last executing test programs: 6.501791326s ago: executing program 2 (id=2482): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 6.501158216s ago: executing program 2 (id=2483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) 6.478749518s ago: executing program 2 (id=2484): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = syz_open_dev$loop(&(0x7f0000001500), 0x401, 0x40000) pipe(&(0x7f0000001580)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000340)=r4}, 0x20) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a3640e8332d1daa"], 0x114}}, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@md0, r5, &(0x7f0000000280)={0x56, 0x3d7, 0x0, 0x6}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 6.394092395s ago: executing program 2 (id=2487): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2043, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x5}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x200008c2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xb2c, 0x9, 0x40, 0x100, r5, 0x7f, '\x00', r9, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000400)=""/198}, 0x20) 6.278256864s ago: executing program 2 (id=2491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0) io_setup(0xaea2, &(0x7f0000000000)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x256d, 0x10, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000cd7372", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r5, @ANYBLOB="00c65b0b1b000000b70000000000000095000000000000000000008de57c6c9c8022fa0000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000abc872f0000180012800e00010077697265677561726400000004000280"], 0x44}}, 0x0) 6.055395322s ago: executing program 2 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 6.041396533s ago: executing program 32 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 1.370779329s ago: executing program 4 (id=2629): pipe2(&(0x7f00000000c0), 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r3) syz_emit_ethernet(0x66, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0x7, 0x6, "b3c704", 0x4, 0x3b, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2}}}}}}}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050081}, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) 1.285253026s ago: executing program 4 (id=2630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r1) 1.24053089s ago: executing program 4 (id=2637): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) kexec_load(0x7, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000180)="15ca7234afad", 0x6, 0xf69cffd, 0x8}, {&(0x7f0000000200)="0c7bc3ff6b210810f53ff8dcbb02029e1eab94e3e89d8eb5a23d5e9cb1b600f82cb697d1de5552ee90a40bcbc7c2b7e9e3f74861197d65590e7df3b3c0b37f36fdd39c717e54bb117c47a6cfe38d172bfaad4bf11e191b356d591b1d2ad5b69b48f617d9a187a3ed90b466", 0x6b, 0x7fffffffffffffff}, {&(0x7f0000000400)="23f5ec6886704f22f64982bc0ec881d6b258f659ffd161fbfc6c8f7003ff2a6dae57693f53f540759da5ea9bc19414f4ebde95ad383856d57cc1530267ed83b829c0bdf43d937f5720acbd1375a372306ba3a732c804e423bcb20428f7b239ce33d5a5af9bfa573cb13eb5bdb375efb519d0a99bff845f5ed57effb9b7edf6a5d68e19d780e12ff73d25012c8172390165bdd5c5ed844160283d6cb16cdc2a2792c773e00f0c1222ee912ecff8855b5aab98fdba8b996a43817489769cfd", 0xbe, 0x4, 0x61c0b4ef}, {0x0, 0x0, 0x505}, {&(0x7f0000000380), 0x0, 0x7fffffffffffffff, 0x2}, {&(0x7f0000000680)="eb663766b04e5fa25a9d799cced37b5c1ae0097319e176b19ab27eb9d815b9a7b37cc7888c01819188fefd7063b220e2e9475a8f8e37760546dd270c028be91f668064cfcc9735ea37424c1464e9abd9bb8ff9a61e38b1a05abfe8715d82b1ff55209b96f1a76f1d13bc84367413b41f6edc777cbde2bd067bb95fbf99893f0d6131aa562d01cd04d503f5926c20e808d95c6e1c9c14df6a00ca8f77134922d853cf7a6285466012fdd6bf4ec8765abaed652cb3792a9b077e3169f82eb7b20b3b35a03d73b98c6446240c255fc337acf8e423d2aab1b3161150ea2b56bc643a4ca619e8dbd0", 0xe6, 0x200000000, 0x8}, {&(0x7f0000000780)="2b33471eadb087f6c70130515e33", 0xe, 0x8, 0xb}], 0x80002) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000008c0)={0x0, &(0x7f0000000880)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x19b1, &(0x7f0000000140)={0x0, 0xb49c, 0x1000, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r9, &(0x7f0000000200)=""/209, 0xd1) r10 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) creat(&(0x7f0000000400)='./file0/file0\x00', 0x51) 1.104930511s ago: executing program 0 (id=2642): r0 = dup(0xffffffffffffffff) syz_read_part_table(0x5ac, &(0x7f00000005c0)="$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") pipe2$watch_queue(&(0x7f0000000380), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x101540, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x720, 0x0, 0x61, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x86, 0x6, "38c49339"}, @end]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000626bd700ce582d3001369623a76657468314f6d6163767461700000003e"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 976.733691ms ago: executing program 0 (id=2646): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x200040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) fgetxattr(r1, &(0x7f00000004c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0x40ffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0xd, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x6, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xce, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x5, 0xb, 0x0, 0xfffffffa, 0x74e, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x1010001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x9ac5, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x6, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x0, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x0, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x198, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x8, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x8, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x7, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x5, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x7ff, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x8000000, 0x3, 0x0, 0xc, 0x6, 0x7, 0xfffffefe, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x205, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x102, 0x401, 0x2, 0x7, 0xc, 0x7, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x5, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x1005, 0xb, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce8, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x7, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x8003, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0x1, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x2, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x80000000, 0x2b, 0x200006, 0x4, 0x7, 0x0, 0xfb4, 0xbf9, 0x7, 0x3, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0x3, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0xc, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x7, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x54, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x0, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x4d, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x4, 0xfff, 0xfffffff5, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x6, 0x72, 0x80, 0x1000, 0x6, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x43, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e7ff0000000000ad18aa329e20935917b584c3caf3f3d3a3aa9f5b249d04aabe1e627b2a1370018c22631b555a52b8e96d2e886935f01599e89810aa3021e6989f2dcd74f746afa0e5df854d954beff2c8f7ff1b43", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket(0x10, 0x80002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000cd480834ffabd7558627dee41ff11cd18db8767c9fc0b0d41b778bb1ef09fc4fbc99cb070fdffca7fdaf0fac3f923f4c359a5ee7f88d96518ec17ff80a721dcf4911dbe70a69f9b6fa80e5cca388e7e27eff4a42c7dd5668790a9efc1d3df1153627e436c6ca7288bd138f542e161c3cdce0b42617187ff273c365a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000022c0)={'ip_vti0\x00', &(0x7f0000002200)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast}}}}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000001340), 0x0, 0x0, {}, &(0x7f0000000400)=""/161, 0xa1, 0x0, 0x0, 0x0, {r11}}, 0x58) bind$tipc(r7, &(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x1}}, 0x10) 966.923962ms ago: executing program 5 (id=2647): socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) 889.034058ms ago: executing program 5 (id=2651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 674.967996ms ago: executing program 0 (id=2652): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 673.434946ms ago: executing program 1 (id=2653): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20], 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2d5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x30000, 0x6, 0x3, 0x8, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x0, r3, 0xb) 671.902116ms ago: executing program 5 (id=2654): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r4, 0x0, 0x4}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r7 = socket$rds(0x15, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r8, r3, 0x2f}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000c00)=""/163) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) recvfrom(r7, &(0x7f0000000a80)=""/217, 0xd9, 0x160, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x3, @mcast1, 0x4}}}, 0x80) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r12, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r3, r8, 0x2f, 0x2000, 0x4, @value=r13}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000980)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a00)='./file1\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") 641.238188ms ago: executing program 0 (id=2655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000040000241000000100013756470"], 0x2c}}, 0x0) 421.134896ms ago: executing program 0 (id=2656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x20, 0x6, 0x0, @dev, @loopback}, {{0xfffd, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x189081, 0x0) close(r2) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c00018008001b000000000020000a80050008"], 0x98}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) uname(0x0) mq_open(0x0, 0x40, 0x124, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25010000000000000001410020001800170000001f0000000569623a636169663000"], 0x34}, 0x1, 0x0, 0x0, 0x20044805}, 0x8804) 368.79687ms ago: executing program 3 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000000400002"], 0x2c}}, 0x0) 367.66414ms ago: executing program 3 (id=2658): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x80, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x81010000000000, 0x2) 308.833325ms ago: executing program 4 (id=2659): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 285.090247ms ago: executing program 4 (id=2660): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) close(r1) 235.965521ms ago: executing program 3 (id=2661): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x7, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) eventfd2(0x8, 0x80801) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000440)) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x34000}}], 0x1, 0x0) 235.532581ms ago: executing program 5 (id=2662): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}], 0x20) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x2}}, {0x8, 0x2, [0xc, 0x6]}}, {{0x1c, 0x1, {0x6, 0x7e, 0x0, 0x4, 0x1, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0x7, 0x2, 0x81]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 235.131631ms ago: executing program 3 (id=2663): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x7, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) eventfd2(0x8, 0x80801) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000440)) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r6, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 168.770226ms ago: executing program 1 (id=2664): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='fsi_master_gpio_clock_zeros\x00', r1, 0x0, 0x3}, 0xfffffffffffffdf8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0x7ffffffffffffffe}, 0x18) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc00, 0x0, @perf_config_ext, 0x14000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x7) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x454a, 0x10001, 0xb}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200, 0xd026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @multicast}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}], 0x10) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000100)={0xa, 0x4e27, 0x8, @empty, 0x4}, 0x1c, &(0x7f0000000400)=[{0x0}], 0x1}, 0x4048043) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local, 0x7}, 0x1c) 168.223476ms ago: executing program 0 (id=2665): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = io_uring_setup(0x54a0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r1, r2, 0x0) 159.870307ms ago: executing program 5 (id=2666): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 137.601389ms ago: executing program 5 (id=2667): setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x180c006, &(0x7f000000cb40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="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"], 0xff, 0x2b3, &(0x7f0000000ac0)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c060000) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) ioctl$FIBMAP(r6, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(0x0, r3) readahead(r0, 0x5, 0x5) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, 0x0, 0x24004059) 116.48598ms ago: executing program 4 (id=2668): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3a9, 0x2, 0x7, 0x3}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, &(0x7f0000001700)=""/47}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010029bd7000fbdbdf250a008000000400001200000008000100e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r4, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2101000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x6d8}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x4100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x10000007, 0x100) 61.275865ms ago: executing program 1 (id=2669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) 60.849625ms ago: executing program 1 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 6.358959ms ago: executing program 1 (id=2671): mq_open(0x0, 0x41, 0x9, 0x0) epoll_create(0x31) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x6000000, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 5.935199ms ago: executing program 3 (id=2672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) 702.05µs ago: executing program 3 (id=2673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) r1 = syz_open_pts(r0, 0x80) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0xa00, 0x0, 0x0) r5 = dup3(r1, r0, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000001c0)={0x3, 0x20800006, 0xa, 0xfbffffcf, 0x7, "65bd218c5fe001cafd41f5c2a95eec23bd62f8", 0x5, 0xe}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) open(0x0, 0x145142, 0x94) (async) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$sock(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1fa6", 0x2}], 0x1}}], 0x2, 0x48800) (async) shutdown(r7, 0x1) 0s ago: executing program 1 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/4060, 0xfdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = gettid() tkill(r7, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getpgrp(r7) kcmp(r7, 0x0, 0x4, r4, r3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000011c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x2, 0x0, 0x8, 0x4294, 0xe7}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) kernel console output (not intermixed with test programs): T7602] audit_seccomp+0x48/0x100 [ 87.996636][ T7602] ? __seccomp_filter+0x68c/0x10d0 [ 87.996648][ T7602] __seccomp_filter+0x69d/0x10d0 [ 87.996706][ T7602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.996782][ T7602] ? vfs_write+0x7e8/0x960 [ 87.996798][ T7602] __secure_computing+0x82/0x150 [ 87.996809][ T7602] syscall_trace_enter+0xcf/0x1e0 [ 87.996935][ T7602] do_syscall_64+0xac/0x200 [ 87.996951][ T7602] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.996985][ T7602] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.997005][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.997019][ T7602] RIP: 0033:0x7fcaba05ebe9 [ 87.997113][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.997186][ T7602] RSP: 002b:00007fcab8abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 87.997199][ T7602] RAX: ffffffffffffffda RBX: 00007fcaba285fa0 RCX: 00007fcaba05ebe9 [ 87.997206][ T7602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.997213][ T7602] RBP: 00007fcab8abf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.997220][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.997227][ T7602] R13: 00007fcaba286038 R14: 00007fcaba285fa0 R15: 00007fff71972838 [ 87.997282][ T7602] [ 88.312965][ T7612] loop3: detected capacity change from 0 to 512 [ 88.321728][ T7612] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1472: iget: bad extended attribute block 1 [ 88.334367][ T7612] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1472: couldn't read orphan inode 15 (err -117) [ 88.359029][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88813188dc00: rx timeout, send abort [ 88.367377][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88813188d600: abort rx timeout. Force session deactivation [ 88.405296][ T7620] loop3: detected capacity change from 0 to 2048 [ 88.419815][ T7620] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 88.671937][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 88.671950][ T29] audit: type=1326 audit(1755466328.071:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.678547][ T7647] __nla_validate_parse: 7 callbacks suppressed [ 88.678597][ T7647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1486'. [ 88.701570][ T29] audit: type=1326 audit(1755466328.071:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.739877][ T29] audit: type=1326 audit(1755466328.071:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.763245][ T29] audit: type=1326 audit(1755466328.071:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.786604][ T29] audit: type=1326 audit(1755466328.071:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.809980][ T29] audit: type=1326 audit(1755466328.071:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.833343][ T29] audit: type=1326 audit(1755466328.071:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.856706][ T29] audit: type=1326 audit(1755466328.071:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.867328][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88813188dc00: abort rx timeout. Force session deactivation [ 88.880074][ T29] audit: type=1326 audit(1755466328.071:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.913568][ T29] audit: type=1326 audit(1755466328.071:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.1.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 88.996348][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 89.005910][ T7661] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1492'. [ 89.116503][ T7680] loop1: detected capacity change from 0 to 1024 [ 89.131427][ T7680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.146447][ T7680] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.158636][ T7680] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.158636][ T7680] [ 89.168374][ T7680] EXT4-fs (loop1): Total free blocks count 0 [ 89.174444][ T7680] EXT4-fs (loop1): Free/Dirty block details [ 89.180364][ T7680] EXT4-fs (loop1): free_blocks=20480 [ 89.185633][ T7680] EXT4-fs (loop1): dirty_blocks=16 [ 89.190803][ T7680] EXT4-fs (loop1): Block reservation details [ 89.196813][ T7680] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 89.312324][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 89.321930][ T7697] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1504'. [ 89.445927][ T7715] loop2: detected capacity change from 0 to 1024 [ 89.461738][ T7715] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.476667][ T7715] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.488865][ T7715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.488865][ T7715] [ 89.498894][ T7715] EXT4-fs (loop2): Total free blocks count 0 [ 89.504892][ T7715] EXT4-fs (loop2): Free/Dirty block details [ 89.510880][ T7715] EXT4-fs (loop2): free_blocks=20480 [ 89.516232][ T7715] EXT4-fs (loop2): dirty_blocks=16 [ 89.521383][ T7715] EXT4-fs (loop2): Block reservation details [ 89.527341][ T7715] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 89.551202][ T7731] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1516'. [ 89.660860][ T7738] FAULT_INJECTION: forcing a failure. [ 89.660860][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 89.673549][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.2.1520 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 89.673563][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.673568][ T7738] Call Trace: [ 89.673571][ T7738] [ 89.673575][ T7738] __dump_stack+0x1d/0x30 [ 89.673586][ T7738] dump_stack_lvl+0xe8/0x140 [ 89.673594][ T7738] dump_stack+0x15/0x1b [ 89.673663][ T7738] should_fail_ex+0x265/0x280 [ 89.673753][ T7738] should_failslab+0x8c/0xb0 [ 89.673770][ T7738] kmem_cache_alloc_noprof+0x50/0x310 [ 89.673781][ T7738] ? getname_kernel+0x3c/0x1f0 [ 89.673864][ T7738] getname_kernel+0x3c/0x1f0 [ 89.673877][ T7738] kern_path+0x23/0x130 [ 89.673888][ T7738] create_local_trace_uprobe+0x53/0x2c0 [ 89.673921][ T7738] perf_uprobe_init+0xc0/0x150 [ 89.673933][ T7738] perf_uprobe_event_init+0xc4/0x140 [ 89.673943][ T7738] perf_try_init_event+0xd9/0x540 [ 89.673998][ T7738] ? perf_event_alloc+0xb1c/0x1740 [ 89.674009][ T7738] perf_event_alloc+0xb27/0x1740 [ 89.674025][ T7738] __se_sys_perf_event_open+0x615/0x11c0 [ 89.674036][ T7738] ? __rcu_read_unlock+0x4f/0x70 [ 89.674047][ T7738] __x64_sys_perf_event_open+0x67/0x80 [ 89.674083][ T7738] x64_sys_call+0x7bd/0x2ff0 [ 89.674091][ T7738] do_syscall_64+0xd2/0x200 [ 89.674101][ T7738] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.674110][ T7738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 89.674199][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.674212][ T7738] RIP: 0033:0x7ff9000debe9 [ 89.674219][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.674227][ T7738] RSP: 002b:00007ff8feb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 89.674235][ T7738] RAX: ffffffffffffffda RBX: 00007ff900305fa0 RCX: 00007ff9000debe9 [ 89.674244][ T7738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 89.674249][ T7738] RBP: 00007ff8feb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.674254][ T7738] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 89.674286][ T7738] R13: 00007ff900306038 R14: 00007ff900305fa0 R15: 00007fff4721f478 [ 89.674293][ T7738] [ 89.953762][ T7748] syz_tun: entered allmulticast mode [ 89.960883][ T7747] syz_tun: left allmulticast mode [ 89.993228][ T7752] loop3: detected capacity change from 0 to 1024 [ 90.017918][ T7758] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1529'. [ 90.031291][ T7752] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.077393][ T7770] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.112569][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1535'. [ 90.123460][ T7770] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.171543][ T7770] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.236072][ T7770] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.275806][ T7796] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1542'. [ 90.313297][ T3996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.321962][ T7806] loop3: detected capacity change from 0 to 1024 [ 90.331981][ T7806] EXT4-fs: Ignoring removed orlov option [ 90.348999][ T3996] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.370639][ T7813] loop9: detected capacity change from 0 to 7 [ 90.376166][ T3996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.376816][ T7813] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.394732][ T3996] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.399126][ T7813] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.405305][ T7806] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1541'. [ 90.410883][ T7813] loop9: unable to read partition table [ 90.433861][ T7813] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 90.433861][ T7813] ) failed (rc=-5) [ 90.474244][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.482860][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.497670][ T7813] syzkaller1: entered promiscuous mode [ 90.503186][ T7813] syzkaller1: entered allmulticast mode [ 90.614594][ T7838] team0: Port device dummy0 removed [ 91.187978][ T7981] loop1: detected capacity change from 0 to 2048 [ 91.195473][ T7981] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 91.336781][ T7994] FAULT_INJECTION: forcing a failure. [ 91.336781][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 91.349921][ T7994] CPU: 1 UID: 0 PID: 7994 Comm: syz.3.1575 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 91.349955][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.349962][ T7994] Call Trace: [ 91.349967][ T7994] [ 91.349973][ T7994] __dump_stack+0x1d/0x30 [ 91.350000][ T7994] dump_stack_lvl+0xe8/0x140 [ 91.350014][ T7994] dump_stack+0x15/0x1b [ 91.350025][ T7994] should_fail_ex+0x265/0x280 [ 91.350040][ T7994] should_failslab+0x8c/0xb0 [ 91.350057][ T7994] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.350189][ T7994] ? __alloc_skb+0x101/0x320 [ 91.350264][ T7994] __alloc_skb+0x101/0x320 [ 91.350281][ T7994] ? audit_log_start+0x365/0x6c0 [ 91.350298][ T7994] audit_log_start+0x380/0x6c0 [ 91.350316][ T7994] audit_seccomp+0x48/0x100 [ 91.350385][ T7994] ? __seccomp_filter+0x68c/0x10d0 [ 91.350398][ T7994] __seccomp_filter+0x69d/0x10d0 [ 91.350446][ T7994] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.350460][ T7994] ? vfs_write+0x7e8/0x960 [ 91.350472][ T7994] ? __rcu_read_unlock+0x4f/0x70 [ 91.350485][ T7994] ? __fget_files+0x184/0x1c0 [ 91.350583][ T7994] __secure_computing+0x82/0x150 [ 91.350595][ T7994] syscall_trace_enter+0xcf/0x1e0 [ 91.350658][ T7994] do_syscall_64+0xac/0x200 [ 91.350675][ T7994] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.350691][ T7994] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 91.350707][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.350722][ T7994] RIP: 0033:0x7fcaba05ebe9 [ 91.350765][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.350776][ T7994] RSP: 002b:00007fcab8abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 91.350788][ T7994] RAX: ffffffffffffffda RBX: 00007fcaba285fa0 RCX: 00007fcaba05ebe9 [ 91.350795][ T7994] RDX: 0000200000000ac0 RSI: 0000000000000021 RDI: 00000000000001e8 [ 91.350803][ T7994] RBP: 00007fcab8abf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.350810][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.350817][ T7994] R13: 00007fcaba286038 R14: 00007fcaba285fa0 R15: 00007fff71972838 [ 91.350871][ T7994] [ 91.597790][ T7997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7997 comm=syz.3.1577 [ 91.634459][ T7999] loop2: detected capacity change from 0 to 1024 [ 91.657562][ T7997] lo speed is unknown, defaulting to 1000 [ 91.674434][ T7997] lo speed is unknown, defaulting to 1000 [ 91.682192][ T7997] lo speed is unknown, defaulting to 1000 [ 91.692573][ T7999] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.807567][ T8018] loop2: detected capacity change from 0 to 2048 [ 91.814394][ T8018] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 91.918917][ T8031] can0: slcan on ttyS3. [ 91.970218][ T8031] can0 (unregistered): slcan off ttyS3. [ 91.980335][ T8034] lo speed is unknown, defaulting to 1000 [ 91.986495][ T8034] lo speed is unknown, defaulting to 1000 [ 91.995208][ T8034] lo speed is unknown, defaulting to 1000 [ 92.107391][ T8050] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 92.115687][ T8052] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 92.127535][ T8052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.754207][ T8064] loop3: detected capacity change from 0 to 2048 [ 92.761536][ T8064] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 92.884782][ T8068] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.950876][ T8068] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.021029][ T8068] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.047246][ T8081] serio: Serial port ttyS3 [ 93.064101][ T8085] loop2: detected capacity change from 0 to 1024 [ 93.083709][ T8068] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.094274][ T8085] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 93.109102][ T8085] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.121358][ T8085] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.121358][ T8085] [ 93.131091][ T8085] EXT4-fs (loop2): Total free blocks count 0 [ 93.137082][ T8085] EXT4-fs (loop2): Free/Dirty block details [ 93.143043][ T8085] EXT4-fs (loop2): free_blocks=20480 [ 93.148339][ T8085] EXT4-fs (loop2): dirty_blocks=16 [ 93.153454][ T8085] EXT4-fs (loop2): Block reservation details [ 93.159462][ T8085] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 93.205505][ T3946] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232314][ T3996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.247540][ T3990] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.264752][ T3990] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.343509][ T8117] random: crng reseeded on system resumption [ 93.385358][ T8124] loop3: detected capacity change from 0 to 1024 [ 93.427532][ T8124] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 93.443870][ T8124] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.456105][ T8124] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.456105][ T8124] [ 93.465747][ T8124] EXT4-fs (loop3): Total free blocks count 0 [ 93.471919][ T8124] EXT4-fs (loop3): Free/Dirty block details [ 93.477914][ T8124] EXT4-fs (loop3): free_blocks=20480 [ 93.483281][ T8124] EXT4-fs (loop3): dirty_blocks=16 [ 93.488432][ T8124] EXT4-fs (loop3): Block reservation details [ 93.494511][ T8124] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 93.544423][ T8142] loop3: detected capacity change from 0 to 128 [ 93.548864][ T8145] macsec1: entered promiscuous mode [ 93.556097][ T8145] macvlan1: entered promiscuous mode [ 93.606605][ T8150] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.637596][ T8158] FAULT_INJECTION: forcing a failure. [ 93.637596][ T8158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.650795][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.2.1635 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 93.650816][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.650824][ T8158] Call Trace: [ 93.650828][ T8158] [ 93.650833][ T8158] __dump_stack+0x1d/0x30 [ 93.650848][ T8158] dump_stack_lvl+0xe8/0x140 [ 93.650859][ T8158] dump_stack+0x15/0x1b [ 93.650870][ T8158] should_fail_ex+0x265/0x280 [ 93.650884][ T8158] should_fail+0xb/0x20 [ 93.650895][ T8158] should_fail_usercopy+0x1a/0x20 [ 93.650909][ T8158] strncpy_from_user+0x25/0x230 [ 93.650927][ T8158] ? copy_from_kernel_nofault+0x60/0x200 [ 93.650943][ T8158] strncpy_from_user_nofault+0x68/0xf0 [ 93.650957][ T8158] bpf_probe_read_compat_str+0xb4/0x130 [ 93.650978][ T8158] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 93.650996][ T8158] bpf_trace_run2+0x107/0x1c0 [ 93.651011][ T8158] ? hugetlb_vm_op_close+0x4cd/0x510 [ 93.651030][ T8158] ? hugetlb_vm_op_close+0x4cd/0x510 [ 93.651047][ T8158] __traceiter_kfree+0x2e/0x50 [ 93.651059][ T8158] ? hugetlb_vm_op_close+0x4cd/0x510 [ 93.651078][ T8158] kfree+0x27b/0x320 [ 93.651093][ T8158] hugetlb_vm_op_close+0x4cd/0x510 [ 93.651112][ T8158] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 93.651132][ T8158] mmap_region+0x7cd/0x1630 [ 93.651150][ T8158] ? security_compute_sid+0x11da/0x1290 [ 93.651163][ T8158] ? __traceiter_kfree+0x2e/0x50 [ 93.651177][ T8158] ? security_compute_sid+0x11da/0x1290 [ 93.651189][ T8158] ? kfree+0x27b/0x320 [ 93.651210][ T8158] do_mmap+0x9b3/0xbe0 [ 93.651233][ T8158] vm_mmap_pgoff+0x17a/0x2e0 [ 93.651253][ T8158] ksys_mmap_pgoff+0x2d0/0x310 [ 93.651273][ T8158] x64_sys_call+0x14a3/0x2ff0 [ 93.651287][ T8158] do_syscall_64+0xd2/0x200 [ 93.651303][ T8158] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.651317][ T8158] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.651330][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.651342][ T8158] RIP: 0033:0x7ff9000debe9 [ 93.651351][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.651361][ T8158] RSP: 002b:00007ff8feb3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 93.651375][ T8158] RAX: ffffffffffffffda RBX: 00007ff900305fa0 RCX: 00007ff9000debe9 [ 93.651383][ T8158] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 93.651391][ T8158] RBP: 00007ff8feb3f090 R08: ffffffffffffffff R09: 00000000fffff000 [ 93.651399][ T8158] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 93.651407][ T8158] R13: 00007ff900306038 R14: 00007ff900305fa0 R15: 00007fff4721f478 [ 93.651418][ T8158] [ 93.932059][ T8166] loop2: detected capacity change from 0 to 1024 [ 93.953454][ T8150] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.968312][ T8166] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 93.989781][ T8166] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.002010][ T8166] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.002010][ T8166] [ 94.011693][ T8166] EXT4-fs (loop2): Total free blocks count 0 [ 94.017712][ T8166] EXT4-fs (loop2): Free/Dirty block details [ 94.023708][ T8166] EXT4-fs (loop2): free_blocks=20480 [ 94.029126][ T8166] EXT4-fs (loop2): dirty_blocks=16 [ 94.034267][ T8166] EXT4-fs (loop2): Block reservation details [ 94.040407][ T8166] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 94.067700][ T8176] netlink: 'syz.2.1641': attribute type 39 has an invalid length. [ 94.076446][ T8150] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.113523][ T8180] __nla_validate_parse: 8 callbacks suppressed [ 94.113537][ T8180] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1643'. [ 94.119766][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 94.119778][ T29] audit: type=1400 audit(1755466333.521:4329): avc: denied { ioctl } for pid=8181 comm="syz.0.1644" path="socket:[22818]" dev="sockfs" ino=22818 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.161471][ T8183] loop2: detected capacity change from 0 to 512 [ 94.183214][ T8183] EXT4-fs (loop2): 1 orphan inode deleted [ 94.191612][ T8150] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.201590][ T3990] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.211438][ T3990] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:50: Failed to release dquot type 1 [ 94.223132][ T8183] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.244620][ T29] audit: type=1326 audit(1755466333.651:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.269659][ T29] audit: type=1326 audit(1755466333.651:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.293176][ T29] audit: type=1326 audit(1755466333.651:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.316657][ T29] audit: type=1326 audit(1755466333.651:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.340320][ T29] audit: type=1326 audit(1755466333.651:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.363569][ T29] audit: type=1326 audit(1755466333.651:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.387206][ T29] audit: type=1326 audit(1755466333.681:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8192 comm="syz.4.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 94.410792][ T29] audit: type=1400 audit(1755466333.751:4337): avc: denied { ioctl } for pid=8195 comm="syz.4.1649" path="socket:[22848]" dev="sockfs" ino=22848 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.473741][ T3996] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.486299][ T3996] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.504656][ T3996] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.517064][ T3996] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.556612][ T8216] netlink: 'syz.4.1656': attribute type 10 has an invalid length. [ 94.583076][ T8217] loop1: detected capacity change from 0 to 1024 [ 94.600815][ T8217] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.987238][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1666'. [ 95.095669][ T8263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1672'. [ 95.399465][ T8306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1690'. [ 95.463587][ T8313] loop1: detected capacity change from 0 to 1024 [ 95.537838][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1701'. [ 95.561822][ T1037] IPVS: starting estimator thread 0... [ 95.588473][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1701'. [ 95.659653][ T8321] IPVS: using max 5184 ests per chain, 259200 per kthread [ 95.721517][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1699'. [ 95.952318][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1704'. [ 96.026473][ T8349] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1706'. [ 96.045670][ T8349] xt_policy: neither incoming nor outgoing policy selected [ 96.103366][ T8355] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1717'. [ 96.221845][ T8374] loop2: detected capacity change from 0 to 1024 [ 96.252855][ T8374] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 96.268489][ T8374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.280681][ T8374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.280681][ T8374] [ 96.290483][ T8374] EXT4-fs (loop2): Total free blocks count 0 [ 96.296580][ T8374] EXT4-fs (loop2): Free/Dirty block details [ 96.302574][ T8374] EXT4-fs (loop2): free_blocks=20480 [ 96.307885][ T8374] EXT4-fs (loop2): dirty_blocks=16 [ 96.313017][ T8374] EXT4-fs (loop2): Block reservation details [ 96.319048][ T8374] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 96.375417][ T8394] loop1: detected capacity change from 0 to 128 [ 96.381905][ T8394] vfat: Unknown parameter 'ÿÚ#êèãV»BbñÞ`ÏA.K[_ i4:ìJiaµÒoA#6F(†vþ~x—ß«ë :¶zXœ1ËY0Q:*¬mX¤±‘mé^æP'ܾB vL' [ 96.765987][ T8457] xt_policy: neither incoming nor outgoing policy selected [ 97.582212][ T8520] 9pnet_fd: Insufficient options for proto=fd [ 97.630353][ T8531] lo: entered allmulticast mode [ 97.649039][ T8530] lo: left allmulticast mode [ 97.680049][ T8533] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.694934][ T8533] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 97.753933][ T8553] loop2: detected capacity change from 0 to 1024 [ 97.781283][ T8553] EXT4-fs mount: 26 callbacks suppressed [ 97.781295][ T8553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.803143][ T8553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 97.818269][ T8553] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.830453][ T8553] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.830453][ T8553] [ 97.840085][ T8553] EXT4-fs (loop2): Total free blocks count 0 [ 97.846058][ T8553] EXT4-fs (loop2): Free/Dirty block details [ 97.851985][ T8553] EXT4-fs (loop2): free_blocks=20480 [ 97.857267][ T8553] EXT4-fs (loop2): dirty_blocks=16 [ 97.862391][ T8553] EXT4-fs (loop2): Block reservation details [ 97.868365][ T8553] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 97.884301][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.253724][ T8620] loop3: detected capacity change from 0 to 128 [ 98.493555][ T3979] syzkaller0: tun_net_xmit 76 [ 98.498369][ T3979] syzkaller0: tun_net_xmit 48 [ 98.506435][ T8640] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 98.512923][ T8640] syzkaller0: tun_net_xmit 1280 [ 98.517812][ T8640] syzkaller0: create flow: hash 2132501556 index 2 [ 98.525907][ T8639] syzkaller0: delete flow: hash 2132501556 index 2 [ 98.762585][ T8685] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.811401][ T8685] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.851007][ T8685] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.891010][ T8685] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.966808][ T3946] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.978306][ T3946] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998085][ T3946] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.022652][ T3946] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.095325][ T8742] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.144201][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 99.144218][ T29] audit: type=1326 audit(1755466338.551:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaba05ebe9 code=0x7ffc0000 [ 99.178787][ T8754] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.186626][ T29] audit: type=1326 audit(1755466338.551:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8737 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaba05ebe9 code=0x7ffc0000 [ 99.254478][ T8742] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.281936][ T8754] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.321749][ T8742] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.360516][ T8754] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.379108][ T29] audit: type=1400 audit(1755466338.781:4893): avc: denied { read } for pid=8773 comm="syz.1.1873" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.402694][ T29] audit: type=1400 audit(1755466338.781:4894): avc: denied { open } for pid=8773 comm="syz.1.1873" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.402769][ T8774] loop1: detected capacity change from 0 to 2048 [ 99.434004][ T8742] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.444781][ T8774] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 99.453312][ T8754] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.520431][ T3946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.528828][ T3946] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544620][ T3946] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.552937][ T3946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.568218][ T3946] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.579204][ T3996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.594615][ T3996] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.610619][ T3996] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.631360][ T8787] ªªªªªª: renamed from wg2 (while UP) [ 99.645504][ T29] audit: type=1400 audit(1755466339.051:4895): avc: denied { setopt } for pid=8788 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.669207][ T29] audit: type=1400 audit(1755466339.071:4896): avc: denied { write } for pid=8788 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.698927][ T29] audit: type=1400 audit(1755466339.101:4897): avc: denied { create } for pid=8792 comm="syz.2.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.719322][ T3397] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 99.726497][ T29] audit: type=1400 audit(1755466339.101:4898): avc: denied { connect } for pid=8792 comm="syz.2.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.760118][ T8795] loop2: detected capacity change from 0 to 1024 [ 99.767055][ T8795] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.776007][ T8795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.790618][ T8795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.805960][ T29] audit: type=1326 audit(1755466339.211:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 99.835971][ T29] audit: type=1326 audit(1755466339.241:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f664f5aebe9 code=0x7ffc0000 [ 99.937674][ T8802] loop2: detected capacity change from 0 to 512 [ 99.947762][ T8802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.960328][ T8802] EXT4-fs (loop2): 1 truncate cleaned up [ 99.966249][ T8802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.994552][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.038205][ T8807] loop2: detected capacity change from 0 to 1024 [ 100.050933][ T8807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.064806][ T8807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 100.080212][ T8807] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.092451][ T8807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.092451][ T8807] [ 100.102298][ T8807] EXT4-fs (loop2): Total free blocks count 0 [ 100.108293][ T8807] EXT4-fs (loop2): Free/Dirty block details [ 100.114226][ T8807] EXT4-fs (loop2): free_blocks=20480 [ 100.119545][ T8807] EXT4-fs (loop2): dirty_blocks=16 [ 100.124721][ T8807] EXT4-fs (loop2): Block reservation details [ 100.130726][ T8807] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 100.146883][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.196691][ T8815] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.230747][ T8815] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.291095][ T8815] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.371052][ T8815] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.892021][ T8880] loop1: detected capacity change from 0 to 1024 [ 100.910601][ T8880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.923702][ T8880] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 100.939020][ T8880] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.951227][ T8880] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.951227][ T8880] [ 100.960929][ T8880] EXT4-fs (loop1): Total free blocks count 0 [ 100.966891][ T8880] EXT4-fs (loop1): Free/Dirty block details [ 100.972790][ T8880] EXT4-fs (loop1): free_blocks=20480 [ 100.978048][ T8880] EXT4-fs (loop1): dirty_blocks=16 [ 100.983201][ T8880] EXT4-fs (loop1): Block reservation details [ 100.989183][ T8880] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 101.003104][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.196903][ T8905] __nla_validate_parse: 3 callbacks suppressed [ 101.196915][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1925'. [ 101.660388][ T8936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1937'. [ 101.943971][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.956292][ T8959] lo speed is unknown, defaulting to 1000 [ 101.962440][ T8959] lo speed is unknown, defaulting to 1000 [ 101.968538][ T8959] lo speed is unknown, defaulting to 1000 [ 101.990710][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.037509][ T8959] chnl_net:caif_netlink_parms(): no params data found [ 102.048853][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.077138][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.084280][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.091442][ T8959] bridge_slave_0: entered allmulticast mode [ 102.097696][ T8959] bridge_slave_0: entered promiscuous mode [ 102.104752][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.111917][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.119047][ T8959] bridge_slave_1: entered allmulticast mode [ 102.125982][ T8959] bridge_slave_1: entered promiscuous mode [ 102.142195][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.152920][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.164629][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.182949][ T8959] team0: Port device team_slave_0 added [ 102.189867][ T8959] team0: Port device team_slave_1 added [ 102.205041][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.212081][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.238045][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.249256][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.256195][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.282621][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.307138][ T8959] hsr_slave_0: entered promiscuous mode [ 102.313640][ T8959] hsr_slave_1: entered promiscuous mode [ 102.319362][ T8959] debugfs: 'hsr0' already exists in 'hsr' [ 102.325072][ T8959] Cannot create hsr debugfs directory [ 102.371858][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 102.645894][ T9016] loop1: detected capacity change from 0 to 512 [ 102.652611][ T9016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.663695][ T9016] EXT4-fs (loop1): 1 truncate cleaned up [ 102.669684][ T9016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.682284][ T9016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.721417][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1966'. [ 102.963958][ T60] bridge_slave_1: left allmulticast mode [ 102.969675][ T60] bridge_slave_1: left promiscuous mode [ 102.975308][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.984328][ T60] bridge_slave_0: left allmulticast mode [ 102.990009][ T60] bridge_slave_0: left promiscuous mode [ 102.995638][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.062763][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 103.081254][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.090676][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.099910][ T60] bond0 (unregistering): Released all slaves [ 103.108027][ T60] bond1 (unregistering): Released all slaves [ 103.122478][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 103.154069][ T60] hsr_slave_0: left promiscuous mode [ 103.161314][ T60] veth1_macvtap: left promiscuous mode [ 103.166762][ T60] veth0_macvtap: left promiscuous mode [ 103.172305][ T60] veth1_vlan: left promiscuous mode [ 103.177525][ T60] veth0_vlan: left promiscuous mode [ 103.179270][ T9053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9053 comm=syz.1.1978 [ 103.240842][ T60] team0 (unregistering): Port device team_slave_1 removed [ 103.250140][ T60] team0 (unregistering): Port device team_slave_0 removed [ 103.278437][ T3397] lo speed is unknown, defaulting to 1000 [ 103.284239][ T3397] infiniband syz0: ib_query_port failed (-19) [ 103.316607][ T9056] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1979'. [ 103.337006][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 103.346191][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1980'. [ 103.417443][ T8959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.427628][ T8959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.436985][ T8959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.450880][ T8959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.494404][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.511405][ T60] IPVS: stop unused estimator thread 0... [ 103.520455][ T8959] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.530011][ T9077] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 103.540399][ T3946] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.547459][ T3946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.557759][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.564802][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.582006][ T3979] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.604637][ T3979] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.618955][ T8959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.629443][ T8959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.647630][ T3979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.658876][ T3979] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.661273][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 103.696068][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.752765][ T8959] veth0_vlan: entered promiscuous mode [ 103.777258][ T8959] veth1_vlan: entered promiscuous mode [ 103.795097][ T8959] veth0_macvtap: entered promiscuous mode [ 103.802881][ T8959] veth1_macvtap: entered promiscuous mode [ 103.815011][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.828933][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.845045][ T3988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.855061][ T3988] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.881581][ T3988] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.898488][ T3988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.940543][ T9127] loop1: detected capacity change from 0 to 2048 [ 103.947443][ T9127] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 103.974219][ T9129] netlink: 'syz.2.2002': attribute type 32 has an invalid length. [ 104.236320][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 104.236332][ T29] audit: type=1326 audit(1755466343.641:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.266348][ T29] audit: type=1326 audit(1755466343.641:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.290070][ T29] audit: type=1326 audit(1755466343.651:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.313475][ T29] audit: type=1326 audit(1755466343.651:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.336937][ T29] audit: type=1326 audit(1755466343.651:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.360533][ T29] audit: type=1326 audit(1755466343.651:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.383941][ T29] audit: type=1326 audit(1755466343.651:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.407344][ T29] audit: type=1326 audit(1755466343.651:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.430790][ T29] audit: type=1326 audit(1755466343.651:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.454331][ T29] audit: type=1326 audit(1755466343.651:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9165 comm="syz.4.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 104.599558][ T9184] dummy0: entered promiscuous mode [ 104.605465][ T9184] dummy0: left promiscuous mode [ 104.958102][ T9209] loop1: detected capacity change from 0 to 1024 [ 104.972199][ T9209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.000920][ T9209] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.2034: Allocating blocks 449-513 which overlap fs metadata [ 105.016091][ T9208] EXT4-fs (loop1): pa ffff888107634460: logic 48, phys. 177, len 21 [ 105.024149][ T9208] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 105.044349][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.277591][ T9240] loop1: detected capacity change from 0 to 256 [ 106.152313][ T9309] FAULT_INJECTION: forcing a failure. [ 106.152313][ T9309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.165539][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.1.2072 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 106.165558][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.165566][ T9309] Call Trace: [ 106.165570][ T9309] [ 106.165578][ T9309] __dump_stack+0x1d/0x30 [ 106.165665][ T9309] dump_stack_lvl+0xe8/0x140 [ 106.165676][ T9309] dump_stack+0x15/0x1b [ 106.165687][ T9309] should_fail_ex+0x265/0x280 [ 106.165701][ T9309] should_fail+0xb/0x20 [ 106.165712][ T9309] should_fail_usercopy+0x1a/0x20 [ 106.165805][ T9309] _copy_from_user+0x1c/0xb0 [ 106.165823][ T9309] __sys_sendto+0x19e/0x330 [ 106.165900][ T9309] __x64_sys_sendto+0x76/0x90 [ 106.165913][ T9309] x64_sys_call+0x2d05/0x2ff0 [ 106.165952][ T9309] do_syscall_64+0xd2/0x200 [ 106.165968][ T9309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.165982][ T9309] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.165996][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.166008][ T9309] RIP: 0033:0x7f664f5aebe9 [ 106.166058][ T9309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.166071][ T9309] RSP: 002b:00007f664e00f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.166085][ T9309] RAX: ffffffffffffffda RBX: 00007f664f7d5fa0 RCX: 00007f664f5aebe9 [ 106.166090][ T9309] RDX: 0000000000010608 RSI: 0000200000000180 RDI: 0000000000000007 [ 106.166095][ T9309] RBP: 00007f664e00f090 R08: 0000200000000140 R09: 0000000000000014 [ 106.166100][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.166150][ T9309] R13: 00007f664f7d6038 R14: 00007f664f7d5fa0 R15: 00007ffe6f6a10f8 [ 106.166157][ T9309] [ 106.413254][ T9323] __nla_validate_parse: 7 callbacks suppressed [ 106.413265][ T9323] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2078'. [ 106.448272][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'. [ 106.822438][ T9352] FAULT_INJECTION: forcing a failure. [ 106.822438][ T9352] name failslab, interval 1, probability 0, space 0, times 0 [ 106.835203][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.3.2089 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 106.835264][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.835269][ T9352] Call Trace: [ 106.835272][ T9352] [ 106.835275][ T9352] __dump_stack+0x1d/0x30 [ 106.835286][ T9352] dump_stack_lvl+0xe8/0x140 [ 106.835294][ T9352] dump_stack+0x15/0x1b [ 106.835328][ T9352] should_fail_ex+0x265/0x280 [ 106.835337][ T9352] should_failslab+0x8c/0xb0 [ 106.835347][ T9352] __kmalloc_noprof+0xa5/0x3e0 [ 106.835383][ T9352] ? tcf_idr_create+0x41/0x4a0 [ 106.835393][ T9352] tcf_idr_create+0x41/0x4a0 [ 106.835403][ T9352] tcf_bpf_init+0x27e/0x610 [ 106.835559][ T9352] tcf_action_init_1+0x367/0x4a0 [ 106.835572][ T9352] tcf_action_init+0x267/0x6d0 [ 106.835590][ T9352] tc_ctl_action+0x291/0x830 [ 106.835675][ T9352] ? __pfx_tc_ctl_action+0x10/0x10 [ 106.835684][ T9352] rtnetlink_rcv_msg+0x657/0x6d0 [ 106.835697][ T9352] netlink_rcv_skb+0x123/0x220 [ 106.835771][ T9352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.835784][ T9352] rtnetlink_rcv+0x1c/0x30 [ 106.835794][ T9352] netlink_unicast+0x5bd/0x690 [ 106.835871][ T9352] netlink_sendmsg+0x58b/0x6b0 [ 106.835880][ T9352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.835888][ T9352] __sock_sendmsg+0x142/0x180 [ 106.835961][ T9352] ____sys_sendmsg+0x31e/0x4e0 [ 106.836046][ T9352] ___sys_sendmsg+0x17b/0x1d0 [ 106.836117][ T9352] __x64_sys_sendmsg+0xd4/0x160 [ 106.836127][ T9352] x64_sys_call+0x191e/0x2ff0 [ 106.836135][ T9352] do_syscall_64+0xd2/0x200 [ 106.836185][ T9352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.836194][ T9352] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.836204][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.836213][ T9352] RIP: 0033:0x7fcaba05ebe9 [ 106.836220][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.836300][ T9352] RSP: 002b:00007fcab8abf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.836346][ T9352] RAX: ffffffffffffffda RBX: 00007fcaba285fa0 RCX: 00007fcaba05ebe9 [ 106.836352][ T9352] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000005 [ 106.836357][ T9352] RBP: 00007fcab8abf090 R08: 0000000000000000 R09: 0000000000000000 [ 106.836361][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.836366][ T9352] R13: 00007fcaba286038 R14: 00007fcaba285fa0 R15: 00007fff71972838 [ 106.836373][ T9352] [ 107.100368][ T9355] FAULT_INJECTION: forcing a failure. [ 107.100368][ T9355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.113553][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.1.2091 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 107.113573][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.113626][ T9355] Call Trace: [ 107.113630][ T9355] [ 107.113634][ T9355] __dump_stack+0x1d/0x30 [ 107.113649][ T9355] dump_stack_lvl+0xe8/0x140 [ 107.113660][ T9355] dump_stack+0x15/0x1b [ 107.113670][ T9355] should_fail_ex+0x265/0x280 [ 107.113685][ T9355] should_fail+0xb/0x20 [ 107.113697][ T9355] should_fail_usercopy+0x1a/0x20 [ 107.113747][ T9355] _copy_from_user+0x1c/0xb0 [ 107.113827][ T9355] __sys_bpf+0x178/0x7b0 [ 107.113848][ T9355] __x64_sys_bpf+0x41/0x50 [ 107.113865][ T9355] x64_sys_call+0x2aea/0x2ff0 [ 107.113879][ T9355] do_syscall_64+0xd2/0x200 [ 107.113944][ T9355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.113961][ T9355] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.113977][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.113989][ T9355] RIP: 0033:0x7f664f5aebe9 [ 107.113999][ T9355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.114081][ T9355] RSP: 002b:00007f664e00f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.114095][ T9355] RAX: ffffffffffffffda RBX: 00007f664f7d5fa0 RCX: 00007f664f5aebe9 [ 107.114148][ T9355] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a [ 107.114157][ T9355] RBP: 00007f664e00f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.114165][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.114231][ T9355] R13: 00007f664f7d6038 R14: 00007f664f7d5fa0 R15: 00007ffe6f6a10f8 [ 107.114241][ T9355] [ 107.328533][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 107.493525][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 107.514499][ T9394] IPVS: Error joining to the multicast group [ 107.549143][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'. [ 107.571153][ T9391] FAULT_INJECTION: forcing a failure. [ 107.571153][ T9391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.584234][ T9391] CPU: 0 UID: 0 PID: 9391 Comm: syz.0.2102 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 107.584255][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.584263][ T9391] Call Trace: [ 107.584268][ T9391] [ 107.584273][ T9391] __dump_stack+0x1d/0x30 [ 107.584297][ T9391] dump_stack_lvl+0xe8/0x140 [ 107.584308][ T9391] dump_stack+0x15/0x1b [ 107.584317][ T9391] should_fail_ex+0x265/0x280 [ 107.584329][ T9391] should_fail+0xb/0x20 [ 107.584339][ T9391] should_fail_usercopy+0x1a/0x20 [ 107.584364][ T9391] _copy_from_user+0x1c/0xb0 [ 107.584381][ T9391] ___sys_sendmsg+0xc1/0x1d0 [ 107.584405][ T9391] __x64_sys_sendmsg+0xd4/0x160 [ 107.584488][ T9391] x64_sys_call+0x191e/0x2ff0 [ 107.584559][ T9391] do_syscall_64+0xd2/0x200 [ 107.584576][ T9391] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.584590][ T9391] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.584606][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.584649][ T9391] RIP: 0033:0x7fe6b1f1ebe9 [ 107.584658][ T9391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.584670][ T9391] RSP: 002b:00007fe6b0987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.584685][ T9391] RAX: ffffffffffffffda RBX: 00007fe6b2145fa0 RCX: 00007fe6b1f1ebe9 [ 107.584746][ T9391] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000006 [ 107.584753][ T9391] RBP: 00007fe6b0987090 R08: 0000000000000000 R09: 0000000000000000 [ 107.584760][ T9391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.584767][ T9391] R13: 00007fe6b2146038 R14: 00007fe6b2145fa0 R15: 00007ffecec30048 [ 107.584777][ T9391] [ 107.766671][ T9401] loop1: detected capacity change from 0 to 1024 [ 107.837927][ T9412] loop0: detected capacity change from 0 to 2048 [ 107.846318][ T9412] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 107.857457][ T9401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.862409][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2113'. [ 107.909385][ T9401] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 107.930367][ T9401] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.942686][ T9401] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.942686][ T9401] [ 107.952453][ T9401] EXT4-fs (loop1): Total free blocks count 0 [ 107.958446][ T9401] EXT4-fs (loop1): Free/Dirty block details [ 107.964346][ T9401] EXT4-fs (loop1): free_blocks=20480 [ 107.969706][ T9401] EXT4-fs (loop1): dirty_blocks=16 [ 107.974934][ T9401] EXT4-fs (loop1): Block reservation details [ 107.981025][ T9401] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 108.001443][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.133765][ T9441] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2121'. [ 108.191204][ T9463] loop3: detected capacity change from 0 to 4096 [ 108.211437][ T9463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.218065][ T9463] EXT4-fs: Ignoring removed nobh option [ 108.229844][ T9463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.244331][ T9463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.284738][ T9478] loop2: detected capacity change from 0 to 512 [ 108.301523][ T9478] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.316849][ T9478] EXT4-fs (loop2): mount failed [ 108.431530][ T9484] syzkaller0: entered promiscuous mode [ 108.437017][ T9484] syzkaller0: entered allmulticast mode [ 108.518426][ T9499] loop2: detected capacity change from 0 to 128 [ 108.529017][ T9499] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 108.536880][ T9499] FAT-fs (loop2): Filesystem has been set read-only [ 108.545720][ T9499] bio_check_eod: 98 callbacks suppressed [ 108.545730][ T9499] syz.2.2143: attempt to access beyond end of device [ 108.545730][ T9499] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 108.545758][ T9499] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 108.545772][ T9499] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 108.545916][ T9499] syz.2.2143: attempt to access beyond end of device [ 108.545916][ T9499] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.546302][ T9499] syz.2.2143: attempt to access beyond end of device [ 108.546302][ T9499] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 108.743741][ T9516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2151'. [ 108.847798][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 108.992635][ T9540] loop2: detected capacity change from 0 to 512 [ 109.013062][ T9540] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2154: bad orphan inode 11862016 [ 109.024770][ T9540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.038300][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.039816][ T9540] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.185170][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2169'. [ 109.362594][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 109.362604][ T29] audit: type=1326 audit(1755466348.771:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.399342][ T29] audit: type=1326 audit(1755466348.801:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.424140][ T29] audit: type=1326 audit(1755466348.811:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.447694][ T29] audit: type=1326 audit(1755466348.811:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9583 comm="syz.4.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.515978][ T9588] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 109.547708][ T29] audit: type=1326 audit(1755466348.951:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.571759][ T29] audit: type=1326 audit(1755466348.951:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.595296][ T29] audit: type=1326 audit(1755466348.951:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.618632][ T29] audit: type=1326 audit(1755466348.951:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.642158][ T29] audit: type=1326 audit(1755466348.951:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.665525][ T29] audit: type=1326 audit(1755466348.951:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e26debe9 code=0x7ffc0000 [ 109.701150][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.733176][ T9599] netlink: 'syz.3.2183': attribute type 7 has an invalid length. [ 109.852383][ T9635] loop2: detected capacity change from 0 to 2048 [ 109.860224][ T9635] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 109.868869][ T9639] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9639 comm=syz.4.2198 [ 109.881330][ T9639] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9639 comm=syz.4.2198 [ 109.928609][ T9637] delete_channel: no stack [ 110.216407][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.223873][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.231668][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.239034][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.661724][ T9740] lo speed is unknown, defaulting to 1000 [ 110.667480][ T9740] lo speed is unknown, defaulting to 1000 [ 110.673539][ T9740] lo speed is unknown, defaulting to 1000 [ 110.680208][ T9740] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 110.690953][ T9740] lo speed is unknown, defaulting to 1000 [ 110.697225][ T9740] lo speed is unknown, defaulting to 1000 [ 110.703459][ T9740] lo speed is unknown, defaulting to 1000 [ 110.710211][ T9745] netlink: 'syz.3.2235': attribute type 6 has an invalid length. [ 110.722763][ T9740] lo speed is unknown, defaulting to 1000 [ 110.728864][ T9740] lo speed is unknown, defaulting to 1000 [ 110.768213][ T9753] loop3: detected capacity change from 0 to 1024 [ 110.794645][ T9753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.818716][ T9753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 110.835943][ T9753] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.848236][ T9753] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.848236][ T9753] [ 110.857947][ T9753] EXT4-fs (loop3): Total free blocks count 0 [ 110.864062][ T9753] EXT4-fs (loop3): Free/Dirty block details [ 110.870039][ T9753] EXT4-fs (loop3): free_blocks=20480 [ 110.875305][ T9753] EXT4-fs (loop3): dirty_blocks=16 [ 110.880482][ T9753] EXT4-fs (loop3): Block reservation details [ 110.886452][ T9753] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 110.904789][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.025245][ T9787] netlink: 'syz.4.2249': attribute type 4 has an invalid length. [ 111.193535][ T9829] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 111.477991][ T9872] netlink: 'syz.3.2284': attribute type 3 has an invalid length. [ 111.495210][ T9876] loop3: detected capacity change from 0 to 128 [ 111.810571][ T9889] __nla_validate_parse: 11 callbacks suppressed [ 111.810584][ T9889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2292'. [ 111.933056][ T9895] loop3: detected capacity change from 0 to 1024 [ 111.951079][ T9895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.963271][ T9895] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.975886][ T9895] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2295'. [ 111.985020][ T9895] C: renamed from team_slave_0 (while UP) [ 112.017957][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.062915][ T9909] loop0: detected capacity change from 0 to 1024 [ 112.080438][ T9909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.094392][ T9909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 112.109312][ T9909] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.121546][ T9909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.121546][ T9909] [ 112.131220][ T9909] EXT4-fs (loop0): Total free blocks count 0 [ 112.137218][ T9909] EXT4-fs (loop0): Free/Dirty block details [ 112.143122][ T9909] EXT4-fs (loop0): free_blocks=20480 [ 112.148496][ T9909] EXT4-fs (loop0): dirty_blocks=16 [ 112.153656][ T9909] EXT4-fs (loop0): Block reservation details [ 112.159656][ T9909] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 112.175616][ T8959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.425310][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 112.527258][ T9977] team0 (unregistering): Port device team_slave_0 removed [ 112.535027][ T9977] team0 (unregistering): Port device team_slave_1 removed [ 112.580484][ T9992] tipc: New replicast peer: 255.255.255.83 [ 112.586336][ T9992] tipc: Enabled bearer , priority 10 [ 112.610143][ T9997] loop3: detected capacity change from 0 to 2048 [ 112.617237][ T9997] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 112.667560][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 112.734063][T10019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2343'. [ 112.859759][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 112.888329][T10044] loop3: detected capacity change from 0 to 512 [ 112.954789][T10044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.989874][ T3946] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.998457][ T3946] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.008555][ T3946] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.017127][ T3946] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.033895][T10044] loop3: detected capacity change from 0 to 1024 [ 113.043080][T10044] EXT4-fs: Ignoring removed bh option [ 113.048478][T10044] ext4: Bad value for 'init_itable' [ 113.079811][T10063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'. [ 113.108427][T10075] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2366'. [ 113.117613][T10075] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2366'. [ 113.153173][T10082] SELinux: policydb version 133 does not match my version range 15-35 [ 113.161751][T10082] SELinux: failed to load policy [ 113.164154][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2371'. [ 113.193371][T10085] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.204801][T10075] delete_channel: no stack [ 113.270527][T10085] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.333639][T10085] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.366647][T10112] SELinux: policydb version 133 does not match my version range 15-35 [ 113.387709][T10112] SELinux: failed to load policy [ 113.442667][T10085] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.481425][T10136] loop0: detected capacity change from 0 to 1024 [ 113.497963][ T3946] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.514551][T10136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.528091][ T3946] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.536441][ T3946] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.549860][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.561430][ T8959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.845094][T10174] SELinux: failed to load policy [ 113.924060][T10196] SELinux: Context Ü is not valid (left unmapped). [ 114.143912][T10210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.159998][ T3396] lo speed is unknown, defaulting to 1000 [ 114.216762][T10220] netlink: 'syz.2.2423': attribute type 3 has an invalid length. [ 114.347081][T10234] delete_channel: no stack [ 114.528153][T10244] loop2: detected capacity change from 0 to 512 [ 114.534948][T10244] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.546060][T10244] EXT4-fs (loop2): 1 truncate cleaned up [ 114.551983][T10244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.869586][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 114.869596][ T29] audit: type=1400 audit(1755466354.281:6619): avc: denied { connect } for pid=10255 comm="syz.0.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.913635][T10264] atomic_op ffff888103867128 conn xmit_atomic 0000000000000000 [ 114.922795][ T29] audit: type=1400 audit(1755466354.331:6620): avc: denied { mount } for pid=10263 comm="syz.4.2441" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.945521][ T29] audit: type=1400 audit(1755466354.331:6621): avc: denied { connect } for pid=10263 comm="syz.4.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.958644][T10266] delete_channel: no stack [ 114.965521][ T29] audit: type=1400 audit(1755466354.331:6622): avc: denied { ioctl } for pid=10263 comm="syz.4.2441" path="socket:[31912]" dev="sockfs" ino=31912 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.049530][T10278] ÿ: renamed from bond_slave_0 [ 115.098641][ T29] audit: type=1400 audit(1755466354.501:6623): avc: denied { read write } for pid=10273 comm="syz.0.2445" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.123002][ T29] audit: type=1400 audit(1755466354.501:6624): avc: denied { open } for pid=10273 comm="syz.0.2445" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.146523][ T29] audit: type=1326 audit(1755466354.511:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1f1ebe9 code=0x7ffc0000 [ 115.170109][ T29] audit: type=1326 audit(1755466354.511:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1f1ebe9 code=0x7ffc0000 [ 115.193641][ T29] audit: type=1326 audit(1755466354.511:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b1f1ebe9 code=0x7ffc0000 [ 115.217269][ T29] audit: type=1326 audit(1755466354.511:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.0.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1f1ebe9 code=0x7ffc0000 [ 115.285464][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.381544][T10301] netlink: 'syz.4.2454': attribute type 10 has an invalid length. [ 115.391783][T10301] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.445252][T10306] delete_channel: no stack [ 115.524335][T10322] loop0: detected capacity change from 0 to 512 [ 115.533629][T10310] lo speed is unknown, defaulting to 1000 [ 115.541195][T10310] lo speed is unknown, defaulting to 1000 [ 115.579754][T10310] lo speed is unknown, defaulting to 1000 [ 115.629734][T10310] chnl_net:caif_netlink_parms(): no params data found [ 115.658371][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.665485][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.672734][T10310] bridge_slave_0: entered allmulticast mode [ 115.679247][T10310] bridge_slave_0: entered promiscuous mode [ 115.687933][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.695104][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.702225][T10310] bridge_slave_1: entered allmulticast mode [ 115.708739][T10310] bridge_slave_1: entered promiscuous mode [ 115.717440][T10349] macvtap1: entered allmulticast mode [ 115.722878][T10349] bridge0: entered allmulticast mode [ 115.729576][T10349] bridge0: port 1(macvtap1) entered blocking state [ 115.736161][T10349] bridge0: port 1(macvtap1) entered disabled state [ 115.744403][T10349] bridge0: left allmulticast mode [ 115.766334][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.777160][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.800093][T10310] team0: Port device team_slave_0 added [ 115.806411][T10310] team0: Port device team_slave_1 added [ 115.836640][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.843639][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.869547][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.880700][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.887632][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.913587][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.938490][T10310] hsr_slave_0: entered promiscuous mode [ 115.944730][T10310] hsr_slave_1: entered promiscuous mode [ 115.951306][T10310] debugfs: 'hsr0' already exists in 'hsr' [ 115.957076][T10310] Cannot create hsr debugfs directory [ 116.010479][ T3988] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 116.021188][ T3988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.033121][T10380] FAULT_INJECTION: forcing a failure. [ 116.033121][T10380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.046187][T10380] CPU: 0 UID: 0 PID: 10380 Comm: syz.0.2478 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 116.046208][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.046237][T10380] Call Trace: [ 116.046240][T10380] [ 116.046312][T10380] __dump_stack+0x1d/0x30 [ 116.046327][T10380] dump_stack_lvl+0xe8/0x140 [ 116.046339][T10380] dump_stack+0x15/0x1b [ 116.046350][T10380] should_fail_ex+0x265/0x280 [ 116.046396][T10380] should_fail+0xb/0x20 [ 116.046466][T10380] should_fail_usercopy+0x1a/0x20 [ 116.046502][T10380] _copy_to_user+0x20/0xa0 [ 116.046539][T10380] simple_read_from_buffer+0xb5/0x130 [ 116.046621][T10380] proc_fail_nth_read+0x10e/0x150 [ 116.046632][T10380] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.046712][T10380] vfs_read+0x1a5/0x770 [ 116.046721][T10380] ? selinux_socket_listen+0x175/0x1b0 [ 116.046732][T10380] ? pidfs_register_pid+0x53/0x180 [ 116.046763][T10380] ksys_read+0xda/0x1a0 [ 116.046790][T10380] __x64_sys_read+0x40/0x50 [ 116.046798][T10380] x64_sys_call+0x27bc/0x2ff0 [ 116.046806][T10380] do_syscall_64+0xd2/0x200 [ 116.046881][T10380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.046891][T10380] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.046900][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.046987][T10380] RIP: 0033:0x7fe6b1f1d5fc [ 116.046995][T10380] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.047002][T10380] RSP: 002b:00007fe6b0987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.047011][T10380] RAX: ffffffffffffffda RBX: 00007fe6b2145fa0 RCX: 00007fe6b1f1d5fc [ 116.047016][T10380] RDX: 000000000000000f RSI: 00007fe6b09870a0 RDI: 0000000000000005 [ 116.047065][T10380] RBP: 00007fe6b0987090 R08: 0000000000000000 R09: 0000000000000000 [ 116.047069][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.047074][T10380] R13: 00007fe6b2146038 R14: 00007fe6b2145fa0 R15: 00007ffecec30048 [ 116.047085][T10380] [ 116.047236][ T3988] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 116.259016][ T3988] bond0 (unregistering): Released all slaves [ 116.304473][T10386] loop2: detected capacity change from 0 to 2048 [ 116.315191][ T3988] tipc: Disabling bearer [ 116.320227][ T3988] tipc: Disabling bearer [ 116.325309][ T3988] tipc: Left network mode [ 116.330406][T10386] EXT4-fs (loop2): failed to initialize system zone (-117) [ 116.337736][T10386] EXT4-fs (loop2): mount failed [ 116.350435][T10386] loop2: detected capacity change from 0 to 1024 [ 116.357924][ T3988] hsr_slave_0: left promiscuous mode [ 116.363826][ T3988] hsr_slave_1: left promiscuous mode [ 116.369647][ T3988] macvlan1: left promiscuous mode [ 116.434304][T10399] netlink: 'syz.2.2484': attribute type 29 has an invalid length. [ 116.442272][T10399] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 116.450455][ T36] lo speed is unknown, defaulting to 1000 [ 116.456198][ T36] infiniband syz0: ib_query_port failed (-19) [ 116.470652][T10404] loop2: detected capacity change from 0 to 512 [ 116.480536][T10404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.493117][T10404] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.559471][T10404] loop2: detected capacity change from 512 to 64 [ 116.576841][ T3309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 116.586350][ T3309] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 116.613392][ T4041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.753027][T10310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.761268][T10310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.769517][T10310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.778055][T10310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.808040][T10310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.818317][T10310] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.826872][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.834005][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.844717][ T3916] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.851778][ T3916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.875307][T10310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.885833][T10310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.918187][T10444] SELinux: policydb version 133 does not match my version range 15-35 [ 116.927393][T10444] SELinux: failed to load policy [ 116.942656][T10310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.994635][T10438] lo speed is unknown, defaulting to 1000 [ 117.002111][T10438] lo speed is unknown, defaulting to 1000 [ 117.051767][T10310] veth0_vlan: entered promiscuous mode [ 117.067493][T10310] veth1_vlan: entered promiscuous mode [ 117.088802][T10438] chnl_net:caif_netlink_parms(): no params data found [ 117.102147][T10310] veth0_macvtap: entered promiscuous mode [ 117.116584][T10310] veth1_macvtap: entered promiscuous mode [ 117.128529][T10310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.142012][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.157233][ T3916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.174957][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.182141][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.185984][T10485] __nla_validate_parse: 23 callbacks suppressed [ 117.186065][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2505'. [ 117.189452][T10438] bridge_slave_0: entered allmulticast mode [ 117.210908][T10438] bridge_slave_0: entered promiscuous mode [ 117.217400][ T3916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.226147][ T3916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.235208][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.242333][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.249569][T10438] bridge_slave_1: entered allmulticast mode [ 117.256094][T10438] bridge_slave_1: entered promiscuous mode [ 117.270154][ T3916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.279735][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.291275][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.309726][T10438] team0: Port device team_slave_0 added [ 117.317140][T10438] team0: Port device team_slave_1 added [ 117.340537][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.347485][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.373398][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.388072][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.395045][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.421045][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.452745][ T3946] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.480107][T10498] FAULT_INJECTION: forcing a failure. [ 117.480107][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 117.492769][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.4.2510 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 117.492790][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.492798][T10498] Call Trace: [ 117.492804][T10498] [ 117.492859][T10498] __dump_stack+0x1d/0x30 [ 117.492876][T10498] dump_stack_lvl+0xe8/0x140 [ 117.492904][T10498] dump_stack+0x15/0x1b [ 117.492915][T10498] should_fail_ex+0x265/0x280 [ 117.492928][T10498] should_failslab+0x8c/0xb0 [ 117.492943][T10498] kmem_cache_alloc_node_noprof+0x57/0x320 [ 117.493022][T10498] ? __alloc_skb+0x101/0x320 [ 117.493040][T10498] __alloc_skb+0x101/0x320 [ 117.493056][T10498] pfkey_sendmsg+0xd7/0x900 [ 117.493114][T10498] ? avc_has_perm+0xf7/0x180 [ 117.493171][T10498] ? selinux_socket_sendmsg+0x175/0x1b0 [ 117.493219][T10498] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 117.493232][T10498] __sock_sendmsg+0x142/0x180 [ 117.493247][T10498] ____sys_sendmsg+0x31e/0x4e0 [ 117.493260][T10498] ___sys_sendmsg+0x17b/0x1d0 [ 117.493277][T10498] __x64_sys_sendmsg+0xd4/0x160 [ 117.493326][T10498] x64_sys_call+0x191e/0x2ff0 [ 117.493338][T10498] do_syscall_64+0xd2/0x200 [ 117.493352][T10498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.493366][T10498] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.493478][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.493490][T10498] RIP: 0033:0x7ff6aed8ebe9 [ 117.493499][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.493514][T10498] RSP: 002b:00007ff6ad7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.493585][T10498] RAX: ffffffffffffffda RBX: 00007ff6aefb5fa0 RCX: 00007ff6aed8ebe9 [ 117.493593][T10498] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 117.493642][T10498] RBP: 00007ff6ad7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.493657][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.493706][T10498] R13: 00007ff6aefb6038 R14: 00007ff6aefb5fa0 R15: 00007ffd7a09eac8 [ 117.493716][T10498] [ 117.721886][T10438] hsr_slave_0: entered promiscuous mode [ 117.731792][T10438] hsr_slave_1: entered promiscuous mode [ 117.737641][T10438] debugfs: 'hsr0' already exists in 'hsr' [ 117.743482][T10438] Cannot create hsr debugfs directory [ 117.750224][ T3946] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.797845][T10514] loop0: detected capacity change from 0 to 4096 [ 117.810377][T10514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.826545][T10514] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.2515: corrupted inode contents [ 117.839433][ T3946] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.839885][T10514] EXT4-fs (loop0): Remounting filesystem read-only [ 117.870543][T10438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.880584][T10438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.889216][T10438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.898440][T10438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.909556][T10520] netlink: 'syz.3.2517': attribute type 4 has an invalid length. [ 117.926537][ T8959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.937931][ T60] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.938325][ T3946] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.984337][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.994071][T10533] netlink: 'syz.4.2521': attribute type 3 has an invalid length. [ 118.003469][T10533] netlink: 'syz.4.2521': attribute type 3 has an invalid length. [ 118.016229][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.045920][T10540] SELinux: policydb version 133 does not match my version range 15-35 [ 118.056295][ T3946] bridge_slave_1: left allmulticast mode [ 118.062042][ T3946] bridge_slave_1: left promiscuous mode [ 118.067793][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.076341][T10540] SELinux: failed to load policy [ 118.164049][ T3946] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 118.214451][ T3946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.232801][ T3946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.246226][ T3946] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 118.255461][ T3946] bond0 (unregistering): Released all slaves [ 118.264527][ T3946] bond1 (unregistering): (slave veth3): Releasing active interface [ 118.275058][ T3946] bond1 (unregistering): Released all slaves [ 118.283414][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.290468][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.308463][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.315607][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.351355][T10438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.361865][T10438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.416503][T10582] loop1: detected capacity change from 0 to 128 [ 118.434417][T10582] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 118.447132][T10582] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.502662][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.510266][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.523049][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.530522][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.539511][ T3946] veth1_macvtap: left promiscuous mode [ 118.544991][ T3946] veth0_macvtap: left promiscuous mode [ 118.551391][ T3946] veth1_vlan: left promiscuous mode [ 118.555943][T10609] FAULT_INJECTION: forcing a failure. [ 118.555943][T10609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.556619][ T3946] veth0_vlan: left promiscuous mode [ 118.569698][T10609] CPU: 1 UID: 0 PID: 10609 Comm: syz.4.2550 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 118.569716][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.569761][T10609] Call Trace: [ 118.569765][T10609] [ 118.569770][T10609] __dump_stack+0x1d/0x30 [ 118.569784][T10609] dump_stack_lvl+0xe8/0x140 [ 118.569795][T10609] dump_stack+0x15/0x1b [ 118.569805][T10609] should_fail_ex+0x265/0x280 [ 118.569818][T10609] should_fail+0xb/0x20 [ 118.569833][T10609] should_fail_usercopy+0x1a/0x20 [ 118.569845][T10609] _copy_to_user+0x20/0xa0 [ 118.569913][T10609] simple_read_from_buffer+0xb5/0x130 [ 118.569927][T10609] proc_fail_nth_read+0x10e/0x150 [ 118.569991][T10609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.570029][T10609] vfs_read+0x1a5/0x770 [ 118.570042][T10609] ? __rcu_read_unlock+0x4f/0x70 [ 118.570099][T10609] ? __fget_files+0x184/0x1c0 [ 118.570115][T10609] ksys_read+0xda/0x1a0 [ 118.570128][T10609] __x64_sys_read+0x40/0x50 [ 118.570144][T10609] x64_sys_call+0x27bc/0x2ff0 [ 118.570215][T10609] do_syscall_64+0xd2/0x200 [ 118.570231][T10609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 118.570246][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.570283][T10609] RIP: 0033:0x7ff6aed8d5fc [ 118.570292][T10609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.570302][T10609] RSP: 002b:00007ff6ad7f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.570393][T10609] RAX: ffffffffffffffda RBX: 00007ff6aefb5fa0 RCX: 00007ff6aed8d5fc [ 118.570401][T10609] RDX: 000000000000000f RSI: 00007ff6ad7f70a0 RDI: 0000000000000004 [ 118.570409][T10609] RBP: 00007ff6ad7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.570416][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.570423][T10609] R13: 00007ff6aefb6038 R14: 00007ff6aefb5fa0 R15: 00007ffd7a09eac8 [ 118.570434][T10609] [ 118.608285][T10612] loop0: detected capacity change from 0 to 512 [ 118.806952][T10612] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2548: invalid block [ 118.827911][T10612] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2548: invalid indirect mapped block 4294967295 (level 1) [ 118.844218][T10612] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2548: invalid indirect mapped block 4294967295 (level 1) [ 118.861699][T10612] EXT4-fs (loop0): 2 truncates cleaned up [ 118.873080][ T3946] team0 (unregistering): Port device team_slave_1 removed [ 118.878775][T10612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.892957][ T3946] team0 (unregistering): Port device team_slave_0 removed [ 118.928188][ T3996] smc: removing ib device sz1 [ 118.956581][T10590] lo speed is unknown, defaulting to 1000 [ 118.973743][ T36] lo speed is unknown, defaulting to 1000 [ 118.973827][T10612] smc: net device bond0 applied user defined pnetid SYZ0 [ 118.979698][ T36] sz1: Port: 1 Link DOWN [ 119.019362][T10605] smc: net device bond0 erased user defined pnetid SYZ0 [ 119.051083][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.062484][ T8959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.196415][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.246804][T10438] veth0_vlan: entered promiscuous mode [ 119.255127][T10438] veth1_vlan: entered promiscuous mode [ 119.283841][T10438] veth0_macvtap: entered promiscuous mode [ 119.294481][T10438] veth1_macvtap: entered promiscuous mode [ 119.303727][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.313586][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.325048][ T3988] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.342224][ T3988] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.356917][ T3988] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.376916][ T3988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.406174][T10679] loop3: detected capacity change from 0 to 128 [ 119.427196][T10679] FAT-fs (loop3): bogus number of reserved sectors [ 119.429152][T10685] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2570'. [ 119.433795][T10679] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 119.442762][T10685] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2570'. [ 119.461006][T10679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 119.577790][T10691] FAULT_INJECTION: forcing a failure. [ 119.577790][T10691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.592436][T10691] CPU: 1 UID: 0 PID: 10691 Comm: syz.3.2572 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 119.592498][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.592581][T10691] Call Trace: [ 119.592584][T10691] [ 119.592587][T10691] __dump_stack+0x1d/0x30 [ 119.592597][T10691] dump_stack_lvl+0xe8/0x140 [ 119.592605][T10691] dump_stack+0x15/0x1b [ 119.592611][T10691] should_fail_ex+0x265/0x280 [ 119.592620][T10691] should_fail_alloc_page+0xf2/0x100 [ 119.592658][T10691] __alloc_frozen_pages_noprof+0xff/0x360 [ 119.592674][T10691] alloc_pages_mpol+0xb3/0x250 [ 119.592744][T10691] alloc_migration_target_by_mpol+0x11b/0x280 [ 119.592826][T10691] migrate_pages_batch+0x300/0x1a30 [ 119.592837][T10691] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 119.592888][T10691] ? reweight_entity+0x1ba/0x250 [ 119.592980][T10691] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 119.592994][T10691] migrate_pages+0xf5f/0x1770 [ 119.593009][T10691] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 119.593025][T10691] __se_sys_mbind+0x975/0xac0 [ 119.593062][T10691] __x64_sys_mbind+0x78/0x90 [ 119.593077][T10691] x64_sys_call+0x2932/0x2ff0 [ 119.593089][T10691] do_syscall_64+0xd2/0x200 [ 119.593150][T10691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.593160][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.593168][T10691] RIP: 0033:0x7fcaba05ebe9 [ 119.593175][T10691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.593227][T10691] RSP: 002b:00007fcab8abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 119.593236][T10691] RAX: ffffffffffffffda RBX: 00007fcaba285fa0 RCX: 00007fcaba05ebe9 [ 119.593242][T10691] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 119.593247][T10691] RBP: 00007fcab8abf090 R08: 0000000000000000 R09: 0000000000000002 [ 119.593294][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.593355][T10691] R13: 00007fcaba286038 R14: 00007fcaba285fa0 R15: 00007fff71972838 [ 119.593362][T10691] [ 119.596928][T10706] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.645454][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'. [ 119.700607][T10717] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 119.838630][T10717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.869024][T10706] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.883082][T10717] gretap1: entered promiscuous mode [ 119.890755][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2585'. [ 119.919853][T10728] loop1: detected capacity change from 0 to 512 [ 119.926464][T10728] EXT4-fs: Ignoring removed nobh option [ 119.935622][T10727] loop0: detected capacity change from 0 to 512 [ 119.942787][T10727] EXT4-fs: Ignoring removed nobh option [ 119.950443][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2584: corrupted inode contents [ 119.970041][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2586: corrupted inode contents [ 119.989675][T10706] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.995642][T10728] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2584: mark_inode_dirty error [ 120.007213][T10727] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2586: mark_inode_dirty error [ 120.011861][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2584: corrupted inode contents [ 120.035455][T10728] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2584: mark_inode_dirty error [ 120.047019][T10728] __quota_error: 211 callbacks suppressed [ 120.047032][T10728] Quota error (device loop1): write_blk: dquota write failed [ 120.060256][T10728] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 120.070417][T10728] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2584: Failed to acquire dquot type 0 [ 120.074664][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2586: corrupted inode contents [ 120.083991][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2590'. [ 120.104023][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2584: corrupted inode contents [ 120.116095][T10728] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2584: mark_inode_dirty error [ 120.116376][T10727] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2586: mark_inode_dirty error [ 120.140255][T10706] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.140461][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2584: corrupted inode contents [ 120.151434][T10727] Quota error (device loop0): write_blk: dquota write failed [ 120.171013][T10727] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 120.181323][T10727] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2586: Failed to acquire dquot type 0 [ 120.188276][T10728] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2584: mark_inode_dirty error [ 120.193754][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2586: corrupted inode contents [ 120.217318][T10727] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2586: mark_inode_dirty error [ 120.228900][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2586: corrupted inode contents [ 120.234677][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2584: corrupted inode contents [ 120.241589][T10727] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2586: mark_inode_dirty error [ 120.253458][T10728] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 120.267193][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2586: corrupted inode contents [ 120.272621][T10728] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2584: corrupted inode contents [ 120.286020][T10727] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 120.296531][T10728] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2584: mark_inode_dirty error [ 120.305585][T10727] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2586: corrupted inode contents [ 120.315989][T10728] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 120.328295][T10727] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2586: mark_inode_dirty error [ 120.336965][T10728] EXT4-fs (loop1): 1 truncate cleaned up [ 120.356269][T10727] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 120.360371][T10728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.379557][T10727] EXT4-fs (loop0): 1 truncate cleaned up [ 120.385606][T10727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.390391][T10728] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.398722][T10727] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.423005][T10728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.433744][T10727] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.483097][ T29] audit: type=1400 audit(1755466360.892:6838): avc: denied { ioctl } for pid=10754 comm="syz.4.2594" path="socket:[33377]" dev="sockfs" ino=33377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.509547][ T29] audit: type=1400 audit(1755466360.892:6839): avc: denied { write } for pid=10754 comm="syz.4.2594" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.515679][T10757] program syz.3.2595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.543665][T10760] atomic_op ffff888104720d28 conn xmit_atomic 0000000000000000 [ 120.569367][ T29] audit: type=1326 audit(1755466360.972:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aed8ebe9 code=0x7ffc0000 [ 120.592893][ T29] audit: type=1326 audit(1755466360.972:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6aed8ebe9 code=0x7ffc0000 [ 120.635289][ T29] audit: type=1326 audit(1755466361.042:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aed8ebe9 code=0x7ffc0000 [ 120.659149][ T29] audit: type=1326 audit(1755466361.042:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6aed8ebe9 code=0x7ffc0000 [ 120.695697][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2599'. [ 120.716485][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.723663][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.764934][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.767139][T10780] netlink: 'syz.4.2605': attribute type 1 has an invalid length. [ 120.774849][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.799812][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2606'. [ 120.818006][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.838146][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.847886][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.856833][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.882776][T10790] netlink: 'syz.4.2610': attribute type 2 has an invalid length. [ 120.925100][T10796] FAULT_INJECTION: forcing a failure. [ 120.925100][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 120.938346][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.4.2613 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 120.938366][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.938374][T10796] Call Trace: [ 120.938378][T10796] [ 120.938383][T10796] __dump_stack+0x1d/0x30 [ 120.938399][T10796] dump_stack_lvl+0xe8/0x140 [ 120.938417][T10796] dump_stack+0x15/0x1b [ 120.938427][T10796] should_fail_ex+0x265/0x280 [ 120.938441][T10796] should_failslab+0x8c/0xb0 [ 120.938457][T10796] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 120.938473][T10796] ? p9_client_create+0x59/0xbc0 [ 120.938492][T10796] ? p9_client_create+0x207/0xbc0 [ 120.938504][T10796] ? should_failslab+0x8c/0xb0 [ 120.938520][T10796] kstrdup+0x3e/0xd0 [ 120.938566][T10796] p9_client_create+0x207/0xbc0 [ 120.938585][T10796] v9fs_session_init+0xf7/0xde0 [ 120.938658][T10796] ? avc_has_perm_noaudit+0x1b1/0x200 [ 120.938675][T10796] ? should_fail_ex+0xdb/0x280 [ 120.938688][T10796] ? v9fs_mount+0x51/0x5c0 [ 120.938735][T10796] ? should_failslab+0x8c/0xb0 [ 120.938804][T10796] ? __kmalloc_cache_noprof+0x189/0x320 [ 120.938821][T10796] v9fs_mount+0x67/0x5c0 [ 120.938834][T10796] ? selinux_capable+0x31/0x40 [ 120.938848][T10796] ? __pfx_v9fs_mount+0x10/0x10 [ 120.938892][T10796] legacy_get_tree+0x78/0xd0 [ 120.938907][T10796] vfs_get_tree+0x57/0x1d0 [ 120.938923][T10796] do_new_mount+0x207/0x5e0 [ 120.938937][T10796] ? security_capable+0x83/0x90 [ 120.938968][T10796] path_mount+0x4a4/0xb20 [ 120.938986][T10796] ? user_path_at+0x109/0x130 [ 120.939019][T10796] __se_sys_mount+0x28f/0x2e0 [ 120.939032][T10796] ? fput+0x8f/0xc0 [ 120.939087][T10796] __x64_sys_mount+0x67/0x80 [ 120.939111][T10796] x64_sys_call+0x2b4d/0x2ff0 [ 120.939125][T10796] do_syscall_64+0xd2/0x200 [ 120.939142][T10796] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.939156][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.939249][T10796] RIP: 0033:0x7ff6aed8ebe9 [ 120.939260][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.939273][T10796] RSP: 002b:00007ff6ad7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.939286][T10796] RAX: ffffffffffffffda RBX: 00007ff6aefb5fa0 RCX: 00007ff6aed8ebe9 [ 120.939295][T10796] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 120.939304][T10796] RBP: 00007ff6ad7f7090 R08: 0000200000000440 R09: 0000000000000000 [ 120.939317][T10796] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 120.939324][T10796] R13: 00007ff6aefb6038 R14: 00007ff6aefb5fa0 R15: 00007ffd7a09eac8 [ 120.939335][T10796] [ 121.218087][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 121.240343][T10808] loop3: detected capacity change from 0 to 1024 [ 121.246807][T10806] loop4: detected capacity change from 0 to 1024 [ 121.261491][T10808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.266515][T10806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.294825][T10808] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.295605][T10806] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.313235][T10808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.324217][T10806] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.335745][T10808] EXT4-fs (loop3): This should not happen!! Data will be lost [ 121.335745][T10808] [ 121.347902][T10806] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.347902][T10806] [ 121.347914][T10806] EXT4-fs (loop4): Total free blocks count 0 [ 121.347922][T10806] EXT4-fs (loop4): Free/Dirty block details [ 121.357632][T10808] EXT4-fs (loop3): Total free blocks count 0 [ 121.367229][T10806] EXT4-fs (loop4): free_blocks=20480 [ 121.367239][T10806] EXT4-fs (loop4): dirty_blocks=16 [ 121.367246][T10806] EXT4-fs (loop4): Block reservation details [ 121.367252][T10806] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 121.373222][T10808] EXT4-fs (loop3): Free/Dirty block details [ 121.373230][T10808] EXT4-fs (loop3): free_blocks=20480 [ 121.418734][T10808] EXT4-fs (loop3): dirty_blocks=16 [ 121.423871][T10808] EXT4-fs (loop3): Block reservation details [ 121.429946][T10808] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 121.436797][T10310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.466507][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.508955][T10822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2623'. [ 121.543802][T10831] loop3: detected capacity change from 0 to 512 [ 121.552234][T10831] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.567219][T10831] EXT4-fs (loop3): 1 truncate cleaned up [ 121.582117][T10831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.604458][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.623281][T10850] loop3: detected capacity change from 0 to 512 [ 121.651109][T10850] EXT4-fs (loop3): 1 orphan inode deleted [ 121.661833][T10850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.674599][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 121.700555][ T3988] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.709148][ T3979] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.717387][T10850] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.733401][ T3979] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.766759][ T3979] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.795191][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.820421][T10875] loop5: detected capacity change from 0 to 1024 [ 121.828944][T10875] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.840389][T10875] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 121.848460][T10875] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.855450][T10875] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 121.856553][T10873] lo speed is unknown, defaulting to 1000 [ 121.870036][T10875] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 121.871662][T10875] EXT4-fs (loop5): 1 truncate cleaned up [ 121.888535][T10875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.905593][T10875] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 121.921678][T10438] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.961101][T10889] loop3: detected capacity change from 0 to 1024 [ 121.971260][T10889] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.985902][T10889] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.009000][T10889] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.036614][T10889] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 122.051101][T10889] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 122.071284][ T3353] hid_parser_main: 18 callbacks suppressed [ 122.071297][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.084534][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.091929][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.099370][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.106800][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.114203][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.121608][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.128982][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.136369][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.143765][ T3353] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.150188][T10889] EXT4-fs (loop3): 1 truncate cleaned up [ 122.151636][ T3353] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.157640][T10889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.236433][T10901] lo speed is unknown, defaulting to 1000 [ 122.243850][T10889] FAULT_INJECTION: forcing a failure. [ 122.243850][T10889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.256923][T10889] CPU: 0 UID: 0 PID: 10889 Comm: syz.3.2649 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 122.256950][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.257019][T10889] Call Trace: [ 122.257023][T10889] [ 122.257027][T10889] __dump_stack+0x1d/0x30 [ 122.257040][T10889] dump_stack_lvl+0xe8/0x140 [ 122.257050][T10889] dump_stack+0x15/0x1b [ 122.257059][T10889] should_fail_ex+0x265/0x280 [ 122.257089][T10889] should_fail+0xb/0x20 [ 122.257099][T10889] should_fail_usercopy+0x1a/0x20 [ 122.257110][T10889] strncpy_from_user+0x25/0x230 [ 122.257167][T10889] ? kmem_cache_alloc_noprof+0x186/0x310 [ 122.257181][T10889] ? getname_flags+0x80/0x3b0 [ 122.257228][T10889] getname_flags+0xae/0x3b0 [ 122.257242][T10889] __x64_sys_mkdirat+0x40/0x60 [ 122.257253][T10889] x64_sys_call+0x2b7/0x2ff0 [ 122.257318][T10889] do_syscall_64+0xd2/0x200 [ 122.257332][T10889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 122.257345][T10889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.257358][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.257413][T10889] RIP: 0033:0x7fcaba05d457 [ 122.257456][T10889] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.257466][T10889] RSP: 002b:00007fcab8abee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 122.257517][T10889] RAX: ffffffffffffffda RBX: 00007fcab8abeef0 RCX: 00007fcaba05d457 [ 122.257524][T10889] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 122.257531][T10889] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 122.257538][T10889] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 122.257545][T10889] R13: 00007fcab8abeeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 122.257554][T10889] [ 122.459176][T10889] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.490279][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.495488][T10911] syzkaller0: entered promiscuous mode [ 122.504908][T10911] syzkaller0: entered allmulticast mode [ 122.522192][T10905] loop5: detected capacity change from 0 to 512 [ 122.524659][T10911] __nla_validate_parse: 2 callbacks suppressed [ 122.524704][T10911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2656'. [ 122.534521][T10905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 122.534686][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2656'. [ 122.545232][T10905] System zones: [ 122.551587][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2656'. [ 122.560686][T10905] 1-12 [ 122.576746][T10905] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2654: error while reading EA inode 32 err=-116 [ 122.590549][T10905] EXT4-fs (loop5): Remounting filesystem read-only [ 122.597172][T10905] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.607845][T10905] EXT4-fs (loop5): 1 orphan inode deleted [ 122.614142][T10905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.616894][T10911] tipc: Failed to obtain node identity [ 122.631757][T10911] tipc: Enabling of bearer rejected, failed to enable media [ 122.651960][T10438] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.671122][T10929] netlink: 'syz.3.2663': attribute type 27 has an invalid length. [ 122.693340][T10929] gretap1: left promiscuous mode [ 122.711228][T10932] bridge_slave_0: left allmulticast mode [ 122.716883][T10932] bridge_slave_0: left promiscuous mode [ 122.722592][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.732836][T10932] bridge_slave_1: left allmulticast mode [ 122.738659][T10932] bridge_slave_1: left promiscuous mode [ 122.744608][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.753802][T10932] bond0: (slave bond_slave_0): Releasing backup interface [ 122.763011][T10932] bond0: (slave bond_slave_1): Releasing backup interface [ 122.776259][T10932] team0: Port device team_slave_0 removed [ 122.785341][T10932] team0: Port device team_slave_1 removed [ 122.788478][T10944] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2668'. [ 122.810701][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.818250][T10948] loop5: detected capacity change from 0 to 128 [ 122.818409][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.846206][T10929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.861683][ T3353] lo speed is unknown, defaulting to 1000 [ 122.868387][T10944] hsr_slave_0: left promiscuous mode [ 122.874240][T10944] hsr_slave_1: left promiscuous mode [ 122.911884][T10942] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.930720][ T3996] ================================================================== [ 122.934084][T10958] loop4: detected capacity change from 0 to 2048 [ 122.938809][ T3996] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 122.953578][ T3996] [ 122.955875][ T3996] write to 0xffff8881193f3d08 of 44 bytes by task 10964 on cpu 1: [ 122.963643][ T3996] tty_set_termios+0xc0/0x8c0 [ 122.968316][ T3996] set_termios+0x496/0x4e0 [ 122.972708][ T3996] tty_mode_ioctl+0x379/0x5c0 [ 122.977357][ T3996] n_tty_ioctl_helper+0x91/0x210 [ 122.982281][ T3996] n_tty_ioctl+0x101/0x200 [ 122.986666][ T3996] tty_ioctl+0x842/0xb80 [ 122.990881][ T3996] __se_sys_ioctl+0xcb/0x140 [ 122.995443][ T3996] __x64_sys_ioctl+0x43/0x50 [ 123.000016][ T3996] x64_sys_call+0x1816/0x2ff0 [ 123.004668][ T3996] do_syscall_64+0xd2/0x200 [ 123.009154][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.015024][ T3996] [ 123.017324][ T3996] read to 0xffff8881193f3d22 of 1 bytes by task 3996 on cpu 0: [ 123.024839][ T3996] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 123.030621][ T3996] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 123.036143][ T3996] tty_port_default_lookahead_buf+0x8e/0xc0 [ 123.042009][ T3996] flush_to_ldisc+0x288/0x340 [ 123.046700][ T3996] process_scheduled_works+0x4cb/0x9d0 [ 123.052138][ T3996] worker_thread+0x582/0x770 [ 123.056707][ T3996] kthread+0x489/0x510 [ 123.060750][ T3996] ret_from_fork+0xda/0x150 [ 123.065227][ T3996] ret_from_fork_asm+0x1a/0x30 [ 123.069964][ T3996] [ 123.072265][ T3996] value changed: 0x13 -> 0x41 [ 123.076908][ T3996] [ 123.079204][ T3996] Reported by Kernel Concurrency Sanitizer on: [ 123.085344][ T3996] CPU: 0 UID: 0 PID: 3996 Comm: kworker/u8:56 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) [ 123.097991][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.108036][ T3996] Workqueue: events_unbound flush_to_ldisc [ 123.113839][ T3996] ================================================================== [ 123.149678][T10958] loop4: p1 < > p4 [ 123.154276][T10958] loop4: p4 size 8388608 extends beyond EOD, truncated [ 123.156346][T10944] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2668'. [ 123.171990][T10942] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.260474][T10942] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.320332][T10942] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.933421][ T3946] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.943751][ T3946] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.953653][ T3946] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.964099][ T3946] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0