last executing test programs: 1m1.058751945s ago: executing program 2 (id=453): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) acct(&(0x7f0000000180)='./file0/../file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000000009000200737e7a31000000000900010073797a3000000000080005400000000d08000640ffffff010800034000000018"], 0xe0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m0.185698191s ago: executing program 2 (id=482): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x0) 1m0.133798462s ago: executing program 2 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioperm(0x0, 0x1, 0x1) 1m0.105820253s ago: executing program 2 (id=484): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="242000001a005f0214f9f407000904001f000000000a0000000000000800040001000000", 0x24) 1m0.039958954s ago: executing program 2 (id=485): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100)={[{@resgid}, {@resgid}, {@noblock_validity}]}, 0xff, 0x454, &(0x7f0000000740)="$eJzs281vVFUbAPDn3umUlxewFfGDD7WKxsaPlgIqCxdqNHGBiYkudNm0hSADNbQmQoiCMbgyxsS9cem/4Eo3xrgycat7Q0IMG8DVmDtzL50pM0M7zHQK8/slF86599ye88y5Z+bce2YCGFoT2T9JxPaI+DMixurZ5gIT9f+uXz0/d+Pq+bkkqtV3/0lq5a5dPT9XFC3O25ZnJtOI9Isk9raod+nsuZOzlcrCmTw/vXzqo+mls+deOHFq9vjC8YXTB48cOXxo5uWXDr7YkzizNl3b8+nivt1vffDN20e/aop/VRw9MtHp4NPVao+rG6wdDelkZIANYV1KEZF1V7k2/seiFCudNxZvfj7QxgF9Va1Wq9vaH75QBe5hSTTnDXkYFsUHfXb/W2yrJwGv9m/6MXBXXqvfAGVxX8+3+pGRSPMy5fz+ttSH+ici4v0L/36XbdGf5xAAAE1+yuY/z7ea/6XxUEO5+/K1ofGIuD8idkbEAxGxKyIejKiVfTgiHlln/Q2LJNej5fwnvdx1cGuQzf9eyde2mud/xewvxkt5bkct/nJy7ERl4UD+mkxGeUuWn+lQx89v/PF1u2ON879sy+ov5oJ5Oy6PbGk+Z352efZOYm505WLEnpFW8Sc3VwKSiNgdEXu6rOPEsz/sa3fs9vF30IN1pur3Ec/U+/9CrIq/kHRen5z+X1QWDkwXV8Wtfvv90jvt6r+j+Hsg6///t7z+b8Y/njSu1y6tv45Lf33Z9p6m2+t/NHmvlh7N930yu7x8ZiZiNDlab3Tj/oMr5xb5onwW/+T+1uN/Z6y8EnsjIruIH42IxyLi8bztT0TEkxGxv0P8v77+1Ifdx99fWfzz6+r/lcRorN7TOlE6+cuPTZWO3xL/jc79f7iWmsz3rOX9by3t6u5qBgAAgLtPGhHbI0mnbqbTdGqq/n35XRFpZXFp+bljix+fnq//RmA8Ii2edI01PA+dyW/r6/mLEVH/akFx/FD+3Pjb0tZafmpusTI/6OBhyG1rM/4zf/fjCy/A5uL3WjC8jH8YXsY/DK91jP+kn+0ANl6L8b91EO0ANl6rz//PBtAOYOOtGv+W/WCIeP4Hw8v4h+Fl/MNQWtoat/+RfMdE8Ze6PP2eTUR5UzSjb4lIN0UzNm2ifJePi8G9JwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTSfwEAAP//L1neZg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffff"]) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8100, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x7, @empty, 0xbff}, @ib={0x1b, 0xf, 0xffb, {"50916300"}, 0x8000000000000001, 0x8, 0x3}}}, 0x118) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 59.907286947s ago: executing program 2 (id=486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) io_uring_enter(r1, 0x4848, 0x8d0f, 0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@delalloc}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@block_validity}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 59.427042036s ago: executing program 32 (id=486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) io_uring_enter(r1, 0x4848, 0x8d0f, 0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@delalloc}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@block_validity}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 27.99931983s ago: executing program 3 (id=1017): renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 27.98651609s ago: executing program 3 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setgid(0x0) (fail_nth: 10) 27.968520091s ago: executing program 3 (id=1019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='fscache_access_volume\x00', r3, 0x0, 0x253f}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a600", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e23, 0x8}}}}}}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c791", 0x19}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000014c0)=@sg0, 0x0, 0x0) 27.910526672s ago: executing program 3 (id=1023): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0x20000000000001e3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x3}}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 27.882217693s ago: executing program 3 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000000000005000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 27.862708723s ago: executing program 3 (id=1025): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x3c, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x60, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd4000bcc2542ded71038259ca17a8a414ef3d000000000000000000000000000000001000", "f28359738e229a4c66810000000000d300e6d6f0ffff1b000500", [0x204]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5b94}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @generic={0x6b, 0x1, 0xc, 0x2, 0xc6e0000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000100110800", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (fail_nth: 2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) umount2(&(0x7f0000000680)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000700)='dlm_send\x00', r10}, 0x18) r11 = socket(0x10, 0x80003, 0x0) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r11, 0xffffffffffffffff, 0x1000000000000000) 12.834213137s ago: executing program 33 (id=1025): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x3c, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x60, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd4000bcc2542ded71038259ca17a8a414ef3d000000000000000000000000000000001000", "f28359738e229a4c66810000000000d300e6d6f0ffff1b000500", [0x204]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5b94}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @generic={0x6b, 0x1, 0xc, 0x2, 0xc6e0000}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000100110800", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (fail_nth: 2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) umount2(&(0x7f0000000680)='./file0\x00', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000700)='dlm_send\x00', r10}, 0x18) r11 = socket(0x10, 0x80003, 0x0) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r11, 0xffffffffffffffff, 0x1000000000000000) 3.395528806s ago: executing program 0 (id=1395): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x2, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 3.395106206s ago: executing program 0 (id=1397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xe1, 0x9, 0x40, 0x244b, 0x6, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x189000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0xf449992031bf9ef7, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000684d43e65a01d7000000001811000014c858a0808b000e2b5f6e8fca76c2bd4880cdc2c6453bd1325ea94ecbfce90d4919300dbec441e99a10ffea8ff8bb77844da76c4a0f5b92b0ace55ccf6143fb0174374f5b61a00a0221711cc2fe42fc1068be9c54ada17edc7307e24fcaf074d8793ea060a32bd104b7b134223dc022841f10dd336c6a53412a68a4306e9c507304d07ebd77d932711d1a652d3906400ad056ab3adfc105a110f8b6742cea9c6b5e5a8b73c148003c2ebbfe5baf5b7f9aa13fdbad878f1f6f7a7aa6671e3a0d83c9d78a272b85817707346b1083a8ee5e5bc8b286a3ced55f3319c3e19b41f52c", @ANYRESHEX=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='fsi_master_read\x00', r4, 0x0, 0x6}, 0x18) rename(0x0, 0x0) 3.319572817s ago: executing program 0 (id=1398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x4000010) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r3, 0x1, 0x2, [0x1ff, 0x7ff]}, &(0x7f00000001c0)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044040}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x3a) 3.283157878s ago: executing program 0 (id=1400): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = memfd_secret(0x80000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f0000000700)="7d1b86332203f1fc75dfb580f0a5cfb7eb0c2da7863b186086a9439fc2639cd79a9c74862a5649062e097ddfc8507f42e3eeb3380f9a6332aece73f796ec8bc09c320bb0ba5f4586ff25b334af6571367ea811e3a3ef3c2ce7cf8365c98d3da55f8af29df12a1848e4eee6351cfb0d8f7a1c63aaa7ba18dbf2a811cb8f65903e226573b794c51a89f0f381956892ea050819659517804a959708ebb0219c0bd3dd7c99a7e80bca406992df295c7c226b4fa05fdec48f01f7c2f96d6890f6dbd7", &(0x7f00000007c0)=""/145, &(0x7f0000000040)="9fd9ac541cad3867a209e4b9e38f64d0392e3cf50eb77083d9855cc3697bbaa9ebad89fb5a9fbb4557f0e06ec844946a4201fbfb44", &(0x7f0000000880)="d7599777d11d873e52472d17ac3e70c412344e2e7c09d2e29f640651a353b3d85403c2c06fa8", 0x5, r2, 0x4}, 0x38) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x9df33f786c66de11) open(0x0, 0x800, 0x50) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x4000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 2.607706701s ago: executing program 0 (id=1409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000940)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) unshare(0x6a040000) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1c70, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000180), &(0x7f0000000040)) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x66002) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0) readv(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r5, @ANYBLOB="100026bd7000fbdbdf253f00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x20004854}, 0x4) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000140)={0x10000018}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r8, 0xffffffffffffffff, 0x0) 2.396035244s ago: executing program 1 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000008000002c00000000000000000000000000ec0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000020001000400000005000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002deb82c32757e564e304a6996043d655aee93c71b3b15d086dc97f939486ae8d984a93dca43a"], 0x0, 0xd239, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c00000000000000008000018500000087000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 1.720775187s ago: executing program 4 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000042000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xbfb}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) socket$xdp(0x2c, 0x3, 0x0) 1.675296948s ago: executing program 0 (id=1422): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = memfd_secret(0x80000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f0000000700)="7d1b86332203f1fc75dfb580f0a5cfb7eb0c2da7863b186086a9439fc2639cd79a9c74862a5649062e097ddfc8507f42e3eeb3380f9a6332aece73f796ec8bc09c320bb0ba5f4586ff25b334af6571367ea811e3a3ef3c2ce7cf8365c98d3da55f8af29df12a1848e4eee6351cfb0d8f7a1c63aaa7ba18dbf2a811cb8f65903e226573b794c51a89f0f381956892ea050819659517804a959708ebb0219c0bd3dd7c99a7e80bca406992df295c7c226b4fa05fdec48f01f7c2f96d6890f6dbd7", &(0x7f00000007c0)=""/145, &(0x7f0000000040)="9fd9ac541cad3867a209e4b9e38f64d0392e3cf50eb77083d9855cc3697bbaa9ebad89fb5a9fbb4557f0e06ec844946a4201fbfb", &(0x7f0000000880)="d7599777d11d873e52472d17ac3e70c412344e2e7c09d2e29f640651a353b3d85403c2c06fa8", 0x5, r2, 0x4}, 0x38) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x9df33f786c66de11) open(0x0, 0x800, 0x50) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x4000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 1.660707609s ago: executing program 4 (id=1423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$bt_sco(r7, &(0x7f0000000480), 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xa, 0xd}, {0x1, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x1000}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804) socket(0x400000000010, 0x3, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x1, 0x1}, {0x1000, 0x120}], 0xffffffffffffffff}, 0x18, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r10, 0x1, 0x70bd2d, 0x25dedbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000f67181020e7113d2dacfc6801955276efd20d9b090e819eb72", @ANYRES16=r10, @ANYBLOB="000227bd7000fcdbdf25080000001000028008000200090000000400010008000280040001002000028012000500e270057c478b58d575a86094ed9400000800020008000000200001801400020070696d3672656731000000000000000008000100", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.019621581s ago: executing program 1 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sync() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @multicast1}, {0x6, @multicast}, 0x28, {0x2, 0x4e23, @broadcast}}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000072d8812131a7c952fdffffff1811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) tkill(0x0, 0x13) waitid(0x1, 0x0, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r3) 881.425733ms ago: executing program 1 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) 626.355158ms ago: executing program 1 (id=1432): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x65}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 582.013909ms ago: executing program 1 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x0) 546.33508ms ago: executing program 5 (id=1434): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000000000000000001811000000f49828b9258725a66dea45d096be60a363e29471803561ede5feeba69cbbde053f1ca20cb6175eb16250018a83b500"/80, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ext4_ext_convert_to_initialized_enter\x00', r2, 0x0, 0x80000000}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021300000200a200000000000000"], 0x10}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0x1002}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048ec"}, {&(0x7f0000000800)="50563ab467b22c4008f83b8961076a"}], 0x10000000000002ff) io_setup(0x739, &(0x7f0000000100)) 531.17625ms ago: executing program 1 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) syz_usb_connect(0x0, 0x4f, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000008000002c00000000000000000000000000ec0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000020001000400000005000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002deb82c32757e564e304a6996043d655aee93c71b3b15d086dc97f939486ae8d984a93dca43a"], 0x0, 0xd239, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c00000000000000008000018500000087000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x45057bf4ccb05c67, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 454.616791ms ago: executing program 4 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 432.167342ms ago: executing program 4 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x203, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file2\x00'}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x2, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) 423.395012ms ago: executing program 5 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000014c0)=@sg0, 0x0, 0x0) 339.676004ms ago: executing program 4 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000380), 0x2000) 339.420974ms ago: executing program 4 (id=1440): socket$inet_sctp(0x2, 0x1, 0x84) socket(0x0, 0xa, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ee7adf23f8aa3900"/35], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000180000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x75, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r6}, 0x18) fchdir(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x7) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r12 = socket(0x10, 0x3, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r13, 0x0, 0xfffffffffffffffd}, 0x18) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xe}, {0x5, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xffff, 0x9}, {0x6}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x200, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) 337.082263ms ago: executing program 5 (id=1441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) (fail_nth: 13) 287.020985ms ago: executing program 5 (id=1443): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x65}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 262.772035ms ago: executing program 5 (id=1444): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r10, @ANYBLOB="a183000000000000000005000000080003"], 0x124}}, 0x0) 166.271617ms ago: executing program 6 (id=1445): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x0) 148.353907ms ago: executing program 6 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a9d000105000100079d"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 115.429858ms ago: executing program 6 (id=1447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 109.650238ms ago: executing program 5 (id=1448): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000040000000000000000001811000000f49828b9258725a66dea45d096be60a363e29471803561ede5feeba69cbbde053f1ca20cb6175eb16250018a83b500"/80, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ext4_ext_convert_to_initialized_enter\x00', r2, 0x0, 0x80000000}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021300000200a200000000000000"], 0x10}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r4, 0x0, 0x1002}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}, {&(0x7f00000007c0)="f8079ee78c9711b36402abae104bad8870fe4f0df779249a3b835b1dfa8185cf76e13098a89383752048ec"}, {&(0x7f0000000800)="50563ab467b22c4008f83b8961076a"}], 0x10000000000002ff) io_setup(0x739, &(0x7f0000000100)) 90.012928ms ago: executing program 6 (id=1449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40005015, 0x0) 10.95278ms ago: executing program 6 (id=1450): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a0000000b000000010000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000000000000000000000ffffffff02000000000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, 0xfffffffffffffffe, 0x64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) syz_clone(0x0, &(0x7f0000000240)="92890d55f10ec03e44c7f8acc7bb2c58854d53b95be59a2849c45c334cf714600ab848b38dd453fdd699287f2ebc0090caad3d10eaf02442c84f0b211ea13c0ee4e06bf42963af1742adae6a17dc827b9c4ce28f5ab4ccd9518b8d32cf4146c8541c6d6abc160171d4071686f751957f6fc4b62dde02fe2fcda60c3c0d4c78186e238b38423255d4f7650a", 0x8b, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="6fdef29e8b1defae410afce9f5452b2ba5c3b5e9f48d29b51c383827cbcbf151521e4efe7d96d822b954d0654cef178f6c62d679b971960a4d2f8071835d0a6b06d1178f18e297e0ea114ec62ef5cd01515fa76435ba43337621") setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x23ffffe}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r9, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r10, &(0x7f00000001c0)='\x00', 0x81801) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8717, 0x8, 0x586, 0x9, {{0x10, 0x4, 0x2, 0x9, 0x40, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x5e, 0x1, 0x0, [{@private=0xa010100, 0x10000}, {@empty, 0xc13}, {@broadcast, 0x3}, {@multicast2}, {@empty, 0x8}]}]}}}}}) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000140)={@private=0xa010102, @multicast1, r11}, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x28, 0x0, 0xfffffffffffffc71}, 0x100) 0s ago: executing program 6 (id=1451): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x2, 0xfff, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0x5}}}, 0xa0) kernel console output (not intermixed with test programs): 104] [ 97.089537][ T6108] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.124572][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.136842][ T6110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6110 comm=syz.3.942 [ 97.325162][ T6110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6110 comm=syz.3.942 [ 97.447873][ T6108] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.514254][ T6108] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.598198][ T6108] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.171187][ T6127] netlink: 'syz.3.944': attribute type 21 has an invalid length. [ 98.179503][ T6127] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 98.296497][ T6131] loop1: detected capacity change from 0 to 1024 [ 98.305537][ T6131] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.317750][ T6131] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.946: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.332388][ T6131] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.946: Failed to acquire dquot type 0 [ 98.344322][ T6131] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.946: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.358328][ T6131] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.946: Invalid inode bitmap blk 0 in block_group 0 [ 98.371711][ T6131] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 98.381092][ T1081] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.396435][ T6131] EXT4-fs (loop1): 1 orphan inode deleted [ 98.399749][ T1081] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 98.402996][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.415588][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.436617][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.441644][ T6131] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 98.467586][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.485019][ T6137] FAULT_INJECTION: forcing a failure. [ 98.485019][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 98.497814][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.0.949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.497844][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.497856][ T6137] Call Trace: [ 98.497863][ T6137] [ 98.497871][ T6137] __dump_stack+0x1d/0x30 [ 98.497963][ T6137] dump_stack_lvl+0xe8/0x140 [ 98.497983][ T6137] dump_stack+0x15/0x1b [ 98.497999][ T6137] should_fail_ex+0x265/0x280 [ 98.498023][ T6137] ? io_drain_req+0x67/0x350 [ 98.498046][ T6137] should_failslab+0x8c/0xb0 [ 98.498072][ T6137] __kmalloc_cache_noprof+0x4c/0x320 [ 98.498161][ T6137] io_drain_req+0x67/0x350 [ 98.498184][ T6137] ? io_queue_sqe_fallback+0x12a/0x140 [ 98.498214][ T6137] io_queue_sqe_fallback+0x132/0x140 [ 98.498244][ T6137] io_submit_sqes+0xc2e/0x1060 [ 98.498314][ T6137] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 98.498392][ T6137] ? 0xffffffff81000000 [ 98.498408][ T6137] ? __rcu_read_unlock+0x4f/0x70 [ 98.498462][ T6137] ? get_pid_task+0x96/0xd0 [ 98.498483][ T6137] ? proc_fail_nth_write+0x13b/0x160 [ 98.498558][ T6137] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.498705][ T6137] ? vfs_write+0x7e8/0x960 [ 98.498727][ T6137] ? __rcu_read_unlock+0x4f/0x70 [ 98.498749][ T6137] ? __fget_files+0x184/0x1c0 [ 98.498854][ T6137] ? fput+0x8f/0xc0 [ 98.498886][ T6137] __x64_sys_io_uring_enter+0x78/0x90 [ 98.498913][ T6137] x64_sys_call+0x2de1/0x2ff0 [ 98.498939][ T6137] do_syscall_64+0xd2/0x200 [ 98.498973][ T6137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.498997][ T6137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.499127][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.499148][ T6137] RIP: 0033:0x7f741cd8ec29 [ 98.499163][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.499212][ T6137] RSP: 002b:00007f741b7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 98.499231][ T6137] RAX: ffffffffffffffda RBX: 00007f741cfd5fa0 RCX: 00007f741cd8ec29 [ 98.499244][ T6137] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000006 [ 98.499256][ T6137] RBP: 00007f741b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.499312][ T6137] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 98.499334][ T6137] R13: 00007f741cfd6038 R14: 00007f741cfd5fa0 R15: 00007ffc47410d68 [ 98.499353][ T6137] [ 98.520197][ T6140] loop1: detected capacity change from 0 to 2048 [ 98.801455][ T6154] loop1: detected capacity change from 0 to 764 [ 98.872623][ T2143] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.884297][ T2143] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.895546][ T2143] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.907611][ T2143] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985998][ T6167] FAULT_INJECTION: forcing a failure. [ 98.985998][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 98.999057][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.1.959 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.999126][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.999138][ T6167] Call Trace: [ 98.999145][ T6167] [ 98.999169][ T6167] __dump_stack+0x1d/0x30 [ 98.999189][ T6167] dump_stack_lvl+0xe8/0x140 [ 98.999209][ T6167] dump_stack+0x15/0x1b [ 98.999230][ T6167] should_fail_ex+0x265/0x280 [ 98.999255][ T6167] should_failslab+0x8c/0xb0 [ 98.999296][ T6167] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 98.999341][ T6167] ? sidtab_sid2str_get+0xa0/0x130 [ 98.999367][ T6167] kmemdup_noprof+0x2b/0x70 [ 98.999453][ T6167] sidtab_sid2str_get+0xa0/0x130 [ 98.999476][ T6167] security_sid_to_context_core+0x1eb/0x2e0 [ 98.999500][ T6167] security_sid_to_context+0x27/0x40 [ 98.999545][ T6167] selinux_lsmprop_to_secctx+0x67/0xf0 [ 98.999568][ T6167] security_lsmprop_to_secctx+0x43/0x80 [ 98.999606][ T6167] audit_log_task_context+0x77/0x190 [ 98.999664][ T6167] audit_log_task+0xf4/0x250 [ 98.999694][ T6167] audit_seccomp+0x61/0x100 [ 98.999720][ T6167] ? __seccomp_filter+0x68c/0x10d0 [ 98.999743][ T6167] __seccomp_filter+0x69d/0x10d0 [ 98.999820][ T6167] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.999849][ T6167] ? vfs_write+0x7e8/0x960 [ 98.999878][ T6167] __secure_computing+0x82/0x150 [ 98.999902][ T6167] syscall_trace_enter+0xcf/0x1e0 [ 98.999929][ T6167] do_syscall_64+0xac/0x200 [ 99.000043][ T6167] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.000067][ T6167] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.000098][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.000120][ T6167] RIP: 0033:0x7f9ccf51d63c [ 99.000153][ T6167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.000172][ T6167] RSP: 002b:00007f9ccdf87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.000191][ T6167] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51d63c [ 99.000264][ T6167] RDX: 000000000000000f RSI: 00007f9ccdf870a0 RDI: 0000000000000006 [ 99.000276][ T6167] RBP: 00007f9ccdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 99.000288][ T6167] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 99.000301][ T6167] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 99.000320][ T6167] [ 99.372803][ T6193] loop3: detected capacity change from 0 to 512 [ 99.379827][ T6193] EXT4-fs: Ignoring removed i_version option [ 99.386085][ T6193] EXT4-fs: Ignoring removed bh option [ 99.393249][ T6193] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 99.703025][ T6205] __nla_validate_parse: 2 callbacks suppressed [ 99.703046][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.971'. [ 100.059851][ T6224] loop1: detected capacity change from 0 to 512 [ 100.091539][ T6224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.115434][ T6224] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.143377][ T6224] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.980: corrupted inode contents [ 100.178223][ T6224] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.980: mark_inode_dirty error [ 100.220759][ T6224] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.980: corrupted inode contents [ 100.250559][ T2143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.268049][ T6224] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.980: mark_inode_dirty error [ 100.297834][ T2143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.316680][ T2143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.330245][ T6224] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.980: mark inode dirty (error -117) [ 100.330369][ T1081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.344238][ T6224] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 100.372639][ T6241] netlink: 'syz.4.985': attribute type 21 has an invalid length. [ 100.389192][ T6241] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 100.397154][ T6241] netlink: 144 bytes leftover after parsing attributes in process `syz.4.985'. [ 100.409102][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.437459][ T6245] loop4: detected capacity change from 0 to 1024 [ 100.452418][ T6245] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.466191][ T6245] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.988: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.482950][ T6245] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.988: Failed to acquire dquot type 0 [ 100.495998][ T6245] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.988: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.513174][ T6245] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.988: Invalid inode bitmap blk 0 in block_group 0 [ 100.526692][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.1.989'. [ 100.536980][ T6245] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 100.537882][ T2143] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.563428][ T2143] __quota_error: 190 callbacks suppressed [ 100.563430][ T6245] EXT4-fs (loop4): 1 orphan inode deleted [ 100.563478][ T2143] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 100.564043][ T6245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.569649][ T2143] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 100.611751][ T6245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.624607][ T29] audit: type=1400 audit(1758317262.941:3946): avc: denied { create } for pid=6244 comm="syz.4.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.647009][ T29] audit: type=1400 audit(1758317262.961:3947): avc: denied { ioctl } for pid=6244 comm="syz.4.988" path="socket:[20526]" dev="sockfs" ino=20526 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.674163][ T29] audit: type=1400 audit(1758317262.961:3948): avc: denied { name_connect } for pid=6259 comm="syz.0.990" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.699793][ T29] audit: type=1400 audit(1758317263.011:3949): avc: denied { setopt } for pid=6259 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.856707][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 100.874960][ T6280] loop4: detected capacity change from 0 to 128 [ 100.886914][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 100.896110][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.996'. [ 100.911585][ T6280] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 100.938387][ T6280] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 100.951465][ T6287] netlink: 'syz.3.998': attribute type 21 has an invalid length. [ 100.954934][ T6280] EXT4-fs (loop4): shut down requested (0) [ 100.967060][ T6287] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 100.975219][ T6287] netlink: 144 bytes leftover after parsing attributes in process `syz.3.998'. [ 101.019820][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.084911][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 101.110449][ T6302] FAULT_INJECTION: forcing a failure. [ 101.110449][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 101.123537][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.123572][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.123590][ T6302] Call Trace: [ 101.123597][ T6302] [ 101.123609][ T6302] __dump_stack+0x1d/0x30 [ 101.123712][ T6302] dump_stack_lvl+0xe8/0x140 [ 101.123736][ T6302] dump_stack+0x15/0x1b [ 101.123753][ T6302] should_fail_ex+0x265/0x280 [ 101.123777][ T6302] should_failslab+0x8c/0xb0 [ 101.123804][ T6302] kmem_cache_alloc_node_noprof+0x57/0x320 [ 101.123886][ T6302] ? __alloc_skb+0x101/0x320 [ 101.123914][ T6302] __alloc_skb+0x101/0x320 [ 101.123968][ T6302] netlink_alloc_large_skb+0xba/0xf0 [ 101.123996][ T6302] netlink_sendmsg+0x3cf/0x6b0 [ 101.124023][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.124049][ T6302] __sock_sendmsg+0x145/0x180 [ 101.124146][ T6302] ____sys_sendmsg+0x31e/0x4e0 [ 101.124237][ T6302] ___sys_sendmsg+0x17b/0x1d0 [ 101.124278][ T6302] __x64_sys_sendmsg+0xd4/0x160 [ 101.124316][ T6302] x64_sys_call+0x191e/0x2ff0 [ 101.124357][ T6302] do_syscall_64+0xd2/0x200 [ 101.124403][ T6302] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.124438][ T6302] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.124468][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.124520][ T6302] RIP: 0033:0x7f9ccf51ec29 [ 101.124536][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.124626][ T6302] RSP: 002b:00007f9ccdf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.124724][ T6302] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51ec29 [ 101.124741][ T6302] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 101.124756][ T6302] RBP: 00007f9ccdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 101.124771][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.124816][ T6302] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 101.124840][ T6302] [ 101.129995][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'. [ 101.216379][ T6312] loop3: detected capacity change from 0 to 128 [ 101.224251][ T6313] netlink: 'syz.1.1009': attribute type 21 has an invalid length. [ 101.247022][ T29] audit: type=1326 audit(1758317263.551:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 101.252048][ T6313] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 101.260569][ T6307] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 101.262515][ T6313] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1009'. [ 101.283774][ T6307] audit: out of memory in audit_log_start [ 101.295880][ T29] audit: type=1326 audit(1758317263.571:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f741cd8d590 code=0x7ffc0000 [ 101.304744][ T6312] EXT4-fs error (device loop3): __ext4_fill_super:5504: inode #2: comm syz.3.1010: iget: checksum invalid [ 101.309810][ T29] audit: type=1326 audit(1758317263.571:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6306 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f741cd8d6df code=0x7ffc0000 [ 101.320093][ T6312] EXT4-fs (loop3): get root inode failed [ 101.482701][ T6312] EXT4-fs (loop3): mount failed [ 101.598813][ T9] IPVS: starting estimator thread 0... [ 101.687339][ T6332] IPVS: using max 2256 ests per chain, 112800 per kthread [ 101.855205][ T6357] FAULT_INJECTION: forcing a failure. [ 101.855205][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.869024][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.3.1025 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.869121][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.869136][ T6357] Call Trace: [ 101.869145][ T6357] [ 101.869154][ T6357] __dump_stack+0x1d/0x30 [ 101.869186][ T6357] dump_stack_lvl+0xe8/0x140 [ 101.869286][ T6357] dump_stack+0x15/0x1b [ 101.869332][ T6357] should_fail_ex+0x265/0x280 [ 101.869361][ T6357] should_fail+0xb/0x20 [ 101.869394][ T6357] should_fail_usercopy+0x1a/0x20 [ 101.869425][ T6357] _copy_to_user+0x20/0xa0 [ 101.869464][ T6357] simple_read_from_buffer+0xb5/0x130 [ 101.869560][ T6357] proc_fail_nth_read+0x10e/0x150 [ 101.869594][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.869625][ T6357] vfs_read+0x1a5/0x770 [ 101.869670][ T6357] ? __rcu_read_unlock+0x4f/0x70 [ 101.869695][ T6357] ? __fget_files+0x184/0x1c0 [ 101.869728][ T6357] ksys_read+0xda/0x1a0 [ 101.869821][ T6357] __x64_sys_read+0x40/0x50 [ 101.869848][ T6357] x64_sys_call+0x27bc/0x2ff0 [ 101.869876][ T6357] do_syscall_64+0xd2/0x200 [ 101.869910][ T6357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.870015][ T6357] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.870051][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.870139][ T6357] RIP: 0033:0x7f330f8ed63c [ 101.870231][ T6357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.870259][ T6357] RSP: 002b:00007f330e336030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.870284][ T6357] RAX: ffffffffffffffda RBX: 00007f330fb36090 RCX: 00007f330f8ed63c [ 101.870299][ T6357] RDX: 000000000000000f RSI: 00007f330e3360a0 RDI: 000000000000000d [ 101.870403][ T6357] RBP: 00007f330e336090 R08: 0000000000000000 R09: 0000000000000000 [ 101.870446][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.870461][ T6357] R13: 00007f330fb36128 R14: 00007f330fb36090 R15: 00007ffef16e1358 [ 101.870487][ T6357] [ 102.131760][ T6367] loop4: detected capacity change from 0 to 2364 [ 102.231342][ T6376] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.260307][ T6376] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.318770][ T6376] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.369320][ T6376] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.518204][ T6398] loop5: detected capacity change from 0 to 128 [ 102.525591][ T6398] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 102.548932][ T6398] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 102.564277][ T6398] EXT4-fs (loop5): shut down requested (0) [ 102.590391][ T4881] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.673853][ T6406] loop1: detected capacity change from 0 to 1024 [ 102.689691][ T6406] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 102.724694][ T6414] netlink: 'syz.5.1048': attribute type 10 has an invalid length. [ 102.750661][ T6414] team0: Port device dummy0 added [ 102.766104][ T6414] netlink: 'syz.5.1048': attribute type 10 has an invalid length. [ 102.781464][ T6414] team0: Port device dummy0 removed [ 102.816559][ T6414] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.840861][ T6421] netlink: 'syz.1.1051': attribute type 13 has an invalid length. [ 102.920696][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.938670][ T6421] batman_adv: batadv0: Interface deactivated: dummy0 [ 102.947225][ T6443] FAULT_INJECTION: forcing a failure. [ 102.947225][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 102.960723][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.5.1056 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.960752][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.960764][ T6443] Call Trace: [ 102.960771][ T6443] [ 102.960784][ T6443] __dump_stack+0x1d/0x30 [ 102.960808][ T6443] dump_stack_lvl+0xe8/0x140 [ 102.960830][ T6443] dump_stack+0x15/0x1b [ 102.960900][ T6443] should_fail_ex+0x265/0x280 [ 102.960925][ T6443] should_failslab+0x8c/0xb0 [ 102.961032][ T6443] kmem_cache_alloc_noprof+0x50/0x310 [ 102.961063][ T6443] ? audit_log_start+0x365/0x6c0 [ 102.961094][ T6443] audit_log_start+0x365/0x6c0 [ 102.961175][ T6443] audit_seccomp+0x48/0x100 [ 102.961201][ T6443] ? __seccomp_filter+0x68c/0x10d0 [ 102.961250][ T6443] __seccomp_filter+0x69d/0x10d0 [ 102.961273][ T6443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.961352][ T6443] ? vfs_write+0x7e8/0x960 [ 102.961376][ T6443] ? __rcu_read_unlock+0x4f/0x70 [ 102.961397][ T6443] ? __fget_files+0x184/0x1c0 [ 102.961424][ T6443] __secure_computing+0x82/0x150 [ 102.961449][ T6443] syscall_trace_enter+0xcf/0x1e0 [ 102.961473][ T6443] do_syscall_64+0xac/0x200 [ 102.961519][ T6443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.961563][ T6443] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 102.961597][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.961618][ T6443] RIP: 0033:0x7f291e35ec29 [ 102.961633][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.961688][ T6443] RSP: 002b:00007f291cdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 102.961712][ T6443] RAX: ffffffffffffffda RBX: 00007f291e5a5fa0 RCX: 00007f291e35ec29 [ 102.961728][ T6443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.961743][ T6443] RBP: 00007f291cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.961759][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.961796][ T6443] R13: 00007f291e5a6038 R14: 00007f291e5a5fa0 R15: 00007fffa0fc26d8 [ 102.961814][ T6443] [ 103.219437][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.232856][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.246168][ T6450] loop5: detected capacity change from 0 to 2048 [ 103.261855][ T6450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.282083][ T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.299583][ T6450] FAULT_INJECTION: forcing a failure. [ 103.299583][ T6450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.301544][ T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.313161][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.5.1059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.313192][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.313207][ T6450] Call Trace: [ 103.313215][ T6450] [ 103.313224][ T6450] __dump_stack+0x1d/0x30 [ 103.313248][ T6450] dump_stack_lvl+0xe8/0x140 [ 103.313328][ T6450] dump_stack+0x15/0x1b [ 103.313394][ T6450] should_fail_ex+0x265/0x280 [ 103.313431][ T6450] should_fail+0xb/0x20 [ 103.313459][ T6450] should_fail_usercopy+0x1a/0x20 [ 103.313512][ T6450] _copy_from_user+0x1c/0xb0 [ 103.313556][ T6450] __copy_msghdr+0x244/0x300 [ 103.313593][ T6450] ___sys_sendmsg+0x109/0x1d0 [ 103.313628][ T6450] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 103.313752][ T6450] __sys_sendmmsg+0x178/0x300 [ 103.313852][ T6450] __x64_sys_sendmmsg+0x57/0x70 [ 103.313889][ T6450] x64_sys_call+0x1c4a/0x2ff0 [ 103.313919][ T6450] do_syscall_64+0xd2/0x200 [ 103.314000][ T6450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.314061][ T6450] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.314104][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.314134][ T6450] RIP: 0033:0x7f291e35ec29 [ 103.314157][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.314181][ T6450] RSP: 002b:00007f291cdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.314284][ T6450] RAX: ffffffffffffffda RBX: 00007f291e5a5fa0 RCX: 00007f291e35ec29 [ 103.314302][ T6450] RDX: 0000000000000001 RSI: 0000200000005d40 RDI: 000000000000000d [ 103.314319][ T6450] RBP: 00007f291cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.314336][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.314353][ T6450] R13: 00007f291e5a6038 R14: 00007f291e5a5fa0 R15: 00007fffa0fc26d8 [ 103.314378][ T6450] [ 103.517651][ T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.526370][ T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.578021][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.640000][ T6466] lo speed is unknown, defaulting to 1000 [ 103.799197][ T6467] netlink: 'syz.5.1064': attribute type 1 has an invalid length. [ 103.861655][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.884551][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.927235][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.936061][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.946324][ T6473] FAULT_INJECTION: forcing a failure. [ 103.946324][ T6473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.960207][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.4.1065 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.960243][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.960258][ T6473] Call Trace: [ 103.960266][ T6473] [ 103.960341][ T6473] __dump_stack+0x1d/0x30 [ 103.960366][ T6473] dump_stack_lvl+0xe8/0x140 [ 103.960385][ T6473] dump_stack+0x15/0x1b [ 103.960401][ T6473] should_fail_ex+0x265/0x280 [ 103.960427][ T6473] should_fail+0xb/0x20 [ 103.960553][ T6473] should_fail_usercopy+0x1a/0x20 [ 103.960676][ T6473] _copy_from_user+0x1c/0xb0 [ 103.960713][ T6473] kstrtouint_from_user+0x69/0xf0 [ 103.960739][ T6473] ? 0xffffffff81000000 [ 103.960751][ T6473] ? selinux_file_permission+0x1e4/0x320 [ 103.960778][ T6473] proc_fail_nth_write+0x50/0x160 [ 103.960871][ T6473] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.961031][ T6473] vfs_write+0x266/0x960 [ 103.961053][ T6473] ? vfs_read+0x4e6/0x770 [ 103.961080][ T6473] ? __rcu_read_unlock+0x4f/0x70 [ 103.961106][ T6473] ? __fget_files+0x184/0x1c0 [ 103.961141][ T6473] ksys_write+0xda/0x1a0 [ 103.961184][ T6473] __x64_sys_write+0x40/0x50 [ 103.961214][ T6473] x64_sys_call+0x27fe/0x2ff0 [ 103.961242][ T6473] do_syscall_64+0xd2/0x200 [ 103.961286][ T6473] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.961360][ T6473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.961400][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.961460][ T6473] RIP: 0033:0x7f56b58ed6df [ 103.961479][ T6473] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.961502][ T6473] RSP: 002b:00007f56b4357030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.961525][ T6473] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f56b58ed6df [ 103.961541][ T6473] RDX: 0000000000000001 RSI: 00007f56b43570a0 RDI: 0000000000000004 [ 103.961613][ T6473] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 103.961628][ T6473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 103.961643][ T6473] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 103.961663][ T6473] [ 104.221354][ T6480] loop1: detected capacity change from 0 to 2048 [ 104.225988][ T6479] loop5: detected capacity change from 0 to 764 [ 104.250049][ T6480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.286089][ T6483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.346036][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.464629][ T6490] loop4: detected capacity change from 0 to 8192 [ 104.475649][ T6490] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.602334][ T6513] lo speed is unknown, defaulting to 1000 [ 104.649380][ T6517] pimreg: entered allmulticast mode [ 104.669830][ T6517] pimreg: left allmulticast mode [ 104.769321][ T6522] loop1: detected capacity change from 0 to 764 [ 104.865988][ T6530] loop1: detected capacity change from 0 to 1024 [ 104.874249][ T6530] EXT4-fs: Ignoring removed bh option [ 104.889420][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.988857][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.023749][ T6545] FAULT_INJECTION: forcing a failure. [ 105.023749][ T6545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.037204][ T6545] CPU: 1 UID: 0 PID: 6545 Comm: syz.1.1088 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.037271][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.037287][ T6545] Call Trace: [ 105.037295][ T6545] [ 105.037305][ T6545] __dump_stack+0x1d/0x30 [ 105.037332][ T6545] dump_stack_lvl+0xe8/0x140 [ 105.037356][ T6545] dump_stack+0x15/0x1b [ 105.037388][ T6545] should_fail_ex+0x265/0x280 [ 105.037420][ T6545] should_fail+0xb/0x20 [ 105.037440][ T6545] should_fail_usercopy+0x1a/0x20 [ 105.037465][ T6545] _copy_to_user+0x20/0xa0 [ 105.037501][ T6545] simple_read_from_buffer+0xb5/0x130 [ 105.037583][ T6545] proc_fail_nth_read+0x10e/0x150 [ 105.037612][ T6545] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.037638][ T6545] vfs_read+0x1a5/0x770 [ 105.037658][ T6545] ? __rcu_read_unlock+0x4f/0x70 [ 105.037719][ T6545] ? __fget_files+0x184/0x1c0 [ 105.037750][ T6545] ? ldsem_up_read+0x8a/0xd0 [ 105.037787][ T6545] ksys_read+0xda/0x1a0 [ 105.037812][ T6545] __x64_sys_read+0x40/0x50 [ 105.037865][ T6545] x64_sys_call+0x27bc/0x2ff0 [ 105.037893][ T6545] do_syscall_64+0xd2/0x200 [ 105.037981][ T6545] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.038005][ T6545] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.038034][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.038057][ T6545] RIP: 0033:0x7f9ccf51d63c [ 105.038089][ T6545] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.038107][ T6545] RSP: 002b:00007f9ccdf87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.038125][ T6545] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51d63c [ 105.038141][ T6545] RDX: 000000000000000f RSI: 00007f9ccdf870a0 RDI: 000000000000000b [ 105.038157][ T6545] RBP: 00007f9ccdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 105.038172][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.038187][ T6545] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 105.038269][ T6545] [ 105.313073][ T6550] loop1: detected capacity change from 0 to 764 [ 105.345968][ T6554] netlink: 'syz.0.1092': attribute type 21 has an invalid length. [ 105.360054][ T6554] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 105.368082][ T6554] __nla_validate_parse: 17 callbacks suppressed [ 105.368132][ T6554] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1092'. [ 105.437966][ T6560] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.593566][ T6560] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.637602][ T6577] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1100'. [ 105.648882][ T6560] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.703227][ T6582] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1095'. [ 105.712579][ T6582] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1095'. [ 105.730799][ T6560] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.767574][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 105.767591][ T29] audit: type=1400 audit(1758317268.011:4344): avc: denied { append } for pid=6561 comm="syz.1.1095" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.798032][ T29] audit: type=1400 audit(1758317268.071:4345): avc: denied { ioctl } for pid=6583 comm="syz.0.1101" path="socket:[21541]" dev="sockfs" ino=21541 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.945289][ T2143] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.986906][ T3412] IPVS: starting estimator thread 0... [ 106.029616][ T2143] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.086950][ T6585] IPVS: using max 2352 ests per chain, 117600 per kthread [ 106.107908][ T2143] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.188079][ T2143] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.294546][ T29] audit: type=1400 audit(1758317268.601:4346): avc: denied { write } for pid=6596 comm="syz.0.1105" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.342967][ T29] audit: type=1326 audit(1758317268.651:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.367080][ T29] audit: type=1326 audit(1758317268.651:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.398105][ T29] audit: type=1326 audit(1758317268.711:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.422761][ T29] audit: type=1326 audit(1758317268.711:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.447798][ T29] audit: type=1326 audit(1758317268.711:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.472284][ T29] audit: type=1400 audit(1758317268.711:4352): avc: denied { read } for pid=6596 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.493014][ T29] audit: type=1326 audit(1758317268.711:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 106.522204][ T6606] loop5: detected capacity change from 0 to 764 [ 106.538464][ T6612] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.549347][ T6612] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.730024][ T6681] loop1: detected capacity change from 0 to 2048 [ 106.739713][ T6686] loop5: detected capacity change from 0 to 512 [ 106.747512][ T6686] EXT4-fs: Ignoring removed oldalloc option [ 106.761166][ T6686] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1115: Parent and EA inode have the same ino 15 [ 106.775408][ T6681] loop1: p1 < > p4 [ 106.781143][ T6681] loop1: p4 size 722688 extends beyond EOD, truncated [ 106.791554][ T6686] EXT4-fs (loop5): 1 orphan inode deleted [ 106.799104][ T6686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.813570][ T6686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.948188][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1119'. [ 107.180693][ T6709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 107.187655][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.195508][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 107.341950][ T6710] vhci_hcd: connection closed [ 107.342238][ T6663] vhci_hcd: stop threads [ 107.351543][ T6663] vhci_hcd: release socket [ 107.356088][ T6663] vhci_hcd: disconnect device [ 107.377195][ T3412] vhci_hcd: vhci_device speed not set [ 107.478487][ T6726] loop1: detected capacity change from 0 to 512 [ 107.510066][ T6726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.525557][ T6726] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.541141][ T6726] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.1128: corrupted inode contents [ 107.556478][ T6726] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.1128: mark_inode_dirty error [ 107.568742][ T6726] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.1128: corrupted inode contents [ 107.581186][ T6726] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.1128: mark_inode_dirty error [ 107.593554][ T6726] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.1128: mark inode dirty (error -117) [ 107.607488][ T6726] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 107.653511][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.831421][ T6748] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1135'. [ 107.894641][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 107.916196][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 107.986708][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 108.162549][ T6774] loop4: detected capacity change from 0 to 128 [ 108.173754][ T6774] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 108.185045][ T6773] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.193288][ T6774] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 108.212684][ T6774] EXT4-fs (loop4): shut down requested (0) [ 108.250764][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.262851][ T6773] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.301064][ T6787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1148'. [ 108.324204][ T6773] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.340668][ T6791] FAULT_INJECTION: forcing a failure. [ 108.340668][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 108.353934][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.4.1149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.353967][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.353983][ T6791] Call Trace: [ 108.353991][ T6791] [ 108.354001][ T6791] __dump_stack+0x1d/0x30 [ 108.354062][ T6791] dump_stack_lvl+0xe8/0x140 [ 108.354085][ T6791] dump_stack+0x15/0x1b [ 108.354102][ T6791] should_fail_ex+0x265/0x280 [ 108.354190][ T6791] ? audit_log_d_path+0x8d/0x150 [ 108.354222][ T6791] should_failslab+0x8c/0xb0 [ 108.354248][ T6791] __kmalloc_cache_noprof+0x4c/0x320 [ 108.354356][ T6791] audit_log_d_path+0x8d/0x150 [ 108.354393][ T6791] audit_log_d_path_exe+0x42/0x70 [ 108.354426][ T6791] audit_log_task+0x1e9/0x250 [ 108.354458][ T6791] audit_seccomp+0x61/0x100 [ 108.354495][ T6791] ? __seccomp_filter+0x68c/0x10d0 [ 108.354517][ T6791] __seccomp_filter+0x69d/0x10d0 [ 108.354610][ T6791] ? _raw_spin_unlock+0x26/0x50 [ 108.354639][ T6791] __secure_computing+0x82/0x150 [ 108.354660][ T6791] syscall_trace_enter+0xcf/0x1e0 [ 108.354693][ T6791] do_syscall_64+0xac/0x200 [ 108.354726][ T6791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.354750][ T6791] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.354926][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.354948][ T6791] RIP: 0033:0x7f56b58ed63c [ 108.355037][ T6791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.355056][ T6791] RSP: 002b:00007f56b4357030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.355075][ T6791] RAX: ffffffffffffffda RBX: 00007f56b5b35fa0 RCX: 00007f56b58ed63c [ 108.355088][ T6791] RDX: 000000000000000f RSI: 00007f56b43570a0 RDI: 0000000000000007 [ 108.355100][ T6791] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 108.355160][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.355172][ T6791] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 108.355192][ T6791] [ 108.568318][ T6773] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.596640][ T6795] sd 0:0:1:0: device reset [ 108.601949][ T6795] netlink: 'syz.4.1151': attribute type 21 has an invalid length. [ 108.610586][ T6795] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 108.670917][ T6802] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.748916][ T6802] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.820235][ T6808] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 108.830883][ T6808] team0: Port device geneve1 added [ 108.837100][ T6682] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.845835][ T6682] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.857662][ T6802] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.869928][ T6682] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.878288][ T6808] tipc: Enabling of bearer rejected, failed to enable media [ 108.888266][ T6682] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.925332][ T6802] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.977861][ T6678] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991367][ T6678] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.007175][ T6678] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.015638][ T6678] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.058955][ T6822] FAULT_INJECTION: forcing a failure. [ 109.058955][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 109.071776][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.4.1161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.071873][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.071889][ T6822] Call Trace: [ 109.071897][ T6822] [ 109.071906][ T6822] __dump_stack+0x1d/0x30 [ 109.071987][ T6822] dump_stack_lvl+0xe8/0x140 [ 109.072012][ T6822] dump_stack+0x15/0x1b [ 109.072061][ T6822] should_fail_ex+0x265/0x280 [ 109.072091][ T6822] should_failslab+0x8c/0xb0 [ 109.072120][ T6822] __kmalloc_noprof+0xa5/0x3e0 [ 109.072205][ T6822] ? io_uring_alloc_async_data+0x48/0xa0 [ 109.072312][ T6822] ? __io_alloc_req_refill+0x12e/0x1d0 [ 109.072336][ T6822] io_uring_alloc_async_data+0x48/0xa0 [ 109.072365][ T6822] io_waitid_prep+0xbd/0x160 [ 109.072396][ T6822] io_submit_sqes+0x5ec/0x1060 [ 109.072483][ T6822] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 109.072520][ T6822] ? 0xffffffff81000000 [ 109.072537][ T6822] ? __rcu_read_unlock+0x4f/0x70 [ 109.072563][ T6822] ? get_pid_task+0x96/0xd0 [ 109.072631][ T6822] ? proc_fail_nth_write+0x13b/0x160 [ 109.072660][ T6822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.072689][ T6822] ? vfs_write+0x7e8/0x960 [ 109.072711][ T6822] ? __rcu_read_unlock+0x4f/0x70 [ 109.072755][ T6822] ? __fget_files+0x184/0x1c0 [ 109.072791][ T6822] ? fput+0x8f/0xc0 [ 109.072824][ T6822] __x64_sys_io_uring_enter+0x78/0x90 [ 109.072851][ T6822] x64_sys_call+0x2de1/0x2ff0 [ 109.072886][ T6822] do_syscall_64+0xd2/0x200 [ 109.072920][ T6822] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.072944][ T6822] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.072979][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.073000][ T6822] RIP: 0033:0x7f56b58eec29 [ 109.073015][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.073033][ T6822] RSP: 002b:00007f56b4357038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 109.073053][ T6822] RAX: ffffffffffffffda RBX: 00007f56b5b35fa0 RCX: 00007f56b58eec29 [ 109.073065][ T6822] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 109.073086][ T6822] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 109.073099][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.073111][ T6822] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 109.073130][ T6822] [ 109.353585][ T6831] loop4: detected capacity change from 0 to 512 [ 109.474530][ T6844] loop4: detected capacity change from 0 to 512 [ 109.489062][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.501994][ T6844] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.552380][ T6844] lo speed is unknown, defaulting to 1000 [ 109.647672][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.675239][ T6856] netlink: 'syz.4.1171': attribute type 13 has an invalid length. [ 109.797347][ T3985] lo speed is unknown, defaulting to 1000 [ 109.803252][ T3985] syz2: Port: 1 Link DOWN [ 109.807984][ T6634] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.813858][ T6865] 9pnet: Could not find request transport: 0xffffffffffffffff [ 109.816663][ T6634] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.842050][ T6634] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.851096][ T6634] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.999325][ T6678] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.016323][ T6678] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.024919][ T6678] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.037691][ T6682] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.085148][ T6876] syzkaller0: entered promiscuous mode [ 110.091063][ T6876] syzkaller0: entered allmulticast mode [ 110.099999][ T6876] tipc: Started in network mode [ 110.105272][ T6876] tipc: Node identity 4e50a0c64c43, cluster identity 4711 [ 110.112535][ T6876] tipc: Enabled bearer , priority 0 [ 110.216196][ T6891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6891 comm=syz.5.1184 [ 110.229040][ T6891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6891 comm=syz.5.1184 [ 110.235015][ T6893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6893 comm=syz.0.1185 [ 110.254766][ T6893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6893 comm=syz.0.1185 [ 110.309362][ T6897] FAULT_INJECTION: forcing a failure. [ 110.309362][ T6897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 110.323144][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.323178][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.323265][ T6897] Call Trace: [ 110.323274][ T6897] [ 110.323283][ T6897] __dump_stack+0x1d/0x30 [ 110.323381][ T6897] dump_stack_lvl+0xe8/0x140 [ 110.323404][ T6897] dump_stack+0x15/0x1b [ 110.323424][ T6897] should_fail_ex+0x265/0x280 [ 110.323453][ T6897] should_fail_alloc_page+0xf2/0x100 [ 110.323545][ T6897] __alloc_frozen_pages_noprof+0xff/0x360 [ 110.323585][ T6897] alloc_pages_mpol+0xb3/0x250 [ 110.323635][ T6897] alloc_pages_noprof+0x90/0x130 [ 110.323690][ T6897] __pud_alloc+0x47/0x4c0 [ 110.323720][ T6897] handle_mm_fault+0x1882/0x2c20 [ 110.323757][ T6897] ? check_vma_flags+0x26e/0x340 [ 110.323784][ T6897] __get_user_pages+0x102e/0x1fa0 [ 110.323842][ T6897] ? vma_link+0x1d4/0x220 [ 110.323871][ T6897] get_user_pages_remote+0x1d5/0x6d0 [ 110.323901][ T6897] ? down_read+0x77/0xe0 [ 110.323940][ T6897] get_arg_page+0x8e/0x1e0 [ 110.324006][ T6897] copy_string_kernel+0x12c/0x1f0 [ 110.324027][ T6897] do_execveat_common+0x5ad/0x750 [ 110.324050][ T6897] ? getname_flags+0x154/0x3b0 [ 110.324160][ T6897] __x64_sys_execveat+0x73/0x90 [ 110.324188][ T6897] x64_sys_call+0x1fec/0x2ff0 [ 110.324214][ T6897] do_syscall_64+0xd2/0x200 [ 110.324510][ T6897] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.324541][ T6897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.324641][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.324688][ T6897] RIP: 0033:0x7f9ccf51ec29 [ 110.324707][ T6897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.324728][ T6897] RSP: 002b:00007f9ccdf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 110.324749][ T6897] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51ec29 [ 110.324764][ T6897] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 110.324779][ T6897] RBP: 00007f9ccdf87090 R08: 0000000000001000 R09: 0000000000000000 [ 110.324794][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.324883][ T6897] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 110.324902][ T6897] [ 110.542724][ T6903] __nla_validate_parse: 13 callbacks suppressed [ 110.542746][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1184'. [ 110.833106][ T6874] tipc: Resetting bearer [ 110.863778][ T6874] tipc: Disabling bearer [ 111.452498][ T6909] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.488342][ T6909] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.543952][ T6916] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1192'. [ 111.555110][ T6909] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.574478][ T29] kauditd_printk_skb: 4867 callbacks suppressed [ 111.574494][ T29] audit: type=1400 audit(1758317273.881:9221): avc: denied { bind } for pid=6917 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.613194][ T6920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=6920 comm=syz.0.1194 [ 111.628424][ T6909] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.668931][ T29] audit: type=1326 audit(1758317273.981:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 111.693132][ T29] audit: type=1326 audit(1758317273.981:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 111.722008][ T29] audit: type=1326 audit(1758317274.031:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 111.746033][ T29] audit: type=1326 audit(1758317274.031:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6928 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f291e3914e5 code=0x7ffc0000 [ 111.811646][ T6935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6935 comm=syz.0.1200 [ 111.815982][ T6661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.824446][ T6935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6935 comm=syz.0.1200 [ 111.851948][ T6661] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.872133][ T29] audit: type=1326 audit(1758317274.181:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6928 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 111.878967][ T6661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.906306][ T6661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.918869][ T29] audit: type=1326 audit(1758317274.211:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 111.942714][ T29] audit: type=1326 audit(1758317274.211:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f291e35ec29 code=0x7ffc0000 [ 112.057433][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 112.517716][ T6941] netlink: 'syz.5.1202': attribute type 21 has an invalid length. [ 112.525734][ T6941] netlink: 'syz.5.1202': attribute type 1 has an invalid length. [ 112.533718][ T6941] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1202'. [ 112.594203][ T6947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5888 sclass=netlink_route_socket pid=6947 comm=syz.5.1205 [ 112.763241][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 112.779087][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.788368][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.797579][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 112.806797][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 112.817028][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 112.826392][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 112.914749][ T6964] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 112.942316][ T6964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.329776][ T6978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6978 comm=syz.0.1217 [ 113.342713][ T6978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6978 comm=syz.0.1217 [ 113.538127][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 114.267664][ T6993] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.333112][ T6993] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.366021][ T6996] loop1: detected capacity change from 0 to 128 [ 114.373248][ T6996] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 114.384201][ T6993] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.398394][ T6996] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 114.412963][ T6996] EXT4-fs (loop1): shut down requested (0) [ 114.428811][ T6993] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.443392][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.485667][ T6661] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.500891][ T6661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.520449][ T6661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.547211][ T6661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.679306][ T7007] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 114.995138][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 115.165198][ T29] audit: type=1326 audit(1758317277.471:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b58eec29 code=0x7ffc0000 [ 115.189318][ T29] audit: type=1326 audit(1758317277.471:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b58eec29 code=0x7ffc0000 [ 115.279975][ T7031] loop4: detected capacity change from 0 to 128 [ 115.287708][ T7031] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 115.300665][ T7031] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 115.314926][ T7031] EXT4-fs (loop4): shut down requested (0) [ 115.334101][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.588680][ T7044] __nla_validate_parse: 2 callbacks suppressed [ 115.588701][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 115.731709][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 115.779896][ T7061] FAULT_INJECTION: forcing a failure. [ 115.779896][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.793352][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.1.1249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.793383][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.793398][ T7061] Call Trace: [ 115.793406][ T7061] [ 115.793414][ T7061] __dump_stack+0x1d/0x30 [ 115.793439][ T7061] dump_stack_lvl+0xe8/0x140 [ 115.793458][ T7061] dump_stack+0x15/0x1b [ 115.793509][ T7061] should_fail_ex+0x265/0x280 [ 115.793540][ T7061] should_fail+0xb/0x20 [ 115.793647][ T7061] should_fail_usercopy+0x1a/0x20 [ 115.793743][ T7061] _copy_to_user+0x20/0xa0 [ 115.793974][ T7061] simple_read_from_buffer+0xb5/0x130 [ 115.793998][ T7061] proc_fail_nth_read+0x10e/0x150 [ 115.794093][ T7061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.794120][ T7061] vfs_read+0x1a5/0x770 [ 115.794144][ T7061] ? __rcu_read_unlock+0x4f/0x70 [ 115.794188][ T7061] ? __fget_files+0x184/0x1c0 [ 115.794222][ T7061] ksys_read+0xda/0x1a0 [ 115.794251][ T7061] __x64_sys_read+0x40/0x50 [ 115.794279][ T7061] x64_sys_call+0x27bc/0x2ff0 [ 115.794321][ T7061] do_syscall_64+0xd2/0x200 [ 115.794362][ T7061] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.794469][ T7061] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.794517][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.794544][ T7061] RIP: 0033:0x7f9ccf51d63c [ 115.794563][ T7061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.794586][ T7061] RSP: 002b:00007f9ccdf87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.794650][ T7061] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51d63c [ 115.794666][ T7061] RDX: 000000000000000f RSI: 00007f9ccdf870a0 RDI: 0000000000000006 [ 115.794681][ T7061] RBP: 00007f9ccdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 115.794696][ T7061] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 115.794712][ T7061] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 115.794760][ T7061] [ 115.801206][ T7067] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 116.046738][ T7074] selinux_netlink_send: 2 callbacks suppressed [ 116.046758][ T7074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7074 comm=syz.4.1254 [ 116.066095][ T7074] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7074 comm=syz.4.1254 [ 116.085731][ T7072] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1253' sets config #1 [ 116.099835][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 116.115559][ T7072] team1: entered promiscuous mode [ 116.121201][ T7072] team1: entered allmulticast mode [ 116.272423][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1255'. [ 116.316280][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 116.329668][ T7085] FAULT_INJECTION: forcing a failure. [ 116.329668][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.344333][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.5.1258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.344367][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.344384][ T7085] Call Trace: [ 116.344392][ T7085] [ 116.344403][ T7085] __dump_stack+0x1d/0x30 [ 116.344430][ T7085] dump_stack_lvl+0xe8/0x140 [ 116.344478][ T7085] dump_stack+0x15/0x1b [ 116.344497][ T7085] should_fail_ex+0x265/0x280 [ 116.344529][ T7085] should_fail+0xb/0x20 [ 116.344552][ T7085] should_fail_usercopy+0x1a/0x20 [ 116.344584][ T7085] _copy_from_user+0x1c/0xb0 [ 116.344652][ T7085] __copy_msghdr+0x244/0x300 [ 116.344707][ T7085] ___sys_sendmsg+0x109/0x1d0 [ 116.344760][ T7085] __x64_sys_sendmsg+0xd4/0x160 [ 116.344804][ T7085] x64_sys_call+0x191e/0x2ff0 [ 116.344825][ T7085] do_syscall_64+0xd2/0x200 [ 116.344876][ T7085] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.344908][ T7085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.344941][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.344967][ T7085] RIP: 0033:0x7f291e35ec29 [ 116.345020][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.345040][ T7085] RSP: 002b:00007f291cdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.345058][ T7085] RAX: ffffffffffffffda RBX: 00007f291e5a5fa0 RCX: 00007f291e35ec29 [ 116.345071][ T7085] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 116.345156][ T7085] RBP: 00007f291cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.345171][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.345186][ T7085] R13: 00007f291e5a6038 R14: 00007f291e5a5fa0 R15: 00007fffa0fc26d8 [ 116.345210][ T7085] [ 116.665945][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 116.665962][ T29] audit: type=1400 audit(1758317278.971:9272): avc: denied { execute } for pid=7087 comm="syz.5.1259" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.783310][ T7095] FAULT_INJECTION: forcing a failure. [ 116.783310][ T7095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.796950][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.5.1262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.797016][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.797104][ T7095] Call Trace: [ 116.797150][ T7095] [ 116.797161][ T7095] __dump_stack+0x1d/0x30 [ 116.797273][ T7095] dump_stack_lvl+0xe8/0x140 [ 116.797299][ T7095] dump_stack+0x15/0x1b [ 116.797320][ T7095] should_fail_ex+0x265/0x280 [ 116.797426][ T7095] should_fail+0xb/0x20 [ 116.797528][ T7095] should_fail_usercopy+0x1a/0x20 [ 116.797562][ T7095] _copy_from_user+0x1c/0xb0 [ 116.797603][ T7095] restore_altstack+0x4b/0x2d0 [ 116.797636][ T7095] ? __set_task_blocked+0x23a/0x2a0 [ 116.797702][ T7095] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 116.797769][ T7095] ? _raw_spin_unlock_irq+0x26/0x50 [ 116.797800][ T7095] ? signal_setup_done+0x266/0x290 [ 116.797823][ T7095] ? xfd_validate_state+0x45/0xf0 [ 116.797915][ T7095] ? fpu__clear_user_states+0x63/0x1e0 [ 116.798051][ T7095] ? fpregs_mark_activate+0x66/0x140 [ 116.798081][ T7095] ? fpu__clear_user_states+0x63/0x1e0 [ 116.798111][ T7095] ? arch_do_signal_or_restart+0x2f3/0x480 [ 116.798203][ T7095] ? __rcu_read_unlock+0x4f/0x70 [ 116.798233][ T7095] x64_sys_call+0x2d3c/0x2ff0 [ 116.798262][ T7095] do_syscall_64+0xd2/0x200 [ 116.798297][ T7095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.798386][ T7095] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.798424][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.798462][ T7095] RIP: 0033:0x7f291e2fae09 [ 116.798478][ T7095] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 116.798496][ T7095] RSP: 002b:00007f291cdc6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 116.798516][ T7095] RAX: ffffffffffffffda RBX: 00007f291e5a5fa0 RCX: 00007f291e2fae09 [ 116.798532][ T7095] RDX: 00007f291cdc6a80 RSI: 00007f291cdc6bb0 RDI: 0000000000000021 [ 116.798556][ T7095] RBP: 00007f291cdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.798573][ T7095] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 116.798588][ T7095] R13: 00007f291e5a6038 R14: 00007f291e5a5fa0 R15: 00007fffa0fc26d8 [ 116.798612][ T7095] [ 116.868913][ T7102] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1265'. [ 116.884705][ T29] audit: type=1400 audit(1758317279.121:9273): avc: denied { ioctl } for pid=7099 comm="syz.1.1265" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23854 ioctlcmd=0x4b46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 117.149628][ T7114] 9pnet: Could not find request transport: t [ 117.167807][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 117.190770][ T7100] lo speed is unknown, defaulting to 1000 [ 117.204564][ T7119] FAULT_INJECTION: forcing a failure. [ 117.204564][ T7119] name failslab, interval 1, probability 0, space 0, times 0 [ 117.218342][ T7119] CPU: 1 UID: 0 PID: 7119 Comm: syz.0.1268 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.218426][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.218496][ T7119] Call Trace: [ 117.218502][ T7119] [ 117.218509][ T7119] __dump_stack+0x1d/0x30 [ 117.218531][ T7119] dump_stack_lvl+0xe8/0x140 [ 117.218549][ T7119] dump_stack+0x15/0x1b [ 117.218569][ T7119] should_fail_ex+0x265/0x280 [ 117.218638][ T7119] should_failslab+0x8c/0xb0 [ 117.218670][ T7119] kmem_cache_alloc_noprof+0x50/0x310 [ 117.218736][ T7119] ? skb_clone+0x151/0x1f0 [ 117.218771][ T7119] skb_clone+0x151/0x1f0 [ 117.218804][ T7119] __netlink_deliver_tap+0x2c9/0x500 [ 117.218889][ T7119] ? netlink_attachskb+0x2d0/0x610 [ 117.218915][ T7119] netlink_sendskb+0x126/0x150 [ 117.218942][ T7119] netlink_unicast+0x2a2/0x690 [ 117.219021][ T7119] netlink_ack+0x4c8/0x500 [ 117.219047][ T7119] netlink_rcv_skb+0x192/0x220 [ 117.219072][ T7119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.219133][ T7119] rtnetlink_rcv+0x1c/0x30 [ 117.219169][ T7119] netlink_unicast+0x5bd/0x690 [ 117.219225][ T7119] netlink_sendmsg+0x58b/0x6b0 [ 117.219266][ T7119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.219299][ T7119] __sock_sendmsg+0x145/0x180 [ 117.219331][ T7119] ____sys_sendmsg+0x31e/0x4e0 [ 117.219496][ T7119] ___sys_sendmsg+0x17b/0x1d0 [ 117.219606][ T7119] __x64_sys_sendmsg+0xd4/0x160 [ 117.219757][ T7119] x64_sys_call+0x191e/0x2ff0 [ 117.219779][ T7119] do_syscall_64+0xd2/0x200 [ 117.219816][ T7119] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.219907][ T7119] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 117.219937][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.220018][ T7119] RIP: 0033:0x7f741cd8ec29 [ 117.220033][ T7119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.220053][ T7119] RSP: 002b:00007f741b7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.220077][ T7119] RAX: ffffffffffffffda RBX: 00007f741cfd5fa0 RCX: 00007f741cd8ec29 [ 117.220093][ T7119] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 117.220104][ T7119] RBP: 00007f741b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.220116][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.220170][ T7119] R13: 00007f741cfd6038 R14: 00007f741cfd5fa0 R15: 00007ffc47410d68 [ 117.220192][ T7119] [ 117.496187][ T3985] IPVS: starting estimator thread 0... [ 117.513426][ T7125] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1271'. [ 117.587018][ T7126] IPVS: using max 2208 ests per chain, 110400 per kthread [ 117.608554][ T29] audit: type=1326 audit(1758317279.911:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.620510][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 117.633045][ T29] audit: type=1326 audit(1758317279.921:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.664474][ T29] audit: type=1326 audit(1758317279.921:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.688837][ T29] audit: type=1326 audit(1758317279.921:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.713476][ T29] audit: type=1326 audit(1758317279.921:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.737582][ T29] audit: type=1326 audit(1758317279.921:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.761487][ T29] audit: type=1326 audit(1758317279.921:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.787737][ T29] audit: type=1326 audit(1758317280.001:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7130 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 117.894074][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.901257][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.918717][ T7100] bridge_slave_0: entered allmulticast mode [ 117.930539][ T7100] bridge_slave_0: entered promiscuous mode [ 117.943754][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.950965][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.970321][ T7100] bridge_slave_1: entered allmulticast mode [ 118.045250][ T7100] bridge_slave_1: entered promiscuous mode [ 118.080076][ T7158] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.098416][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7158 comm=syz.5.1279 [ 118.113011][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.198521][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.258039][ T7100] team0: Port device team_slave_0 added [ 118.267665][ T7165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7165 comm=syz.1.1281 [ 118.278092][ T7100] team0: Port device team_slave_1 added [ 118.281052][ T7165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7165 comm=syz.1.1281 [ 118.314831][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.322330][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.349823][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.449247][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.456415][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.483451][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.637796][ T7100] hsr_slave_0: entered promiscuous mode [ 118.644364][ T7100] hsr_slave_1: entered promiscuous mode [ 118.652283][ T7100] debugfs: 'hsr0' already exists in 'hsr' [ 118.658372][ T7100] Cannot create hsr debugfs directory [ 118.732460][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 118.881772][ T7100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.935532][ T7100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.946471][ T7100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.955901][ T7100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.975110][ T7176] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 119.036237][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.061556][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.080263][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.087537][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.131542][ T7100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.142023][ T7100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.156219][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.163681][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.195789][ T7195] rdma_op ffff8881042f9d80 conn xmit_rdma 0000000000000000 [ 119.350626][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.633663][ T7100] veth0_vlan: entered promiscuous mode [ 119.654807][ T7100] veth1_vlan: entered promiscuous mode [ 119.683521][ T7229] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.751536][ T7100] veth0_macvtap: entered promiscuous mode [ 119.760044][ T7100] veth1_macvtap: entered promiscuous mode [ 119.774032][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.788045][ T7229] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.818540][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.832827][ T6678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.867764][ T6678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.877713][ T7229] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.893462][ T6661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.902903][ T6661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.918852][ T7229] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.921901][ T7239] hub 8-0:1.0: USB hub found [ 119.940756][ T7239] hub 8-0:1.0: 8 ports detected [ 119.983096][ T7250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7250 comm=syz.0.1302 [ 119.995991][ T7250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7250 comm=syz.0.1302 [ 120.010577][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 120.048291][ T6634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.078678][ T6634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.087615][ T6634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.096707][ T6634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.371981][ T7256] FAULT_INJECTION: forcing a failure. [ 120.371981][ T7256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 120.386257][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.4.1305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.386286][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.386299][ T7256] Call Trace: [ 120.386306][ T7256] [ 120.386349][ T7256] __dump_stack+0x1d/0x30 [ 120.386509][ T7256] dump_stack_lvl+0xe8/0x140 [ 120.386533][ T7256] dump_stack+0x15/0x1b [ 120.386553][ T7256] should_fail_ex+0x265/0x280 [ 120.386577][ T7256] should_fail_alloc_page+0xf2/0x100 [ 120.386610][ T7256] __alloc_frozen_pages_noprof+0xff/0x360 [ 120.386707][ T7256] alloc_pages_mpol+0xb3/0x250 [ 120.386750][ T7256] alloc_migration_target_by_mpol+0x11b/0x280 [ 120.386775][ T7256] migrate_pages_batch+0x306/0x1ae0 [ 120.386843][ T7256] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 120.386882][ T7256] ? migrate_pages+0xcad/0x1770 [ 120.386978][ T7256] migrate_pages+0xf5f/0x1770 [ 120.387038][ T7256] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 120.387079][ T7256] __se_sys_mbind+0x975/0xac0 [ 120.387196][ T7256] __x64_sys_mbind+0x78/0x90 [ 120.387225][ T7256] x64_sys_call+0x2932/0x2ff0 [ 120.387246][ T7256] do_syscall_64+0xd2/0x200 [ 120.387314][ T7256] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.387339][ T7256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 120.387409][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.387445][ T7256] RIP: 0033:0x7f56b58eec29 [ 120.387466][ T7256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.387486][ T7256] RSP: 002b:00007f56b4357038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 120.387512][ T7256] RAX: ffffffffffffffda RBX: 00007f56b5b35fa0 RCX: 00007f56b58eec29 [ 120.387527][ T7256] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 120.387540][ T7256] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000002 [ 120.387558][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.387631][ T7256] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 120.387656][ T7256] [ 120.718839][ T7265] loop5: detected capacity change from 0 to 512 [ 120.769061][ T7265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.796843][ T7265] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.829542][ T7270] loop4: detected capacity change from 0 to 1024 [ 120.839760][ T7265] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1307: corrupted inode contents [ 120.847344][ T7270] EXT4-fs: Ignoring removed orlov option [ 120.869578][ T7265] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.1307: mark_inode_dirty error [ 120.869729][ T7270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.904152][ T7265] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1307: corrupted inode contents [ 120.937180][ T7265] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1307: mark_inode_dirty error [ 120.954092][ T7265] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1307: mark inode dirty (error -117) [ 120.977294][ T7265] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 121.000404][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.025146][ T7279] loop1: detected capacity change from 0 to 1024 [ 121.032809][ T7279] EXT4-fs: Ignoring removed orlov option [ 121.042088][ T7279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.080234][ T7284] netlink: 'syz.6.1311': attribute type 1 has an invalid length. [ 121.123391][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.234695][ T7293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.270922][ T7293] loop5: detected capacity change from 0 to 128 [ 121.292228][ T7293] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 121.300582][ T7293] FAT-fs (loop5): Filesystem has been set read-only [ 121.324481][ T7293] bio_check_eod: 628 callbacks suppressed [ 121.324503][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.324503][ T7293] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 121.350954][ T7293] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 121.359717][ T7293] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 121.385274][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.385274][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.427729][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.427729][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.449551][ T7302] loop6: detected capacity change from 0 to 2048 [ 121.470034][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.470034][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.486322][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.486322][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.501351][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.501351][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.516182][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.516182][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.529980][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.529980][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.546209][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.546209][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.559876][ T7311] wg2: entered promiscuous mode [ 121.565088][ T7311] wg2: entered allmulticast mode [ 121.568668][ T7293] syz.5.1316: attempt to access beyond end of device [ 121.568668][ T7293] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 121.609952][ T7314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7314 comm=syz.0.1324 [ 121.643993][ T7318] FAULT_INJECTION: forcing a failure. [ 121.643993][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.657699][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.6.1326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.657731][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.657822][ T7318] Call Trace: [ 121.657829][ T7318] [ 121.657838][ T7318] __dump_stack+0x1d/0x30 [ 121.657905][ T7318] dump_stack_lvl+0xe8/0x140 [ 121.657954][ T7318] dump_stack+0x15/0x1b [ 121.657972][ T7318] should_fail_ex+0x265/0x280 [ 121.658061][ T7318] should_fail+0xb/0x20 [ 121.658104][ T7318] should_fail_usercopy+0x1a/0x20 [ 121.658135][ T7318] _copy_from_user+0x1c/0xb0 [ 121.658174][ T7318] __sys_bpf+0x178/0x7b0 [ 121.658208][ T7318] __x64_sys_bpf+0x41/0x50 [ 121.658231][ T7318] x64_sys_call+0x2aea/0x2ff0 [ 121.658255][ T7318] do_syscall_64+0xd2/0x200 [ 121.658330][ T7318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.658418][ T7318] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.658448][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.658469][ T7318] RIP: 0033:0x7effb0a2ec29 [ 121.658513][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.658536][ T7318] RSP: 002b:00007effaf48f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.658620][ T7318] RAX: ffffffffffffffda RBX: 00007effb0c75fa0 RCX: 00007effb0a2ec29 [ 121.658637][ T7318] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 121.658652][ T7318] RBP: 00007effaf48f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.658668][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.658682][ T7318] R13: 00007effb0c76038 R14: 00007effb0c75fa0 R15: 00007ffdbcb9c5b8 [ 121.658716][ T7318] [ 121.895440][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 121.895496][ T29] audit: type=1400 audit(1758317284.201:9551): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.896644][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.942155][ T29] audit: type=1326 audit(1758317284.251:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 121.966586][ T29] audit: type=1326 audit(1758317284.251:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 121.992637][ T7327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7327 comm=syz.6.1328 [ 122.005525][ T7327] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7327 comm=syz.6.1328 [ 122.021966][ T7331] FAULT_INJECTION: forcing a failure. [ 122.021966][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.034470][ T29] audit: type=1326 audit(1758317284.251:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.036072][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.0.1330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.036110][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.036140][ T7331] Call Trace: [ 122.036148][ T7331] [ 122.036159][ T7331] __dump_stack+0x1d/0x30 [ 122.036190][ T7331] dump_stack_lvl+0xe8/0x140 [ 122.036259][ T7331] dump_stack+0x15/0x1b [ 122.036283][ T7331] should_fail_ex+0x265/0x280 [ 122.036339][ T7331] should_fail+0xb/0x20 [ 122.036415][ T7331] should_fail_usercopy+0x1a/0x20 [ 122.036450][ T7331] _copy_to_user+0x20/0xa0 [ 122.036492][ T7331] __se_sys_mincore+0x350/0x490 [ 122.036552][ T7331] __x64_sys_mincore+0x43/0x50 [ 122.036589][ T7331] x64_sys_call+0x2a50/0x2ff0 [ 122.036619][ T7331] do_syscall_64+0xd2/0x200 [ 122.036722][ T7331] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.036803][ T7331] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.036845][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.036875][ T7331] RIP: 0033:0x7f741cd8ec29 [ 122.036902][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.036965][ T7331] RSP: 002b:00007f741b7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 122.036991][ T7331] RAX: ffffffffffffffda RBX: 00007f741cfd5fa0 RCX: 00007f741cd8ec29 [ 122.037008][ T7331] RDX: 0000200000000200 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 122.037026][ T7331] RBP: 00007f741b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.037043][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.037060][ T7331] R13: 00007f741cfd6038 R14: 00007f741cfd5fa0 R15: 00007ffc47410d68 [ 122.037086][ T7331] [ 122.237485][ T29] audit: type=1326 audit(1758317284.251:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.261840][ T29] audit: type=1326 audit(1758317284.251:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.285989][ T29] audit: type=1326 audit(1758317284.251:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.286100][ T7334] __nla_validate_parse: 1 callbacks suppressed [ 122.286117][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1328'. [ 122.310638][ T29] audit: type=1326 audit(1758317284.251:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.352173][ T29] audit: type=1326 audit(1758317284.251:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.375986][ T29] audit: type=1326 audit(1758317284.251:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f741cd8ec29 code=0x7ffc0000 [ 122.505482][ T7340] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 122.591260][ T7353] loop1: detected capacity change from 0 to 512 [ 122.604803][ T7353] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.1336: Parent and EA inode have the same ino 15 [ 122.623228][ T7353] EXT4-fs (loop1): 1 orphan inode deleted [ 122.638290][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.644172][ T7358] loop5: detected capacity change from 0 to 512 [ 122.709167][ T7358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.727963][ T7353] 9pnet_fd: Insufficient options for proto=fd [ 122.745224][ T7358] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.781176][ T7368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1343'. [ 122.791591][ T7368] FAULT_INJECTION: forcing a failure. [ 122.791591][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.805357][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.4.1343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.805452][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.805465][ T7368] Call Trace: [ 122.805472][ T7368] [ 122.805482][ T7368] __dump_stack+0x1d/0x30 [ 122.805508][ T7368] dump_stack_lvl+0xe8/0x140 [ 122.805533][ T7368] dump_stack+0x15/0x1b [ 122.805551][ T7368] should_fail_ex+0x265/0x280 [ 122.805623][ T7368] should_fail+0xb/0x20 [ 122.805645][ T7368] should_fail_usercopy+0x1a/0x20 [ 122.805733][ T7368] _copy_from_user+0x1c/0xb0 [ 122.805775][ T7368] kstrtouint_from_user+0x69/0xf0 [ 122.805829][ T7368] ? 0xffffffff81000000 [ 122.805862][ T7368] ? selinux_file_permission+0x1e4/0x320 [ 122.805893][ T7368] proc_fail_nth_write+0x50/0x160 [ 122.805928][ T7368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.806044][ T7368] vfs_write+0x266/0x960 [ 122.806071][ T7368] ? vfs_read+0x4e6/0x770 [ 122.806097][ T7368] ? __rcu_read_unlock+0x4f/0x70 [ 122.806151][ T7368] ? __fget_files+0x184/0x1c0 [ 122.806222][ T7368] ksys_write+0xda/0x1a0 [ 122.806384][ T7368] __x64_sys_write+0x40/0x50 [ 122.806407][ T7368] x64_sys_call+0x27fe/0x2ff0 [ 122.806428][ T7368] do_syscall_64+0xd2/0x200 [ 122.806504][ T7368] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.806541][ T7368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.806579][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.806606][ T7368] RIP: 0033:0x7f56b58ed6df [ 122.806624][ T7368] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 122.806645][ T7368] RSP: 002b:00007f56b4357030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.806706][ T7368] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f56b58ed6df [ 122.806718][ T7368] RDX: 0000000000000001 RSI: 00007f56b43570a0 RDI: 0000000000000007 [ 122.806733][ T7368] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 122.806799][ T7368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 122.806811][ T7368] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 122.806835][ T7368] [ 123.051989][ T7369] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1338: corrupted inode contents [ 123.064700][ T7369] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.1338: mark_inode_dirty error [ 123.087053][ T7369] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1338: corrupted inode contents [ 123.103122][ T7369] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1338: mark_inode_dirty error [ 123.123647][ T7369] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1338: mark inode dirty (error -117) [ 123.138582][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.148716][ T7369] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 123.187947][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.224168][ T7385] pim6reg: entered allmulticast mode [ 123.251818][ T7385] pim6reg: left allmulticast mode [ 123.367143][ T7396] lo speed is unknown, defaulting to 1000 [ 123.456711][ T7402] FAULT_INJECTION: forcing a failure. [ 123.456711][ T7402] name failslab, interval 1, probability 0, space 0, times 0 [ 123.470133][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.6.1351 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.470190][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.470206][ T7402] Call Trace: [ 123.470214][ T7402] [ 123.470223][ T7402] __dump_stack+0x1d/0x30 [ 123.470250][ T7402] dump_stack_lvl+0xe8/0x140 [ 123.470275][ T7402] dump_stack+0x15/0x1b [ 123.470296][ T7402] should_fail_ex+0x265/0x280 [ 123.470409][ T7402] should_failslab+0x8c/0xb0 [ 123.470441][ T7402] kmem_cache_alloc_node_noprof+0x57/0x320 [ 123.470515][ T7402] ? __alloc_skb+0x101/0x320 [ 123.470545][ T7402] __alloc_skb+0x101/0x320 [ 123.470570][ T7402] ? audit_log_start+0x365/0x6c0 [ 123.470670][ T7402] audit_log_start+0x380/0x6c0 [ 123.470708][ T7402] ? __filename_parentat+0x46/0x3f0 [ 123.470857][ T7402] audit_seccomp+0x48/0x100 [ 123.470967][ T7402] ? __seccomp_filter+0x68c/0x10d0 [ 123.471117][ T7402] __seccomp_filter+0x69d/0x10d0 [ 123.471147][ T7402] ? bpf_trace_run3+0x12c/0x1d0 [ 123.471177][ T7402] ? filename_create+0x78/0x230 [ 123.471195][ T7402] ? filename_create+0x92/0x230 [ 123.471218][ T7402] __secure_computing+0x82/0x150 [ 123.471303][ T7402] syscall_trace_enter+0xcf/0x1e0 [ 123.471350][ T7402] do_syscall_64+0xac/0x200 [ 123.471444][ T7402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.471468][ T7402] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.471532][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.471554][ T7402] RIP: 0033:0x7effb0a2d63c [ 123.471570][ T7402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.471628][ T7402] RSP: 002b:00007effaf48f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.471647][ T7402] RAX: ffffffffffffffda RBX: 00007effb0c75fa0 RCX: 00007effb0a2d63c [ 123.471721][ T7402] RDX: 000000000000000f RSI: 00007effaf48f0a0 RDI: 0000000000000004 [ 123.471768][ T7402] RBP: 00007effaf48f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.471788][ T7402] R10: 000000000000070c R11: 0000000000000246 R12: 0000000000000001 [ 123.471807][ T7402] R13: 00007effb0c76038 R14: 00007effb0c75fa0 R15: 00007ffdbcb9c5b8 [ 123.471830][ T7402] [ 123.831467][ T7424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7424 comm=syz.6.1358 [ 123.844651][ T7424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7424 comm=syz.6.1358 [ 123.923950][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 123.937544][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1360'. [ 124.023096][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1358'. [ 124.112064][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 124.129219][ T7437] netlink: 'syz.5.1362': attribute type 6 has an invalid length. [ 124.143725][ T7435] hsr_slave_1 (unregistering): left promiscuous mode [ 124.268962][ T7448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7448 comm=syz.5.1362 [ 124.293015][ T7448] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1362'. [ 124.298537][ T7435] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.317131][ T7437] Falling back ldisc for ttyS3. [ 124.334476][ T7452] netlink: 'syz.1.1366': attribute type 21 has an invalid length. [ 124.338639][ T7454] FAULT_INJECTION: forcing a failure. [ 124.338639][ T7454] name failslab, interval 1, probability 0, space 0, times 0 [ 124.343708][ T7452] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 124.355309][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.4.1367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.355352][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.355370][ T7454] Call Trace: [ 124.355379][ T7454] [ 124.355392][ T7454] __dump_stack+0x1d/0x30 [ 124.355468][ T7454] dump_stack_lvl+0xe8/0x140 [ 124.355495][ T7454] dump_stack+0x15/0x1b [ 124.355517][ T7454] should_fail_ex+0x265/0x280 [ 124.355552][ T7454] should_failslab+0x8c/0xb0 [ 124.355588][ T7454] __kvmalloc_node_noprof+0x123/0x4e0 [ 124.355642][ T7454] ? rhashtable_init_noprof+0x316/0x4f0 [ 124.355687][ T7454] rhashtable_init_noprof+0x316/0x4f0 [ 124.355754][ T7454] rhltable_init_noprof+0x1d/0x40 [ 124.355794][ T7454] nf_tables_newtable+0x522/0xea0 [ 124.355840][ T7454] nfnetlink_rcv+0xb96/0x1690 [ 124.355872][ T7454] ? __rcu_read_unlock+0x34/0x70 [ 124.355946][ T7454] netlink_unicast+0x5bd/0x690 [ 124.355986][ T7454] netlink_sendmsg+0x58b/0x6b0 [ 124.356031][ T7454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.356120][ T7454] __sock_sendmsg+0x145/0x180 [ 124.356166][ T7454] ____sys_sendmsg+0x31e/0x4e0 [ 124.356287][ T7454] ___sys_sendmsg+0x17b/0x1d0 [ 124.356351][ T7454] __x64_sys_sendmsg+0xd4/0x160 [ 124.356394][ T7454] x64_sys_call+0x191e/0x2ff0 [ 124.356486][ T7454] do_syscall_64+0xd2/0x200 [ 124.356531][ T7454] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.356566][ T7454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.356607][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.356682][ T7454] RIP: 0033:0x7f56b58eec29 [ 124.356703][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.356733][ T7454] RSP: 002b:00007f56b4357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.356835][ T7454] RAX: ffffffffffffffda RBX: 00007f56b5b35fa0 RCX: 00007f56b58eec29 [ 124.356854][ T7454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 124.356871][ T7454] RBP: 00007f56b4357090 R08: 0000000000000000 R09: 0000000000000000 [ 124.356893][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.356912][ T7454] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 124.356937][ T7454] [ 124.593610][ T7452] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1366'. [ 124.751273][ T7476] FAULT_INJECTION: forcing a failure. [ 124.751273][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 124.765271][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.1.1374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.765323][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.765335][ T7476] Call Trace: [ 124.765342][ T7476] [ 124.765352][ T7476] __dump_stack+0x1d/0x30 [ 124.765379][ T7476] dump_stack_lvl+0xe8/0x140 [ 124.765403][ T7476] dump_stack+0x15/0x1b [ 124.765438][ T7476] should_fail_ex+0x265/0x280 [ 124.765471][ T7476] should_failslab+0x8c/0xb0 [ 124.765572][ T7476] kmem_cache_alloc_noprof+0x50/0x310 [ 124.765600][ T7476] ? alloc_empty_file+0x76/0x200 [ 124.765709][ T7476] alloc_empty_file+0x76/0x200 [ 124.765739][ T7476] alloc_file_pseudo+0xc6/0x160 [ 124.765774][ T7476] anon_inode_getfile_fmode+0xa5/0x140 [ 124.765825][ T7476] do_signalfd4+0x162/0x2b0 [ 124.765960][ T7476] __x64_sys_signalfd+0xbe/0xf0 [ 124.766046][ T7476] x64_sys_call+0x2e7b/0x2ff0 [ 124.766077][ T7476] do_syscall_64+0xd2/0x200 [ 124.766119][ T7476] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.766194][ T7476] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 124.766324][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.766345][ T7476] RIP: 0033:0x7f9ccf51ec29 [ 124.766403][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.766428][ T7476] RSP: 002b:00007f9ccdf87038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 124.766453][ T7476] RAX: ffffffffffffffda RBX: 00007f9ccf765fa0 RCX: 00007f9ccf51ec29 [ 124.766508][ T7476] RDX: 0000000000000008 RSI: 0000200000000180 RDI: ffffffffffffffff [ 124.766525][ T7476] RBP: 00007f9ccdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 124.766540][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.766556][ T7476] R13: 00007f9ccf766038 R14: 00007f9ccf765fa0 R15: 00007ffd12fd3ee8 [ 124.766598][ T7476] [ 124.998650][ T7482] loop5: detected capacity change from 0 to 512 [ 125.023228][ T7482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.039758][ T7482] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.054817][ T7482] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1375: corrupted inode contents [ 125.073830][ T7482] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.1375: mark_inode_dirty error [ 125.079517][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1378'. [ 125.088196][ T7497] loop9: detected capacity change from 0 to 7 [ 125.097482][ T7482] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1375: corrupted inode contents [ 125.101820][ T7497] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.121655][ T7497] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.121749][ T7495] macvtap0: refused to change device tx_queue_len [ 125.129818][ T7497] loop9: unable to read partition table [ 125.129896][ T7497] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 125.129896][ T7497] ) failed (rc=-5) [ 125.158191][ T7482] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1375: mark_inode_dirty error [ 125.166400][ T7500] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.173349][ T7499] loop6: detected capacity change from 0 to 512 [ 125.187127][ T7500] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.203987][ T7500] Buffer I/O error on dev loop9, logical block 0, async page read [ 125.217467][ T7482] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1375: mark inode dirty (error -117) [ 125.233131][ T7482] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 125.247086][ T7499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.269897][ T7499] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.271205][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.327895][ T7100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.532970][ T7531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7531 comm=syz.6.1388 [ 125.545971][ T7531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7531 comm=syz.6.1388 [ 125.606631][ T7535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1390'. [ 125.715112][ T7537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7537 comm=syz.0.1391 [ 125.728169][ T7537] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7537 comm=syz.0.1391 [ 126.139805][ T7543] netlink: 'syz.0.1392': attribute type 21 has an invalid length. [ 126.149803][ T7543] netlink: 'syz.0.1392': attribute type 1 has an invalid length. [ 126.182435][ T7545] loop4: detected capacity change from 0 to 512 [ 126.201410][ T7545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.228573][ T7545] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.242269][ T7545] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 126.263332][ T7545] EXT4-fs (loop4): Remounting filesystem read-only [ 126.274121][ T7556] ip6gre1: entered allmulticast mode [ 126.355999][ T7561] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.370374][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.440016][ T7561] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.474267][ T7573] FAULT_INJECTION: forcing a failure. [ 126.474267][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 126.488004][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.4.1402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.488053][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.488098][ T7573] Call Trace: [ 126.488106][ T7573] [ 126.488116][ T7573] __dump_stack+0x1d/0x30 [ 126.488143][ T7573] dump_stack_lvl+0xe8/0x140 [ 126.488194][ T7573] dump_stack+0x15/0x1b [ 126.488216][ T7573] should_fail_ex+0x265/0x280 [ 126.488248][ T7573] should_failslab+0x8c/0xb0 [ 126.488283][ T7573] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 126.488372][ T7573] ? vfs_parse_fs_string+0x72/0xe0 [ 126.488396][ T7573] kmemdup_nul+0x36/0xc0 [ 126.488422][ T7573] vfs_parse_fs_string+0x72/0xe0 [ 126.488444][ T7573] do_new_mount+0x188/0x5e0 [ 126.488502][ T7573] ? security_capable+0x83/0x90 [ 126.488529][ T7573] path_mount+0x4a4/0xb20 [ 126.488550][ T7573] ? user_path_at+0x109/0x130 [ 126.488583][ T7573] __se_sys_mount+0x28f/0x2e0 [ 126.488606][ T7573] ? fput+0x8f/0xc0 [ 126.488704][ T7573] __x64_sys_mount+0x67/0x80 [ 126.488737][ T7573] x64_sys_call+0x2b4d/0x2ff0 [ 126.488765][ T7573] do_syscall_64+0xd2/0x200 [ 126.488807][ T7573] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 126.488894][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.488923][ T7573] RIP: 0033:0x7f56b58eec29 [ 126.488977][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.489001][ T7573] RSP: 002b:00007f56b4357038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.489034][ T7573] RAX: ffffffffffffffda RBX: 00007f56b5b35fa0 RCX: 00007f56b58eec29 [ 126.489050][ T7573] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 126.489067][ T7573] RBP: 00007f56b4357090 R08: 0000200000000300 R09: 0000000000000000 [ 126.489083][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.489098][ T7573] R13: 00007f56b5b36038 R14: 00007f56b5b35fa0 R15: 00007fffed5ab308 [ 126.489124][ T7573] [ 126.715755][ T7561] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.739686][ T7582] netlink: 'syz.4.1404': attribute type 21 has an invalid length. [ 126.748640][ T7582] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 126.778939][ T7561] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.792988][ T7585] loop5: detected capacity change from 0 to 128 [ 126.800760][ T7585] EXT4-fs: Ignoring removed nobh option [ 126.811147][ T7585] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.824471][ T7585] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.826742][ T7586] loop6: detected capacity change from 0 to 128 [ 126.845756][ T7585] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 126.863656][ T7586] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 126.891383][ T6634] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.903411][ T7586] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 126.918981][ T7580] EXT4-fs (loop6): shut down requested (0) [ 126.920508][ T6682] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.925258][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 126.925276][ T29] audit: type=1400 audit(1758317289.231:9876): avc: denied { setopt } for pid=7579 comm="syz.6.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.960889][ T6634] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.969451][ T6634] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.978716][ T29] audit: type=1400 audit(1758317289.291:9877): avc: denied { connect } for pid=7591 comm="syz.4.1408" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.014032][ T7100] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.040672][ T7596] loop6: detected capacity change from 0 to 512 [ 127.048017][ T7596] EXT4-fs: Ignoring removed orlov option [ 127.054472][ T7594] lo speed is unknown, defaulting to 1000 [ 127.076768][ T29] audit: type=1400 audit(1758317289.371:9878): avc: denied { cpu } for pid=7597 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 127.097339][ T29] audit: type=1400 audit(1758317289.371:9879): avc: denied { write } for pid=7597 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 127.119981][ T7596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.132619][ T7596] EXT4-fs (loop6): orphan cleanup on readonly fs [ 127.140447][ T7596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1410: bg 0: block 248: padding at end of block bitmap is not set [ 127.140467][ T7601] loop4: detected capacity change from 0 to 512 [ 127.162204][ T7596] Quota error (device loop6): write_blk: dquota write failed [ 127.170033][ T7596] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 127.180539][ T7596] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1410: Failed to acquire dquot type 1 [ 127.207036][ T7596] EXT4-fs (loop6): 1 truncate cleaned up [ 127.238787][ T29] audit: type=1326 audit(1758317289.541:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7593 comm="syz.0.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741cd8ec29 code=0x0 [ 127.263641][ T7596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.280307][ T29] audit: type=1400 audit(1758317289.591:9881): avc: denied { remount } for pid=7595 comm="syz.6.1410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.280365][ T7596] EXT4-fs: Ignoring removed orlov option [ 127.309270][ T7596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.309307][ T7601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.320368][ T7610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7610 comm=syz.1.1414 [ 127.334435][ T7601] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.344871][ T7610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7610 comm=syz.1.1414 [ 127.368764][ T7596] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 127.381696][ T7601] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.1412: corrupted inode contents [ 127.395032][ T7596] EXT4-fs error (device loop6): __ext4_remount:6740: comm syz.6.1410: Abort forced by user [ 127.406335][ T7596] EXT4-fs (loop6): Remounting filesystem read-only [ 127.413141][ T7596] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 127.422434][ T7601] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm syz.4.1412: mark_inode_dirty error [ 127.434281][ T7596] ext4 filesystem being remounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.445628][ T7601] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.1412: corrupted inode contents [ 127.460500][ T7601] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1412: mark_inode_dirty error [ 127.477517][ T7596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.484694][ T7596] EXT4-fs: Cannot change journaled quota options when quota turned on [ 127.493784][ T29] audit: type=1400 audit(1758317289.801:9882): avc: denied { write } for pid=7595 comm="syz.6.1410" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.537563][ T7601] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1412: mark inode dirty (error -117) [ 127.570671][ T7601] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 127.580155][ T29] audit: type=1400 audit(1758317289.861:9883): avc: denied { ioctl } for pid=7595 comm="syz.6.1410" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.641081][ T7596] syz.6.1410 (7596) used greatest stack depth: 9552 bytes left [ 127.657606][ T7100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.668945][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.678733][ T4881] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.681768][ T7613] __nla_validate_parse: 5 callbacks suppressed [ 127.681818][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 127.816051][ T7629] loop6: detected capacity change from 0 to 512 [ 127.838240][ T7629] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.884614][ T7629] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.903989][ T7629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1419: bg 0: block 248: padding at end of block bitmap is not set [ 127.924637][ T7629] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1419: Failed to acquire dquot type 1 [ 127.942623][ T7638] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.953569][ T7629] EXT4-fs (loop6): 1 truncate cleaned up [ 127.960426][ T7629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 128.001857][ T7629] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.1419: deleted inode referenced: 12 [ 128.107161][ T7638] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.143370][ T7629] syz.6.1419 (7629) used greatest stack depth: 9200 bytes left [ 128.154810][ T7638] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.221708][ T7646] lo speed is unknown, defaulting to 1000 [ 128.463409][ T7638] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.619096][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1424'. [ 128.628579][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1424'. [ 128.638846][ T7100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 128.649027][ T6661] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:43: Failed to release dquot type 1 [ 128.702258][ T7661] netlink: 'syz.5.1427': attribute type 21 has an invalid length. [ 128.712106][ T7661] netlink: 'syz.5.1427': attribute type 1 has an invalid length. [ 128.720421][ T7661] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1427'. [ 128.771320][ T7665] bridge_slave_0: left allmulticast mode [ 128.777598][ T7665] bridge_slave_0: left promiscuous mode [ 128.783902][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.792865][ T7671] loop5: detected capacity change from 0 to 512 [ 128.805523][ T7674] netlink: 'syz.6.1429': attribute type 10 has an invalid length. [ 128.816256][ T7665] bridge_slave_1: left allmulticast mode [ 128.822289][ T7665] bridge_slave_1: left promiscuous mode [ 128.828867][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.859887][ T7671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.873134][ T7671] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.890242][ T7665] bond0: (slave bond_slave_0): Releasing backup interface [ 128.898871][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1429'. [ 128.900717][ T7671] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1431: corrupted inode contents [ 128.921820][ T7665] bond0: (slave bond_slave_1): Releasing backup interface [ 128.923153][ T7671] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #18: comm syz.5.1431: mark_inode_dirty error [ 128.943914][ T7671] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #18: comm syz.5.1431: corrupted inode contents [ 128.958564][ T7671] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1431: mark_inode_dirty error [ 128.960797][ T7665] team0: Port device team_slave_0 removed [ 128.979151][ T7671] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1431: mark inode dirty (error -117) [ 128.994581][ T7665] team0: Port device team_slave_1 removed [ 129.002178][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.010198][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.018777][ T7671] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 129.030492][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.038411][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.048018][ T7685] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1433'. [ 129.075184][ T4881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.084734][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.093313][ T7674] team0: Port device bond0 added [ 129.113041][ T7687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7687 comm=syz.1.1435 [ 129.126228][ T7687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7687 comm=syz.1.1435 [ 129.152603][ T7680] team0 (unregistering): Port device bond0 removed [ 129.201340][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 129.210713][ T7693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 129.220407][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 129.230494][ T7693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 129.591065][ T7724] netem: change failed [ 129.620274][ T7100] ================================================================== [ 129.628526][ T7100] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 129.636563][ T7100] [ 129.639088][ T7100] read-write to 0xffff88813cd47460 of 8 bytes by task 7726 on cpu 1: [ 129.647442][ T7100] shmem_recalc_inode+0x3b/0x200 [ 129.652592][ T7100] shmem_get_folio_gfp+0x7a3/0xd60 [ 129.658204][ T7100] shmem_write_begin+0xa8/0x190 [ 129.663374][ T7100] generic_perform_write+0x184/0x490 [ 129.669036][ T7100] shmem_file_write_iter+0xc5/0xf0 [ 129.674367][ T7100] __kernel_write_iter+0x2d3/0x540 [ 129.680065][ T7100] dump_user_range+0x61e/0x8f0 [ 129.684909][ T7100] elf_core_dump+0x1e00/0x1f90 [ 129.689897][ T7100] coredump_write+0xb0a/0xe30 [ 129.694903][ T7100] vfs_coredump+0x142f/0x20c0 [ 129.699997][ T7100] get_signal+0xd85/0xf70 [ 129.704455][ T7100] arch_do_signal_or_restart+0x96/0x480 [ 129.710299][ T7100] irqentry_exit_to_user_mode+0x5e/0xa0 [ 129.715977][ T7100] irqentry_exit+0x12/0x50 [ 129.720556][ T7100] exc_general_protection+0x15b/0x1f0 [ 129.726308][ T7100] asm_exc_general_protection+0x26/0x30 [ 129.731982][ T7100] [ 129.734419][ T7100] read to 0xffff88813cd47460 of 8 bytes by task 7100 on cpu 0: [ 129.742246][ T7100] shmem_getattr+0x41/0x200 [ 129.747048][ T7100] vfs_getattr_nosec+0x146/0x1e0 [ 129.752121][ T7100] vfs_statx+0x113/0x390 [ 129.756496][ T7100] vfs_fstatat+0x115/0x170 [ 129.760963][ T7100] __se_sys_newfstatat+0x55/0x260 [ 129.766247][ T7100] __x64_sys_newfstatat+0x55/0x70 [ 129.771420][ T7100] x64_sys_call+0x135a/0x2ff0 [ 129.776398][ T7100] do_syscall_64+0xd2/0x200 [ 129.781034][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.787141][ T7100] [ 129.789585][ T7100] value changed: 0x0000000000000184 -> 0x0000000000000187 [ 129.796985][ T7100] [ 129.799525][ T7100] Reported by Kernel Concurrency Sanitizer on: [ 129.805965][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.816233][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.826792][ T7100] ================================================================== [ 131.122482][ T6632] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.134514][ T6632] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.146855][ T6632] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.158330][ T6632] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0