ssrr={0x89, 0x3, 0xb9}, @rr={0x7, 0x13, 0xd1, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @multicast1, @private=0xa010100]}, @timestamp={0x44, 0x14, 0xfe, 0x0, 0x4, [0x8, 0x9, 0xe182, 0x182]}, @ssrr={0x89, 0x7, 0x6, [@broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xf28, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x15, 0x9, 0x64}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) io_uring_setup(0x3494, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x4000, 0x40, 0x204}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000006c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000a00)="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", &(0x7f00000001c0)=""/13, &(0x7f0000001a00)="d1c673069fd9e733a4bce045a19e0b4fbb6b80ea357103fcbbca6b096b325a034089cac533e8e2c07b80174cb30ff656a71aa89a25217248603c3642f3efbe3164bca09c97c9b952ca69fcba99523eabf56737b77a33a62e0cfbeb8a0ebaa356234d1d12f7077e43e84f008a317b2b811b9024945f67ff0c0d467ad99653791b043abd162fc2ba6b9f16b5d2b78ee681b8a44ffbc4f54d001836952300355257364903bd66544748e5877df57d6c1c72bd1d4cadf420c4ed336256a99a12e163145c45fb5dabc2158f295f4dcdf785f24c48776e6365e161dbc4871c063f6664d465297fc0a914e8785073ef2863431e85bb37ab8a2c9862f5b935656a54faac258b13181f3ec2fb440f8729a768efef90f82f31a6708958fad01d62a588eefb4f779fd13892ef46e6eb7f0647e8e07f70b2573eff18e9f419dd48122bcaa8c452d4d14329de9ed7570978ef133fc68a5b6f88e3311686c26aa5a70c9fd4c770683e8247172d4d7f68d937d1c66f28046868dd114a909cef1b4d684477d4fe074e743ae5919c1043fcf4142c33844d322983cf254f516c0f210cb2c3f64c0bf82e62eca8335c3133d8eba30e5604cbaa920e5a1789335a3b2020c4ca5fb9c3de4c2967124331ab127a0e44e003ca5bf1e896e3178dba68a584bd64f98eb7968c862b732a5acb756ba5c8081c569cde6d14b1b3831a47b97f960878fff804350cd2d89c3875ffa3a99b6436d0f7d4503f3937c44210df5aa5facb39ab46fae2865d959143f7772b2a3741f3697f46bae67bb0da3c601411597bfd15d88fd38e62fbe901e277fb23a660dd791dcc1f80c45059a5ca8dbe2d94efadcc865a0a329750cf7628bd19492b7e4beb49aaaa2382dbe829b8b81b290949d4e3a3042073688d332d11fa2d50176f339a1b546d2aa621f70e600704e4717f3236081bf2b5b1eeca1f67ee09a437781dc74c1535f7005f661967dbd98a3d2fc375b1c9f95beef7b020511f0777428a20aaf6458b3bde6f71bec779433db858f4e8db337ce6602ba6ac13da472508bc3a8f1c8775384e31d627371fa7cb8da13aec0951a8f314b7176f19d862909e0613fef66c1477f32a1e8690583aecd70bf10ed1e3d837649b7e3321edd3f4eacf5a1807a3cbec2eced404f5a9d9d806eebf5efaa9e6ab8e4ba4309be574fc8aa9eeec3e3bd3f2141d32958c0f105d19609543e371c7cba5506472c5084fb972a376d674ef4afac39080011c98477143fb9cae90d199a572f97bb9624ba8620ff5c9da2a8be49fe41be5712d29e3226af5b846c5e6fc327c7af33a383ea6dc3c7bf8224a48e27d112176ae517d75cc0edd20296620dda65f3fe2ad31942959f31767953b21f1fdc356d5c16be2bbf79390f26521ca44928953a95650648a863aac6d211c5f81ae0fe3fbcbfc64475747156ffd8668926d67b11d7e5b9351dba4794448420d1c528523112ff84d329db0becbde5eaf2ff3c41d9131c9c1034c67e650d2119c3fca20fa7f95c0db567979a73353a7be3958725a41fe5ec01e447dcff7dbb4968754bf40ff284ae29ff4939321eee54371dfc4edba6a0b8cb2b9f87e96663ab8c10604dd14a782a462f4b43ddd221c6ed1d0575822c3f993c471a985ef062dd78b7f2123d4b71a765d01dd0c0ba26afe1a479acd1dc7e9294d8a82486ed512e566c182d620bdc7f66c3bcbe9487e7c557a7acde1989e6b6ac7a04b59c869d411435f8147689b664cbe32a3c7fa0a9a5c955a8bf684e6bb9833d266c62b0eb98ff5eab48162095e5549fc066de2763d0e15329cda0362b905097ecf64dcbb13bc5f93cdcdca855a351e8f0b67eef6123b690a4a3543624effc47527d069c123e9ea0e6235db59aa0cffbba55bcf2b058d829ff5c6a7927007015f36b3374fda1cf687894882791e068cace6b8bb002c5d8a9b0bd7af1800ac733dfaa691185afabb640ae3734ac245798ac5ea8c684912f026a18210369556994dc40e56e4c5e85a009f2c5c176cd26cca6068e3e9af14821acac5536f9d8f73e7aaccf949dd3df12f65cd63aad6fa8666eb188b5147dab10b11e749e5c517b0dede42c0bc6ec74f3d0a4ee2b537b2dc0a9be807593b6db6b558fc01cbe60eaecd276da225967ffc79767068b10f9fba9dc81e0df1f4b6c27265a7bb9a4804318677fe8f2dbe1f8b2654138854e02ed2175bf08e42dcf062bfd2af7bfc19838f11a672fd2a1804392d6120f7ae450af657051a368b8b677c74610c8c2bbe35933968127ceb8b863b9283f192a3f7b75f4874a5b1bdb76d8a5d38a7c7de0d70e130252b01fd0e49af10bf1c07a866334a23fcc585f0c88aed80819c143d0bc692e07115bd9d0488dc10212118d012eccf12f4f761fda3fe40cd5be12bbbd88a17ea9a584498803768425acaee9e523c83067accbbde8d4e1db51c1f386e3689b47fe5817ec50909e0b5e8268ecc8a280c641bbc64dc2a3f97a7962c11db49fc2485908aee3531c7ecd7d82cb41b41430f8cda330f0c24b0c69747943852da5d2a3ce636f420d65a77444885658391b43ffd6fbf7d0c8239995907edb2f3bfa7ce1d71245a62531f4fe4073b4ae148d8b632d8a17d9787ad5ec524e506b34778dd5d1e3128ef1b805230f6c315ea80073199a74b88bafaa0b9d86c86544ba900362ead5061c57a1700572b032c21132bffec98142213397754fa46027f55a72aa871f46587a8dab39850b55cf5bf4a0a81373c4041c22b8728d2d7c9b389d8134b05c62b473c1a9986ca16dd5a4ac16436fda3555871f50ad373190ae2ef4bc57a7dad0ce415d849b227999069fab3af14796a71eac8d8f9308238f85c23222376d07271a12ac5854036d3f3447eaeb5c785ee74749e49b3e1b79d2c9c51aab42bb959d47cec4a15df2c65aa3e0e4c61c3155571883bfa8766892b916b2b9a42931e3f2f7bebd3d177a4a8eaa2eaa69bb26a05797e95d00ad5a8e1090631eff7a5de9f7ac613168426d5358c9716520116a57c2c221ca6ddf2b7d8b15e5eefb28da897377847d986c70eecf5db347a7c18921f3c933db6ddd7d307a60046a5a23da65f953f3a1772a5b61a3db1c4609e82ae8b2af112105627fa5c4288b3f4dd44ea4ab82bcd49671aabc4696dab41375cc0ab78e9ffa9a4f7bf71ddbb67baa3955c29a45367bba51a928f20b2492295e8764332fcaca0c6c934c3aecd75c1458f858f270fee51b50a52a351c96e10f1366ac7d46f442905529c17ffae1c08c5a061dd320cf4d5b1f53c828bcaee8e2dbaa58514b30a3b67cbfb4c9d18749700e0a897d4369244db3d4eb0ba5df554a6a7afdba40ca62b6b780dd1b9c6ebe6ca2042f5f4aeb05cbde2aed595244775fe848011af87eac3dd1c6d696ddf71737d3efcdb704cf9771e223b3c3d34f0132eaffd671543fa8073e0cffb9ee89bdc49998ab7799fe75d06c1df0f5287481e5bd51547dc2cc6e77637c99b21f0f83c3dfca1dfb41a0c9263861dbe722c09bb2576eb35d272266d033f873118b516ac77660a110d3d6416aafc23c39effcf93ba902d704bb78cdf0f9f61940f765a73ca07dddccadbd65f39167f91b96d1780437dcbc6d0ea3a767988e11b57daa1825bf7fc960e1089deafd06979724970813fc343b736a401ffa8250f47647b16b408ab68b16a2a8b53ee8f648cb698cc24ab7a4a1a819c0f8b755e76470cdd8019ca7619207cced12c6ca24c01163774a0ad4f0fb66992f8633e7580db71e6cffca0b8dd558d9bd100a3098118a77c2bd33792936d64ac4781dda74dcda869cf32a64dee2de30017ccf71888b99d898f368eb49f03360e6ff233aea2e815837740c43974900ef0424b0d4b6d55333743fa52e279cd02d0c0e9851a5fcf1dd01bbb49ce0e22ad1a4cac35122c7c0d4d3092c40a8546a54af441ee7e03c9c3e4a471d061efc2af85cfff84c5b99e46d3d6f9f6799307cdddec2c873372c1196d62f5c42dc784f19d34a290244c4b88021bd9df1ca375800dba2ed66e414635da0413169bede70a9d5fa61a3ab430faad9dab9c7fef9aad17ca521d225312592b5912b43109722970edc496c702c7117bed724f343eee90c1f8d77e08ba4bb033403a410f2d41c25e67a9597af70ca66075fdb7453ef10898d739cb9e551e311c132cb3e02967a4f6f122bf2c58082b9ebd76d955289339892c824505e9427f896f5a57d1a993b1e66b2cd5e184370c5df875c4454a2318f9b41f677bb5db34a5abc0384ebee919fc48de0bc1579c040de44a6b46352366a89ac08d040ecb65a82a792c4ec1ffe58ca8fa02cd8d56510c030047e6a8ccef766c46374d61db8f3f1014f697594722da704fb3a5f2e4ed2328886bb0629af7180b38e2175665019fae933fe92eb0b2e424642af932df46056dbea3440c389f977c6f457bcfc4a7542168b37a5cba75847703689cb30d8071ab9c9080f7da5c64e6674d78e259a1b2fd49694ccb4dfe1a9fa7a7e8812c9420b47ffd85c663e6c35e0fce69c25c87bc147da91ff7a81b93ecc5c92f2b0bb6fe41bfa6fefaab04b3826681357465e6abb787ecf376a5620bb5982591070079f42a1daa66881325a949a9a255bcf61edc59992ea29ad8bfe9f95729e8945d576078e353cbbc2296617d2686598eff05d4408b985a7319247d7492d815beac54f4dfb92dcc52f70e557fdba9a5b5a2d9c84dc73abb76b7bc32c27a92a5a39413d33963f66f655c18e2c3f56912750fb509df725679d210b444c5404a0e9363b33132739dc530d3fba72512e32ec2f5c4eb773d1f9307bcbd6f970035ff1a15977e4e18e14682299762b1fe36db5dcd7ae26670c95704e9789006768b99c46b5cbd8cdd660cc14b5ab8487516e82fb7079834cb1bea6dd100456a7949839abc0a2468b1fd98b9a5c0e6e609e71c4284371010f5f1b071241bf178182d83fc85e0d41d06bc2ae107665ae234a0dfdcb733ba2e6b2dd7a84b728c53a3249961625694d910de6c94a2719623c4f67f07c57a6b8d2cc37c32601888843c53de61b99dc34a1ae0c1edada35000b998c2573d35c44e378bd75f04dd798154bd2dddc200d23e110c85df8eb0705129f64780d83abe9471b1b5597f5860c1cfb6c0af791c99544ab88c9c39b84f04524559d9f80cddaa5ec25fc51560a3a127e070841402c7ecbe23c85ff6332ab5cf4e96daaa55a89244b03b8da40407b165a428bf4af0a36ad2202bf1fc0183c8e88ee1ffc50a0b51ccc694bd742f7f1d736e49c875bd7457d80f28230c697db4aff5194741112c8d1b2b59532f2937e94ea59b29c2f6e2aca075e98acd880159c69110dc9e38de1d86538777e0210502891d220c71d8e73a2bf0f43a8e0ed19c220ce6f5e91f6b11822fd515b0365d5becf4218bbec3bb2b342bbd2736149bef0572c7434764554a360e57664fb859e8264b9fc2d1315fe2f89d13ea85ae272324a97a23fc9f596b6cb4a75d9f78aac87b118aa5d838b2a1e73c6ed8efe0d687472945c0b54e5d24eca42ca5c1b72ce1dc6703052dedec97d82b1457d36adf7f4acd96135edc4f8e26799a801c28f5a54774f12bed7d8e0b89b31597a687c7fd1b7719387554cf15c04cf33ba640c6c413f62145b2f63c7eef91f668b81b549200a1313e8c6134b2776b17e4e07c017ee9af0f2edfbf5f446f61ad82eb92db3520290268a4a45d5376f87ad2035e8f78e45f557b385cc4bb849314d2d2996a7b18724cda130a0db355165dc63bd4794ae6a5a6a3000d871c0e1be97bd5961c66430936a6c2", &(0x7f0000000380)="1de49ce243288db31d886e4d241b815b0661f05fccaa9b8e89052857f58b60cb0fcf465e5d1201cb47bd0bdd7a90786a4ad94849cf359c6ebefa18501f44c6de65646fcef1786413da268bfe5e78987705ae92da4811b7e67a9ebe413af23b2322af8a19354dec333c78aa5813301b619bab5929308d7a1e9c8ff5c965ac12ffbd3e0c94f0064897b4dc2793540fa81ace4ce92cf4f545180a6cd01a5290a09b414f560cc85bbd7c7270254540544df2", 0x5, r5, 0x4}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='\'\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="9eb9e6bc96ea8fbde69fedc3bf4717300a891c1a48c235e599666a36cf4538715f8d91b208f80f0a7590ee4584af6696e72275be6bf3f813a07b7d60b368dd27b9277d5ab8e53df4f69927b33dec1100a17923d951d79a275d928661192a861aaf73e5e348ffa3b949cb7df73175603ec3351553dc9dff5c5c6f", @ANYRES32=r2, @ANYBLOB, @ANYRES64], 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 473.537612ms ago: executing program 1 (id=12268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80802000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x1c8, 0x29, 0x800, 0x70bd29, 0x25dfdbff, {0x17}, [@typed={0xc, 0x113, 0x0, 0x0, @u64=0x80000001}, @nested={0xcc, 0x75, 0x0, 0x1, [@generic="b562e3c5e8a9a2588ef49dc6590f709a1390e5192e4cf1ee2b7c192a3127483da50a77265fc91cad3c9130d88a8f75f459f76c328a4a9f6d50f87bf20517cd6b974faa70a8d5cccde93a94a1a4fd20a30e00bfed953490c8c79877ad1feace05ee930f22538d901ac962f739e62438e1482d534da571f03822fcf712937b3f47a567ccd760a765080e8d42c8c5d58d7d0ff0a97849d5dbccbb95cf7040293014eb69ae38e6255bed3165b15595fb245aa878a35e", @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x4, 0x68}, @generic="302e5f550bfd3feb150b0807197e5d66d3dbf46ccd805536c0d5ff63b0f95f3fe46da97d6cb1592b8c4efc93e2099ca900ac02ef5e314d73b75e7bcb5fdeb9259a774aaa6fdcdd993742eabfffb165d47391d758a8435cdb9d0d7a6fa5e818fd3e485bec0beee3e066", @nested={0x4, 0x9}, @nested={0x67, 0x91, 0x0, 0x1, [@nested={0x4, 0xc1}, @nested={0x4, 0xc4}, @generic="f614174030f287bddd2c96e8c64b2aa8304722726b565abaafab033fe15e0e59fe1a7aad06d575a039bed9b16f74aed888d55476deb385fd9888b906208badc64d5e1cc7a6aed2f06318aedb89f8a40bc8b5b83a66a7f6faff1046"]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4010841}, 0x20000082) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 448.347294ms ago: executing program 4 (id=12269): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0xfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 444.527644ms ago: executing program 2 (id=12270): creat(0x0, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0xc}, {0xa, 0x4e21, 0x8d1, @mcast1, 0x5}, r3, 0xfffffffd}}, 0x48) 429.695925ms ago: executing program 2 (id=12271): ioprio_set$uid(0x3, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x30) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 411.470687ms ago: executing program 2 (id=12272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') 377.140649ms ago: executing program 2 (id=12273): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x7, 0xf) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 234.114641ms ago: executing program 4 (id=12274): r0 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x2}, [{}], {}, [{0x8, 0x6, r2}, {0x8, 0x0, r2}, {0x8, 0x2, r2}, {0x8, 0x4, r2}, {0x8, 0x5, r2}, {0x8, 0x1, r3}, {0x8, 0x7, r3}, {0x8, 0x0, r3}, {0x8, 0x3, r2}], {0x10, 0x2}}, 0x74, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400004007000000000080"], 0x30, 0x8000}, 0x28004001) r4 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e29, 0x0, 0x0, 0x28b, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r6, 0xc17a) 205.210763ms ago: executing program 0 (id=12275): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xf}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x21}, @ioring_restriction_sqe_op={0x1, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x2}], 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000a70200000000000085000000850000aa28135b20383983009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x100000000000000) set_mempolicy(0x2, &(0x7f0000000180)=0xfff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000770934400"/20, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0xa, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYRES32=r6, @ANYRES64, @ANYRES32, @ANYRES64=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='thermal_power_allocator_pid\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffdb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 184.708445ms ago: executing program 3 (id=12276): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/119, 0x77, 0x0, &(0x7f0000000440)=""/141, 0x8d}}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfff1, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x200000000046, 0x121301) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x4000, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x21, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x77e, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7, 0x0, 0x5}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib6_table_lookup\x00', r8}, 0x18) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb89, 0x120a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x100, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x2, 0xd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 164.823857ms ago: executing program 4 (id=12277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 50.466246ms ago: executing program 2 (id=12278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 0s ago: executing program 4 (id=12279): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'rose0\x00'}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'rose0\x00'}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x258, 0x2e, 0x982, 0x70bd25, 0x25dfdbfb, {0x1f}, [@nested={0x186, 0x4, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="878174aaf6a24327df9ab9e43aca32aec490722a6ee8fce0ed8646ec6fe3443e3335ae52998bad022f5c5d775985b7992e878988fe66daafdd065b6de74bf05de57506d2e730011b864ac64e53bede1b7b57e25e37bbf9c419f9ecf2e8a2863cc9dbad62c2900d1240ba09d16400559321180685f6a20d0571a282edab65d24faa48ff0b807fe8e9418b6e26cc1e2640a83b2ae005668dbd167d688e8184aaa2308b95f77f", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private0}, @typed={0x4, 0x138}, @typed={0xa, 0x3b, 0x0, 0x0, @str='rose0\x00'}, @generic="0cb9531135f7b8f4fbb7091380ead71fff5375023f9d4a51ba70609df3155c9dc74c675e93aed3df9366eacd0feb904025b3d67f7f5b9d9c29d8f4e6c8e6668bdb314e9496b408edf50f86ccc596d83ef9373a1e1e8bf90dfe9f5a1b1bc4fff5687cdb5f16b8b1e747f11ef00a182f8e41f6f1ea7f49c88ebcd1054fd0fdde44633e86c545742187f969727041a69c8690a4b5fa3ccb34f85b11fe2e6b", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@remote}]}, @generic="ca0d02850c2bf8907159dd1b60cfac4601b36e359b1934cb46bb1ddca1266fb8e5654e633993c4e5f124e65f7cadec8a5b6d9e9475825de4e0bd6296fe447e9b3f6c5f586e4d6afb3a6288d63e0ae043e543a5ab910febe61f8eb89d5de4fbff09a52fbac3fec52ab4c8ca8b93808374183cc889426385f4c71dd8f2f7d7557e5dfbaccba22f2435f4812b3a1a94832446d14e1d3e001139a91ca18210d0d98aba3ba4bdec9658681f6fbf3ad3434265fa1f5cda0b12f991148ac6"]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c004) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000500)={{0x8, 0x9}, {0xe}, 0x4, 0x1, 0x5}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x36, '\x00', r3, r4, 0x2, 0x0, 0x1}, 0x50) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x108, 0x12, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1f, 0xe2, 0x4, 0x4d, {0x4e21, 0x4e24, [0x3, 0xbf], [0xfffffffd, 0x40, 0xe4, 0x9], r3, [0x101, 0x9]}, 0x7fffffff, 0x12}, [@INET_DIAG_REQ_BYTECODE={0x17, 0x1, "40306bd45d541727041745e358a001ef2db1b8"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "395977317b80c046f5aeb0d88f070688257f5bb90e902102f90ed8831c91579efd214d56d7f8acb410fa33998a45af0bc7fdc32aa74e71178d473615012f19959a5afc34227b2d67cc95023ab82b9fbfccf2cf6655fbad0bb0bbb2cbc39a0d33a7b1600fc714fd40476537b6d10e6f2154cdd8026df5d53d8a058bfe83964f3f2610e474a48877cbd56e44035392199ca93cf782fc73195be05a8ffa5372b3"}]}, 0x108}}, 0x24048800) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000800)) (async) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)="16c0a81f7b7e81f964fffc492bd1da6720918beec439ff046428986094b49ac8e817c669ec35615d6e6ce697fd34c9872716bce25a3c94ea9d4fcd008587b5da0d9cb99776a01d2101c1aa69a392cca93948d2bfe0f488c750cf778bc091c9f6b1878bb741a8982dd1b222e99a752c07b911e8e8866a93d71dc059fb199bae76f29883bd2f52be8cab160ca1e6350357860bf70c7c95a42a82f0fc3143a82467cffa16c58a3a772a1862bf93d7859be6a030c335", 0xb4}, {&(0x7f0000000900)="ff7e7fc1aea6bf6894beacd0fd5659cf02dc2e14911430a04599c6b6af42d8585e7425a6795059f64ea6ed00f068392ba84ecbb0c695343adad58f61bc5f7ab38b64d8f5d6106bb649c2ab4d3072e9c024077c796f8489dc334a88d854ddc7638e96d392f2dd03b54beaafc9f12bfd55c54abae803a83ddefe813557cbdcdcc4f8b4776fa06a1e968faa1e84a22568886d9f42da2120ae0af5ffb8fffb51e6c2b99856255e6b18ba87dfa9af101218b6813c7a6faafa4d5f4c38f62eeeca82d803012e0639119f8d71eb11b1e9d8b31b4c4bb52671f1b8", 0xd7}, {&(0x7f0000000a00)="2414037e76486c3d83a613a86f5b82b33f1a872e7f8eb302050c8e88e1a546b426d10e713f4b725eb2ec0543e24d99a9cbd711a6144a1f359480f0c83b59c391f2ce4b2bbd26640517e73f31d3fd9314001cb25c4d89141140e940868401a8aeb6b514eda98191df049dbf36b68908b2d8fc57929c04b916635c8b265091c62e364fd5a83dbe2e690bcf0b892033192acd844b6d39a7be1e902604a5d2719601ebda41c2c98ee0d9fb0be2d079bc466b1cc67e15f577e49ef76691e9f5db573ac914fb2e9831984519111a3e0a6321b6a7d77a79d3df27b995a0512f4580da196a977349111c1ba9d4db035e9516", 0xee}, {&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000c00)="719ed767d692d783403d93987cbbcb3cf7e82494bede883022056bd1d30d4a1974aed93dfb763ad65b049d929aa4a30c7066552f9f5446596260fcf73d7a95111332378359f1248b1a7f9e104efc2ea7958f0d6e4b2bbaad2508e1d5175c7b8b109887381d06008253617fa07070182f73e65687552125613cd0b8dec4b9933a18d5b47a10129cfa0e8ef2a0f673d4ed7f9bd7324cdfa5db57926b47f50f87b40f6089d217b9c8db3ea4527642414a606355dc45b244bdceb73abd7accfc94d914acda", 0xc3}], 0x5, &(0x7f0000000d80)="91fc6044d0", 0x5, 0x8000}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl1\x00', r3, 0x52, 0x2, 0x4, 0x3, 0x58, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x4}}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000ec0)) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000f00)={0x18, 0x0, {0x4, @empty, 'vlan0\x00'}}) close_range(r5, r4, 0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x18, 0x3f9, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x18, 0x3f9, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x191242, 0x0) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f0000001080)) (async) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f0000001080)) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001100), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, r9, 0x404, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x96}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, r9, 0x404, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x96}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000001240)={0x10, 0x0, "d9b59bcd2bd24ca2fef9d5c84127e30d"}) (async) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000001240)={0x10, 0x0, "d9b59bcd2bd24ca2fef9d5c84127e30d"}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000001280)={0x90002001}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000001280)={0x90002001}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001300)={0x4, &(0x7f00000012c0)=[{0x8, 0x81, 0x5, 0x1}, {0x0, 0xa, 0x8e, 0xe2f}, {0x3, 0x2, 0xc, 0x5fa9}, {0x6, 0x9, 0x4, 0x3}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001300)={0x4, &(0x7f00000012c0)=[{0x8, 0x81, 0x5, 0x1}, {0x0, 0xa, 0x8e, 0xe2f}, {0x3, 0x2, 0xc, 0x5fa9}, {0x6, 0x9, 0x4, 0x3}]}, 0x10) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000001340)) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000001380)) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x30, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x40) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000014c0)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000001500)=r11) kernel console output (not intermixed with test programs): EOD, truncated [ 698.021041][ T1912] loop4: p3 start 33572980 is beyond EOD, truncated [ 698.028214][ T1912] loop4: p5 size 100663296 extends beyond EOD, truncated [ 698.713088][ T1903] 9pnet_fd: p9_fd_create_tcp (1903): problem connecting socket to 127.0.0.1 [ 698.785412][ T1931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=1931 comm=syz.1.10757 [ 698.935937][ T1941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=1941 comm=syz.3.10759 [ 699.030115][ T1953] loop4: detected capacity change from 0 to 1024 [ 699.053341][ T1953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.084074][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10765'. [ 699.084899][ T1953] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.106492][ T1956] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 699.157235][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.205191][ T1976] loop4: detected capacity change from 0 to 512 [ 699.239132][ T1976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.266652][ T1976] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.276666][ T1989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=1989 comm=syz.2.10780 [ 699.289683][ T1989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=1989 comm=syz.2.10780 [ 699.302414][ T1989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=1989 comm=syz.2.10780 [ 699.315108][ T1989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=1989 comm=syz.2.10780 [ 699.358932][ T1976] FAULT_INJECTION: forcing a failure. [ 699.358932][ T1976] name failslab, interval 1, probability 0, space 0, times 0 [ 699.371610][ T1976] CPU: 0 UID: 0 PID: 1976 Comm: syz.4.10773 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 699.371646][ T1976] Tainted: [W]=WARN [ 699.371654][ T1976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.371667][ T1976] Call Trace: [ 699.371674][ T1976] [ 699.371681][ T1976] __dump_stack+0x1d/0x30 [ 699.371741][ T1976] dump_stack_lvl+0xe8/0x140 [ 699.371763][ T1976] dump_stack+0x15/0x1b [ 699.371778][ T1976] should_fail_ex+0x265/0x280 [ 699.371868][ T1976] should_failslab+0x8c/0xb0 [ 699.371900][ T1976] __kmalloc_noprof+0xa5/0x3e0 [ 699.371928][ T1976] ? rds_info_getsockopt+0x140/0x360 [ 699.371957][ T1976] rds_info_getsockopt+0x140/0x360 [ 699.372062][ T1976] rds_getsockopt+0x2ce/0x3e0 [ 699.372140][ T1976] ? __pfx_rds_getsockopt+0x10/0x10 [ 699.372290][ T1976] do_sock_getsockopt+0x1fd/0x240 [ 699.372316][ T1976] __x64_sys_getsockopt+0x11e/0x1a0 [ 699.372412][ T1976] x64_sys_call+0x2bc6/0x2ff0 [ 699.372433][ T1976] do_syscall_64+0xd2/0x200 [ 699.372464][ T1976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 699.372493][ T1976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 699.372554][ T1976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.372573][ T1976] RIP: 0033:0x7f145c97ebe9 [ 699.372586][ T1976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.372601][ T1976] RSP: 002b:00007f145b3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 699.372618][ T1976] RAX: ffffffffffffffda RBX: 00007f145cba5fa0 RCX: 00007f145c97ebe9 [ 699.372684][ T1976] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000008 [ 699.372699][ T1976] RBP: 00007f145b3e7090 R08: 0000200000000000 R09: 0000000000000000 [ 699.372713][ T1976] R10: 000020000001eec0 R11: 0000000000000246 R12: 0000000000000001 [ 699.372727][ T1976] R13: 00007f145cba6038 R14: 00007f145cba5fa0 R15: 00007fff665db8d8 [ 699.372745][ T1976] [ 699.610676][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.653289][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10783'. [ 699.677722][ T2007] loop4: detected capacity change from 0 to 2048 [ 699.723740][ T2011] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 699.723740][ T2011] program syz.1.10788 not setting count and/or reply_len properly [ 699.748111][ T2014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10786'. [ 699.758833][ T2007] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 699.764045][ T2007] loop4: partition table partially beyond EOD, truncated [ 699.775098][ T2007] loop4: p1 start 4278190080 is beyond EOD, truncated [ 699.781917][ T2007] loop4: p2 start 16908800 is beyond EOD, truncated [ 699.820239][ T2007] loop4: p5 start 16908800 is beyond EOD, truncated [ 700.199898][ T2057] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=2057 comm=syz.3.10803 [ 700.387709][ T2086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10817'. [ 700.511222][ T2093] FAULT_INJECTION: forcing a failure. [ 700.511222][ T2093] name failslab, interval 1, probability 0, space 0, times 0 [ 700.523912][ T2093] CPU: 0 UID: 0 PID: 2093 Comm: syz.0.10819 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 700.524008][ T2093] Tainted: [W]=WARN [ 700.524015][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.524026][ T2093] Call Trace: [ 700.524032][ T2093] [ 700.524041][ T2093] __dump_stack+0x1d/0x30 [ 700.524065][ T2093] dump_stack_lvl+0xe8/0x140 [ 700.524088][ T2093] dump_stack+0x15/0x1b [ 700.524105][ T2093] should_fail_ex+0x265/0x280 [ 700.524169][ T2093] ? kobject_uevent_env+0x1c0/0x570 [ 700.524240][ T2093] should_failslab+0x8c/0xb0 [ 700.524269][ T2093] __kmalloc_cache_noprof+0x4c/0x320 [ 700.524324][ T2093] kobject_uevent_env+0x1c0/0x570 [ 700.524346][ T2093] ? sysfs_remove_groups+0x64/0x80 [ 700.524373][ T2093] kobject_uevent+0x1d/0x30 [ 700.524389][ T2093] device_del+0x710/0x790 [ 700.524514][ T2093] ? __try_to_del_timer_sync+0x152/0x170 [ 700.524540][ T2093] device_unregister+0x15/0x40 [ 700.524557][ T2093] wakeup_source_sysfs_remove+0x25/0x30 [ 700.524635][ T2093] wakeup_source_unregister+0xf0/0x330 [ 700.524651][ T2093] ep_destroy_wakeup_source+0x3a/0x50 [ 700.524676][ T2093] ep_modify+0xb0/0x450 [ 700.524816][ T2093] do_epoll_ctl+0x611/0x8a0 [ 700.524839][ T2093] __x64_sys_epoll_ctl+0xcb/0x100 [ 700.524860][ T2093] x64_sys_call+0x706/0x2ff0 [ 700.524877][ T2093] do_syscall_64+0xd2/0x200 [ 700.524898][ T2093] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 700.524920][ T2093] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 700.524939][ T2093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.524956][ T2093] RIP: 0033:0x7f6eddf5ebe9 [ 700.524985][ T2093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.524999][ T2093] RSP: 002b:00007f6edc9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 700.525013][ T2093] RAX: ffffffffffffffda RBX: 00007f6ede185fa0 RCX: 00007f6eddf5ebe9 [ 700.525022][ T2093] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000003 [ 700.525032][ T2093] RBP: 00007f6edc9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 700.525041][ T2093] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 700.525082][ T2093] R13: 00007f6ede186038 R14: 00007f6ede185fa0 R15: 00007ffdfa74c528 [ 700.525097][ T2093] [ 700.784868][ T2096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10820'. [ 700.787541][ T2099] netlink: 356 bytes leftover after parsing attributes in process `syz.2.10822'. [ 700.903111][ T2117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10830'. [ 700.936465][ T2113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10829'. [ 700.946280][ T2118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10831'. [ 701.027798][ T2135] vlan2: entered allmulticast mode [ 701.101458][ T2146] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 701.101458][ T2146] program syz.1.10842 not setting count and/or reply_len properly [ 701.352697][ T2171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.007686][ T2190] lo speed is unknown, defaulting to 1000 [ 702.013813][ T2190] lo speed is unknown, defaulting to 1000 [ 702.360942][ T2215] FAULT_INJECTION: forcing a failure. [ 702.360942][ T2215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.374203][ T2215] CPU: 1 UID: 0 PID: 2215 Comm: syz.0.10869 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 702.374235][ T2215] Tainted: [W]=WARN [ 702.374240][ T2215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.374251][ T2215] Call Trace: [ 702.374257][ T2215] [ 702.374263][ T2215] __dump_stack+0x1d/0x30 [ 702.374310][ T2215] dump_stack_lvl+0xe8/0x140 [ 702.374332][ T2215] dump_stack+0x15/0x1b [ 702.374427][ T2215] should_fail_ex+0x265/0x280 [ 702.374451][ T2215] should_fail+0xb/0x20 [ 702.374532][ T2215] should_fail_usercopy+0x1a/0x20 [ 702.374617][ T2215] _copy_from_user+0x1c/0xb0 [ 702.374648][ T2215] __copy_msghdr+0x244/0x300 [ 702.374672][ T2215] ___sys_sendmsg+0x109/0x1d0 [ 702.374704][ T2215] __x64_sys_sendmsg+0xd4/0x160 [ 702.374726][ T2215] x64_sys_call+0x191e/0x2ff0 [ 702.374753][ T2215] do_syscall_64+0xd2/0x200 [ 702.374807][ T2215] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 702.374835][ T2215] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 702.374861][ T2215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.374883][ T2215] RIP: 0033:0x7f6eddf5ebe9 [ 702.374898][ T2215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.374913][ T2215] RSP: 002b:00007f6edc9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.375003][ T2215] RAX: ffffffffffffffda RBX: 00007f6ede185fa0 RCX: 00007f6eddf5ebe9 [ 702.375018][ T2215] RDX: 0000000004044040 RSI: 0000200000000080 RDI: 0000000000000003 [ 702.375030][ T2215] RBP: 00007f6edc9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 702.375120][ T2215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.375134][ T2215] R13: 00007f6ede186038 R14: 00007f6ede185fa0 R15: 00007ffdfa74c528 [ 702.375155][ T2215] [ 702.743938][ T2222] hub 8-0:1.0: USB hub found [ 702.748638][ T2222] hub 8-0:1.0: 8 ports detected [ 703.624602][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 703.624615][ T29] audit: type=1400 audit(1755717931.496:47446): avc: denied { create } for pid=2241 comm="syz.3.10875" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.665251][ T29] audit: type=1400 audit(1755717931.543:47447): avc: denied { mounton } for pid=2241 comm="syz.3.10875" path="/460/file0" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 703.705074][ T29] audit: type=1326 audit(1755717931.580:47448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.764675][ T29] audit: type=1326 audit(1755717931.580:47449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.788322][ T29] audit: type=1326 audit(1755717931.580:47450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc3a2fd550 code=0x7ffc0000 [ 703.788354][ T29] audit: type=1326 audit(1755717931.608:47451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.835629][ T29] audit: type=1326 audit(1755717931.608:47452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.859427][ T29] audit: type=1326 audit(1755717931.608:47453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.882961][ T29] audit: type=1326 audit(1755717931.608:47454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 703.906547][ T29] audit: type=1326 audit(1755717931.608:47455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2248 comm="syz.1.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 704.031856][ T2282] __nla_validate_parse: 5 callbacks suppressed [ 704.031869][ T2282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10892'. [ 704.047311][ T2282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10892'. [ 704.060777][ T2282] can0: slcan on ttyS3. [ 704.120503][ T2282] can0 (unregistered): slcan off ttyS3. [ 704.202064][ T2295] 9pnet_fd: Insufficient options for proto=fd [ 704.251363][ T2297] tipc: Started in network mode [ 704.256286][ T2297] tipc: Node identity 9e43506e93be, cluster identity 4711 [ 704.263460][ T2297] tipc: Enabled bearer , priority 0 [ 704.270939][ T2297] syzkaller0: entered promiscuous mode [ 704.276459][ T2297] syzkaller0: entered allmulticast mode [ 704.284592][ T2297] tipc: Resetting bearer [ 704.291412][ T2296] tipc: Resetting bearer [ 704.298060][ T2296] tipc: Disabling bearer [ 704.361475][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10902'. [ 704.407891][ T2307] loop4: detected capacity change from 0 to 512 [ 704.415549][ T2307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 704.427321][ T2307] EXT4-fs (loop4): 1 truncate cleaned up [ 704.433450][ T2307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.448585][ T2307] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 704.448585][ T2307] program syz.4.10904 not setting count and/or reply_len properly [ 704.493897][ T2310] SELinux: security policydb version 17 (MLS) not backwards compatible [ 704.502264][ T2310] SELinux: failed to load policy [ 704.508424][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.669637][ T2327] loop4: detected capacity change from 0 to 1024 [ 704.673548][ T2329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10913'. [ 704.688446][ T2327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 704.700689][ T2327] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.713399][ T2327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10912'. [ 704.754762][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 704.825983][ T2351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10921'. [ 704.842058][ T2351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.904747][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10924'. [ 705.026831][ T2371] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 705.026831][ T2371] program syz.2.10929 not setting count and/or reply_len properly [ 705.061331][ T2377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10932'. [ 705.077172][ T2377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.182515][ T2387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10936'. [ 705.719237][ T2404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10943'. [ 705.739128][ T2409] loop4: detected capacity change from 0 to 128 [ 705.748955][ T2404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 705.758015][ T2409] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 705.771441][ T2409] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 705.803708][T31816] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.051104][ T2432] loop4: detected capacity change from 0 to 128 [ 706.059454][ T2432] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.072123][ T2432] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.094342][T31816] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.158834][ T2442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.171974][ T2442] vlan2: entered allmulticast mode [ 706.177206][ T2442] bond2: entered allmulticast mode [ 706.284826][ T2462] vlan3: entered allmulticast mode [ 706.360118][ T2464] SELinux: security policydb version 17 (MLS) not backwards compatible [ 706.376351][ T2464] SELinux: failed to load policy [ 706.390436][ T2470] loop4: detected capacity change from 0 to 512 [ 706.420180][ T2470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.433220][ T2470] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.457846][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.523838][ T2477] 8021q: adding VLAN 0 to HW filter on device bond6 [ 706.534925][ T2477] vlan3: entered allmulticast mode [ 706.540129][ T2477] bond6: entered allmulticast mode [ 707.054872][ T2497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=2497 comm=syz.0.10978 [ 708.136822][ T2539] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 708.145599][ T2539] netlink: 'syz.2.10992': attribute type 27 has an invalid length. [ 708.217404][ T2543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.244188][ T2543] vlan1: entered allmulticast mode [ 708.249349][ T2543] bond3: entered allmulticast mode [ 708.623907][ T2571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 708.638554][ T2571] vlan3: entered allmulticast mode [ 708.643826][ T2571] bond7: entered allmulticast mode [ 708.872022][ T2575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=2575 comm=syz.0.11006 [ 708.932228][ T2585] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 708.940407][ T2585] netlink: 'syz.0.11009': attribute type 27 has an invalid length. [ 709.274393][ T2585] vlan3: left allmulticast mode [ 709.279364][ T2585] bond7: left allmulticast mode [ 709.497501][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 709.497518][ T29] audit: type=1326 audit(1755717936.968:47884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.527485][ T29] audit: type=1326 audit(1755717936.968:47885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.551124][ T29] audit: type=1326 audit(1755717936.968:47886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.574779][ T29] audit: type=1326 audit(1755717936.968:47887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.598435][ T29] audit: type=1326 audit(1755717936.977:47888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.622088][ T29] audit: type=1326 audit(1755717936.977:47889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.645787][ T29] audit: type=1326 audit(1755717936.977:47890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.669388][ T29] audit: type=1326 audit(1755717936.977:47891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.678881][ T2594] __nla_validate_parse: 12 callbacks suppressed [ 709.678898][ T2594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11012'. [ 709.693059][ T29] audit: type=1326 audit(1755717936.977:47892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.699959][ T2594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11012'. [ 709.708498][ T29] audit: type=1326 audit(1755717936.977:47893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2592 comm="syz.3.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6783d6ebe9 code=0x7ffc0000 [ 709.876420][ T2610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11019'. [ 710.623052][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11031'. [ 710.668402][ T2647] loop4: detected capacity change from 0 to 512 [ 710.686261][ T2647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.698990][ T2647] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.720618][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.826991][ T2664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11040'. [ 710.857727][ T2669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11043'. [ 711.308690][ T2691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=2691 comm=syz.2.11052 [ 712.048362][ T2735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11068'. [ 712.058502][ T2735] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11068'. [ 712.068102][ T2739] FAULT_INJECTION: forcing a failure. [ 712.068102][ T2739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.081263][ T2739] CPU: 0 UID: 0 PID: 2739 Comm: syz.1.11070 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 712.081300][ T2739] Tainted: [W]=WARN [ 712.081308][ T2739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.081322][ T2739] Call Trace: [ 712.081327][ T2739] [ 712.081333][ T2739] __dump_stack+0x1d/0x30 [ 712.081352][ T2739] dump_stack_lvl+0xe8/0x140 [ 712.081368][ T2739] dump_stack+0x15/0x1b [ 712.081383][ T2739] should_fail_ex+0x265/0x280 [ 712.081429][ T2739] should_fail+0xb/0x20 [ 712.081449][ T2739] should_fail_usercopy+0x1a/0x20 [ 712.081563][ T2739] _copy_to_user+0x20/0xa0 [ 712.081590][ T2739] simple_read_from_buffer+0xb5/0x130 [ 712.081626][ T2739] proc_fail_nth_read+0x10e/0x150 [ 712.081689][ T2739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.081713][ T2739] vfs_read+0x1a5/0x770 [ 712.081732][ T2739] ? __rcu_read_unlock+0x4f/0x70 [ 712.081751][ T2739] ? __fget_files+0x184/0x1c0 [ 712.081776][ T2739] ksys_read+0xda/0x1a0 [ 712.081840][ T2739] __x64_sys_read+0x40/0x50 [ 712.081924][ T2739] x64_sys_call+0x27bc/0x2ff0 [ 712.081944][ T2739] do_syscall_64+0xd2/0x200 [ 712.081968][ T2739] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 712.081990][ T2739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 712.082068][ T2739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.082087][ T2739] RIP: 0033:0x7fbc3a2fd5fc [ 712.082100][ T2739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 712.082162][ T2739] RSP: 002b:00007fbc38d67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.082178][ T2739] RAX: ffffffffffffffda RBX: 00007fbc3a525fa0 RCX: 00007fbc3a2fd5fc [ 712.082190][ T2739] RDX: 000000000000000f RSI: 00007fbc38d670a0 RDI: 0000000000000006 [ 712.082201][ T2739] RBP: 00007fbc38d67090 R08: 0000000000000000 R09: 0000000000000000 [ 712.082263][ T2739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.082274][ T2739] R13: 00007fbc3a526038 R14: 00007fbc3a525fa0 R15: 00007ffce42e9958 [ 712.082316][ T2739] [ 712.364159][ T2753] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.372319][ T2753] netlink: 'syz.0.11076': attribute type 27 has an invalid length. [ 713.277577][ T2809] loop4: detected capacity change from 0 to 1024 [ 713.284549][ T2809] EXT4-fs: Ignoring removed orlov option [ 713.290314][ T2809] EXT4-fs: inline encryption not supported [ 713.296676][ T2809] ext4: Unknown parameter 'fsmagic' [ 713.320951][ T2807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11096'. [ 713.400524][ T2817] loop4: detected capacity change from 0 to 1024 [ 713.408198][ T2817] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 713.419156][ T2817] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 713.429900][ T2817] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 713.440824][ T2817] EXT4-fs (loop4): invalid journal inode [ 713.447017][ T2817] EXT4-fs (loop4): can't get journal size [ 713.456193][ T2817] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11098: blocks 2-2 from inode overlap system zone [ 713.475374][ T2817] EXT4-fs (loop4): failed to initialize system zone (-117) [ 713.482685][ T2817] EXT4-fs (loop4): mount failed [ 714.191732][ T2893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=2893 comm=syz.1.11132 [ 714.280234][ T2914] FAULT_INJECTION: forcing a failure. [ 714.280234][ T2914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.293371][ T2914] CPU: 1 UID: 0 PID: 2914 Comm: syz.4.11141 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 714.293463][ T2914] Tainted: [W]=WARN [ 714.293471][ T2914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.293487][ T2914] Call Trace: [ 714.293495][ T2914] [ 714.293503][ T2914] __dump_stack+0x1d/0x30 [ 714.293529][ T2914] dump_stack_lvl+0xe8/0x140 [ 714.293553][ T2914] dump_stack+0x15/0x1b [ 714.293650][ T2914] should_fail_ex+0x265/0x280 [ 714.293691][ T2914] should_fail+0xb/0x20 [ 714.293739][ T2914] should_fail_usercopy+0x1a/0x20 [ 714.293767][ T2914] _copy_from_user+0x1c/0xb0 [ 714.293870][ T2914] ___sys_sendmsg+0xc1/0x1d0 [ 714.293967][ T2914] __x64_sys_sendmsg+0xd4/0x160 [ 714.294021][ T2914] x64_sys_call+0x191e/0x2ff0 [ 714.294047][ T2914] do_syscall_64+0xd2/0x200 [ 714.294077][ T2914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 714.294100][ T2914] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 714.294195][ T2914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.294222][ T2914] RIP: 0033:0x7f145c97ebe9 [ 714.294290][ T2914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.294312][ T2914] RSP: 002b:00007f145b3e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.294334][ T2914] RAX: ffffffffffffffda RBX: 00007f145cba5fa0 RCX: 00007f145c97ebe9 [ 714.294349][ T2914] RDX: 0000000000000002 RSI: 0000200000001680 RDI: 0000000000000003 [ 714.294426][ T2914] RBP: 00007f145b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 714.294441][ T2914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.294463][ T2914] R13: 00007f145cba6038 R14: 00007f145cba5fa0 R15: 00007fff665db8d8 [ 714.294487][ T2914] [ 714.533577][ T2926] loop4: detected capacity change from 0 to 2048 [ 714.575616][ T2926] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 714.580843][ T2926] loop4: partition table partially beyond EOD, truncated [ 714.588697][ T2926] loop4: p1 start 4278190080 is beyond EOD, truncated [ 714.595475][ T2926] loop4: p2 start 16908800 is beyond EOD, truncated [ 714.603405][ T2926] loop4: p5 start 16908800 is beyond EOD, truncated [ 714.675304][ T2938] siw: device registration error -23 [ 714.815659][ T2942] loop4: detected capacity change from 0 to 512 [ 714.855967][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 714.855980][ T29] audit: type=1326 audit(1755717942.010:48405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 714.938959][ T2942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11151: bg 0: block 248: padding at end of block bitmap is not set [ 714.977864][ T2942] Quota error (device loop4): write_blk: dquota write failed [ 714.985472][ T2942] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 714.999342][ T29] audit: type=1326 audit(1755717942.038:48406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 715.022967][ T29] audit: type=1326 audit(1755717942.038:48407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 715.046560][ T29] audit: type=1326 audit(1755717942.038:48408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 715.070220][ T29] audit: type=1326 audit(1755717942.038:48409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 715.093973][ T29] audit: type=1326 audit(1755717942.038:48410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2944 comm="syz.0.11152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eddf5ebe9 code=0x7ffc0000 [ 715.121202][ T2942] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11151: Failed to acquire dquot type 1 [ 715.167757][ T2942] EXT4-fs (loop4): 1 truncate cleaned up [ 715.174889][ T2942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.193811][ T2942] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.269226][ T29] audit: type=1400 audit(1755717942.393:48411): avc: denied { create } for pid=2939 comm="syz.4.11151" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 715.367689][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.371134][ T29] audit: type=1326 audit(1755717942.487:48412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.11161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 715.400870][ T983] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 715.493291][ T2987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11164'. [ 715.517410][ T2987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.534420][ T2987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11164'. [ 715.627811][ T3014] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.637230][ T3014] netlink: 'syz.4.11179': attribute type 27 has an invalid length. [ 715.653970][ T3014] vlan2: left allmulticast mode [ 715.658973][ T3014] bond2: left allmulticast mode [ 715.702900][ T3035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11186'. [ 715.728892][ T3035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.738503][ T3035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11186'. [ 715.818150][ T3059] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.826684][ T3059] netlink: 'syz.2.11197': attribute type 27 has an invalid length. [ 715.836368][ T3059] vlan1: left allmulticast mode [ 715.841274][ T3059] bond3: left allmulticast mode [ 715.895835][ T3049] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=3049 comm=syz.0.11189 [ 715.920337][ T3071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11203'. [ 715.945956][ T3071] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.983158][ T3071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11203'. [ 716.027308][ T3084] loop4: detected capacity change from 0 to 128 [ 716.057250][ T3084] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 716.082057][ T3084] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 716.141304][T31816] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 716.206991][ T3111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11219'. [ 716.223011][ T3111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 716.232231][ T3111] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11219'. [ 716.261125][ T3117] loop4: detected capacity change from 0 to 512 [ 716.280749][ T3117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11221: bg 0: block 248: padding at end of block bitmap is not set [ 716.295675][ T3117] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11221: Failed to acquire dquot type 1 [ 716.316069][ T3117] EXT4-fs (loop4): 1 truncate cleaned up [ 716.322405][ T3117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.335131][ T3117] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.445843][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.455416][ T983] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 716.569169][ T3148] loop4: detected capacity change from 0 to 128 [ 716.743945][ T3157] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.752808][ T3157] netlink: 'syz.4.11234': attribute type 27 has an invalid length. [ 716.835524][ T3160] loop4: detected capacity change from 0 to 1024 [ 716.842689][ T3160] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 716.853588][ T3160] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 716.863264][ T3160] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 716.874041][ T3160] EXT4-fs (loop4): invalid journal inode [ 716.879784][ T3160] EXT4-fs (loop4): can't get journal size [ 716.885908][ T3160] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11235: blocks 2-2 from inode overlap system zone [ 716.900085][ T3160] EXT4-fs (loop4): failed to initialize system zone (-117) [ 716.907436][ T3160] EXT4-fs (loop4): mount failed [ 717.703046][ T3209] 9pnet_fd: Insufficient options for proto=fd [ 717.895513][ T3216] siw: device registration error -23 [ 717.964627][ T3223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11261'. [ 717.991863][ T3223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 718.010868][ T3223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11261'. [ 718.152199][ T3237] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.160740][ T3237] netlink: 'syz.3.11267': attribute type 27 has an invalid length. [ 719.135736][ T3295] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.144445][ T3295] netlink: 'syz.2.11290': attribute type 27 has an invalid length. [ 719.661898][ T3322] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 719.670361][ T3322] netlink: 'syz.0.11302': attribute type 27 has an invalid length. [ 719.715573][ T3329] FAULT_INJECTION: forcing a failure. [ 719.715573][ T3329] name failslab, interval 1, probability 0, space 0, times 0 [ 719.728419][ T3329] CPU: 0 UID: 0 PID: 3329 Comm: syz.0.11305 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 719.728483][ T3329] Tainted: [W]=WARN [ 719.728490][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.728502][ T3329] Call Trace: [ 719.728508][ T3329] [ 719.728515][ T3329] __dump_stack+0x1d/0x30 [ 719.728536][ T3329] dump_stack_lvl+0xe8/0x140 [ 719.728593][ T3329] dump_stack+0x15/0x1b [ 719.728610][ T3329] should_fail_ex+0x265/0x280 [ 719.728632][ T3329] should_failslab+0x8c/0xb0 [ 719.728656][ T3329] kmem_cache_alloc_node_noprof+0x57/0x320 [ 719.728697][ T3329] ? __alloc_skb+0x101/0x320 [ 719.728803][ T3329] __alloc_skb+0x101/0x320 [ 719.728860][ T3329] netlink_alloc_large_skb+0xba/0xf0 [ 719.728903][ T3329] netlink_sendmsg+0x3cf/0x6b0 [ 719.728930][ T3329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.728964][ T3329] __sock_sendmsg+0x145/0x180 [ 719.728995][ T3329] ____sys_sendmsg+0x31e/0x4e0 [ 719.729019][ T3329] ___sys_sendmsg+0x17b/0x1d0 [ 719.729055][ T3329] __x64_sys_sendmsg+0xd4/0x160 [ 719.729162][ T3329] x64_sys_call+0x191e/0x2ff0 [ 719.729188][ T3329] do_syscall_64+0xd2/0x200 [ 719.729211][ T3329] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 719.729242][ T3329] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 719.729297][ T3329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.729336][ T3329] RIP: 0033:0x7f6eddf5ebe9 [ 719.729353][ T3329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.729380][ T3329] RSP: 002b:00007f6edc9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.729395][ T3329] RAX: ffffffffffffffda RBX: 00007f6ede185fa0 RCX: 00007f6eddf5ebe9 [ 719.729406][ T3329] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 719.729416][ T3329] RBP: 00007f6edc9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 719.729426][ T3329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.729436][ T3329] R13: 00007f6ede186038 R14: 00007f6ede185fa0 R15: 00007ffdfa74c528 [ 719.729456][ T3329] [ 720.015082][ T3334] blktrace: Concurrent blktraces are not allowed on sg0 [ 720.153110][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.161976][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.587051][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 720.587073][ T29] audit: type=1326 audit(1755717947.370:48877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.616878][ T29] audit: type=1326 audit(1755717947.370:48878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.671889][ T29] audit: type=1326 audit(1755717947.426:48879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.695587][ T29] audit: type=1326 audit(1755717947.426:48880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.719272][ T29] audit: type=1326 audit(1755717947.426:48881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.742830][ T29] audit: type=1326 audit(1755717947.426:48882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.766389][ T29] audit: type=1326 audit(1755717947.426:48883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.789975][ T29] audit: type=1326 audit(1755717947.426:48884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.813624][ T29] audit: type=1326 audit(1755717947.426:48885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.837293][ T29] audit: type=1326 audit(1755717947.426:48886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3352 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 720.947907][ T3353] __nla_validate_parse: 1 callbacks suppressed [ 720.947921][ T3353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11313'. [ 721.095734][ T3363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11317'. [ 721.117533][ T3363] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.133700][ T3363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11317'. [ 721.950124][ T3428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=3428 comm=syz.3.11342 [ 722.185313][ T3450] vlan3: entered allmulticast mode [ 722.278464][ T3467] loop4: detected capacity change from 0 to 1024 [ 722.303135][ T3467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.357333][ T3452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=3452 comm=syz.3.11354 [ 722.463196][ T3465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11359'. [ 722.548337][ T3486] FAULT_INJECTION: forcing a failure. [ 722.548337][ T3486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.561493][ T3486] CPU: 0 UID: 0 PID: 3486 Comm: syz.3.11365 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 722.561523][ T3486] Tainted: [W]=WARN [ 722.561555][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.561569][ T3486] Call Trace: [ 722.561577][ T3486] [ 722.561586][ T3486] __dump_stack+0x1d/0x30 [ 722.561606][ T3486] dump_stack_lvl+0xe8/0x140 [ 722.561701][ T3486] dump_stack+0x15/0x1b [ 722.561719][ T3486] should_fail_ex+0x265/0x280 [ 722.561737][ T3486] should_fail+0xb/0x20 [ 722.561752][ T3486] should_fail_usercopy+0x1a/0x20 [ 722.561798][ T3486] _copy_to_user+0x20/0xa0 [ 722.561850][ T3486] simple_read_from_buffer+0xb5/0x130 [ 722.561875][ T3486] proc_fail_nth_read+0x10e/0x150 [ 722.561901][ T3486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.561948][ T3486] vfs_read+0x1a5/0x770 [ 722.561970][ T3486] ? bpf_trace_run2+0x124/0x1c0 [ 722.562041][ T3486] ? __rcu_read_unlock+0x4f/0x70 [ 722.562171][ T3486] ? __fget_files+0x184/0x1c0 [ 722.562200][ T3486] ksys_read+0xda/0x1a0 [ 722.562219][ T3486] __x64_sys_read+0x40/0x50 [ 722.562237][ T3486] x64_sys_call+0x27bc/0x2ff0 [ 722.562406][ T3486] do_syscall_64+0xd2/0x200 [ 722.562429][ T3486] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 722.562499][ T3486] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 722.562527][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.562551][ T3486] RIP: 0033:0x7f6783d6d5fc [ 722.562568][ T3486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 722.562587][ T3486] RSP: 002b:00007f67827d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.562641][ T3486] RAX: ffffffffffffffda RBX: 00007f6783f95fa0 RCX: 00007f6783d6d5fc [ 722.562652][ T3486] RDX: 000000000000000f RSI: 00007f67827d70a0 RDI: 0000000000000005 [ 722.562662][ T3486] RBP: 00007f67827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 722.562672][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.562682][ T3486] R13: 00007f6783f96038 R14: 00007f6783f95fa0 R15: 00007fffb3259a18 [ 722.562704][ T3486] [ 722.841893][ T3494] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.856132][ T3494] netlink: 'syz.0.11369': attribute type 27 has an invalid length. [ 723.172879][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.187430][ T3519] lo speed is unknown, defaulting to 1000 [ 723.193875][ T3519] lo speed is unknown, defaulting to 1000 [ 723.275237][ T3519] chnl_net:caif_netlink_parms(): no params data found [ 723.322119][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.329270][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.336508][ T3519] bridge_slave_0: entered allmulticast mode [ 723.346983][ T3519] bridge_slave_0: entered promiscuous mode [ 723.363159][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.370260][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.377560][ T3519] bridge_slave_1: entered allmulticast mode [ 723.384238][ T3519] bridge_slave_1: entered promiscuous mode [ 723.402325][ T3519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.413233][ T3519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.445108][ T3519] team0: Port device team_slave_0 added [ 723.451967][ T3519] team0: Port device team_slave_1 added [ 723.470381][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.477353][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.503328][ T3519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.514743][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.521699][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.547600][ T3519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.575792][ T3519] hsr_slave_0: entered promiscuous mode [ 723.582629][ T3519] hsr_slave_1: entered promiscuous mode [ 723.588587][ T3519] debugfs: 'hsr0' already exists in 'hsr' [ 723.594341][ T3519] Cannot create hsr debugfs directory [ 723.897297][ T3519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.907857][ T3519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.916719][ T3519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 723.926688][ T3519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 723.952166][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.959335][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.966770][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.973911][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.003003][ T3519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.015134][ T3519] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.024427][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.053407][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.077029][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.084200][ T6680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.125710][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.132801][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.289198][ T3519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.317371][ T3578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11394'. [ 724.379507][ T3519] veth0_vlan: entered promiscuous mode [ 724.394098][ T3608] 9pnet_fd: Insufficient options for proto=fd [ 724.400796][ T3519] veth1_vlan: entered promiscuous mode [ 724.423587][ T3519] veth0_macvtap: entered promiscuous mode [ 724.448362][ T3519] veth1_macvtap: entered promiscuous mode [ 724.458494][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.469405][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.487544][ T6678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.497901][ T6678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.514531][ T6678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.528806][ T3617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11406'. [ 724.538103][ T6678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.607316][ T3635] 9pnet_fd: Insufficient options for proto=fd [ 724.699143][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11419'. [ 724.946164][ T3682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11431'. [ 725.028167][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11436'. [ 725.044310][ T3695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 725.053489][ T3695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11436'. [ 726.021774][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 726.021788][ T29] audit: type=1400 audit(1755717952.449:49199): avc: denied { bind } for pid=3738 comm="syz.1.11451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 726.047709][ T29] audit: type=1400 audit(1755717952.449:49200): avc: denied { name_bind } for pid=3738 comm="syz.1.11451" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 726.069603][ T29] audit: type=1400 audit(1755717952.449:49201): avc: denied { node_bind } for pid=3738 comm="syz.1.11451" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 726.155039][ T29] audit: type=1400 audit(1755717952.580:49202): avc: denied { mount } for pid=3738 comm="syz.1.11451" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 726.208920][ T29] audit: type=1326 audit(1755717952.627:49203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.243160][ T29] audit: type=1326 audit(1755717952.664:49204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.267116][ T29] audit: type=1326 audit(1755717952.664:49205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.290906][ T29] audit: type=1326 audit(1755717952.664:49206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.314607][ T29] audit: type=1326 audit(1755717952.664:49207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.339111][ T29] audit: type=1326 audit(1755717952.748:49208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.2.11452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 726.403767][ T3749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11454'. [ 726.450210][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11458'. [ 726.468758][ T3758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.479047][ T3758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11458'. [ 726.530027][ T3765] pim6reg1: entered promiscuous mode [ 726.709990][ T3775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11465'. [ 726.798880][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11472'. [ 726.808436][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11472'. [ 726.843744][ T3793] lo speed is unknown, defaulting to 1000 [ 726.849912][ T3793] lo speed is unknown, defaulting to 1000 [ 726.977406][ T3799] lo speed is unknown, defaulting to 1000 [ 726.983620][ T3799] lo speed is unknown, defaulting to 1000 [ 727.022046][ T3803] lo speed is unknown, defaulting to 1000 [ 727.028129][ T3803] lo speed is unknown, defaulting to 1000 [ 727.113667][ T3807] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11478'. [ 727.319538][ T3815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11482'. [ 727.424054][ T3820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11484'. [ 727.518371][ T3832] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11490'. [ 727.750977][ T3854] vlan2: entered allmulticast mode [ 727.756159][ T3854] hsr0: entered allmulticast mode [ 727.761353][ T3854] hsr_slave_0: entered allmulticast mode [ 727.766992][ T3854] hsr_slave_1: entered allmulticast mode [ 728.637967][ T3890] lo speed is unknown, defaulting to 1000 [ 728.645689][ T3890] lo speed is unknown, defaulting to 1000 [ 728.775276][ T3890] lo speed is unknown, defaulting to 1000 [ 728.781362][ T3890] lo speed is unknown, defaulting to 1000 [ 728.785489][ T3901] IPv6: sit1: Disabled Multicast RS [ 729.049848][ T3413] IPVS: starting estimator thread 0... [ 729.050847][ T3917] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 729.070790][ T3921] netlink: 'syz.0.11523': attribute type 27 has an invalid length. [ 729.135043][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.142397][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.150249][ T3922] IPVS: using max 2784 ests per chain, 139200 per kthread [ 729.239916][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.250378][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.311673][ T6678] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.336017][ T6678] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.404232][ T6678] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.413282][ T6678] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.427036][ T3940] vlan2: entered allmulticast mode [ 730.181478][ T3993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=3993 comm=syz.3.11552 [ 730.744274][ T4036] vlan2: entered allmulticast mode [ 731.895483][ T29] kauditd_printk_skb: 957 callbacks suppressed [ 731.895509][ T29] audit: type=1326 audit(1755717957.949:50166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 731.925635][ T29] audit: type=1326 audit(1755717957.949:50167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 731.949340][ T29] audit: type=1326 audit(1755717957.949:50168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 731.972973][ T29] audit: type=1326 audit(1755717957.949:50169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 731.996649][ T29] audit: type=1326 audit(1755717957.949:50170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.020283][ T29] audit: type=1326 audit(1755717957.949:50171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.032116][ T4114] __nla_validate_parse: 17 callbacks suppressed [ 732.032134][ T4114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11601'. [ 732.043983][ T29] audit: type=1326 audit(1755717957.949:50172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.050346][ T4114] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11601'. [ 732.059315][ T29] audit: type=1326 audit(1755717957.949:50173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.115576][ T29] audit: type=1326 audit(1755717957.949:50174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.139233][ T29] audit: type=1326 audit(1755717957.949:50175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.1.11601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3a2febe9 code=0x7ffc0000 [ 732.215673][ T4122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11605'. [ 732.320946][ T4134] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11610'. [ 732.330663][ T4134] C: renamed from team_slave_0 [ 732.495082][ T4146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11613'. [ 732.504359][ T4146] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11613'. [ 732.755327][ T4154] loop4: detected capacity change from 0 to 1024 [ 732.772920][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.161358][ T4160] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.169740][ T4160] netlink: 'syz.0.11619': attribute type 27 has an invalid length. [ 733.288631][ T4167] vlan1: entered allmulticast mode [ 733.376581][ T4170] FAULT_INJECTION: forcing a failure. [ 733.376581][ T4170] name failslab, interval 1, probability 0, space 0, times 0 [ 733.389454][ T4170] CPU: 1 UID: 0 PID: 4170 Comm: syz.3.11623 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 733.389495][ T4170] Tainted: [W]=WARN [ 733.389503][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.389518][ T4170] Call Trace: [ 733.389525][ T4170] [ 733.389534][ T4170] __dump_stack+0x1d/0x30 [ 733.389558][ T4170] dump_stack_lvl+0xe8/0x140 [ 733.389582][ T4170] dump_stack+0x15/0x1b [ 733.389686][ T4170] should_fail_ex+0x265/0x280 [ 733.389712][ T4170] should_failslab+0x8c/0xb0 [ 733.389742][ T4170] kmem_cache_alloc_node_noprof+0x57/0x320 [ 733.389777][ T4170] ? __alloc_skb+0x101/0x320 [ 733.389840][ T4170] __alloc_skb+0x101/0x320 [ 733.389928][ T4170] netlink_alloc_large_skb+0xba/0xf0 [ 733.389996][ T4170] netlink_sendmsg+0x3cf/0x6b0 [ 733.390025][ T4170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.390051][ T4170] __sock_sendmsg+0x145/0x180 [ 733.390085][ T4170] ____sys_sendmsg+0x31e/0x4e0 [ 733.390197][ T4170] ___sys_sendmsg+0x17b/0x1d0 [ 733.390241][ T4170] __x64_sys_sendmsg+0xd4/0x160 [ 733.390320][ T4170] x64_sys_call+0x191e/0x2ff0 [ 733.390347][ T4170] do_syscall_64+0xd2/0x200 [ 733.390391][ T4170] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 733.390415][ T4170] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 733.390440][ T4170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.390465][ T4170] RIP: 0033:0x7f6783d6ebe9 [ 733.390540][ T4170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.390556][ T4170] RSP: 002b:00007f67827d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.390573][ T4170] RAX: ffffffffffffffda RBX: 00007f6783f95fa0 RCX: 00007f6783d6ebe9 [ 733.390587][ T4170] RDX: 0000000000008040 RSI: 00002000000003c0 RDI: 0000000000000006 [ 733.390601][ T4170] RBP: 00007f67827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 733.390615][ T4170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.390702][ T4170] R13: 00007f6783f96038 R14: 00007f6783f95fa0 R15: 00007fffb3259a18 [ 733.390720][ T4170] [ 733.671701][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.694458][ T4191] loop4: detected capacity change from 0 to 512 [ 733.714000][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.727202][ T4191] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.749982][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.767163][ T4201] loop4: detected capacity change from 0 to 128 [ 733.775185][ T4201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 733.787508][ T4201] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 733.811934][T31816] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 733.916899][ T4211] loop4: detected capacity change from 0 to 1024 [ 733.926810][ T4203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=4203 comm=syz.3.11635 [ 733.947164][ T4211] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 733.958067][ T4211] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 733.977101][ T4211] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 733.988535][ T4211] EXT4-fs (loop4): invalid journal inode [ 733.994746][ T4211] EXT4-fs (loop4): can't get journal size [ 734.011761][ T4211] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11638: blocks 2-2 from inode overlap system zone [ 734.025978][ T4211] EXT4-fs (loop4): failed to initialize system zone (-117) [ 734.033705][ T4211] EXT4-fs (loop4): mount failed [ 734.102701][ T4217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11640'. [ 734.112158][ T4217] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11640'. [ 734.634598][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11672'. [ 734.650356][ T4287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.660480][ T4287] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11672'. [ 734.995803][ T4305] lo speed is unknown, defaulting to 1000 [ 735.002470][ T4305] lo speed is unknown, defaulting to 1000 [ 735.734816][ T4321] lo speed is unknown, defaulting to 1000 [ 735.740977][ T4321] lo speed is unknown, defaulting to 1000 [ 735.853182][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 735.897401][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.904641][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.912300][ T4321] bridge_slave_0: entered allmulticast mode [ 735.919844][ T4321] bridge_slave_0: entered promiscuous mode [ 735.927395][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.934554][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.942307][ T4321] bridge_slave_1: entered allmulticast mode [ 735.948953][ T4321] bridge_slave_1: entered promiscuous mode [ 735.966381][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.976924][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.996634][ T4321] team0: Port device team_slave_0 added [ 736.003454][ T4321] team0: Port device team_slave_1 added [ 736.019339][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.026321][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.052234][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.063404][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.070439][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.096383][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.122227][ T4321] hsr_slave_0: entered promiscuous mode [ 736.128254][ T4321] hsr_slave_1: entered promiscuous mode [ 736.134227][ T4321] debugfs: 'hsr0' already exists in 'hsr' [ 736.139993][ T4321] Cannot create hsr debugfs directory [ 736.379285][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 736.387931][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 736.396958][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 736.406028][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 736.421244][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.428291][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.435638][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.442838][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.471512][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.484073][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.492326][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.503902][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.514679][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.521820][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.532481][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.539573][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.630166][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.696901][ T4377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.739396][ T4321] veth0_vlan: entered promiscuous mode [ 736.747474][ T4321] veth1_vlan: entered promiscuous mode [ 736.767202][ T4389] vlan1: entered allmulticast mode [ 736.775800][ T4393] 9pnet_fd: Insufficient options for proto=fd [ 736.788922][ T4321] veth0_macvtap: entered promiscuous mode [ 736.801874][ T4321] veth1_macvtap: entered promiscuous mode [ 736.820876][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.833733][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.845579][ T6682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.855909][ T6682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.864665][ T6682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.883281][ T6682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.000878][ T4410] loop4: detected capacity change from 0 to 512 [ 737.017270][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.029973][ T4410] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.051745][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.139541][ T4418] lo speed is unknown, defaulting to 1000 [ 737.146175][ T4418] lo speed is unknown, defaulting to 1000 [ 737.241812][ T4418] vlan1: entered allmulticast mode [ 737.669696][ T4433] __nla_validate_parse: 5 callbacks suppressed [ 737.669708][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11711'. [ 737.691293][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 737.691305][ T29] audit: type=1400 audit(1755717963.328:50734): avc: denied { create } for pid=4431 comm="syz.3.11718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 737.748085][ T4435] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11711'. [ 737.977796][ T29] audit: type=1400 audit(1755717963.627:50735): avc: denied { write } for pid=4439 comm="syz.2.11721" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.000816][ T29] audit: type=1400 audit(1755717963.627:50736): avc: denied { open } for pid=4439 comm="syz.2.11721" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.024182][ T29] audit: type=1400 audit(1755717963.627:50737): avc: denied { ioctl } for pid=4439 comm="syz.2.11721" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 738.062966][ T4433] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 738.169387][ T29] audit: type=1400 audit(1755717963.767:50738): avc: denied { create } for pid=4439 comm="syz.2.11721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 738.197513][ T29] audit: type=1400 audit(1755717963.777:50739): avc: denied { write } for pid=4439 comm="syz.2.11721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 739.073428][ T29] audit: type=1326 audit(1755717964.656:50740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.11738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 739.169452][ T29] audit: type=1326 audit(1755717964.684:50741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.11738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 739.193141][ T29] audit: type=1326 audit(1755717964.693:50742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.11738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 739.216753][ T29] audit: type=1326 audit(1755717964.693:50743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.11738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 739.372535][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11748'. [ 739.381611][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11748'. [ 739.394093][ T4514] netlink: zone id is out of range [ 739.399484][ T4514] netlink: zone id is out of range [ 739.404649][ T4514] netlink: zone id is out of range [ 739.409866][ T4514] netlink: zone id is out of range [ 739.418837][ T4514] netlink: zone id is out of range [ 739.424158][ T4514] netlink: zone id is out of range [ 739.429391][ T4514] netlink: zone id is out of range [ 739.434557][ T4514] netlink: zone id is out of range [ 739.439674][ T4514] netlink: zone id is out of range [ 739.444889][ T4514] netlink: zone id is out of range [ 739.447168][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11752'. [ 739.459359][ T4523] tipc: Started in network mode [ 739.464264][ T4523] tipc: Node identity 22b54c5844c5, cluster identity 4711 [ 739.471436][ T4523] tipc: Enabled bearer , priority 0 [ 739.486719][ T4514] syzkaller0: entered promiscuous mode [ 739.492216][ T4514] syzkaller0: entered allmulticast mode [ 739.509366][ T4527] netlink: 'syz.2.11753': attribute type 27 has an invalid length. [ 740.347878][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11758'. [ 740.526037][ T4564] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 740.543973][ T4564] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 740.671273][ T3384] tipc: Node number set to 1718635608 [ 740.872139][ T4589] loop4: detected capacity change from 0 to 512 [ 740.908252][ T4589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11778: bg 0: block 248: padding at end of block bitmap is not set [ 740.922964][ T4589] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11778: Failed to acquire dquot type 1 [ 740.934894][ T4589] EXT4-fs (loop4): 1 truncate cleaned up [ 740.941444][ T4589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.954852][ T4589] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.100054][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.166633][ T4598] netlink: 'syz.0.11777': attribute type 3 has an invalid length. [ 741.235088][ T4600] loop4: detected capacity change from 0 to 1024 [ 741.242407][ T4600] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 741.253453][ T4600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 741.264196][ T4600] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 741.275629][ T4600] EXT4-fs (loop4): invalid journal inode [ 741.282035][ T4600] EXT4-fs (loop4): can't get journal size [ 741.288242][ T4600] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11781: blocks 2-2 from inode overlap system zone [ 741.303440][ T4600] EXT4-fs (loop4): failed to initialize system zone (-117) [ 741.310811][ T4600] EXT4-fs (loop4): mount failed [ 741.457625][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11783'. [ 742.067047][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11803'. [ 742.095570][ T4656] loop4: detected capacity change from 0 to 512 [ 742.105931][ T4656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11804: bg 0: block 248: padding at end of block bitmap is not set [ 742.120656][ T4656] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11804: Failed to acquire dquot type 1 [ 742.132505][ T4656] EXT4-fs (loop4): 1 truncate cleaned up [ 742.138748][ T4656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.152748][ T4656] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.214772][ T4662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11806'. [ 742.253153][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.316566][ T4673] vlan3: entered allmulticast mode [ 742.393486][ T4683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11816'. [ 742.408212][ T4683] 8021q: adding VLAN 0 to HW filter on device bond6 [ 742.543678][ T804] hid_parser_main: 33 callbacks suppressed [ 742.543748][ T804] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x4 [ 742.557281][ T804] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x2 [ 742.565006][ T804] hid-generic 0000:3000000:0000.008E: unknown main item tag 0x3 [ 742.573105][ T804] hid-generic 0000:3000000:0000.008E: hidraw0: HID v0.00 Device [sy] on syz0 [ 742.783005][ T4703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=4703 comm=syz.4.11821 [ 742.832272][ T4718] tipc: Started in network mode [ 742.837155][ T4718] tipc: Node identity d606b161ac6, cluster identity 4711 [ 742.844315][ T4718] tipc: Enabled bearer , priority 0 [ 742.851660][ T4718] syzkaller0: entered promiscuous mode [ 742.857183][ T4718] syzkaller0: entered allmulticast mode [ 743.633410][ T4745] __nla_validate_parse: 3 callbacks suppressed [ 743.633495][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11841'. [ 743.644561][ T4743] lo speed is unknown, defaulting to 1000 [ 743.655577][ T4743] lo speed is unknown, defaulting to 1000 [ 743.666496][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 743.666568][ T29] audit: type=1400 audit(1755718224.958:51081): avc: denied { bind } for pid=4746 comm="syz.0.11842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.699166][ T4747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11842'. [ 743.717162][ T29] audit: type=1400 audit(1755718224.958:51082): avc: denied { setopt } for pid=4746 comm="syz.0.11842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.804908][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11844'. [ 743.814021][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11844'. [ 743.855522][ T4761] loop4: detected capacity change from 0 to 128 [ 743.864953][ T4761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 743.889779][ T4761] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 743.930814][ T29] audit: type=1400 audit(1755718225.201:51083): avc: denied { sys_nice } for pid=4767 comm="syz.2.11850" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 743.966828][T31816] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 744.017821][ T29] audit: type=1326 audit(1755718225.266:51084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.041443][ T29] audit: type=1326 audit(1755718225.266:51085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.065138][ T29] audit: type=1326 audit(1755718225.266:51086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.088673][ T29] audit: type=1326 audit(1755718225.266:51087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.112256][ T29] audit: type=1326 audit(1755718225.266:51088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.135846][ T29] audit: type=1326 audit(1755718225.285:51089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.159625][ T29] audit: type=1326 audit(1755718225.285:51090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.3.11849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 744.183237][ T1042] tipc: Node number set to 2053550433 [ 744.384075][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11861'. [ 744.393280][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11861'. [ 744.472271][ T4809] lo speed is unknown, defaulting to 1000 [ 744.478497][ T4809] lo speed is unknown, defaulting to 1000 [ 744.529919][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11857'. [ 744.543019][ T4809] vlan3: entered allmulticast mode [ 745.432921][ T4839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11876'. [ 745.628288][ T4850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=4850 comm=syz.0.11877 [ 745.666760][ T4852] lo speed is unknown, defaulting to 1000 [ 745.673349][ T4852] lo speed is unknown, defaulting to 1000 [ 745.817175][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11873'. [ 745.828786][ T4852] vlan2: entered allmulticast mode [ 745.849587][ T4853] lo speed is unknown, defaulting to 1000 [ 745.855860][ T4853] lo speed is unknown, defaulting to 1000 [ 745.886820][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11879'. [ 745.898943][ T4853] vlan4: entered allmulticast mode [ 746.968860][ T4861] vlan3: entered allmulticast mode [ 746.974005][ T4861] hsr0: entered allmulticast mode [ 746.979114][ T4861] hsr_slave_0: entered allmulticast mode [ 746.984865][ T4861] hsr_slave_1: entered allmulticast mode [ 747.093023][ T4885] loop4: detected capacity change from 0 to 512 [ 747.118072][ T4885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.131350][ T4885] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.156289][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.386272][ T4896] lo speed is unknown, defaulting to 1000 [ 747.392526][ T4896] lo speed is unknown, defaulting to 1000 [ 748.145939][ T4902] lo speed is unknown, defaulting to 1000 [ 748.152035][ T4902] lo speed is unknown, defaulting to 1000 [ 748.188869][ T4902] vlan2: entered allmulticast mode [ 748.232291][ T4904] loop4: detected capacity change from 0 to 512 [ 748.259922][ T4904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.282242][ T4904] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 748.419981][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.905484][ T4945] loop4: detected capacity change from 0 to 2048 [ 748.976627][ T4948] lo speed is unknown, defaulting to 1000 [ 748.983095][ T4948] lo speed is unknown, defaulting to 1000 [ 749.067165][ T4948] __nla_validate_parse: 4 callbacks suppressed [ 749.067193][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11905'. [ 749.086887][ T4945] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 749.092254][ T4945] loop4: partition table partially beyond EOD, truncated [ 749.139251][ T4945] loop4: p1 start 4278190080 is beyond EOD, truncated [ 749.146086][ T4945] loop4: p2 start 16908800 is beyond EOD, truncated [ 749.224910][ T4945] loop4: p5 start 16908800 is beyond EOD, truncated [ 749.327549][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 749.327586][ T29] audit: type=1326 audit(1755718230.236:51177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.357352][ T29] audit: type=1326 audit(1755718230.236:51178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.455428][ T29] audit: type=1326 audit(1755718230.367:51179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.479026][ T29] audit: type=1326 audit(1755718230.367:51180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.502976][ T29] audit: type=1326 audit(1755718230.367:51181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.527019][ T29] audit: type=1326 audit(1755718230.376:51182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.550629][ T29] audit: type=1326 audit(1755718230.376:51183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.567431][ T4961] loop4: detected capacity change from 0 to 1024 [ 749.574252][ T29] audit: type=1326 audit(1755718230.376:51184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.574284][ T29] audit: type=1326 audit(1755718230.376:51185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.582977][ T4961] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 749.638526][ T4961] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 749.648265][ T4961] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 749.659855][ T4961] EXT4-fs (loop4): invalid journal inode [ 749.665691][ T4961] EXT4-fs (loop4): can't get journal size [ 749.672066][ T4961] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.11914: blocks 2-2 from inode overlap system zone [ 749.690859][ T4961] EXT4-fs (loop4): failed to initialize system zone (-117) [ 749.698370][ T983] bridge_slave_1: left allmulticast mode [ 749.704116][ T983] bridge_slave_1: left promiscuous mode [ 749.709912][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.718176][ T4961] EXT4-fs (loop4): mount failed [ 749.730728][ T29] audit: type=1326 audit(1755718230.629:51186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.3.11912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff131e1ebe9 code=0x7ffc0000 [ 749.757118][ T983] bridge_slave_0: left promiscuous mode [ 749.762805][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.785009][ T983] tipc: Resetting bearer [ 749.883834][ T983] tipc: Disabling bearer [ 749.921330][ T983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.930736][ T983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.940642][ T983] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 749.949277][ T983] bond0 (unregistering): Released all slaves [ 749.958335][ T983] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 749.967167][ T983] bond1 (unregistering): Released all slaves [ 749.975400][ T983] bond2 (unregistering): Released all slaves [ 749.983515][ T983] bond3 (unregistering): Released all slaves [ 749.991750][ T983] bond4 (unregistering): Released all slaves [ 750.002315][ T983] bond5 (unregistering): Released all slaves [ 750.012763][ T983] bond6 (unregistering): Released all slaves [ 750.021279][ T983] bond7 (unregistering): Released all slaves [ 750.040227][ T4946] lo speed is unknown, defaulting to 1000 [ 750.047304][ T4946] lo speed is unknown, defaulting to 1000 [ 750.055487][ T4988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=4988 comm=syz.2.11922 [ 750.082299][ T983] tipc: Left network mode [ 750.140340][ T983] team0 (unregistering): Port device team_slave_1 removed [ 750.150104][ T983] team0 (unregistering): Port device team_slave_0 removed [ 750.233201][ T4946] chnl_net:caif_netlink_parms(): no params data found [ 750.247431][ T5000] net_ratelimit: 29 callbacks suppressed [ 750.247465][ T5000] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.266910][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11926'. [ 750.290988][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.298072][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.305712][ T4946] bridge_slave_0: entered allmulticast mode [ 750.313311][ T4946] bridge_slave_0: entered promiscuous mode [ 750.320405][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.327506][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.336556][ T4946] bridge_slave_1: entered allmulticast mode [ 750.346002][ T4946] bridge_slave_1: entered promiscuous mode [ 750.366717][ T4946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.378715][ T4946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.390157][ T983] IPVS: stop unused estimator thread 0... [ 750.412766][ T4946] team0: Port device team_slave_0 added [ 750.419661][ T4946] team0: Port device team_slave_1 added [ 750.439757][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.446806][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.472865][ T4946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.486056][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.493050][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.519087][ T4946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.550321][ T4946] hsr_slave_0: entered promiscuous mode [ 750.556808][ T4946] hsr_slave_1: entered promiscuous mode [ 750.562786][ T4946] debugfs: 'hsr0' already exists in 'hsr' [ 750.568585][ T4946] Cannot create hsr debugfs directory [ 750.698197][ T5028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5028 comm=syz.4.11935 [ 750.824543][ T5037] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11938'. [ 750.900546][ T4946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 750.932137][ T4946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 750.956779][ T4946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 750.981270][ T4946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 751.029649][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.036753][ T4946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.044131][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.051273][ T4946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.140120][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.181281][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.190483][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.219119][ T4946] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.249901][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.257054][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.280945][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.288014][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.421166][ T4946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.546797][ T4946] veth0_vlan: entered promiscuous mode [ 751.556908][ T4946] veth1_vlan: entered promiscuous mode [ 751.574509][ T4946] veth0_macvtap: entered promiscuous mode [ 751.582278][ T4946] veth1_macvtap: entered promiscuous mode [ 751.589636][ T5105] loop4: detected capacity change from 0 to 1024 [ 751.594535][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.596835][ T5105] ext4: Bad value for 'debug_want_extra_isize' [ 751.609330][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.621607][ T6682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.631351][ T6682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.648618][ T6682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.657999][ T6682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.785913][ T5123] vlan4: entered allmulticast mode [ 752.053179][ T5134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5134 comm=syz.4.11965 [ 752.237327][ T5156] siw: device registration error -23 [ 752.836919][ T5200] 9pnet_fd: Insufficient options for proto=fd [ 753.701029][ T5214] lo speed is unknown, defaulting to 1000 [ 753.707532][ T5214] lo speed is unknown, defaulting to 1000 [ 754.147946][ T5230] 9pnet_fd: Insufficient options for proto=fd [ 754.461069][ T5254] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12010'. [ 754.461839][ T5252] lo speed is unknown, defaulting to 1000 [ 754.487679][ T5252] lo speed is unknown, defaulting to 1000 [ 754.536997][ T5259] 9pnet_fd: Insufficient options for proto=fd [ 754.584250][ T804] IPVS: starting estimator thread 0... [ 754.591607][ T5257] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 754.612936][ T5265] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12015'. [ 754.676529][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12018'. [ 754.701616][ T5262] IPVS: using max 2736 ests per chain, 136800 per kthread [ 754.740265][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 754.740277][ T29] audit: type=1400 audit(1755718235.318:51399): avc: denied { bpf } for pid=5276 comm="syz.1.12020" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 754.816789][ T29] audit: type=1400 audit(1755718235.318:51400): avc: denied { perfmon } for pid=5276 comm="syz.1.12020" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 754.837924][ T29] audit: type=1400 audit(1755718235.318:51401): avc: denied { prog_run } for pid=5276 comm="syz.1.12020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 754.857260][ T29] audit: type=1326 audit(1755718235.384:51402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.881024][ T29] audit: type=1326 audit(1755718235.384:51403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.904746][ T29] audit: type=1326 audit(1755718235.384:51404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.928466][ T29] audit: type=1326 audit(1755718235.384:51405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.952166][ T29] audit: type=1326 audit(1755718235.384:51406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.975801][ T29] audit: type=1326 audit(1755718235.384:51407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 754.999448][ T29] audit: type=1326 audit(1755718235.384:51408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.1.12020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9c8ebe9 code=0x7ffc0000 [ 755.028444][ T5285] vlan2: entered allmulticast mode [ 755.613318][ T5358] 9pnet_fd: Insufficient options for proto=fd [ 755.714799][ T5374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12061'. [ 755.791173][ T5383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 755.797694][ T5383] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 755.805585][ T5383] vhci_hcd vhci_hcd.0: Device attached [ 755.817467][ T5384] vhci_hcd: connection closed [ 755.817748][ T6678] vhci_hcd: stop threads [ 755.826824][ T6678] vhci_hcd: release socket [ 755.831239][ T6678] vhci_hcd: disconnect device [ 755.868387][ T5389] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.876907][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12066'. [ 755.901867][ T5391] 9pnet_fd: Insufficient options for proto=fd [ 756.229150][ T5417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5417 comm=syz.3.12075 [ 756.395584][ T5434] loop4: detected capacity change from 0 to 512 [ 756.420667][ T5427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12082'. [ 756.440994][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.480582][ T5434] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.546968][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.835834][ T5464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5464 comm=syz.4.12093 [ 756.930155][ T5486] loop4: detected capacity change from 0 to 1024 [ 756.947182][ T5486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.980023][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.036095][ T5502] 9pnet_fd: Insufficient options for proto=fd [ 757.046257][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x4 [ 757.053994][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x2 [ 757.065807][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.073486][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.081185][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.088955][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.096709][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.104404][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.112110][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.119978][ T1042] hid-generic 0000:3000000:0000.008F: unknown main item tag 0x0 [ 757.135939][ T1042] hid-generic 0000:3000000:0000.008F: hidraw0: HID v0.00 Device [sy] on syz0 [ 757.311968][ T5525] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.320397][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12115'. [ 757.332348][ T5521] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5521 comm=syz.4.12113 [ 757.484391][ T5544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=5544 comm=syz.2.12123 [ 757.497839][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12123'. [ 757.632222][ T5555] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.651830][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12127'. [ 757.694813][ T5559] FAULT_INJECTION: forcing a failure. [ 757.694813][ T5559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.707904][ T5559] CPU: 1 UID: 0 PID: 5559 Comm: syz.0.12129 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 757.707938][ T5559] Tainted: [W]=WARN [ 757.707961][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.707987][ T5559] Call Trace: [ 757.707992][ T5559] [ 757.707998][ T5559] __dump_stack+0x1d/0x30 [ 757.708016][ T5559] dump_stack_lvl+0xe8/0x140 [ 757.708033][ T5559] dump_stack+0x15/0x1b [ 757.708047][ T5559] should_fail_ex+0x265/0x280 [ 757.708065][ T5559] should_fail+0xb/0x20 [ 757.708139][ T5559] should_fail_usercopy+0x1a/0x20 [ 757.708168][ T5559] _copy_to_user+0x20/0xa0 [ 757.708194][ T5559] simple_read_from_buffer+0xb5/0x130 [ 757.708258][ T5559] proc_fail_nth_read+0x10e/0x150 [ 757.708325][ T5559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.708349][ T5559] vfs_read+0x1a5/0x770 [ 757.708373][ T5559] ? __rcu_read_unlock+0x4f/0x70 [ 757.708463][ T5559] ? __fget_files+0x184/0x1c0 [ 757.708494][ T5559] ksys_read+0xda/0x1a0 [ 757.708520][ T5559] __x64_sys_read+0x40/0x50 [ 757.708592][ T5559] x64_sys_call+0x27bc/0x2ff0 [ 757.708615][ T5559] do_syscall_64+0xd2/0x200 [ 757.708662][ T5559] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 757.708750][ T5559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 757.708815][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.708912][ T5559] RIP: 0033:0x7f2f3b1bd5fc [ 757.709009][ T5559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 757.709029][ T5559] RSP: 002b:00007f2f39c27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.709084][ T5559] RAX: ffffffffffffffda RBX: 00007f2f3b3e5fa0 RCX: 00007f2f3b1bd5fc [ 757.709097][ T5559] RDX: 000000000000000f RSI: 00007f2f39c270a0 RDI: 0000000000000004 [ 757.709110][ T5559] RBP: 00007f2f39c27090 R08: 0000000000000000 R09: 0000000000000000 [ 757.709123][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.709137][ T5559] R13: 00007f2f3b3e6038 R14: 00007f2f3b3e5fa0 R15: 00007ffd37be73c8 [ 757.709164][ T5559] [ 758.045248][ T5580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12137'. [ 758.178961][ T5597] lo speed is unknown, defaulting to 1000 [ 758.185424][ T5597] lo speed is unknown, defaulting to 1000 [ 759.016828][ T5633] lo speed is unknown, defaulting to 1000 [ 759.023274][ T5633] lo speed is unknown, defaulting to 1000 [ 759.627205][ T5646] lo speed is unknown, defaulting to 1000 [ 759.633523][ T5646] lo speed is unknown, defaulting to 1000 [ 759.843529][ T5648] __nla_validate_parse: 5 callbacks suppressed [ 759.843544][ T5648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12163'. [ 760.023358][ T5659] veth0: mtu less than device minimum [ 760.075458][ T5670] 9pnet_fd: Insufficient options for proto=fd [ 760.095274][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 760.095292][ T29] audit: type=1400 audit(1755718240.334:51790): avc: denied { create } for pid=5671 comm="syz.0.12173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 760.113040][ T5672] lo speed is unknown, defaulting to 1000 [ 760.129954][ T5672] lo speed is unknown, defaulting to 1000 [ 760.135816][ T5674] loop4: detected capacity change from 0 to 512 [ 760.144128][ T29] audit: type=1400 audit(1755718240.344:51791): avc: denied { sys_admin } for pid=5671 comm="syz.0.12173" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 760.183147][ T5674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.210564][ T5674] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.238514][ T29] audit: type=1400 audit(1755718240.475:51792): avc: denied { write open } for pid=5673 comm="syz.4.12174" path="/432/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 760.318895][ T29] audit: type=1400 audit(1755718240.494:51793): avc: denied { read } for pid=5673 comm="syz.4.12174" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 760.398998][ T29] audit: type=1400 audit(1755718240.625:51794): avc: denied { ioctl } for pid=5673 comm="syz.4.12174" path="/432/bus/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 760.440197][ T5686] lo speed is unknown, defaulting to 1000 [ 760.446382][ T5686] lo speed is unknown, defaulting to 1000 [ 760.739385][ T5690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12179'. [ 760.799914][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.821271][ T5696] vlan2: entered allmulticast mode [ 760.826603][ T5696] hsr0: entered allmulticast mode [ 760.831648][ T5696] hsr_slave_0: entered allmulticast mode [ 760.837372][ T5696] hsr_slave_1: entered allmulticast mode [ 760.847441][ T29] audit: type=1326 audit(1755718241.036:51795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 760.871171][ T29] audit: type=1326 audit(1755718241.036:51796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 760.929496][ T29] audit: type=1326 audit(1755718241.093:51797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 760.953516][ T29] audit: type=1326 audit(1755718241.093:51798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 760.977177][ T29] audit: type=1326 audit(1755718241.093:51799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145c97ebe9 code=0x7ffc0000 [ 761.055671][ T5704] FAULT_INJECTION: forcing a failure. [ 761.055671][ T5704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.069044][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: syz.2.12184 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 761.069077][ T5704] Tainted: [W]=WARN [ 761.069085][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 761.069099][ T5704] Call Trace: [ 761.069106][ T5704] [ 761.069114][ T5704] __dump_stack+0x1d/0x30 [ 761.069137][ T5704] dump_stack_lvl+0xe8/0x140 [ 761.069202][ T5704] dump_stack+0x15/0x1b [ 761.069221][ T5704] should_fail_ex+0x265/0x280 [ 761.069244][ T5704] should_fail_alloc_page+0xf2/0x100 [ 761.069273][ T5704] __alloc_frozen_pages_noprof+0xff/0x360 [ 761.069343][ T5704] alloc_pages_mpol+0xb3/0x250 [ 761.069381][ T5704] folio_alloc_mpol_noprof+0x39/0x80 [ 761.069418][ T5704] shmem_get_folio_gfp+0x3cf/0xd60 [ 761.069528][ T5704] ? simple_xattr_get+0xb9/0x120 [ 761.069571][ T5704] shmem_write_begin+0xa8/0x190 [ 761.069590][ T5704] generic_perform_write+0x181/0x490 [ 761.069636][ T5704] shmem_file_write_iter+0xc5/0xf0 [ 761.069683][ T5704] do_iter_readv_writev+0x49c/0x540 [ 761.069723][ T5704] vfs_writev+0x2df/0x8b0 [ 761.069768][ T5704] __se_sys_pwritev2+0xfc/0x1c0 [ 761.069823][ T5704] __x64_sys_pwritev2+0x67/0x80 [ 761.069936][ T5704] x64_sys_call+0x2c55/0x2ff0 [ 761.069963][ T5704] do_syscall_64+0xd2/0x200 [ 761.069996][ T5704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 761.070060][ T5704] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 761.070085][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.070129][ T5704] RIP: 0033:0x7f082f2eebe9 [ 761.070167][ T5704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.070188][ T5704] RSP: 002b:00007f082dd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 761.070242][ T5704] RAX: ffffffffffffffda RBX: 00007f082f515fa0 RCX: 00007f082f2eebe9 [ 761.070253][ T5704] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 761.070265][ T5704] RBP: 00007f082dd57090 R08: 0000000000000000 R09: 0000000000000003 [ 761.070275][ T5704] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 761.070286][ T5704] R13: 00007f082f516038 R14: 00007f082f515fa0 R15: 00007ffc5a027038 [ 761.070372][ T5704] [ 761.531986][ T5726] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 761.541054][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12194'. [ 761.554886][ T5727] loop4: detected capacity change from 0 to 1024 [ 761.562854][ T5727] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 761.573859][ T5727] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 761.584692][ T5727] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 761.596113][ T5727] EXT4-fs (loop4): invalid journal inode [ 761.601859][ T5727] EXT4-fs (loop4): can't get journal size [ 762.029073][ T5727] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.12189: blocks 2-2 from inode overlap system zone [ 762.044883][ T5727] EXT4-fs (loop4): failed to initialize system zone (-117) [ 762.052327][ T5727] EXT4-fs (loop4): mount failed [ 762.402866][ T6680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.413486][ T6680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.423643][ T6680] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 762.432134][ T6680] bond0 (unregistering): Released all slaves [ 762.448399][ T5729] lo speed is unknown, defaulting to 1000 [ 762.454478][ T5729] lo speed is unknown, defaulting to 1000 [ 762.529066][ T5735] vlan2: entered allmulticast mode [ 762.581471][ T6680] hsr_slave_0: left promiscuous mode [ 762.603954][ T6680] hsr_slave_1: left promiscuous mode [ 762.625978][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.656841][ T6680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.740613][ T6680] team0 (unregistering): Port device team_slave_1 removed [ 762.752179][ T6680] team0 (unregistering): Port device team_slave_0 removed [ 762.977028][ T5764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.028820][ T5764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.092688][ T5764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.177683][ T5764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.234683][ T6680] IPVS: stop unused estimator thread 0... [ 763.240889][ T6679] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.251727][ T6679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.266288][ T6679] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.278609][ T6679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.435446][ T5770] loop4: detected capacity change from 0 to 512 [ 763.465525][ T5770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.478856][ T5770] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.492085][ T5775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12209'. [ 763.501541][ T5775] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12209'. [ 763.529251][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.552785][ T5780] vlan2: entered allmulticast mode [ 763.566084][ T5786] loop4: detected capacity change from 0 to 512 [ 763.582782][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.595419][ T5786] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 763.640105][T31816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.741887][ T5804] loop4: detected capacity change from 0 to 512 [ 763.753701][ T5804] loop4: detected capacity change from 0 to 512 [ 763.762027][ T5804] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.12218: error while reading EA inode 32 err=-116 [ 763.775486][ T5804] EXT4-fs (loop4): Remounting filesystem read-only [ 763.782018][ T5804] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 763.792472][ T5804] EXT4-fs (loop4): 1 orphan inode deleted [ 763.804756][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.818059][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.860691][ T5810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12221'. [ 763.870242][ T5810] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12221'. [ 763.931470][ T5819] 9pnet: Could not find request transport: fd0x0000000000000005 [ 764.102007][ T5833] tipc: Started in network mode [ 764.106921][ T5833] tipc: Node identity 76b4fffe2b85, cluster identity 4711 [ 764.114136][ T5833] tipc: Enabled bearer , priority 0 [ 764.122650][ T5833] tipc: Disabling bearer [ 764.234509][ T5839] tmpfs: Bad value for 'mpol' [ 764.256317][ T5841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12233'. [ 764.265697][ T5841] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12233'. [ 764.346301][ T5853] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.354543][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12238'. [ 764.378109][ T5856] FAULT_INJECTION: forcing a failure. [ 764.378109][ T5856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.391215][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.2.12239 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 764.391308][ T5856] Tainted: [W]=WARN [ 764.391314][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.391325][ T5856] Call Trace: [ 764.391330][ T5856] [ 764.391335][ T5856] __dump_stack+0x1d/0x30 [ 764.391353][ T5856] dump_stack_lvl+0xe8/0x140 [ 764.391369][ T5856] dump_stack+0x15/0x1b [ 764.391443][ T5856] should_fail_ex+0x265/0x280 [ 764.391461][ T5856] should_fail+0xb/0x20 [ 764.391475][ T5856] should_fail_usercopy+0x1a/0x20 [ 764.391493][ T5856] _copy_to_user+0x20/0xa0 [ 764.391516][ T5856] simple_read_from_buffer+0xb5/0x130 [ 764.391590][ T5856] proc_fail_nth_read+0x10e/0x150 [ 764.391691][ T5856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.391712][ T5856] vfs_read+0x1a5/0x770 [ 764.391729][ T5856] ? __rcu_read_unlock+0x4f/0x70 [ 764.391747][ T5856] ? __fget_files+0x184/0x1c0 [ 764.391821][ T5856] ksys_read+0xda/0x1a0 [ 764.391840][ T5856] __x64_sys_read+0x40/0x50 [ 764.391858][ T5856] x64_sys_call+0x27bc/0x2ff0 [ 764.391901][ T5856] do_syscall_64+0xd2/0x200 [ 764.391923][ T5856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 764.391941][ T5856] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 764.391962][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.392042][ T5856] RIP: 0033:0x7f082f2ed5fc [ 764.392055][ T5856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 764.392139][ T5856] RSP: 002b:00007f082dd57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.392161][ T5856] RAX: ffffffffffffffda RBX: 00007f082f515fa0 RCX: 00007f082f2ed5fc [ 764.392253][ T5856] RDX: 000000000000000f RSI: 00007f082dd570a0 RDI: 0000000000000006 [ 764.392268][ T5856] RBP: 00007f082dd57090 R08: 0000000000000000 R09: 0000000000000000 [ 764.392282][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.392296][ T5856] R13: 00007f082f516038 R14: 00007f082f515fa0 R15: 00007ffc5a027038 [ 764.392320][ T5856] [ 764.601351][ T5845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5845 comm=syz.3.12235 [ 764.722190][ T5873] syzkaller1: entered promiscuous mode [ 764.727773][ T5873] syzkaller1: entered allmulticast mode [ 764.754324][ T5881] loop4: detected capacity change from 0 to 1024 [ 764.769998][ T5881] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 764.781116][ T5881] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 764.797100][ T5881] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 764.817283][ T5881] EXT4-fs (loop4): invalid journal inode [ 764.823130][ T5881] EXT4-fs (loop4): can't get journal size [ 764.833972][ T5881] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.12242: blocks 2-2 from inode overlap system zone [ 764.870669][ T5881] EXT4-fs (loop4): failed to initialize system zone (-117) [ 764.892304][ T5881] EXT4-fs (loop4): mount failed [ 765.542632][ T5913] lo speed is unknown, defaulting to 1000 [ 765.586703][ T5913] __nla_validate_parse: 1 callbacks suppressed [ 765.586720][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12258'. [ 765.895509][ T5916] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5916 comm=syz.4.12259 [ 766.115157][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104ace000: rx timeout, send abort [ 766.123380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104acfa00: rx timeout, send abort [ 766.131610][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104ace000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 766.146002][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104acfa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 766.374822][ T5928] lo speed is unknown, defaulting to 1000 [ 766.449793][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12261'. [ 766.615234][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 766.615251][ T29] audit: type=1400 audit(1755718246.380:51879): avc: denied { create } for pid=5929 comm="syz.2.12264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 766.641081][ T29] audit: type=1400 audit(1755718246.380:51880): avc: denied { write } for pid=5929 comm="syz.2.12264" path="socket:[146349]" dev="sockfs" ino=146349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 766.696441][ T29] audit: type=1400 audit(1755718246.502:51881): avc: denied { name_bind } for pid=5925 comm="syz.1.12263" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 766.718448][ T29] audit: type=1400 audit(1755718246.511:51882): avc: denied { node_bind } for pid=5925 comm="syz.1.12263" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 766.721839][ T5937] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 766.759953][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12267'. [ 766.799696][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.808139][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.817758][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.833462][T30826] lo speed is unknown, defaulting to 1000 [ 766.839210][T30826] syz0: Port: 1 Link ACTIVE [ 766.855737][ T29] audit: type=1326 audit(1755718246.661:51883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 766.879323][ T29] audit: type=1326 audit(1755718246.661:51884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 766.902957][ T29] audit: type=1326 audit(1755718246.661:51885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 766.926583][ T29] audit: type=1326 audit(1755718246.661:51886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 766.950313][ T29] audit: type=1326 audit(1755718246.661:51887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 767.048085][ T5941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=5941 comm=syz.1.12268 [ 767.070462][ T29] audit: type=1326 audit(1755718246.661:51888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082f2eebe9 code=0x7ffc0000 [ 767.075297][ T5955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12273'. [ 767.112939][ T5960] vlan2: entered allmulticast mode [ 767.230366][ T5972] ================================================================== [ 767.238476][ T5972] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 767.245165][ T5972] [ 767.247483][ T5972] write to 0xffff888104bedf08 of 8 bytes by task 5971 on cpu 1: [ 767.255105][ T5972] call_rcu+0x51/0x3f0 [ 767.259182][ T5972] mas_wmb_replace+0xc6a/0x14a0 [ 767.264042][ T5972] mas_wr_store_entry+0x1773/0x2b50 [ 767.269239][ T5972] mas_store_prealloc+0x74d/0x9e0 [ 767.274264][ T5972] vma_iter_store_new+0x1c5/0x200 [ 767.279287][ T5972] vma_complete+0x125/0x580 [ 767.283786][ T5972] __split_vma+0x591/0x650 [ 767.288200][ T5972] vma_modify+0x21e/0xc80 [ 767.292525][ T5972] vma_modify_flags+0x101/0x130 [ 767.297375][ T5972] mprotect_fixup+0x2cc/0x570 [ 767.302050][ T5972] do_mprotect_pkey+0x6d6/0x980 [ 767.306906][ T5972] __x64_sys_mprotect+0x48/0x60 [ 767.311755][ T5972] x64_sys_call+0x274e/0x2ff0 [ 767.316428][ T5972] do_syscall_64+0xd2/0x200 [ 767.320934][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.326825][ T5972] [ 767.329139][ T5972] read to 0xffff888104bedf08 of 8 bytes by task 5972 on cpu 0: [ 767.336675][ T5972] mas_state_walk+0x3e9/0x650 [ 767.341350][ T5972] mas_walk+0x60/0x150 [ 767.345419][ T5972] lock_vma_under_rcu+0x8d/0x160 [ 767.350363][ T5972] do_user_addr_fault+0x233/0x1090 [ 767.355481][ T5972] exc_page_fault+0x62/0xa0 [ 767.360008][ T5972] asm_exc_page_fault+0x26/0x30 [ 767.364863][ T5972] [ 767.367179][ T5972] value changed: 0x0000200000ffffff -> 0xffff888104bed208 [ 767.374290][ T5972] [ 767.376603][ T5972] Reported by Kernel Concurrency Sanitizer on: [ 767.382748][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.4.12279 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 767.396809][ T5972] Tainted: [W]=WARN [ 767.400603][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.410650][ T5972] ==================================================================