last executing test programs: 49.276235955s ago: executing program 3 (id=3237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 49.228794457s ago: executing program 3 (id=3240): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0xe0, 0x114, 0x400002, "d60b2273ae50701c625a4195e41ff8629fdf00c1fcbc410d8618c547e379b9e94e312c7b505d8a8189e0c4a726b358cb2a3ba33dd83a852bb1488a5a25cb14bb05e045f1e5eadaa71a332d9abc7f08bec01338e9541e2266348feb146ee6f7a8fc09c3d3ce247e94953d92fe3e2629165c57e6413aa64ab6b36da05ccd8871d4e8af67d09eccddb3ce0a148db3f142b06a0ab6d6d945d363c2385f283c6918c8e12c67873ed24d812a0ac45fd8c89779e3af575f0962f06d3c39f061b7893291c56e794e7dbc8f9cae8b6a"}], 0xe0}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x224ef61b12363fa4}, 0x0, 0x4, 0x5, 0xffffffffffffffff, 0x8, 0x2, 0x1, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x7, 'ip6tnl0\x00', {0xc6}, 0x5}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007000000f4f6913c677414323b4e4b1b662f5792d94b77506383f6f908c7636596ea0ef1b306ae141890e366ee2a1318105cfa18b89019935c0f96c3a11ef925dcbd8c645fe59aaf"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 48.674692758s ago: executing program 3 (id=3248): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) (fail_nth: 7) 48.639150558s ago: executing program 3 (id=3250): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x810}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r5, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 48.395164423s ago: executing program 3 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 48.092122729s ago: executing program 3 (id=3262): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r3], 0xc4}}, 0x0) 48.091925879s ago: executing program 32 (id=3262): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r3], 0xc4}}, 0x0) 31.448202001s ago: executing program 1 (id=3565): mkdir(0x0, 0x0) pipe2$9p(0x0, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) io_setup(0x8f0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r3, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 31.407473772s ago: executing program 1 (id=3568): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(0xffffffffffffffff, 0x0, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000805) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000200)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001a00010044000000000000000000ffff00000000ac14142700000000000000a500"/61, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYBLOB="00000000000000000000ffff0a010100000004d33c000000fc01000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000002600000000000000"], 0xf0}}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) 31.272127995s ago: executing program 1 (id=3573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x17c1, 0x10, 0x0, @opaque="7e7f582f4948c5e4"}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$selinux_context(0xffffffffffffffff, &(0x7f0000000300)='system_u:object_r:tape_device_t:s0\x00', 0x23) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="da272152", @ANYRES16=0x0, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 31.264931735s ago: executing program 1 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c00"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) 30.155650326s ago: executing program 1 (id=3598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d00010075"], 0x54}}, 0x0) (fail_nth: 14) 29.540084178s ago: executing program 1 (id=3601): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000c400000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000030630000000000006a561e5921639d19ada7398f54106e2f89908bf3f42c35d4399ada29b00a2f43a4923b204363d34009b8321f68241d7005ea591160c135d107424599f122daee6dfd30f5a4963db6f8d90eaff9ba166670a93af77a7618671952a34e90d3697e9d17bbf884c9d0abbf735195bdb9ea04a380f3ab1522bc573b91c71dc8b0d7cdcec724492f60aea095730eb755bbc038a0b1dddd4e128e3665ce4e19a29faa3f84e80fdd3ced6ace616c0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0xd00, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1, 0x1}, 0x2}, {0x3, 0x2, {0x1, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}, {0x1, 0x2, {0x2, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0xa0) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r10, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) close_range(r6, 0xffffffffffffffff, 0x0) 14.409639821s ago: executing program 33 (id=3601): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000c400000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000030630000000000006a561e5921639d19ada7398f54106e2f89908bf3f42c35d4399ada29b00a2f43a4923b204363d34009b8321f68241d7005ea591160c135d107424599f122daee6dfd30f5a4963db6f8d90eaff9ba166670a93af77a7618671952a34e90d3697e9d17bbf884c9d0abbf735195bdb9ea04a380f3ab1522bc573b91c71dc8b0d7cdcec724492f60aea095730eb755bbc038a0b1dddd4e128e3665ce4e19a29faa3f84e80fdd3ced6ace616c0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0xd00, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r8}, 0x18) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1, 0x1}, 0x2}, {0x3, 0x2, {0x1, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}, {0x1, 0x2, {0x2, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0xa0) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r10, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) close_range(r6, 0xffffffffffffffff, 0x0) 5.025709233s ago: executing program 4 (id=4018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/15], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11}, 0x10) clock_settime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r13 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r13, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op={0x1, 0xa}, @ioring_restriction_sqe_op={0x1, 0xe1cce4142524f332}], 0x2) 4.880122216s ago: executing program 4 (id=4020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x3, 0x398}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) (fail_nth: 11) 4.827698387s ago: executing program 4 (id=4021): openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e440, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x401}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.801059368s ago: executing program 4 (id=4023): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.933801233s ago: executing program 2 (id=4061): ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0xff070000}, 0x50) 1.876099814s ago: executing program 6 (id=4062): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) dup(0xffffffffffffffff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0x88, 0xc000067}, 0x2c) 1.875396384s ago: executing program 2 (id=4063): r0 = syz_clone(0x603dfa11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000040)='[\x00\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T/\xa9\b\x17E\xbc_\x03\x83 X \x040!;\x85\x1c\xfc\x0f\xd8\xec\"\x17\xbf\xcb\xccF\x05\x00\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9e\xe6A\xce2~\xbf\x11\xd5~\x9a6\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xd4Yb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90!\v\xac^\xf9\xff\xff\xff\xff\xff\xff\xff\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x19!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xa1\xabd\xe5\x16\xc4\x81\xae\xf0-O\xed\x1d\x85\xeb1\xcbF\x1d\xca\xbbys\xa9\xc5\xdb\xaa\r\xf1\xee\x01t\xf6<\xe3\xfb\xf6-\x7f\xb8\x8f\xd1\xe2\xaeO\x1a\x17\xfb\xcaoC\xc0\x97L\x9a\xab\xc8e\t}DW\b\xc3u\xfc\xc9\xdcc\x06V\xc2\x81\xd9W\xeb\xae\xef\xae;\x19\xaa\x16\xbf\xae\x95{0\xc5e\xadq[7\x84\xdfY\xbbw.cc\x17\xa8\xf9\x00w\xb1\xc5\x87.\xach\xe9\xbc\xa3\xc7\x0fNM|\xc1\xdb4?%H\x16\x9d2\xc7\xe9\x91n+^\x16\xec\xee\v\xaf.\xff\xf3\x92\x95(Q\xdb\xd9\xde\xab\x1d)\xba\xfd\xdb\xc8F1\x9a\x19\xa2\xc6\x11\xc4\xb8\xe2\x86\xbdT\x1c\x9ag\x0f\xfaR+(\xa5\x13?\xedI\xcd\xb9/q\x85)\x98\x98\xfc)\x02*\x87&\xee\xb5+\x8b\x01\xa0T)\'\xbfFm\x19AP\x18U{\xea\xb6\x93)4\'\x98\xf4\x0e:\x18\x16\vp\xf2%d\xa78~\x87K\xee\x17\xcc?B~_bO\x97*\x1b\x81\xca\x82\xac\xd5\t\xe5\xb77\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x100) unshare(0x60480) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x2, 0x80000000, {{0x3a, 0x4, 0x0, 0x3e, 0xe8, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0xc5, 0x3, 0x9, [{@multicast1, 0x6}, {@local, 0x2}, {@rand_addr=0x64010100}, {@multicast1, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@empty, 0x30}, {@rand_addr=0x64010100, 0x200}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x8, [0x5, 0xfffffff9, 0x9b2b]}, @generic={0x1c, 0xa, "248cdf5240f68412"}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0x7, "a562fdba92"}, {0x2, 0xc, "29c1c5daa742815a3e36"}, {0x1, 0xd, "fa73f63827fba312d8998d"}, {0x6, 0x2}, {0x7, 0x5, "cf5df6"}, {0xb, 0x2}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x6, 0x3, 'E'}, {0x5, 0xb, "b4f9f59ddfdda61925"}, {0x5, 0xb, "639f6f691a130d4796"}, {0x2, 0xa, "f1371374e363f43c"}, {0x2, 0x4, "ec86"}, {0x6, 0xd, "2ac7b3328c628b0bebe1c0"}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000008a564d441f400200000"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @private=0xa010100, 0xffffffffffffffff, "344162522924e1998e4199bc5e463e4c1f7a7781248b159b0c00ff000500", 0xe7, 0x7f, 0x8, 0x8}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000c8", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) socket$igmp(0x2, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) r6 = fsopen(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0xc0f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x50) fgetxattr(r6, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) futex_waitv(&(0x7f0000001800)=[{0x2, &(0x7f0000001680)=0x73bd, 0x86}], 0x1, 0x0, 0x0, 0x1) 1.874663604s ago: executing program 2 (id=4064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000050018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x5e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) kexec_load(0x3e00, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) 1.870436404s ago: executing program 6 (id=4065): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa1003a, &(0x7f00000003c0)={[], [{@dont_hash}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, '/dev/ttyS3\x00'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'resuid'}}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000156000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mlock2(&(0x7f0000156000/0x3000)=nil, 0x3000, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x18, 0x0, @fd=r0, 0x80000001, 0x0, 0x0, 0x2, 0x1, {0x3, r3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.627561199s ago: executing program 4 (id=4069): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000180)="d4", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) 1.511662801s ago: executing program 5 (id=4072): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=0xffffffffffffffff], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r7, @ANYRES64=0x0], 0x50) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200142fed76bd7e5a8d8f5ef8b102e852809241e02f98e005d3b32b3", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000000000000000000000000000000080001000200000000000000"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd9"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000180)={@empty, @multicast1, 0x1, 0x1d}}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000006800010002da06005dffff7f00000000000000000c0002000200000004000000541bea4226178abc1d4484b8289aeb620dab2d537aa86e77df891db0c1b2790e6ad1b415068f22ebdbe2fb80a58477799b172cdb85be0a9003d7db26b5e13d"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x7f, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.507711202s ago: executing program 0 (id=4073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) msgget$private(0x0, 0x930d16d2399873e1) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x1}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 1.488991552s ago: executing program 2 (id=4074): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1.369010254s ago: executing program 0 (id=4075): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.240116346s ago: executing program 5 (id=4076): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, 0x0, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 1.239600876s ago: executing program 2 (id=4077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="00eb127e1292f72feee5ed630000fe4323936d24c59255b32858977eb2f14f4044ec00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000640)=""/199, 0xc7, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xe3b9}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xe}, 0x100002, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x2a) write$cgroup_int(r6, 0x0, 0x2) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r10 = socket(0x10, 0x3, 0x0) recvmsg$kcm(r10, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) 1.230088807s ago: executing program 5 (id=4078): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@newtclass={0x54, 0x28, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff7, 0x10}, {0xfff2, 0x6}, {0x8, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x800c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r9, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffffd, 0x20, 0xe, 0x4000000000200, 0x0, 0x0, 0x100, 0x100, 0x0, 0x0, 0x9, 0x0, 0x418, 0xfffffffffffffffb, 0x80, 0x0, 0x1000, 0x8, 0xb57a, 0x800000003, 0x0, 0x8, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.203346177s ago: executing program 2 (id=4079): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.156953678s ago: executing program 0 (id=4080): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) unshare(0x28000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rxrpc_tx_packet\x00', r5, 0x0, 0x9}, 0x18) 1.03556437s ago: executing program 5 (id=4081): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x1, 0x250, &(0x7f0000000740)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x0) 1.023258601s ago: executing program 5 (id=4082): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001fc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17, 0xa8, @random="81d98431fef93d14da426acfbe4cfa0924523c"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040084}, 0x8084) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004040) 1.010159951s ago: executing program 0 (id=4083): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[], 0x18}}, 0x40) 975.505482ms ago: executing program 0 (id=4084): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000006c0)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) pwrite64(r2, &(0x7f0000000080)='3', 0x1, 0x180) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000001800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004df0000000800000002"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)}, 0x24040040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f78b175f41cf8f9c2ba8453c7d2500fdff", @ANYRES32=r5, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000340)=0xc) wait4(r10, &(0x7f00000002c0), 0x60000008, &(0x7f0000000600)) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/129, 0x81}], 0x1}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x147, 0x0, &(0x7f0000000a40)="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", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) 864.002474ms ago: executing program 6 (id=4085): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000007080001400000000c0900010073797a30000000000900020073797a32"], 0x78}}, 0x40) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/190, 0xbe}], 0x1, 0x47, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0x1a, 0x136, &(0x7f0000000480)="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"}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(0xffffffffffffffff, 0x6) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@loopback, 0x80, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket(0xa, 0x1, 0x0) 694.316877ms ago: executing program 4 (id=4086): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 172.753878ms ago: executing program 5 (id=4087): unshare(0x400) r0 = io_uring_setup(0x2553, &(0x7f0000000280)) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xff}, 0x18) r5 = dup3(r1, r0, 0x0) epoll_pwait2(r5, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 52.01511ms ago: executing program 0 (id=4088): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 37.3207ms ago: executing program 6 (id=4089): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0xe0ffff00000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd']) 17.662891ms ago: executing program 6 (id=4090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x401}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=4091): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 3390][ T1085] bridge_slave_1: left promiscuous mode [ 239.749049][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.770426][ T1085] bridge_slave_0: left allmulticast mode [ 239.776089][ T1085] bridge_slave_0: left promiscuous mode [ 239.781834][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.795404][ T1085] bond_slave_1: left promiscuous mode [ 239.800859][ T1085] dummy0: left promiscuous mode [ 239.960599][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.970594][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.980343][ T1085] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 239.989424][ T1085] bond0 (unregistering): Released all slaves [ 240.030086][T13320] loop2: detected capacity change from 0 to 164 [ 240.045819][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.056624][T13320] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 240.076540][ T1085] veth1_macvtap: left promiscuous mode [ 240.084053][ T1085] veth0_macvtap: left promiscuous mode [ 240.089791][ T1085] veth1_vlan: left promiscuous mode [ 240.095214][ T1085] veth0_vlan: left promiscuous mode [ 240.101913][T13324] FAULT_INJECTION: forcing a failure. [ 240.101913][T13324] name failslab, interval 1, probability 0, space 0, times 0 [ 240.114551][T13324] CPU: 0 UID: 0 PID: 13324 Comm: syz.1.3397 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.114661][T13324] Tainted: [W]=WARN [ 240.114670][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.114687][T13324] Call Trace: [ 240.114694][T13324] [ 240.114704][T13324] __dump_stack+0x1d/0x30 [ 240.114731][T13324] dump_stack_lvl+0xe8/0x140 [ 240.114812][T13324] dump_stack+0x15/0x1b [ 240.114827][T13324] should_fail_ex+0x265/0x280 [ 240.114857][T13324] should_failslab+0x8c/0xb0 [ 240.114886][T13324] __kvmalloc_node_noprof+0x123/0x4e0 [ 240.114917][T13324] ? io_alloc_cache_init+0x31/0xa0 [ 240.114990][T13324] io_alloc_cache_init+0x31/0xa0 [ 240.115027][T13324] io_ring_ctx_alloc+0x299/0x6a0 [ 240.115060][T13324] io_uring_create+0x10f/0x610 [ 240.115168][T13324] __se_sys_io_uring_setup+0x1f7/0x210 [ 240.115248][T13324] __x64_sys_io_uring_setup+0x31/0x40 [ 240.115274][T13324] x64_sys_call+0x2b21/0x2ff0 [ 240.115321][T13324] do_syscall_64+0xd2/0x200 [ 240.115356][T13324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.115429][T13324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.115461][T13324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.115491][T13324] RIP: 0033:0x7fa8895eeba9 [ 240.115508][T13324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.115609][T13324] RSP: 002b:00007fa88804f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 240.115682][T13324] RAX: ffffffffffffffda RBX: 00007fa889835fa0 RCX: 00007fa8895eeba9 [ 240.115698][T13324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000001de0 [ 240.115745][T13324] RBP: 00007fa88804f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.115760][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.115774][T13324] R13: 00007fa889836038 R14: 00007fa889835fa0 R15: 00007ffd51ca3748 [ 240.115791][T13324] [ 240.344075][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'. [ 240.365228][T13334] SELinux: policydb string S does not match my string SE Linux [ 240.383943][T13334] SELinux: failed to load policy [ 240.391469][T13337] loop1: detected capacity change from 0 to 164 [ 240.400254][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 240.407615][T13337] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 240.409806][T13339] openvswitch: netlink: Message has 6 unknown bytes. [ 240.424817][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 240.481694][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.493543][T13347] loop5: detected capacity change from 0 to 2364 [ 240.504626][T13324] pim6reg: entered allmulticast mode [ 240.510004][T13332] pim6reg: left allmulticast mode [ 240.538750][T13264] team0: Port device team_slave_0 added [ 240.545600][T13264] team0: Port device team_slave_1 added [ 240.593309][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.600300][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.626346][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.655164][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.662165][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.688083][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.704836][T13364] SELinux: policydb string S does not match my string SE Linux [ 240.712629][T13364] SELinux: failed to load policy [ 240.747903][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 240.773505][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 240.781084][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.781132][T13369] loop2: detected capacity change from 0 to 764 [ 240.788508][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.802165][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.809567][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.809592][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.809614][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 240.809714][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.817236][T13369] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 240.824464][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.854660][ T5643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 240.895902][ T5643] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.896031][T13361] bridge_slave_1: left allmulticast mode [ 240.911217][T13361] bridge_slave_1: left promiscuous mode [ 240.916925][T13361] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.994830][T13375] 9pnet_fd: Insufficient options for proto=fd [ 241.009182][T13361] bridge_slave_0: left allmulticast mode [ 241.014855][T13361] bridge_slave_0: left promiscuous mode [ 241.020706][T13361] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.103073][T13264] hsr_slave_0: entered promiscuous mode [ 241.123685][T13264] hsr_slave_1: entered promiscuous mode [ 241.166057][T13264] debugfs: 'hsr0' already exists in 'hsr' [ 241.171855][T13264] Cannot create hsr debugfs directory [ 241.182499][T13376] lo speed is unknown, defaulting to 1000 [ 241.216144][ T1085] IPVS: stop unused estimator thread 0... [ 241.345871][T13383] hub 6-0:1.0: USB hub found [ 241.361332][T13383] hub 6-0:1.0: 8 ports detected [ 241.393736][T13390] loop5: detected capacity change from 0 to 2368 [ 241.414089][T13390] iso9660: Unknown parameter 'syzkaller' [ 241.436727][T13390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65298 sclass=netlink_route_socket pid=13390 comm=syz.5.3422 [ 241.488406][T13393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13393 comm=syz.2.3423 [ 241.519007][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3423'. [ 241.560515][T13395] SELinux: policydb string S does not match my string SE Linux [ 241.605524][T13395] SELinux: failed to load policy [ 241.661396][T13397] loop5: detected capacity change from 0 to 2364 [ 241.698369][T13401] lo speed is unknown, defaulting to 1000 [ 241.729375][T13407] openvswitch: netlink: Message has 6 unknown bytes. [ 241.884009][T13264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.902752][T13264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.915764][T13415] can: request_module (can-proto-5) failed. [ 241.939917][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 241.941332][T13264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.948859][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 242.001291][T13264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.037614][T13424] random: crng reseeded on system resumption [ 242.053080][T13430] SELinux: policydb string S does not match my string SE Linux [ 242.072266][T13430] SELinux: failed to load policy [ 242.126453][T13264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.155611][T13264] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.175261][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.182444][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.232724][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.239870][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.250180][T13436] loop2: detected capacity change from 0 to 2364 [ 242.271563][T13438] netlink: 'syz.5.3439': attribute type 4 has an invalid length. [ 242.299426][T13264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.460530][T13264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.578139][T13450] lo speed is unknown, defaulting to 1000 [ 242.923954][T13476] SELinux: policydb string S does not match my string SE Linux [ 242.942957][T13476] SELinux: failed to load policy [ 242.950686][T13481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13481 comm=syz.2.3448 [ 242.973354][T13264] veth0_vlan: entered promiscuous mode [ 243.002315][T13264] veth1_vlan: entered promiscuous mode [ 243.017632][T13483] netlink: 'syz.2.3449': attribute type 4 has an invalid length. [ 243.058047][T13485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13485 comm=syz.0.3450 [ 243.060059][T13264] veth0_macvtap: entered promiscuous mode [ 243.139499][T13264] veth1_macvtap: entered promiscuous mode [ 243.174016][T13492] SELinux: policydb string S does not match my string SE Linux [ 243.180108][T13264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.195075][T13492] SELinux: failed to load policy [ 243.202092][T13264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.229696][ T3434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.238473][ T3434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.266275][ T3434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.290487][ T3434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.341096][T13496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3455'. [ 243.361371][T13496] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 243.390250][T13496] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 243.396698][T13504] loop1: detected capacity change from 0 to 2364 [ 243.406584][T13496] veth0_to_team: entered promiscuous mode [ 243.428066][T13496] loop2: detected capacity change from 0 to 512 [ 243.437861][T13506] loop4: detected capacity change from 0 to 2364 [ 243.464651][T13496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 243.479038][T13496] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 243.491734][T13496] EXT4-fs (loop2): 1 truncate cleaned up [ 243.498286][T13496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.512207][T13496] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.541552][T12060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.563901][ T382] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 243.628781][T13511] netlink: 'syz.1.3460': attribute type 4 has an invalid length. [ 243.655518][T13515] SELinux: policydb string S does not match my string SE Linux [ 243.684827][T13515] SELinux: failed to load policy [ 243.690922][T13518] FAULT_INJECTION: forcing a failure. [ 243.690922][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 243.702236][T13513] lo speed is unknown, defaulting to 1000 [ 243.703682][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.1.3462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.703788][T13518] Tainted: [W]=WARN [ 243.703800][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.703818][T13518] Call Trace: [ 243.703826][T13518] [ 243.703836][T13518] __dump_stack+0x1d/0x30 [ 243.703866][T13518] dump_stack_lvl+0xe8/0x140 [ 243.703894][T13518] dump_stack+0x15/0x1b [ 243.703918][T13518] should_fail_ex+0x265/0x280 [ 243.703963][T13518] ? audit_log_d_path+0x8d/0x150 [ 243.704008][T13518] should_failslab+0x8c/0xb0 [ 243.704045][T13518] __kmalloc_cache_noprof+0x4c/0x320 [ 243.704091][T13518] audit_log_d_path+0x8d/0x150 [ 243.704218][T13518] audit_log_d_path_exe+0x42/0x70 [ 243.704263][T13518] audit_log_task+0x1e9/0x250 [ 243.704302][T13518] ? __put_user_8+0xd/0x20 [ 243.704399][T13518] audit_seccomp+0x61/0x100 [ 243.704433][T13518] ? __seccomp_filter+0x68c/0x10d0 [ 243.704516][T13518] __seccomp_filter+0x69d/0x10d0 [ 243.704543][T13518] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 243.704587][T13518] ? exc_page_fault+0x62/0xa0 [ 243.704674][T13518] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 243.704722][T13518] __secure_computing+0x82/0x150 [ 243.704748][T13518] syscall_trace_enter+0xcf/0x1e0 [ 243.704908][T13518] do_syscall_64+0xac/0x200 [ 243.704946][T13518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.704976][T13518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.705013][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.705096][T13518] RIP: 0033:0x7fa8895ed5bc [ 243.705116][T13518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.705137][T13518] RSP: 002b:00007fa88804f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.705160][T13518] RAX: ffffffffffffffda RBX: 00007fa889835fa0 RCX: 00007fa8895ed5bc [ 243.705255][T13518] RDX: 000000000000000f RSI: 00007fa88804f0a0 RDI: 0000000000000007 [ 243.705270][T13518] RBP: 00007fa88804f090 R08: 0000000000000000 R09: 0000000000000000 [ 243.705286][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.705301][T13518] R13: 00007fa889836038 R14: 00007fa889835fa0 R15: 00007ffd51ca3748 [ 243.705394][T13518] [ 243.742728][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 243.768318][T13525] openvswitch: netlink: Message has 6 unknown bytes. [ 243.864073][ T3419] IPVS: starting estimator thread 0... [ 243.954356][T13528] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.971747][T13532] SELinux: policydb string S does not match my string SE Linux [ 243.979711][T13532] SELinux: failed to load policy [ 244.005396][T13536] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.047275][T13543] openvswitch: netlink: Message has 6 unknown bytes. [ 244.054984][T13531] IPVS: using max 2208 ests per chain, 110400 per kthread [ 244.116214][T13555] netlink: 'syz.2.3472': attribute type 4 has an invalid length. [ 244.154668][T13560] SELinux: policydb string S does not match my string SE Linux [ 244.165138][T13562] 9pnet_fd: Insufficient options for proto=fd [ 244.175925][T13560] SELinux: failed to load policy [ 244.188920][T13556] loop1: detected capacity change from 0 to 256 [ 244.287976][T13569] lo speed is unknown, defaulting to 1000 [ 244.297729][ T3419] IPVS: starting estimator thread 0... [ 244.301583][T13567] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.327370][T13576] openvswitch: netlink: Message has 6 unknown bytes. [ 244.341352][T13578] SELinux: policydb string S does not match my string SE Linux [ 244.350990][T13578] SELinux: failed to load policy [ 244.399503][T13574] IPVS: using max 2256 ests per chain, 112800 per kthread [ 244.485499][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 244.485514][ T29] audit: type=1400 audit(1757665629.518:7887): avc: denied { watch } for pid=13588 comm="syz.0.3485" path="/file0" dev="ramfs" ino=46382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 244.516350][ T29] audit: type=1400 audit(1757665629.528:7888): avc: denied { execute } for pid=13588 comm="syz.0.3485" name="file0" dev="ramfs" ino=46382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 244.538598][ T29] audit: type=1400 audit(1757665629.528:7889): avc: denied { execute_no_trans } for pid=13588 comm="syz.0.3485" path="/file0" dev="ramfs" ino=46382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 244.569838][T13594] SELinux: policydb string S does not match my string SE Linux [ 244.577869][T13594] SELinux: failed to load policy [ 244.685720][T13603] lo speed is unknown, defaulting to 1000 [ 244.730006][T13603] openvswitch: netlink: Message has 6 unknown bytes. [ 244.751493][T13616] FAULT_INJECTION: forcing a failure. [ 244.751493][T13616] name failslab, interval 1, probability 0, space 0, times 0 [ 244.764169][T13616] CPU: 1 UID: 0 PID: 13616 Comm: syz.0.3496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.764261][T13616] Tainted: [W]=WARN [ 244.764268][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.764289][T13616] Call Trace: [ 244.764296][T13616] [ 244.764303][T13616] __dump_stack+0x1d/0x30 [ 244.764337][T13616] dump_stack_lvl+0xe8/0x140 [ 244.764429][T13616] dump_stack+0x15/0x1b [ 244.764445][T13616] should_fail_ex+0x265/0x280 [ 244.764467][T13616] ? tcf_block_get_ext+0x3dc/0xb30 [ 244.764486][T13616] should_failslab+0x8c/0xb0 [ 244.764542][T13616] __kmalloc_cache_noprof+0x4c/0x320 [ 244.764580][T13616] tcf_block_get_ext+0x3dc/0xb30 [ 244.764660][T13616] ? get_state_synchronize_rcu+0x1a/0x40 [ 244.764693][T13616] clsact_init+0x549/0x6c0 [ 244.764721][T13616] ? __pfx_clsact_init+0x10/0x10 [ 244.764748][T13616] qdisc_create+0x58e/0x9e0 [ 244.764814][T13616] tc_modify_qdisc+0xa03/0x1420 [ 244.764954][T13616] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 244.764983][T13616] rtnetlink_rcv_msg+0x65a/0x6d0 [ 244.765018][T13616] netlink_rcv_skb+0x123/0x220 [ 244.765039][T13616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.765126][T13616] rtnetlink_rcv+0x1c/0x30 [ 244.765152][T13616] netlink_unicast+0x5bd/0x690 [ 244.765175][T13616] netlink_sendmsg+0x58b/0x6b0 [ 244.765244][T13616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.765269][T13616] __sock_sendmsg+0x142/0x180 [ 244.765305][T13616] ____sys_sendmsg+0x31e/0x4e0 [ 244.765412][T13616] ___sys_sendmsg+0x17b/0x1d0 [ 244.765452][T13616] __x64_sys_sendmsg+0xd4/0x160 [ 244.765480][T13616] x64_sys_call+0x191e/0x2ff0 [ 244.765553][T13616] do_syscall_64+0xd2/0x200 [ 244.765584][T13616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 244.765607][T13616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.765634][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.765697][T13616] RIP: 0033:0x7fcc92feeba9 [ 244.765710][T13616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.765793][T13616] RSP: 002b:00007fcc91a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.765809][T13616] RAX: ffffffffffffffda RBX: 00007fcc93235fa0 RCX: 00007fcc92feeba9 [ 244.765820][T13616] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 244.765831][T13616] RBP: 00007fcc91a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.765842][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.765908][T13616] R13: 00007fcc93236038 R14: 00007fcc93235fa0 R15: 00007fff341b98e8 [ 244.765926][T13616] [ 245.048616][ T29] audit: type=1326 audit(1757665630.068:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 245.072166][ T29] audit: type=1326 audit(1757665630.068:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13561 comm="syz.5.3476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 245.152144][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3503'. [ 245.196505][ T29] audit: type=1400 audit(1757665630.228:7892): avc: denied { create } for pid=13640 comm="syz.5.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.225262][T13641] loop5: detected capacity change from 0 to 512 [ 245.231888][T13641] msdos: Unknown parameter 'allow' [ 245.234256][ T29] audit: type=1400 audit(1757665630.238:7893): avc: denied { ioctl } for pid=13640 comm="syz.5.3507" path="socket:[46564]" dev="sockfs" ino=46564 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.282110][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3508'. [ 245.361058][T13650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13650 comm=syz.5.3509 [ 245.407533][T13656] loop2: detected capacity change from 0 to 512 [ 245.417003][T13656] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3512: bad orphan inode 298767 [ 245.422478][T13655] loop5: detected capacity change from 0 to 2048 [ 245.427931][T13656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.468928][T13655] loop5: p1 < > p4 [ 245.473184][T13655] loop5: p4 size 8388608 extends beyond EOD, truncated [ 245.482608][ T29] audit: type=1400 audit(1757665630.518:7894): avc: denied { read append } for pid=13653 comm="syz.5.3511" name="loop5p4" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.497607][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3511'. [ 245.506059][ T29] audit: type=1400 audit(1757665630.518:7895): avc: denied { open } for pid=13653 comm="syz.5.3511" path="/dev/loop5p4" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.559968][T13659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13659 comm=syz.2.3512 [ 245.560076][T13661] openvswitch: netlink: Message has 6 unknown bytes. [ 245.957256][T13673] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.982968][T13677] FAULT_INJECTION: forcing a failure. [ 245.982968][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 245.995787][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.4.3521 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.995815][T13677] Tainted: [W]=WARN [ 245.995821][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.995832][T13677] Call Trace: [ 245.995838][T13677] [ 245.995844][T13677] __dump_stack+0x1d/0x30 [ 245.995866][T13677] dump_stack_lvl+0xe8/0x140 [ 245.995955][T13677] dump_stack+0x15/0x1b [ 245.996052][T13677] should_fail_ex+0x265/0x280 [ 245.996080][T13677] should_failslab+0x8c/0xb0 [ 245.996166][T13677] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 245.996192][T13677] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 245.996263][T13677] hugetlbfs_alloc_inode+0xbc/0x100 [ 245.996364][T13677] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 245.996449][T13677] alloc_inode+0x40/0x170 [ 245.996470][T13677] new_inode+0x1d/0xe0 [ 245.996497][T13677] hugetlbfs_get_inode+0x7b/0x370 [ 245.996527][T13677] hugetlb_file_setup+0x192/0x3d0 [ 245.996611][T13677] ksys_mmap_pgoff+0x157/0x310 [ 245.996634][T13677] x64_sys_call+0x14a3/0x2ff0 [ 245.996659][T13677] do_syscall_64+0xd2/0x200 [ 245.996773][T13677] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.996801][T13677] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.996830][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.996898][T13677] RIP: 0033:0x7fe61c1feba9 [ 245.996915][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.996992][T13677] RSP: 002b:00007fe61ac5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 245.997009][T13677] RAX: ffffffffffffffda RBX: 00007fe61c445fa0 RCX: 00007fe61c1feba9 [ 245.997020][T13677] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 245.997030][T13677] RBP: 00007fe61ac5f090 R08: ffffffffffffffff R09: 0000000000000000 [ 245.997102][T13677] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 245.997116][T13677] R13: 00007fe61c446038 R14: 00007fe61c445fa0 R15: 00007ffe89dd4618 [ 245.997134][T13677] [ 245.997530][T13675] loop1: detected capacity change from 0 to 2364 [ 246.051369][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3522'. [ 246.124564][T13681] loop4: detected capacity change from 0 to 164 [ 246.223671][T13679] syz.4.3522: attempt to access beyond end of device [ 246.223671][T13679] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 246.237566][T13679] syz.4.3522: attempt to access beyond end of device [ 246.237566][T13679] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 246.267099][T12060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.287536][ T29] audit: type=1400 audit(1757665631.318:7896): avc: denied { nlmsg_read } for pid=13684 comm="syz.2.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.383164][T13700] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.398699][T13698] infiniband !yz!: set active [ 246.403425][T13698] infiniband !yz!: added team_slave_0 [ 246.406568][T13702] loop4: detected capacity change from 0 to 2364 [ 246.415922][T13698] RDS/IB: !yz!: added [ 246.420076][T13698] smc: adding ib device !yz! with port count 1 [ 246.427866][T13698] smc: ib device !yz! port 1 has pnetid [ 246.459562][T13705] loop2: detected capacity change from 0 to 2364 [ 246.620708][T13710] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3534'. [ 246.723467][T13714] loop4: detected capacity change from 0 to 512 [ 246.732283][T13714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.745033][T13714] EXT4-fs (loop4): 1 truncate cleaned up [ 246.751524][T13714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.895691][T13723] netlink: 'syz.5.3538': attribute type 4 has an invalid length. [ 246.978301][T13730] FAULT_INJECTION: forcing a failure. [ 246.978301][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.991497][T13730] CPU: 1 UID: 0 PID: 13730 Comm: syz.2.3541 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.991585][T13730] Tainted: [W]=WARN [ 246.991591][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.991603][T13730] Call Trace: [ 246.991610][T13730] [ 246.991618][T13730] __dump_stack+0x1d/0x30 [ 246.991642][T13730] dump_stack_lvl+0xe8/0x140 [ 246.991666][T13730] dump_stack+0x15/0x1b [ 246.991741][T13730] should_fail_ex+0x265/0x280 [ 246.991770][T13730] should_fail+0xb/0x20 [ 246.991795][T13730] should_fail_usercopy+0x1a/0x20 [ 246.991820][T13730] _copy_from_user+0x1c/0xb0 [ 246.991934][T13730] ___sys_sendmsg+0xc1/0x1d0 [ 246.991982][T13730] __x64_sys_sendmsg+0xd4/0x160 [ 246.992011][T13730] x64_sys_call+0x191e/0x2ff0 [ 246.992086][T13730] do_syscall_64+0xd2/0x200 [ 246.992123][T13730] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 246.992147][T13730] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.992269][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.992290][T13730] RIP: 0033:0x7fdaf718eba9 [ 246.992305][T13730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.992408][T13730] RSP: 002b:00007fdaf5bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.992453][T13730] RAX: ffffffffffffffda RBX: 00007fdaf73d5fa0 RCX: 00007fdaf718eba9 [ 246.992469][T13730] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 246.992484][T13730] RBP: 00007fdaf5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.992496][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.992508][T13730] R13: 00007fdaf73d6038 R14: 00007fdaf73d5fa0 R15: 00007ffd6c502ea8 [ 246.992557][T13730] [ 247.216396][ T23] IPVS: starting estimator thread 0... [ 247.223552][T13731] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.284550][T13736] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 247.310451][T13738] IPVS: using max 2016 ests per chain, 100800 per kthread [ 247.502953][T13741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.512650][T13741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.547774][T13749] loop1: detected capacity change from 0 to 512 [ 247.570262][T13749] EXT4-fs (loop1): too many log groups per flexible block group [ 247.578032][T13749] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 247.586684][T13749] EXT4-fs (loop1): mount failed [ 247.597864][T13753] loop2: detected capacity change from 0 to 512 [ 247.621850][T13753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.634440][T13753] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.647793][T13753] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.3546: invalid size [ 247.862260][ T1085] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.915089][ T1085] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.929681][T13759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13759 comm=syz.1.3549 [ 247.967930][ T1085] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.988207][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3549'. [ 248.016876][ T1085] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.083819][T13764] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 248.090444][T13764] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.098135][T13764] vhci_hcd vhci_hcd.0: Device attached [ 248.112644][T13766] netlink: 'syz.1.3552': attribute type 4 has an invalid length. [ 248.148863][T13767] vhci_hcd: connection closed [ 248.149093][ T41] vhci_hcd: stop threads [ 248.158051][ T41] vhci_hcd: release socket [ 248.162511][ T41] vhci_hcd: disconnect device [ 248.187159][T13774] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.272950][T12060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.309792][T13779] loop1: detected capacity change from 0 to 2364 [ 248.401449][T13782] 9pnet_fd: Insufficient options for proto=fd [ 248.427024][T13784] FAULT_INJECTION: forcing a failure. [ 248.427024][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 248.439697][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.1.3560 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.439778][T13784] Tainted: [W]=WARN [ 248.439784][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.439795][T13784] Call Trace: [ 248.439801][T13784] [ 248.439807][T13784] __dump_stack+0x1d/0x30 [ 248.439860][T13784] dump_stack_lvl+0xe8/0x140 [ 248.439878][T13784] dump_stack+0x15/0x1b [ 248.439892][T13784] should_fail_ex+0x265/0x280 [ 248.439915][T13784] ? sctp_add_bind_addr+0x71/0x1e0 [ 248.439998][T13784] should_failslab+0x8c/0xb0 [ 248.440066][T13784] __kmalloc_cache_noprof+0x4c/0x320 [ 248.440114][T13784] sctp_add_bind_addr+0x71/0x1e0 [ 248.440195][T13784] sctp_copy_local_addr_list+0x199/0x220 [ 248.440228][T13784] sctp_copy_one_addr+0x7f/0x280 [ 248.440258][T13784] sctp_bind_addr_copy+0x79/0x290 [ 248.440294][T13784] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 248.440363][T13784] sctp_connect_new_asoc+0x1c3/0x3a0 [ 248.440388][T13784] sctp_sendmsg+0xf10/0x18d0 [ 248.440409][T13784] ? selinux_socket_sendmsg+0x151/0x1b0 [ 248.440441][T13784] ? __pfx_sctp_sendmsg+0x10/0x10 [ 248.440507][T13784] inet_sendmsg+0xc5/0xd0 [ 248.440533][T13784] __sock_sendmsg+0x102/0x180 [ 248.440566][T13784] __sys_sendto+0x268/0x330 [ 248.440619][T13784] __x64_sys_sendto+0x76/0x90 [ 248.440643][T13784] x64_sys_call+0x2d05/0x2ff0 [ 248.440664][T13784] do_syscall_64+0xd2/0x200 [ 248.440738][T13784] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.440762][T13784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.440825][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.440845][T13784] RIP: 0033:0x7fa8895eeba9 [ 248.440859][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.440932][T13784] RSP: 002b:00007fa88804f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 248.440950][T13784] RAX: ffffffffffffffda RBX: 00007fa889835fa0 RCX: 00007fa8895eeba9 [ 248.440964][T13784] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 248.440976][T13784] RBP: 00007fa88804f090 R08: 0000200000000040 R09: 000000000000001c [ 248.441050][T13784] R10: 0000000004044005 R11: 0000000000000246 R12: 0000000000000001 [ 248.441061][T13784] R13: 00007fa889836038 R14: 00007fa889835fa0 R15: 00007ffd51ca3748 [ 248.441080][T13784] [ 248.702861][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.722216][T13795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13795 comm=syz.1.3563 [ 248.737151][T13795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3563'. [ 248.765164][T13801] netlink: 'syz.1.3565': attribute type 4 has an invalid length. [ 248.798511][T13805] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.835440][T13816] openvswitch: netlink: Message has 6 unknown bytes. [ 248.958248][T13829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13829 comm=syz.0.3576 [ 248.971177][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'. [ 249.009691][T13834] netlink: 'syz.5.3578': attribute type 4 has an invalid length. [ 249.068671][T13832] Falling back ldisc for ttyS3. [ 249.180508][ T3391] IPVS: starting estimator thread 0... [ 249.186110][T13841] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.268900][T13844] IPVS: using max 2784 ests per chain, 139200 per kthread [ 249.358719][T13848] openvswitch: netlink: Message has 6 unknown bytes. [ 249.553525][T13863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13863 comm=syz.0.3588 [ 249.566389][T13863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'. [ 249.600823][T13865] netlink: 'syz.0.3589': attribute type 4 has an invalid length. [ 249.669147][ T5635] hid_parser_main: 28 callbacks suppressed [ 249.669162][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.682411][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.689877][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.828620][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.836078][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.843521][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.850923][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.858323][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.865728][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.873333][ T5635] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 249.888618][ T5635] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz1 [ 249.923976][T13877] openvswitch: netlink: Message has 6 unknown bytes. [ 249.927254][T13879] program syz.0.3594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.975848][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 249.975860][ T29] audit: type=1326 audit(1757665635.008:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.036947][T13889] loop5: detected capacity change from 0 to 128 [ 250.068600][ T29] audit: type=1326 audit(1757665635.008:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.092191][ T29] audit: type=1326 audit(1757665635.008:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.112542][T13893] FAULT_INJECTION: forcing a failure. [ 250.112542][T13893] name failslab, interval 1, probability 0, space 0, times 0 [ 250.117104][ T29] audit: type=1326 audit(1757665635.008:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.128223][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.1.3598 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.128343][T13893] Tainted: [W]=WARN [ 250.128352][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.128370][T13893] Call Trace: [ 250.128379][T13893] [ 250.128390][T13893] __dump_stack+0x1d/0x30 [ 250.128419][T13893] dump_stack_lvl+0xe8/0x140 [ 250.128445][T13893] dump_stack+0x15/0x1b [ 250.128546][T13893] should_fail_ex+0x265/0x280 [ 250.128583][T13893] should_failslab+0x8c/0xb0 [ 250.128720][T13893] kmem_cache_alloc_noprof+0x50/0x310 [ 250.128758][T13893] ? skb_clone+0x151/0x1f0 [ 250.128849][T13893] skb_clone+0x151/0x1f0 [ 250.128883][T13893] dev_queue_xmit_nit+0x146/0x680 [ 250.128914][T13893] ? strncpy_from_user+0x1f4/0x230 [ 250.128998][T13893] dev_hard_start_xmit+0xd3/0x3e0 [ 250.129030][T13893] ? validate_xmit_skb+0x746/0x910 [ 250.129067][T13893] __dev_queue_xmit+0x10f9/0x2000 [ 250.129176][T13893] ? __dev_queue_xmit+0x182/0x2000 [ 250.129210][T13893] ? selinux_socket_sock_rcv_skb+0x219/0x620 [ 250.129264][T13893] __netlink_deliver_tap+0x3c3/0x500 [ 250.129302][T13893] ? netlink_attachskb+0x2d0/0x610 [ 250.129469][T13893] netlink_sendskb+0x126/0x150 [ 250.129495][T13893] netlink_unicast+0x2a2/0x690 [ 250.129543][T13893] netlink_ack+0x4c8/0x500 [ 250.129590][T13893] netlink_rcv_skb+0x192/0x220 [ 250.129649][T13893] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.129734][T13893] genl_rcv+0x28/0x40 [ 250.129770][T13893] netlink_unicast+0x5bd/0x690 [ 250.129802][T13893] netlink_sendmsg+0x58b/0x6b0 [ 250.129839][T13893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.129896][T13893] __sock_sendmsg+0x142/0x180 [ 250.129936][T13893] ____sys_sendmsg+0x31e/0x4e0 [ 250.129972][T13893] ___sys_sendmsg+0x17b/0x1d0 [ 250.130044][T13893] __x64_sys_sendmsg+0xd4/0x160 [ 250.130082][T13893] x64_sys_call+0x191e/0x2ff0 [ 250.130108][T13893] do_syscall_64+0xd2/0x200 [ 250.130173][T13893] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.130302][T13893] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.130338][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.130366][T13893] RIP: 0033:0x7fa8895eeba9 [ 250.130384][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.130406][T13893] RSP: 002b:00007fa88802e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.130509][T13893] RAX: ffffffffffffffda RBX: 00007fa889836090 RCX: 00007fa8895eeba9 [ 250.130524][T13893] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 250.130540][T13893] RBP: 00007fa88802e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.130555][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.130570][T13893] R13: 00007fa889836128 R14: 00007fa889836090 R15: 00007ffd51ca3748 [ 250.130670][T13893] [ 250.430770][ T29] audit: type=1326 audit(1757665635.008:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.454587][ T29] audit: type=1326 audit(1757665635.008:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.478148][ T29] audit: type=1326 audit(1757665635.008:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.501713][ T29] audit: type=1326 audit(1757665635.008:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.525208][ T29] audit: type=1326 audit(1757665635.008:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.548757][ T29] audit: type=1326 audit(1757665635.008:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13880 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 250.576028][T13889] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 250.618695][T13889] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.697589][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 250.747354][T12912] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.828133][T13905] netlink: 'syz.5.3602': attribute type 10 has an invalid length. [ 250.845357][T13905] team0: Device hsr_slave_0 failed to register rx_handler [ 250.854233][T13907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13907 comm=syz.0.3603 [ 250.867206][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'. [ 250.908143][T13911] netlink: 'syz.0.3605': attribute type 4 has an invalid length. [ 250.917539][T13913] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.948523][T13915] loop5: detected capacity change from 0 to 1024 [ 250.956464][T13915] EXT4-fs: dax option not supported [ 250.978263][T13917] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.992322][T13919] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.011548][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'. [ 251.064443][T13929] loop4: detected capacity change from 0 to 1024 [ 251.081000][T13929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.117379][T13929] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3614: Allocating blocks 449-513 which overlap fs metadata [ 251.133188][T13928] EXT4-fs (loop4): pa ffff8881072ccb60: logic 48, phys. 177, len 21 [ 251.141265][T13928] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 251.155326][T13940] netlink: 'syz.0.3618': attribute type 4 has an invalid length. [ 251.164668][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.184086][T13944] openvswitch: netlink: Message has 6 unknown bytes. [ 251.208280][T13950] SELinux: policydb string S does not match my string SE Linux [ 251.219339][T13950] SELinux: failed to load policy [ 251.229731][T13953] FAULT_INJECTION: forcing a failure. [ 251.229731][T13953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.242860][T13953] CPU: 1 UID: 0 PID: 13953 Comm: syz.4.3623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.242885][T13953] Tainted: [W]=WARN [ 251.242946][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.242956][T13953] Call Trace: [ 251.242961][T13953] [ 251.242967][T13953] __dump_stack+0x1d/0x30 [ 251.243122][T13953] dump_stack_lvl+0xe8/0x140 [ 251.243137][T13953] dump_stack+0x15/0x1b [ 251.243150][T13953] should_fail_ex+0x265/0x280 [ 251.243169][T13953] should_fail+0xb/0x20 [ 251.243235][T13953] should_fail_usercopy+0x1a/0x20 [ 251.243258][T13953] _copy_to_user+0x20/0xa0 [ 251.243287][T13953] simple_read_from_buffer+0xb5/0x130 [ 251.243307][T13953] proc_fail_nth_read+0x10e/0x150 [ 251.243427][T13953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.243451][T13953] vfs_read+0x1a8/0x770 [ 251.243469][T13953] ? __rcu_read_unlock+0x4f/0x70 [ 251.243488][T13953] ? __fget_files+0x184/0x1c0 [ 251.243631][T13953] ksys_read+0xda/0x1a0 [ 251.243651][T13953] __x64_sys_read+0x40/0x50 [ 251.243670][T13953] x64_sys_call+0x27bc/0x2ff0 [ 251.243689][T13953] do_syscall_64+0xd2/0x200 [ 251.243758][T13953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.243779][T13953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 251.243806][T13953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.243824][T13953] RIP: 0033:0x7fe61c1fd5bc [ 251.243848][T13953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.243906][T13953] RSP: 002b:00007fe61ac5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.243922][T13953] RAX: ffffffffffffffda RBX: 00007fe61c445fa0 RCX: 00007fe61c1fd5bc [ 251.243933][T13953] RDX: 000000000000000f RSI: 00007fe61ac5f0a0 RDI: 0000000000000003 [ 251.243944][T13953] RBP: 00007fe61ac5f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.243991][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.244002][T13953] R13: 00007fe61c446038 R14: 00007fe61c445fa0 R15: 00007ffe89dd4618 [ 251.244019][T13953] [ 251.470047][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'. [ 251.483763][T13957] loop4: detected capacity change from 0 to 164 [ 251.492883][T13957] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 251.545848][T13963] loop4: detected capacity change from 0 to 2048 [ 251.561341][T13963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.574393][T13970] netlink: 'syz.0.3630': attribute type 4 has an invalid length. [ 251.593564][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.613233][T13976] openvswitch: netlink: Message has 6 unknown bytes. [ 251.627876][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 251.665314][T13983] loop4: detected capacity change from 0 to 256 [ 251.696983][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3637'. [ 251.697455][T13986] SELinux: policydb string S does not match my string SE Linux [ 251.713591][T13986] SELinux: failed to load policy [ 251.754712][T13991] loop2: detected capacity change from 0 to 164 [ 251.770331][T13991] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 251.781843][T13993] FAULT_INJECTION: forcing a failure. [ 251.781843][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 251.794533][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.4.3640 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.794600][T13993] Tainted: [W]=WARN [ 251.794606][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.794617][T13993] Call Trace: [ 251.794622][T13993] [ 251.794628][T13993] __dump_stack+0x1d/0x30 [ 251.794675][T13993] dump_stack_lvl+0xe8/0x140 [ 251.794697][T13993] dump_stack+0x15/0x1b [ 251.794775][T13993] should_fail_ex+0x265/0x280 [ 251.794796][T13993] ? __hw_addr_add_ex+0x162/0x440 [ 251.794825][T13993] should_failslab+0x8c/0xb0 [ 251.794905][T13993] __kmalloc_cache_noprof+0x4c/0x320 [ 251.794934][T13993] __hw_addr_add_ex+0x162/0x440 [ 251.794956][T13993] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 251.794987][T13993] dev_addr_init+0xb1/0x120 [ 251.795007][T13993] alloc_netdev_mqs+0x1c5/0xa30 [ 251.795034][T13993] rtnl_create_link+0x239/0x710 [ 251.795067][T13993] rtnl_newlink_create+0x14c/0x620 [ 251.795090][T13993] ? security_capable+0x83/0x90 [ 251.795186][T13993] ? netlink_ns_capable+0x86/0xa0 [ 251.795209][T13993] rtnl_newlink+0xf29/0x12d0 [ 251.795244][T13993] ? xas_load+0x413/0x430 [ 251.795336][T13993] ? strlen+0x19/0x40 [ 251.795427][T13993] ? __memcg_slab_free_hook+0x135/0x230 [ 251.795507][T13993] ? __rcu_read_unlock+0x4f/0x70 [ 251.795527][T13993] ? avc_has_perm_noaudit+0x1b1/0x200 [ 251.795553][T13993] ? cred_has_capability+0x210/0x280 [ 251.795577][T13993] ? selinux_capable+0x31/0x40 [ 251.795640][T13993] ? security_capable+0x83/0x90 [ 251.795662][T13993] ? ns_capable+0x7d/0xb0 [ 251.795740][T13993] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.795768][T13993] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 251.795819][T13993] netlink_rcv_skb+0x123/0x220 [ 251.795841][T13993] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.795915][T13993] rtnetlink_rcv+0x1c/0x30 [ 251.795941][T13993] netlink_unicast+0x5bd/0x690 [ 251.796040][T13993] netlink_sendmsg+0x58b/0x6b0 [ 251.796067][T13993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.796110][T13993] __sock_sendmsg+0x142/0x180 [ 251.796140][T13993] ____sys_sendmsg+0x31e/0x4e0 [ 251.796168][T13993] ___sys_sendmsg+0x17b/0x1d0 [ 251.796230][T13993] __x64_sys_sendmsg+0xd4/0x160 [ 251.796259][T13993] x64_sys_call+0x191e/0x2ff0 [ 251.796294][T13993] do_syscall_64+0xd2/0x200 [ 251.796344][T13993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.796394][T13993] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 251.796421][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.796442][T13993] RIP: 0033:0x7fe61c1feba9 [ 251.796462][T13993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.796479][T13993] RSP: 002b:00007fe61ac5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.796496][T13993] RAX: ffffffffffffffda RBX: 00007fe61c445fa0 RCX: 00007fe61c1feba9 [ 251.796507][T13993] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 251.796519][T13993] RBP: 00007fe61ac5f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.796529][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.796540][T13993] R13: 00007fe61c446038 R14: 00007fe61c445fa0 R15: 00007ffe89dd4618 [ 251.796635][T13993] [ 252.118101][T13995] netlink: 'syz.5.3641': attribute type 4 has an invalid length. [ 252.165381][T14004] openvswitch: netlink: Message has 6 unknown bytes. [ 252.197245][T14012] loop2: detected capacity change from 0 to 128 [ 252.204287][T14012] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.216445][T14012] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.301787][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3650'. [ 252.365877][T14031] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.382861][T14028] lo speed is unknown, defaulting to 1000 [ 252.416459][T14038] netlink: 'syz.5.3655': attribute type 4 has an invalid length. [ 252.429885][T14040] openvswitch: netlink: Message has 6 unknown bytes. [ 252.440397][T14042] loop4: detected capacity change from 0 to 164 [ 252.464037][T14042] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 253.570409][T14056] lo speed is unknown, defaulting to 1000 [ 253.576603][T14059] lo speed is unknown, defaulting to 1000 [ 253.726439][T14066] vhci_hcd: default hub control req: 0530 v0401 i0007 l64 [ 253.749775][T14074] netlink: 'syz.4.3661': attribute type 10 has an invalid length. [ 253.764794][T14074] dummy0: entered promiscuous mode [ 253.839997][T14079] lo speed is unknown, defaulting to 1000 [ 253.847776][T14080] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 254.080799][T14093] netlink: 'syz.5.3668': attribute type 4 has an invalid length. [ 254.089361][T14095] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 254.108667][T14095] SELinux: failed to load policy [ 254.550700][T14110] netlink: 'syz.4.3676': attribute type 21 has an invalid length. [ 254.601358][ T1085] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.618039][ T1085] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.645070][ T1085] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.657293][T14118] netlink: 'syz.4.3680': attribute type 4 has an invalid length. [ 254.666100][ T1085] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.703252][T14120] SELinux: policydb string does not match my string SE Linux [ 254.721947][T14120] SELinux: failed to load policy [ 254.777157][T14125] FAULT_INJECTION: forcing a failure. [ 254.777157][T14125] name failslab, interval 1, probability 0, space 0, times 0 [ 254.789972][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.0.3683 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.790022][T14125] Tainted: [W]=WARN [ 254.790031][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.790047][T14125] Call Trace: [ 254.790053][T14125] [ 254.790061][T14125] __dump_stack+0x1d/0x30 [ 254.790082][T14125] dump_stack_lvl+0xe8/0x140 [ 254.790102][T14125] dump_stack+0x15/0x1b [ 254.790153][T14125] should_fail_ex+0x265/0x280 [ 254.790185][T14125] should_failslab+0x8c/0xb0 [ 254.790217][T14125] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 254.790304][T14125] ? __d_alloc+0x3d/0x340 [ 254.790344][T14125] __d_alloc+0x3d/0x340 [ 254.790378][T14125] ? from_vfsgid+0x70/0xa0 [ 254.790417][T14125] d_alloc_pseudo+0x1e/0x80 [ 254.790503][T14125] alloc_file_pseudo+0x71/0x160 [ 254.790572][T14125] hugetlb_file_setup+0x2a6/0x3d0 [ 254.790613][T14125] ksys_mmap_pgoff+0x157/0x310 [ 254.790641][T14125] x64_sys_call+0x14a3/0x2ff0 [ 254.790669][T14125] do_syscall_64+0xd2/0x200 [ 254.790778][T14125] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.790844][T14125] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.790953][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.790975][T14125] RIP: 0033:0x7fcc92feeba9 [ 254.790995][T14125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.791019][T14125] RSP: 002b:00007fcc91a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 254.791045][T14125] RAX: ffffffffffffffda RBX: 00007fcc93235fa0 RCX: 00007fcc92feeba9 [ 254.791066][T14125] RDX: 0000000002000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 254.791158][T14125] RBP: 00007fcc91a4f090 R08: ffffffffffffffff R09: 0000000000000000 [ 254.791247][T14125] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 254.791263][T14125] R13: 00007fcc93236038 R14: 00007fcc93235fa0 R15: 00007fff341b98e8 [ 254.791289][T14125] [ 255.069009][T14132] random: crng reseeded on system resumption [ 255.271687][T14139] lo speed is unknown, defaulting to 1000 [ 255.315016][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 255.315108][ T29] audit: type=1326 audit(1757665640.348:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 255.344901][ T29] audit: type=1326 audit(1757665640.348:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 255.439779][T14138] lo speed is unknown, defaulting to 1000 [ 255.459466][ T29] audit: type=1326 audit(1757665640.348:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 255.483092][ T29] audit: type=1326 audit(1757665640.348:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 255.506610][ T29] audit: type=1326 audit(1757665640.388:8283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 255.530268][ T29] audit: type=1326 audit(1757665640.388:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdaf718ebe3 code=0x7ffc0000 [ 255.553624][ T29] audit: type=1326 audit(1757665640.388:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdaf718ec67 code=0x7ffc0000 [ 255.577724][ T29] audit: type=1326 audit(1757665640.388:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdaf714615d code=0x7ffc0000 [ 255.601562][ T29] audit: type=1326 audit(1757665640.388:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdaf71c3409 code=0x7ffc0000 [ 255.625102][ T29] audit: type=1326 audit(1757665640.388:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14140 comm="syz.2.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdaf71458d7 code=0x7ffc0000 [ 255.947136][T14147] netlink: 'syz.5.3691': attribute type 4 has an invalid length. [ 256.006715][T14149] openvswitch: netlink: Message has 6 unknown bytes. [ 256.061465][T14151] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.107022][T14153] openvswitch: netlink: Message has 6 unknown bytes. [ 256.304439][T14169] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.533342][T14174] netlink: 'syz.2.3702': attribute type 4 has an invalid length. [ 256.633540][T14176] loop2: detected capacity change from 0 to 164 [ 256.712244][T14170] lo speed is unknown, defaulting to 1000 [ 256.764536][T14176] __nla_validate_parse: 7 callbacks suppressed [ 256.764552][T14176] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 256.794114][T14187] loop4: detected capacity change from 0 to 128 [ 256.928462][ T23] hid_parser_main: 24 callbacks suppressed [ 256.934422][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 256.941904][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 256.949373][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 256.979764][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 256.987182][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 256.994630][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 257.002054][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 257.009507][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 257.016885][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 257.024288][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 257.079065][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz1 [ 257.118974][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881182be600: rx timeout, send abort [ 257.160053][T14202] loop2: detected capacity change from 0 to 1024 [ 257.166741][T14202] EXT4-fs: Ignoring removed orlov option [ 257.180924][T14202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.216306][T14218] loop5: detected capacity change from 0 to 512 [ 257.223724][T14218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.234982][T14218] EXT4-fs (loop5): 1 truncate cleaned up [ 257.241327][T14218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.385990][T12912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.406994][T14225] loop5: detected capacity change from 0 to 164 [ 257.415487][T14225] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 257.536821][T14229] lo speed is unknown, defaulting to 1000 [ 257.588921][T14230] openvswitch: netlink: Message has 6 unknown bytes. [ 257.619008][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881182bec00: rx timeout, send abort [ 257.627215][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881182be600: abort rx timeout. Force session deactivation [ 257.676428][T14232] loop4: detected capacity change from 0 to 512 [ 257.691471][T14232] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.801173][T12060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.820136][T14232] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 257.835420][T14232] EXT4-fs (loop4): 1 truncate cleaned up [ 257.841666][T14232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.921689][T14237] lo speed is unknown, defaulting to 1000 [ 258.028782][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.127233][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881182bec00: abort rx timeout. Force session deactivation [ 258.397389][T14246] lo speed is unknown, defaulting to 1000 [ 258.660467][T14242] loop2: detected capacity change from 0 to 2364 [ 258.679553][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'. [ 258.781859][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3731'. [ 258.810990][T14255] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.839777][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3735'. [ 258.902999][T14267] vlan1: entered allmulticast mode [ 258.913764][T14266] netlink: 'syz.2.3737': attribute type 4 has an invalid length. [ 259.021067][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 259.100593][T14264] loop5: detected capacity change from 0 to 1024 [ 259.110476][T14276] lo speed is unknown, defaulting to 1000 [ 259.118830][T14264] EXT4-fs: Ignoring removed orlov option [ 259.142612][T14282] openvswitch: netlink: Message has 6 unknown bytes. [ 259.195664][T14264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.225968][T14286] lo speed is unknown, defaulting to 1000 [ 259.536285][T14291] netlink: 'syz.0.3744': attribute type 4 has an invalid length. [ 259.563598][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'. [ 259.594908][T14299] FAULT_INJECTION: forcing a failure. [ 259.594908][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.608188][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.2.3748 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.608224][T14299] Tainted: [W]=WARN [ 259.608267][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.608279][T14299] Call Trace: [ 259.608284][T14299] [ 259.608291][T14299] __dump_stack+0x1d/0x30 [ 259.608308][T14299] dump_stack_lvl+0xe8/0x140 [ 259.608326][T14299] dump_stack+0x15/0x1b [ 259.608378][T14299] should_fail_ex+0x265/0x280 [ 259.608437][T14299] should_fail+0xb/0x20 [ 259.608461][T14299] should_fail_usercopy+0x1a/0x20 [ 259.608483][T14299] _copy_to_user+0x20/0xa0 [ 259.608519][T14299] simple_read_from_buffer+0xb5/0x130 [ 259.608615][T14299] proc_fail_nth_read+0x10e/0x150 [ 259.608670][T14299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.608700][T14299] vfs_read+0x1a8/0x770 [ 259.608722][T14299] ? __rcu_read_unlock+0x4f/0x70 [ 259.608742][T14299] ? __fget_files+0x184/0x1c0 [ 259.608770][T14299] ksys_read+0xda/0x1a0 [ 259.608853][T14299] __x64_sys_read+0x40/0x50 [ 259.608873][T14299] x64_sys_call+0x27bc/0x2ff0 [ 259.608934][T14299] do_syscall_64+0xd2/0x200 [ 259.609034][T14299] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.609062][T14299] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.609115][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.609133][T14299] RIP: 0033:0x7fdaf718d5bc [ 259.609145][T14299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.609226][T14299] RSP: 002b:00007fdaf5bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.609242][T14299] RAX: ffffffffffffffda RBX: 00007fdaf73d5fa0 RCX: 00007fdaf718d5bc [ 259.609253][T14299] RDX: 000000000000000f RSI: 00007fdaf5bf70a0 RDI: 0000000000000007 [ 259.609263][T14299] RBP: 00007fdaf5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.609276][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.609369][T14299] R13: 00007fdaf73d6038 R14: 00007fdaf73d5fa0 R15: 00007ffd6c502ea8 [ 259.609403][T14299] [ 259.908457][T14303] lo speed is unknown, defaulting to 1000 [ 260.100020][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 260.191288][T12912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.391107][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 260.391138][ T29] audit: type=1326 audit(1757665645.428:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.391171][ T29] audit: type=1326 audit(1757665645.428:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.392055][ T29] audit: type=1326 audit(1757665645.428:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.468116][ T29] audit: type=1326 audit(1757665645.428:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.468190][ T29] audit: type=1326 audit(1757665645.428:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.468229][ T29] audit: type=1326 audit(1757665645.428:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.468310][ T29] audit: type=1326 audit(1757665645.428:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.468343][ T29] audit: type=1326 audit(1757665645.428:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.542251][ T29] audit: type=1326 audit(1757665645.508:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.556956][ T29] audit: type=1326 audit(1757665645.578:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.5.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba26afeba9 code=0x7ffc0000 [ 260.590488][T14316] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3753'. [ 260.734079][T14320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3754'. [ 260.760059][T14313] lo speed is unknown, defaulting to 1000 [ 260.875101][T14326] lo speed is unknown, defaulting to 1000 [ 260.919396][T14334] openvswitch: netlink: Message has 6 unknown bytes. [ 261.118250][T14347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14347 comm=syz.4.3765 [ 261.193278][T14351] lo speed is unknown, defaulting to 1000 [ 261.580430][T14363] lo speed is unknown, defaulting to 1000 [ 261.665600][T14371] openvswitch: netlink: Message has 6 unknown bytes. [ 261.698583][T14370] SELinux: failed to load policy [ 261.717658][T14370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.734633][T14370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.751799][T14377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14377 comm=syz.5.3777 [ 261.787318][T14380] loop4: detected capacity change from 0 to 2364 [ 262.050336][T14408] lo speed is unknown, defaulting to 1000 [ 262.088289][T14413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14413 comm=syz.4.3790 [ 262.089154][T14412] openvswitch: netlink: Message has 6 unknown bytes. [ 262.118929][T14413] __nla_validate_parse: 6 callbacks suppressed [ 262.118942][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 262.135120][T14399] lo speed is unknown, defaulting to 1000 [ 262.159062][T14410] lo speed is unknown, defaulting to 1000 [ 262.274541][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 262.311600][T14421] sctp: [Deprecated]: syz.5.3792 (pid 14421) Use of int in max_burst socket option deprecated. [ 262.311600][T14421] Use struct sctp_assoc_value instead [ 262.409945][T14428] loop5: detected capacity change from 0 to 2364 [ 263.063307][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3804'. [ 263.075205][T14431] lo speed is unknown, defaulting to 1000 [ 263.120242][T14451] openvswitch: netlink: Message has 6 unknown bytes. [ 263.191541][T14445] lo speed is unknown, defaulting to 1000 [ 263.411724][T14462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14462 comm=syz.0.3808 [ 263.425974][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 263.570240][T14469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3810'. [ 263.618078][T14469] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 263.627756][T14469] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 263.698658][T14469] veth0_to_team: entered promiscuous mode [ 264.065614][T14478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3822'. [ 264.097317][T14478] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 264.107751][T14482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14482 comm=syz.2.3815 [ 264.121418][T14478] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 264.166352][T14485] openvswitch: netlink: Message has 6 unknown bytes. [ 264.242010][T14489] lo speed is unknown, defaulting to 1000 [ 264.259453][T14492] loop4: detected capacity change from 0 to 164 [ 264.277336][T14492] syz.4.3819: attempt to access beyond end of device [ 264.277336][T14492] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 264.300680][T14493] openvswitch: netlink: Message has 6 unknown bytes. [ 264.308591][T14492] syz.4.3819: attempt to access beyond end of device [ 264.308591][T14492] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 264.407990][T14498] netlink: 'syz.4.3820': attribute type 4 has an invalid length. [ 264.437529][T14500] random: crng reseeded on system resumption [ 264.528525][T14502] lo speed is unknown, defaulting to 1000 [ 264.772581][T14508] sctp: [Deprecated]: syz.4.3824 (pid 14508) Use of int in max_burst socket option deprecated. [ 264.772581][T14508] Use struct sctp_assoc_value instead [ 264.867260][T14514] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 264.890478][T14516] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 264.890478][T14516] program syz.4.3828 not setting count and/or reply_len properly [ 264.930872][T14521] openvswitch: netlink: Message has 6 unknown bytes. [ 265.053755][T14527] lo speed is unknown, defaulting to 1000 [ 265.107632][T14531] openvswitch: netlink: Message has 6 unknown bytes. [ 265.109102][T14530] netlink: 'syz.2.3833': attribute type 4 has an invalid length. [ 265.130864][T14535] random: crng reseeded on system resumption [ 265.152216][T14537] random: crng reseeded on system resumption [ 265.299899][T14546] loop5: detected capacity change from 0 to 2364 [ 265.300854][T14548] openvswitch: netlink: Message has 6 unknown bytes. [ 265.435448][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 265.435462][ T29] audit: type=1326 audit(1757665650.468:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.529977][T14550] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 265.593711][ T29] audit: type=1326 audit(1757665650.548:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.617243][ T29] audit: type=1326 audit(1757665650.558:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.640770][ T29] audit: type=1326 audit(1757665650.558:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.664312][ T29] audit: type=1326 audit(1757665650.558:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.687877][ T29] audit: type=1326 audit(1757665650.558:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.711365][ T29] audit: type=1326 audit(1757665650.558:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.734845][ T29] audit: type=1326 audit(1757665650.558:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.758338][ T29] audit: type=1326 audit(1757665650.568:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.781966][ T29] audit: type=1326 audit(1757665650.588:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14549 comm="syz.4.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c1feba9 code=0x7ffc0000 [ 265.813018][T14553] lo speed is unknown, defaulting to 1000 [ 265.870546][T14550] loop4: detected capacity change from 0 to 1024 [ 265.910247][T14550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.922597][T14550] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.958895][T14550] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 15) [ 265.988146][T14550] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 266.000562][T14550] EXT4-fs (loop4): This should not happen!! Data will be lost [ 266.000562][T14550] [ 266.001733][T14569] netlink: 'syz.5.3847': attribute type 4 has an invalid length. [ 266.035353][T14554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.049675][T14550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 266.081228][T14554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.107425][T14554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.123644][T14554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.141658][T14549] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.170804][T14549] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.186211][T14549] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.227407][T14583] lo speed is unknown, defaulting to 1000 [ 266.301683][T14554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.3842: lblock 1 mapped to illegal pblock 1 (length 3) [ 266.335300][T14586] loop5: detected capacity change from 0 to 2364 [ 266.468968][T14588] FAULT_INJECTION: forcing a failure. [ 266.468968][T14588] name failslab, interval 1, probability 0, space 0, times 0 [ 266.481660][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.5.3852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.481698][T14588] Tainted: [W]=WARN [ 266.481707][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.481736][T14588] Call Trace: [ 266.481744][T14588] [ 266.481753][T14588] __dump_stack+0x1d/0x30 [ 266.481779][T14588] dump_stack_lvl+0xe8/0x140 [ 266.481826][T14588] dump_stack+0x15/0x1b [ 266.481847][T14588] should_fail_ex+0x265/0x280 [ 266.481875][T14588] should_failslab+0x8c/0xb0 [ 266.481964][T14588] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 266.481996][T14588] ? __d_alloc+0x3d/0x340 [ 266.482090][T14588] __d_alloc+0x3d/0x340 [ 266.482124][T14588] d_alloc_parallel+0x53/0xc60 [ 266.482211][T14588] ? perf_cgroup_switch+0x10c/0x480 [ 266.482235][T14588] ? update_load_avg+0x1da/0x820 [ 266.482268][T14588] ? __list_add_valid_or_report+0x38/0xe0 [ 266.482382][T14588] ? __rcu_read_unlock+0x4f/0x70 [ 266.482410][T14588] ? __d_lookup+0x316/0x340 [ 266.482444][T14588] ? _raw_spin_unlock+0x26/0x50 [ 266.482541][T14588] ? finish_task_switch+0xad/0x2b0 [ 266.482592][T14588] __lookup_slow+0x8c/0x250 [ 266.482629][T14588] lookup_noperm+0xc9/0x180 [ 266.482721][T14588] simple_start_creating+0x97/0x120 [ 266.482747][T14588] start_creating+0xe9/0x160 [ 266.482776][T14588] __debugfs_create_file+0x6b/0x330 [ 266.482822][T14588] debugfs_create_file_unsafe+0x3a/0x50 [ 266.482932][T14588] debugfs_create_u32_array+0x31/0x40 [ 266.482971][T14588] ptp_open+0x298/0x2d0 [ 266.483028][T14588] ? __pfx_ptp_open+0x10/0x10 [ 266.483053][T14588] posix_clock_open+0xce/0x150 [ 266.483089][T14588] chrdev_open+0x2eb/0x3a0 [ 266.483125][T14588] do_dentry_open+0x646/0xa20 [ 266.483202][T14588] ? __pfx_chrdev_open+0x10/0x10 [ 266.483234][T14588] vfs_open+0x37/0x1e0 [ 266.483273][T14588] path_openat+0x1c5e/0x2170 [ 266.483352][T14588] do_filp_open+0x109/0x230 [ 266.483387][T14588] do_sys_openat2+0xa6/0x110 [ 266.483425][T14588] __x64_sys_openat+0xf2/0x120 [ 266.483495][T14588] x64_sys_call+0x2e9c/0x2ff0 [ 266.483521][T14588] do_syscall_64+0xd2/0x200 [ 266.483562][T14588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.483593][T14588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 266.483679][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.483735][T14588] RIP: 0033:0x7fba26afeba9 [ 266.483751][T14588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.483772][T14588] RSP: 002b:00007fba2555f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.483795][T14588] RAX: ffffffffffffffda RBX: 00007fba26d45fa0 RCX: 00007fba26afeba9 [ 266.483882][T14588] RDX: 0000000000081000 RSI: 0000200000000940 RDI: ffffffffffffff9c [ 266.483897][T14588] RBP: 00007fba2555f090 R08: 0000000000000000 R09: 0000000000000000 [ 266.483910][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.483921][T14588] R13: 00007fba26d46038 R14: 00007fba26d45fa0 R15: 00007ffcde777468 [ 266.483939][T14588] [ 266.883477][T14598] loop5: detected capacity change from 0 to 512 [ 266.901004][T14565] lo speed is unknown, defaulting to 1000 [ 266.923857][T14598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.959343][T14598] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.973316][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.005017][T12912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.048630][T14608] loop4: detected capacity change from 0 to 512 [ 267.061600][T14611] openvswitch: netlink: Message has 6 unknown bytes. [ 267.068658][T14604] lo speed is unknown, defaulting to 1000 [ 267.099789][T14608] EXT4-fs (loop4): 1 orphan inode deleted [ 267.105959][T14608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.121530][T14608] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.135697][T14608] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 267.142973][T14608] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 267.166131][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.173506][T14624] loop7: detected capacity change from 0 to 16384 [ 267.213679][T14565] chnl_net:caif_netlink_parms(): no params data found [ 267.326988][T14633] loop5: detected capacity change from 0 to 164 [ 267.351867][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.358969][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.368069][T14565] bridge_slave_0: entered allmulticast mode [ 267.374701][T14565] bridge_slave_0: entered promiscuous mode [ 267.381496][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.388750][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.395916][T14565] bridge_slave_1: entered allmulticast mode [ 267.402403][T14565] bridge_slave_1: entered promiscuous mode [ 267.426191][T14633] __nla_validate_parse: 4 callbacks suppressed [ 267.426203][T14633] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 267.482040][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.500128][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.583125][T14565] team0: Port device team_slave_0 added [ 267.594352][T14643] netlink: 'syz.0.3870': attribute type 4 has an invalid length. [ 267.599468][T14640] lo speed is unknown, defaulting to 1000 [ 267.604499][T14565] team0: Port device team_slave_1 added [ 267.634758][T14647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14647 comm=syz.2.3872 [ 267.654760][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3872'. [ 267.664704][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.671738][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.697795][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.718082][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.725076][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.751067][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.784326][T14565] hsr_slave_0: entered promiscuous mode [ 267.790495][T14565] hsr_slave_1: entered promiscuous mode [ 267.796320][T14565] debugfs: 'hsr0' already exists in 'hsr' [ 267.802098][T14565] Cannot create hsr debugfs directory [ 267.985014][T14661] openvswitch: netlink: Message has 6 unknown bytes. [ 267.990300][T14565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.011548][T14565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.029214][T14565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.046515][T14565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.110268][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.117383][T14565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.124748][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.132023][T14565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.171362][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.179340][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.241927][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.257839][T14565] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.267826][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.274979][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.294644][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.301729][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.428241][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.598708][T14565] veth0_vlan: entered promiscuous mode [ 268.606536][T14565] veth1_vlan: entered promiscuous mode [ 268.621041][T14565] veth0_macvtap: entered promiscuous mode [ 268.629830][T14565] veth1_macvtap: entered promiscuous mode [ 268.653717][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.671953][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.692914][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.716202][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.728088][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.737406][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.962585][T14757] loop6: detected capacity change from 0 to 512 [ 269.228324][T14776] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 269.367494][T14782] loop5: detected capacity change from 0 to 2364 [ 269.510995][T14794] loop5: detected capacity change from 0 to 1024 [ 269.517867][T14794] EXT4-fs: inline encryption not supported [ 269.523995][T14794] EXT4-fs: Ignoring removed bh option [ 269.550006][T14794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.580219][T12912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.608020][T14802] loop5: detected capacity change from 0 to 2364 [ 269.641616][T14804] loop5: detected capacity change from 0 to 164 [ 269.652263][T14804] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 269.780788][T14807] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 269.795335][T14807] SELinux: failed to load policy [ 269.918421][T14825] FAULT_INJECTION: forcing a failure. [ 269.918421][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 269.931137][T14825] CPU: 0 UID: 0 PID: 14825 Comm: syz.2.3935 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.931168][T14825] Tainted: [W]=WARN [ 269.931175][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.931190][T14825] Call Trace: [ 269.931197][T14825] [ 269.931272][T14825] __dump_stack+0x1d/0x30 [ 269.931294][T14825] dump_stack_lvl+0xe8/0x140 [ 269.931312][T14825] dump_stack+0x15/0x1b [ 269.931327][T14825] should_fail_ex+0x265/0x280 [ 269.931349][T14825] should_failslab+0x8c/0xb0 [ 269.931399][T14825] __kmalloc_noprof+0xa5/0x3e0 [ 269.931600][T14825] ? nla_strdup+0x78/0xc0 [ 269.931642][T14825] nla_strdup+0x78/0xc0 [ 269.931719][T14825] rtnl_linkprop+0x3ff/0x570 [ 269.931781][T14825] ? __pfx_rtnl_newlinkprop+0x10/0x10 [ 269.931837][T14825] rtnl_newlinkprop+0x2a/0x40 [ 269.931881][T14825] rtnetlink_rcv_msg+0x65a/0x6d0 [ 269.931928][T14825] netlink_rcv_skb+0x123/0x220 [ 269.932024][T14825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.932137][T14825] rtnetlink_rcv+0x1c/0x30 [ 269.932169][T14825] netlink_unicast+0x5bd/0x690 [ 269.932201][T14825] netlink_sendmsg+0x58b/0x6b0 [ 269.932343][T14825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.932378][T14825] __sock_sendmsg+0x142/0x180 [ 269.932412][T14825] ____sys_sendmsg+0x31e/0x4e0 [ 269.932507][T14825] ___sys_sendmsg+0x17b/0x1d0 [ 269.932554][T14825] __x64_sys_sendmsg+0xd4/0x160 [ 269.932652][T14825] x64_sys_call+0x191e/0x2ff0 [ 269.932682][T14825] do_syscall_64+0xd2/0x200 [ 269.932759][T14825] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.932787][T14825] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.932826][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.932854][T14825] RIP: 0033:0x7fdaf718eba9 [ 269.932942][T14825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.932978][T14825] RSP: 002b:00007fdaf5bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.933017][T14825] RAX: ffffffffffffffda RBX: 00007fdaf73d5fa0 RCX: 00007fdaf718eba9 [ 269.933029][T14825] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 269.933042][T14825] RBP: 00007fdaf5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.933056][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.933069][T14825] R13: 00007fdaf73d6038 R14: 00007fdaf73d5fa0 R15: 00007ffd6c502ea8 [ 269.933086][T14825] [ 270.264058][T14836] FAULT_INJECTION: forcing a failure. [ 270.264058][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 270.276766][T14836] CPU: 0 UID: 0 PID: 14836 Comm: syz.2.3937 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.276798][T14836] Tainted: [W]=WARN [ 270.276805][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.276819][T14836] Call Trace: [ 270.276826][T14836] [ 270.276834][T14836] __dump_stack+0x1d/0x30 [ 270.276859][T14836] dump_stack_lvl+0xe8/0x140 [ 270.276888][T14836] dump_stack+0x15/0x1b [ 270.276904][T14836] should_fail_ex+0x265/0x280 [ 270.276933][T14836] ? xfrm_policy_alloc+0x62/0x1b0 [ 270.277038][T14836] should_failslab+0x8c/0xb0 [ 270.277064][T14836] __kmalloc_cache_noprof+0x4c/0x320 [ 270.277102][T14836] xfrm_policy_alloc+0x62/0x1b0 [ 270.277200][T14836] xfrm_policy_construct+0x2f/0x320 [ 270.277240][T14836] xfrm_add_policy+0x156/0x450 [ 270.277269][T14836] xfrm_user_rcv_msg+0x563/0x660 [ 270.277302][T14836] ? __kfree_skb+0x109/0x150 [ 270.277324][T14836] ? nlmon_xmit+0x4f/0x60 [ 270.277360][T14836] ? consume_skb+0x49/0x150 [ 270.277400][T14836] netlink_rcv_skb+0x123/0x220 [ 270.277507][T14836] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 270.277570][T14836] xfrm_netlink_rcv+0x48/0x60 [ 270.277672][T14836] netlink_unicast+0x5bd/0x690 [ 270.277702][T14836] netlink_sendmsg+0x58b/0x6b0 [ 270.277741][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.277771][T14836] __sock_sendmsg+0x142/0x180 [ 270.277819][T14836] ____sys_sendmsg+0x31e/0x4e0 [ 270.277848][T14836] ___sys_sendmsg+0x17b/0x1d0 [ 270.277921][T14836] __x64_sys_sendmsg+0xd4/0x160 [ 270.277957][T14836] x64_sys_call+0x191e/0x2ff0 [ 270.278001][T14836] do_syscall_64+0xd2/0x200 [ 270.278176][T14836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.278209][T14836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 270.278259][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.278325][T14836] RIP: 0033:0x7fdaf718eba9 [ 270.278345][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.278369][T14836] RSP: 002b:00007fdaf5bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.278410][T14836] RAX: ffffffffffffffda RBX: 00007fdaf73d5fa0 RCX: 00007fdaf718eba9 [ 270.278425][T14836] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 270.278437][T14836] RBP: 00007fdaf5bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.278454][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.278476][T14836] R13: 00007fdaf73d6038 R14: 00007fdaf73d5fa0 R15: 00007ffd6c502ea8 [ 270.278500][T14836] [ 270.658571][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 270.961383][T14864] lo speed is unknown, defaulting to 1000 [ 270.975070][T14867] hub 2-0:1.0: USB hub found [ 270.979852][T14867] hub 2-0:1.0: 8 ports detected [ 271.081487][T14874] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3952'. [ 271.097292][T14874] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 271.106155][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3954'. [ 271.107084][T14874] 0ªî{X¹¦: entered allmulticast mode [ 271.127533][T14874] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 271.149805][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 271.149817][ T29] audit: type=1326 audit(1757665656.188:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.179596][ T29] audit: type=1326 audit(1757665656.188:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.214495][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3956'. [ 271.215917][T14882] loop5: detected capacity change from 0 to 128 [ 271.223554][ T29] audit: type=1326 audit(1757665656.238:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.233325][T14882] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.253317][ T29] audit: type=1326 audit(1757665656.238:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.269914][T14882] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.288855][ T29] audit: type=1326 audit(1757665656.248:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc92feeba9 code=0x0 [ 271.346804][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3956'. [ 271.356197][ T29] audit: type=1326 audit(1757665656.388:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.379742][ T29] audit: type=1326 audit(1757665656.388:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.403273][ T29] audit: type=1326 audit(1757665656.388:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.426808][ T29] audit: type=1326 audit(1757665656.398:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.457983][T12912] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.467839][ T29] audit: type=1326 audit(1757665656.398:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14873 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc92feeba9 code=0x7ffc0000 [ 271.496985][T14889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14889 comm=syz.4.3958 [ 271.513043][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3958'. [ 271.597735][T14903] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.605284][T14900] lo speed is unknown, defaulting to 1000 [ 271.639970][T14907] openvswitch: netlink: Message has 6 unknown bytes. [ 271.737093][T14910] loop5: detected capacity change from 0 to 128 [ 271.744500][T14910] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.755456][T14912] netlink: zone id is out of range [ 271.760768][T14912] netlink: zone id is out of range [ 271.765971][T14912] netlink: zone id is out of range [ 271.771253][T14912] netlink: zone id is out of range [ 271.776542][T14912] netlink: zone id is out of range [ 271.798918][T14912] loop4: detected capacity change from 0 to 1764 [ 271.999448][T14964] loop4: detected capacity change from 0 to 2364 [ 272.078681][T14967] random: crng reseeded on system resumption [ 272.393719][T14971] lo speed is unknown, defaulting to 1000 [ 272.744796][T14974] lo speed is unknown, defaulting to 1000 [ 272.792218][T14976] net_ratelimit: 241 callbacks suppressed [ 272.792236][T14976] openvswitch: netlink: Message has 6 unknown bytes. [ 272.932666][T14982] lo speed is unknown, defaulting to 1000 [ 272.980325][T14983] __nla_validate_parse: 5 callbacks suppressed [ 272.980374][T14983] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3979'. [ 272.995804][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3979'. [ 273.077407][T14990] openvswitch: netlink: Message has 6 unknown bytes. [ 273.109916][T14996] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.186241][T15002] lo speed is unknown, defaulting to 1000 [ 273.242114][T15009] openvswitch: netlink: Message has 6 unknown bytes. [ 273.251251][T15008] ------------[ cut here ]------------ [ 273.256719][T15008] verifier bug: REG INVARIANTS VIOLATION (alu): range bounds violation u64=[0xfffffffffffffffd, 0xfffffffffffffffc] s64=[0xfffffffffffffffd, 0xfffffffffffffffc] u32=[0xfffffffd, 0xfffffffc] s32=[0xfffffffd, 0xfffffffc] var_off=(0xfffffffffffffffc, 0x0)(1) [ 273.281292][T15008] WARNING: CPU: 1 PID: 15008 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 273.291785][T15008] Modules linked in: [ 273.295789][T15008] CPU: 1 UID: 0 PID: 15008 Comm: syz.2.3990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.307210][T15008] Tainted: [W]=WARN [ 273.311065][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.321157][T15008] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 273.327598][T15008] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 273.347466][T15008] RSP: 0018:ffffc9000512f550 EFLAGS: 00010296 [ 273.353835][T15008] RAX: ede5553002218100 RBX: ffff8881376ad9a8 RCX: ffff88810a9fd280 [ 273.361949][T15008] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 273.369952][T15008] RBP: fffffffffffffffc R08: 0001c9000512f38f R09: 0000000000000000 [ 273.377961][T15008] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8881376ad968 [ 273.385962][T15008] R13: ffff88811c570000 R14: ffff88811c570000 R15: ffff8881376ad9a0 [ 273.393967][T15008] FS: 00007fdaf5bd66c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 273.402982][T15008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.409718][T15008] CR2: 0000001b3360dff8 CR3: 0000000127ec0000 CR4: 00000000003506f0 [ 273.417825][T15008] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.425841][T15008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 273.433855][T15008] Call Trace: [ 273.437151][T15008] [ 273.440120][T15008] do_check+0x6ec9/0x7a10 [ 273.444549][T15008] do_check_common+0xc3a/0x12a0 [ 273.449495][T15008] bpf_check+0x942b/0xd9e0 [ 273.453931][T15008] ? __rcu_read_unlock+0x4f/0x70 [ 273.458927][T15008] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 273.464972][T15008] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 273.470674][T15008] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 273.476688][T15008] ? _find_next_zero_bit+0x64/0xa0 [ 273.481956][T15008] ? pcpu_block_refresh_hint+0x10b/0x170 [ 273.487627][T15008] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 273.494308][T15008] ? css_rstat_updated+0xb7/0x240 [ 273.499645][T15008] ? __rcu_read_unlock+0x4f/0x70 [ 273.504641][T15008] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 273.510450][T15008] ? should_fail_ex+0x30/0x280 [ 273.515267][T15008] ? selinux_bpf_prog_load+0x36/0xf0 [ 273.520592][T15008] ? should_failslab+0x8c/0xb0 [ 273.525408][T15008] ? __kmalloc_cache_noprof+0x189/0x320 [ 273.530978][T15008] ? selinux_bpf_prog_load+0xbf/0xf0 [ 273.536401][T15008] ? security_bpf_prog_load+0x2c/0xa0 [ 273.541778][T15008] bpf_prog_load+0xedd/0x1070 [ 273.546469][T15008] ? security_bpf+0x2b/0x90 [ 273.550981][T15008] __sys_bpf+0x462/0x7b0 [ 273.555280][T15008] __x64_sys_bpf+0x41/0x50 [ 273.559789][T15008] x64_sys_call+0x2aea/0x2ff0 [ 273.564475][T15008] do_syscall_64+0xd2/0x200 [ 273.569226][T15008] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.575326][T15008] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.581203][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.587148][T15008] RIP: 0033:0x7fdaf718eba9 [ 273.591674][T15008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.611462][T15008] RSP: 002b:00007fdaf5bd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.620051][T15008] RAX: ffffffffffffffda RBX: 00007fdaf73d6090 RCX: 00007fdaf718eba9 [ 273.628056][T15008] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 273.636041][T15008] RBP: 00007fdaf7211e19 R08: 0000000000000000 R09: 0000000000000000 [ 273.644028][T15008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.652210][T15008] R13: 00007fdaf73d6128 R14: 00007fdaf73d6090 R15: 00007ffd6c502ea8 [ 273.660277][T15008] [ 273.663352][T15008] ---[ end trace 0000000000000000 ]--- [ 273.750405][T15016] FAULT_INJECTION: forcing a failure. [ 273.750405][T15016] name failslab, interval 1, probability 0, space 0, times 0 [ 273.763196][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.2.3994 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.763270][T15016] Tainted: [W]=WARN [ 273.763276][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.763287][T15016] Call Trace: [ 273.763292][T15016] [ 273.763299][T15016] __dump_stack+0x1d/0x30 [ 273.763321][T15016] dump_stack_lvl+0xe8/0x140 [ 273.763339][T15016] dump_stack+0x15/0x1b [ 273.763363][T15016] should_fail_ex+0x265/0x280 [ 273.763432][T15016] ? alloc_fs_context+0x44/0x4e0 [ 273.763505][T15016] should_failslab+0x8c/0xb0 [ 273.763590][T15016] __kmalloc_cache_noprof+0x4c/0x320 [ 273.763660][T15016] alloc_fs_context+0x44/0x4e0 [ 273.763681][T15016] fs_context_for_mount+0x22/0x30 [ 273.763699][T15016] do_new_mount+0xe9/0x5e0 [ 273.763720][T15016] ? security_capable+0x83/0x90 [ 273.763745][T15016] path_mount+0x4a4/0xb20 [ 273.763842][T15016] ? user_path_at+0x109/0x130 [ 273.763873][T15016] __se_sys_mount+0x28f/0x2e0 [ 273.763893][T15016] ? fput+0x8f/0xc0 [ 273.763923][T15016] __x64_sys_mount+0x67/0x80 [ 273.764012][T15016] x64_sys_call+0x2b4d/0x2ff0 [ 273.764044][T15016] do_syscall_64+0xd2/0x200 [ 273.764073][T15016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 273.764095][T15016] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 273.764161][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.764180][T15016] RIP: 0033:0x7fdaf718eba9 [ 273.764240][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.764256][T15016] RSP: 002b:00007fdaf5bf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.764272][T15016] RAX: ffffffffffffffda RBX: 00007fdaf73d5fa0 RCX: 00007fdaf718eba9 [ 273.764352][T15016] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 273.764363][T15016] RBP: 00007fdaf5bf7090 R08: 0000200000000400 R09: 0000000000000000 [ 273.764448][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.764458][T15016] R13: 00007fdaf73d6038 R14: 00007fdaf73d5fa0 R15: 00007ffd6c502ea8 [ 273.764473][T15016] [ 274.100283][T15025] lo speed is unknown, defaulting to 1000 [ 274.394159][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 274.422501][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'. [ 274.432208][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3999'. [ 274.456908][T15033] loop4: detected capacity change from 0 to 1024 [ 274.464567][T15033] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 274.475532][T15033] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 274.486072][T15033] JBD2: no valid journal superblock found [ 274.491867][T15033] EXT4-fs (loop4): Could not load journal inode [ 274.506159][T15033] 9pnet_fd: Insufficient options for proto=fd [ 274.531441][T15039] loop6: detected capacity change from 0 to 512 [ 274.547643][T15039] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.556720][T15039] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 274.585544][T15039] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 274.594345][T15039] System zones: 0-2, 18-18, 34-35 [ 274.600211][T15039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 274.619568][T15039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15039 comm=syz.6.4002 [ 274.648952][T14565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.671222][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4008'. [ 274.708606][T15050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.715924][T15050] IPv6: NLM_F_CREATE should be set when creating new route [ 274.728442][T15050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.735756][T15050] IPv6: NLM_F_CREATE should be set when creating new route [ 274.945092][T15069] lo speed is unknown, defaulting to 1000 [ 275.064043][T15072] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4015'. [ 275.555305][T15107] SELinux: policydb magic number 0x7cff8c does not match expected magic number 0xf97cff8c [ 275.618029][T15107] SELinux: failed to load policy [ 275.704137][ T3391] IPVS: starting estimator thread 0... [ 275.798702][T15116] IPVS: using max 2784 ests per chain, 139200 per kthread [ 275.812976][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 276.195754][T15133] lo speed is unknown, defaulting to 1000 [ 276.434702][T15133] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 277.018734][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'. [ 277.027625][T15143] netlink: 'syz.2.4037': attribute type 22 has an invalid length. [ 277.035666][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'. [ 277.058493][T15146] loop6: detected capacity change from 0 to 512 [ 277.066643][T15143] netlink: 'syz.2.4037': attribute type 22 has an invalid length. [ 277.074750][T14934] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.085292][T15146] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 277.094254][T14934] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.114729][T14934] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.125834][T14934] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.165554][T15150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15150 comm=syz.2.4041 [ 277.168839][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 277.168856][ T29] audit: type=1400 audit(1757665662.198:9381): avc: denied { nlmsg_tty_audit } for pid=15149 comm="syz.2.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 277.276582][T15158] netlink: 'syz.6.4044': attribute type 3 has an invalid length. [ 277.304382][T15158] loop6: detected capacity change from 0 to 1024 [ 277.323863][T15158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.334346][T15169] lo speed is unknown, defaulting to 1000 [ 277.337456][T15158] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.361276][T15158] vhci_hcd: invalid port number 28 [ 277.366433][T15158] vhci_hcd: default hub control req: 0303 v0009 i001c l53 [ 277.375674][T15158] usb usb1: check_ctrlrecip: process 15158 (syz.6.4044) requesting ep 01 but needs 81 [ 277.376501][T15175] openvswitch: netlink: Message has 6 unknown bytes. [ 277.385327][T15158] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 277.412674][T15158] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.4044: lblock 1 mapped to illegal pblock 1 (length 15) [ 277.427003][T15158] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 277.439401][T15158] EXT4-fs (loop6): This should not happen!! Data will be lost [ 277.439401][T15158] [ 277.498573][T14565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.512221][T15168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.537446][T15168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.560564][T15182] netlink: 'syz.6.4048': attribute type 1 has an invalid length. [ 277.580672][T15183] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.594105][T15185] netlink: 'syz.6.4051': attribute type 1 has an invalid length. [ 277.602418][T15185] FAULT_INJECTION: forcing a failure. [ 277.602418][T15185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.615571][T15185] CPU: 0 UID: 0 PID: 15185 Comm: syz.6.4051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 277.615646][T15185] Tainted: [W]=WARN [ 277.615654][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.615668][T15185] Call Trace: [ 277.615680][T15185] [ 277.615688][T15185] __dump_stack+0x1d/0x30 [ 277.615707][T15185] dump_stack_lvl+0xe8/0x140 [ 277.615724][T15185] dump_stack+0x15/0x1b [ 277.615740][T15185] should_fail_ex+0x265/0x280 [ 277.615767][T15185] should_fail+0xb/0x20 [ 277.615857][T15185] should_fail_usercopy+0x1a/0x20 [ 277.615951][T15185] _copy_to_user+0x20/0xa0 [ 277.615979][T15185] simple_read_from_buffer+0xb5/0x130 [ 277.616004][T15185] proc_fail_nth_read+0x10e/0x150 [ 277.616052][T15185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.616081][T15185] vfs_read+0x1a8/0x770 [ 277.616102][T15185] ? __rcu_read_unlock+0x4f/0x70 [ 277.616120][T15185] ? __fget_files+0x184/0x1c0 [ 277.616144][T15185] ksys_read+0xda/0x1a0 [ 277.616210][T15185] __x64_sys_read+0x40/0x50 [ 277.616261][T15185] x64_sys_call+0x27bc/0x2ff0 [ 277.616343][T15185] do_syscall_64+0xd2/0x200 [ 277.616413][T15185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 277.616507][T15185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.616543][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.616568][T15185] RIP: 0033:0x7f3b3e4fd5bc [ 277.616584][T15185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.616673][T15185] RSP: 002b:00007f3b3cf67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.616693][T15185] RAX: ffffffffffffffda RBX: 00007f3b3e745fa0 RCX: 00007f3b3e4fd5bc [ 277.616707][T15185] RDX: 000000000000000f RSI: 00007f3b3cf670a0 RDI: 0000000000000005 [ 277.616721][T15185] RBP: 00007f3b3cf67090 R08: 0000000000000000 R09: 0000000000000000 [ 277.616784][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.616797][T15185] R13: 00007f3b3e746038 R14: 00007f3b3e745fa0 R15: 00007fff75987448 [ 277.616817][T15185] [ 277.901113][T15191] loop6: detected capacity change from 0 to 2364 [ 278.021063][T15199] FAULT_INJECTION: forcing a failure. [ 278.021063][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 278.033896][T15199] CPU: 1 UID: 0 PID: 15199 Comm: syz.6.4058 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.033928][T15199] Tainted: [W]=WARN [ 278.034006][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.034023][T15199] Call Trace: [ 278.034030][T15199] [ 278.034039][T15199] __dump_stack+0x1d/0x30 [ 278.034066][T15199] dump_stack_lvl+0xe8/0x140 [ 278.034086][T15199] dump_stack+0x15/0x1b [ 278.034102][T15199] should_fail_ex+0x265/0x280 [ 278.034133][T15199] should_failslab+0x8c/0xb0 [ 278.034181][T15199] __kmalloc_noprof+0xa5/0x3e0 [ 278.034209][T15199] ? nla_strdup+0x78/0xc0 [ 278.034274][T15199] nla_strdup+0x78/0xc0 [ 278.034369][T15199] nf_tables_newtable+0x3ba/0xea0 [ 278.034414][T15199] nfnetlink_rcv+0xb96/0x1690 [ 278.034465][T15199] netlink_unicast+0x5bd/0x690 [ 278.034487][T15199] netlink_sendmsg+0x58b/0x6b0 [ 278.034585][T15199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.034610][T15199] __sock_sendmsg+0x142/0x180 [ 278.034645][T15199] ____sys_sendmsg+0x31e/0x4e0 [ 278.034756][T15199] ___sys_sendmsg+0x17b/0x1d0 [ 278.034799][T15199] __x64_sys_sendmsg+0xd4/0x160 [ 278.034825][T15199] x64_sys_call+0x191e/0x2ff0 [ 278.034844][T15199] do_syscall_64+0xd2/0x200 [ 278.034940][T15199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.034961][T15199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.035053][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.035071][T15199] RIP: 0033:0x7f3b3e4feba9 [ 278.035132][T15199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.035152][T15199] RSP: 002b:00007f3b3cf67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.035168][T15199] RAX: ffffffffffffffda RBX: 00007f3b3e745fa0 RCX: 00007f3b3e4feba9 [ 278.035181][T15199] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.035195][T15199] RBP: 00007f3b3cf67090 R08: 0000000000000000 R09: 0000000000000000 [ 278.035208][T15199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.035250][T15199] R13: 00007f3b3e746038 R14: 00007f3b3e745fa0 R15: 00007fff75987448 [ 278.035270][T15199] [ 278.297922][T15207] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.338021][T15212] loop6: detected capacity change from 0 to 512 [ 278.362526][T15215] FAULT_INJECTION: forcing a failure. [ 278.362526][T15215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.375699][T15215] CPU: 1 UID: 0 PID: 15215 Comm: syz.5.4066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.375732][T15215] Tainted: [W]=WARN [ 278.375780][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.375791][T15215] Call Trace: [ 278.375796][T15215] [ 278.375804][T15215] __dump_stack+0x1d/0x30 [ 278.375827][T15215] dump_stack_lvl+0xe8/0x140 [ 278.375848][T15215] dump_stack+0x15/0x1b [ 278.375863][T15215] should_fail_ex+0x265/0x280 [ 278.375923][T15215] should_fail+0xb/0x20 [ 278.375946][T15215] should_fail_usercopy+0x1a/0x20 [ 278.376023][T15215] _copy_from_iter+0xd2/0xe80 [ 278.376047][T15215] ? __build_skb_around+0x1a0/0x200 [ 278.376070][T15215] ? __alloc_skb+0x223/0x320 [ 278.376096][T15215] netlink_sendmsg+0x471/0x6b0 [ 278.376158][T15215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.376186][T15215] __sock_sendmsg+0x142/0x180 [ 278.376223][T15215] ____sys_sendmsg+0x31e/0x4e0 [ 278.376261][T15215] ___sys_sendmsg+0x17b/0x1d0 [ 278.376370][T15215] __x64_sys_sendmsg+0xd4/0x160 [ 278.376404][T15215] x64_sys_call+0x191e/0x2ff0 [ 278.376428][T15215] do_syscall_64+0xd2/0x200 [ 278.376543][T15215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.376583][T15215] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.376713][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.376732][T15215] RIP: 0033:0x7fba26afeba9 [ 278.376746][T15215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.376768][T15215] RSP: 002b:00007fba2555f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.376785][T15215] RAX: ffffffffffffffda RBX: 00007fba26d45fa0 RCX: 00007fba26afeba9 [ 278.376817][T15215] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.376828][T15215] RBP: 00007fba2555f090 R08: 0000000000000000 R09: 0000000000000000 [ 278.376838][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.376849][T15215] R13: 00007fba26d46038 R14: 00007fba26d45fa0 R15: 00007ffcde777468 [ 278.376866][T15215] [ 278.458666][ T29] audit: type=1326 audit(1757665663.418:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.606943][ T29] audit: type=1326 audit(1757665663.418:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.679380][T15226] loop4: detected capacity change from 0 to 2048 [ 278.700301][T15229] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 278.720006][ T29] audit: type=1326 audit(1757665663.528:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.743626][ T29] audit: type=1326 audit(1757665663.528:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.767142][ T29] audit: type=1326 audit(1757665663.528:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.790693][ T29] audit: type=1326 audit(1757665663.528:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.814203][ T29] audit: type=1326 audit(1757665663.568:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.837858][ T29] audit: type=1326 audit(1757665663.568:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.861553][ T29] audit: type=1326 audit(1757665663.568:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.2.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdaf718eba9 code=0x7ffc0000 [ 278.887813][T15226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.966043][T15245] siw: device registration error -23 [ 279.070717][T15253] lo speed is unknown, defaulting to 1000 [ 279.125109][T15257] openvswitch: netlink: Message has 6 unknown bytes. [ 279.132362][T15259] loop5: detected capacity change from 0 to 128 [ 279.200069][T15261] loop5: detected capacity change from 0 to 1024 [ 279.214534][T15261] EXT4-fs: Ignoring removed oldalloc option [ 279.220732][T15261] EXT4-fs: Ignoring removed bh option [ 279.242136][T15261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.507295][T13264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 279.522057][T13264] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 279.535672][T13264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.027681][T12912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.050953][T15278] wireguard0: entered promiscuous mode [ 280.056489][T15278] wireguard0: entered allmulticast mode [ 280.123024][T15283] serio: Serial port ptm0 [ 280.229938][T12912] ================================================================== [ 280.238142][T12912] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 280.245801][T12912] [ 280.248125][T12912] read-write to 0xffff88811b7f86d8 of 8 bytes by task 15281 on cpu 1: [ 280.256274][T12912] inode_add_bytes+0x47/0xe0 [ 280.260877][T12912] __dquot_alloc_space+0x180/0x8a0 [ 280.266012][T12912] shmem_inode_acct_blocks+0x129/0x240 [ 280.271495][T12912] shmem_get_folio_gfp+0x5a7/0xd60 [ 280.276633][T12912] shmem_write_begin+0xa8/0x190 [ 280.281579][T12912] generic_perform_write+0x181/0x490 [ 280.286866][T12912] shmem_file_write_iter+0xc5/0xf0 [ 280.291990][T12912] __kernel_write_iter+0x2d3/0x540 [ 280.297105][T12912] dump_user_range+0x61e/0x8f0 [ 280.301882][T12912] elf_core_dump+0x1e00/0x1f90 [ 280.306666][T12912] coredump_write+0xb0d/0xe30 [ 280.311352][T12912] vfs_coredump+0x142f/0x20c0 [ 280.316044][T12912] get_signal+0xd85/0xf70 [ 280.320386][T12912] arch_do_signal_or_restart+0x96/0x480 [ 280.325940][T12912] irqentry_exit_to_user_mode+0x5e/0xa0 [ 280.331510][T12912] irqentry_exit+0x12/0x50 [ 280.335954][T12912] asm_exc_page_fault+0x26/0x30 [ 280.341011][T12912] [ 280.343344][T12912] read to 0xffff88811b7f86d8 of 8 bytes by task 12912 on cpu 0: [ 280.351170][T12912] generic_fillattr+0x27d/0x340 [ 280.356049][T12912] shmem_getattr+0x181/0x200 [ 280.360658][T12912] vfs_getattr_nosec+0x143/0x1e0 [ 280.365706][T12912] vfs_statx+0x113/0x390 [ 280.369969][T12912] vfs_fstatat+0x115/0x170 [ 280.374503][T12912] __se_sys_newfstatat+0x55/0x260 [ 280.379558][T12912] __x64_sys_newfstatat+0x55/0x70 [ 280.384610][T12912] x64_sys_call+0x135a/0x2ff0 [ 280.389323][T12912] do_syscall_64+0xd2/0x200 [ 280.393867][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.399776][T12912] [ 280.402099][T12912] value changed: 0x0000000000008228 -> 0x0000000000008240 [ 280.409213][T12912] [ 280.411535][T12912] Reported by Kernel Concurrency Sanitizer on: [ 280.417686][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.429237][T12912] Tainted: [W]=WARN [ 280.433033][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.443087][T12912] ==================================================================