last executing test programs: 3m27.233654893s ago: executing program 4 (id=10691): stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r2, r3) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f00000005c0)=[r0, r1, r3, r4, r5]) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000202010800000000000000000a0000013c0002800c000280050001005dfbf1142c00018014000300"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) msgctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r13}, 0x10) r14 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r14, &(0x7f0000000000)='.\x00', 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m26.947096628s ago: executing program 4 (id=10695): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r1, 0x0, 0x0) 3m26.87624818s ago: executing program 4 (id=10697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 3m26.831738471s ago: executing program 4 (id=10699): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) (async) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) (async, rerun: 32) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async, rerun: 32) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f00000006c0), 0x205, 0x2581) (async, rerun: 32) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) (async) bind$tipc(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r9, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 3m26.724443003s ago: executing program 4 (id=10703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x1, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) 3m26.512089187s ago: executing program 4 (id=10711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000008c0)={0x0, "2ad5bba1d15518913ad3ceca0fb7e8bf"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000018c0)={r8, 0x10, 0x1, [0x3, 0x6, 0xe8dd, 0xfffffffffffffff9], [0xffff, 0x4, 0x5, 0x7a4, 0x5, 0x5f6, 0x3ff, 0x8, 0x3, 0x8, 0x80000000, 0x5, 0x80000001, 0x3, 0x5, 0x9, 0xfffffffffffffff8, 0x4, 0xc4, 0x5, 0x1, 0x7, 0x4, 0x5b8, 0xfffffffffffffffb, 0xd3, 0x1, 0x0, 0x5, 0x4, 0x1ff, 0x7ff, 0x99, 0x7, 0x4, 0x1, 0x62da874, 0x3, 0x9, 0x2db7, 0x6, 0x5, 0xfffffffffffffffc, 0xa0a, 0x9, 0xdfb, 0x9, 0x6, 0x8, 0xfffffffffffffff8, 0x100, 0x4, 0x0, 0x2, 0x7, 0x4, 0x1, 0x10000, 0x22, 0x1, 0x2, 0x8000800, 0x57, 0xfffffffffffffffa, 0x3, 0x2, 0x7, 0x8000000000000000, 0x0, 0x1, 0x8, 0x7, 0x7f, 0x8000000000000000, 0x9, 0x1, 0x5, 0x12000000000000, 0xdee, 0x200, 0x0, 0xdd5, 0x8000, 0xffffffffffff7fff, 0x7fffffffffffffff, 0x6, 0xffffffff, 0x8, 0x3, 0x5c, 0x1000, 0x2ae, 0xfff, 0x5f48, 0x2, 0x0, 0x1, 0x3, 0x7, 0xfff, 0x1cd, 0x15, 0x2, 0xfffffffffffffff9, 0x4, 0xffffffff, 0x5, 0x10, 0x0, 0x22e2, 0x930, 0x5, 0x1400000000000, 0x0, 0x6, 0x5, 0x9, 0x4, 0x2, 0x9, 0x9ad4]}) 3m26.464831947s ago: executing program 32 (id=10711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000008c0)={0x0, "2ad5bba1d15518913ad3ceca0fb7e8bf"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000018c0)={r8, 0x10, 0x1, [0x3, 0x6, 0xe8dd, 0xfffffffffffffff9], [0xffff, 0x4, 0x5, 0x7a4, 0x5, 0x5f6, 0x3ff, 0x8, 0x3, 0x8, 0x80000000, 0x5, 0x80000001, 0x3, 0x5, 0x9, 0xfffffffffffffff8, 0x4, 0xc4, 0x5, 0x1, 0x7, 0x4, 0x5b8, 0xfffffffffffffffb, 0xd3, 0x1, 0x0, 0x5, 0x4, 0x1ff, 0x7ff, 0x99, 0x7, 0x4, 0x1, 0x62da874, 0x3, 0x9, 0x2db7, 0x6, 0x5, 0xfffffffffffffffc, 0xa0a, 0x9, 0xdfb, 0x9, 0x6, 0x8, 0xfffffffffffffff8, 0x100, 0x4, 0x0, 0x2, 0x7, 0x4, 0x1, 0x10000, 0x22, 0x1, 0x2, 0x8000800, 0x57, 0xfffffffffffffffa, 0x3, 0x2, 0x7, 0x8000000000000000, 0x0, 0x1, 0x8, 0x7, 0x7f, 0x8000000000000000, 0x9, 0x1, 0x5, 0x12000000000000, 0xdee, 0x200, 0x0, 0xdd5, 0x8000, 0xffffffffffff7fff, 0x7fffffffffffffff, 0x6, 0xffffffff, 0x8, 0x3, 0x5c, 0x1000, 0x2ae, 0xfff, 0x5f48, 0x2, 0x0, 0x1, 0x3, 0x7, 0xfff, 0x1cd, 0x15, 0x2, 0xfffffffffffffff9, 0x4, 0xffffffff, 0x5, 0x10, 0x0, 0x22e2, 0x930, 0x5, 0x1400000000000, 0x0, 0x6, 0x5, 0x9, 0x4, 0x2, 0x9, 0x9ad4]}) 3m14.865885923s ago: executing program 1 (id=10826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2422, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x4a90, 0x0, 0x0, 0x0, 0xa47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd(0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c038ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a0000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) r2 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x9, 0x1, 0x1, 0x0, 0x592a, 0x61557, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcc12, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x14028, 0x7, 0xf, 0x7, 0x2, 0x8000, 0x1, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x3, r1, 0x9) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x4, 0x3, 0x0, 0x0, 0x4, 0x40200, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6cc5, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x10000, 0x8, 0x2, 0x3, 0x1ff, 0x4c45, 0x3, 0x0, 0xfff, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r2, 0xc) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m14.590712128s ago: executing program 1 (id=10832): open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0xf) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 3m14.590013458s ago: executing program 1 (id=10833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) 3m14.425778142s ago: executing program 1 (id=10836): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000680001d30a00000000000081000000569d7a00bb2c83b400199008000c000200010000000400000095cb81449c2250cec2244b4078bf360ceedb77918c314ce00d927bbb666af2406aff54c971e9d0dd3ef9c7fca20aeba68cc657441f47f50af1fb9539eb02ceeb53"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000005000900000000000000000800010001000000"], 0x20}}, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x6, 0x0}, 0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4df9d3f6, 0x0, r1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x2a, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xff}, [@ldst={0x1, 0x3, 0x6, 0xb, 0x1, 0x80, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0x4, 0x6, 0x5, 0x2, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000700)='GPL\x00', 0xd, 0x1c, &(0x7f0000000740)=""/28, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, r0, 0x8, &(0x7f0000000900)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x9, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r1, r8, r0, r1], 0x0, 0x10, 0x5}, 0x94) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 3m14.265614195s ago: executing program 1 (id=10837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140)) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x1}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x1055d0f2}, {0x1, 0x6976}, {0x0, 0x800}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0xdb}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x10, 0x4}]}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/88, 0x93, 0x58, 0x1, 0x80000000, 0x10000}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES8=r7, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000002c0)) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r10, @ANYBLOB="0100d0000000fbdbdf3a1c00000018000181140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x20008851}, 0x4008800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 3m13.892704362s ago: executing program 1 (id=10841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 3m13.890615252s ago: executing program 33 (id=10841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 2.826893285s ago: executing program 3 (id=13935): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r1}, 0x18) 2.681594388s ago: executing program 3 (id=13936): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x400c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000081000000001000000900000021900100", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000049500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000002c0)={{r4}, 0x1, 0x34, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x0, @loopback, @empty, 0x0, 0x0, 0xfffffffb}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x2, 0x1009, 0x848b49afbc929fa2}, {0x10000002, 0x0, 0xe, 0xb}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) 2.234181897s ago: executing program 3 (id=13939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRESOCT=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4004) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x4001) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000380)=0x2) socket(0x22, 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 2.158924569s ago: executing program 0 (id=13942): syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000480)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES16=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = eventfd(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x2d, 0x36, 0xa]}}}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) read$eventfd(r4, &(0x7f0000000240), 0x8) writev(r4, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000002c0)=""/164, 0x131c000, 0x0, 0x5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xen_mc_flush\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) close_range(r11, 0xffffffffffffffff, 0x0) 2.06183002s ago: executing program 5 (id=13945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f00000001c0)="0b1aca11"}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 1.898105614s ago: executing program 5 (id=13946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x82c}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}}, 0x24000800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) r3 = socket$inet(0x2, 0x2, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ptrace(0x10, r1) rt_sigaction(0x8, &(0x7f00000001c0)={&(0x7f0000000040)="8fe9509a3c9ef3410f1edfc4a1a57571db45d9f1663e36660fe4690ec4227d203e45dc6b00450f38c9f3c421bddf2ef2a6", 0x2, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000340)) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r8, 0x0, 0x8000000000000}, 0x18) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r9, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) socket$inet_udp(0x2, 0x2, 0x0) 1.867997964s ago: executing program 2 (id=13947): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x20000, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 1.299312765s ago: executing program 0 (id=13948): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) 1.263143016s ago: executing program 3 (id=13950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0c010600000000fe881000000000000000000000000001fe8000000000000000000000000000bbfc00000000000000000000000000000020010000000000000000000000f47c786ab5d35e970000000000000000000001fc010000000000000000000000000001"], 0x68) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) r8 = epoll_create(0x40209) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)={0xf6c447fee59241f0}) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.233501886s ago: executing program 6 (id=13951): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0), &(0x7f00000000c0)) 1.190503707s ago: executing program 3 (id=13952): setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.189254717s ago: executing program 6 (id=13953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0c010600000000fe881000000000000000000000000001fe8000000000000000000000000000bbfc00000000000000000000000000000020010000000000000000000000f47c786ab5d35e970000000000000000000001fc010000000000000000000000000001"], 0x68) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) r8 = epoll_create(0x40209) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)={0xf6c447fee59241f0}) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.175885707s ago: executing program 0 (id=13954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/13, @ANYRESOCT], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRESOCT=r2], 0x5, 0x37d, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) socketpair(0x28, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32, @ANYRES16=r4, @ANYRESHEX], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="a183000000000000000005000000080003", @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x40000d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, 0x0, &(0x7f0000000040)}, 0x20) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x4, 0x7, {{0x32, 0x4, 0x1, 0x22, 0xc8, 0x67, 0x0, 0x6, 0x58, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x8, 0xbc, 0x0, 0x8, [0x7]}, @timestamp_addr={0x44, 0x54, 0x5e, 0x1, 0x5, [{@loopback, 0x2}, {@loopback, 0x8}, {@empty, 0x8}, {@loopback, 0x4}, {@local, 0x7}, {@empty, 0xff}, {@multicast1, 0x1}, {@multicast2, 0x1000}, {@remote, 0xfa50}, {@loopback, 0x6}]}, @cipso={0x86, 0x17, 0x3, [{0x1, 0x2}, {0x1, 0x6, "610cf503"}, {0x2, 0x4, '}q'}, {0x5, 0x5, "dfe162"}]}, @timestamp_prespec={0x44, 0x2c, 0xe2, 0x3, 0x6, [{@loopback, 0x7}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x9}, {@multicast1}, {@remote, 0x1}]}, @ssrr={0x89, 0x13, 0x77, [@broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) bind$packet(r11, &(0x7f00000001c0)={0x11, 0xf6, r12, 0x1, 0xd3, 0x6, @remote}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.030354371s ago: executing program 5 (id=13955): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000001080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x16, 0x2a, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') ioprio_set$pid(0x2, r3, 0x4004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 856.299824ms ago: executing program 0 (id=13956): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x611, &(0x7f00000007c0)="$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") 852.619954ms ago: executing program 6 (id=13957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000004500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 848.998724ms ago: executing program 2 (id=13958): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) 709.709307ms ago: executing program 2 (id=13959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 610.327439ms ago: executing program 6 (id=13960): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 489.379351ms ago: executing program 2 (id=13961): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x9) unshare(0x22020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) stat(&(0x7f0000000700)='./file0/file1\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r9) keyctl$read(0xb, r9, 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) 484.442001ms ago: executing program 0 (id=13962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="2c0c010600000000fe881000000000000000000000000001fe8000000000000000000000000000bbfc00000000000000000000000000000020010000000000000000000000f47c786ab5d35e970000000000000000000001fc010000000000000000000000000001"], 0x68) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r2], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) r8 = epoll_create(0x40209) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)={0xf6c447fee59241f0}) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 457.677632ms ago: executing program 6 (id=13963): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0), &(0x7f00000000c0)) 427.679712ms ago: executing program 5 (id=13964): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) 334.437714ms ago: executing program 6 (id=13965): setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@remote, @dev={0xac, 0x14, 0x14, 0x30}, @remote}, 0xc) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 305.944215ms ago: executing program 3 (id=13966): setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000100000"], 0x0, 0xfa50, 0x0, 0x0, 0x0, 0x48}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@remote, @dev={0xac, 0x14, 0x14, 0x30}, @remote}, 0xc) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 305.406545ms ago: executing program 5 (id=13967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 291.793315ms ago: executing program 2 (id=13968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/13, @ANYRESOCT], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRESOCT=r2], 0x5, 0x37d, &(0x7f0000000f80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) socketpair(0x28, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32, @ANYRES16=r4, @ANYRESHEX], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r9, @ANYBLOB="a183000000000000000005000000080003", @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x40000d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, 0x0, &(0x7f0000000040)}, 0x20) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x4, 0x7, {{0x32, 0x4, 0x1, 0x22, 0xc8, 0x67, 0x0, 0x6, 0x58, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x8, 0xbc, 0x0, 0x8, [0x7]}, @timestamp_addr={0x44, 0x54, 0x5e, 0x1, 0x5, [{@loopback, 0x2}, {@loopback, 0x8}, {@empty, 0x8}, {@loopback, 0x4}, {@local, 0x7}, {@empty, 0xff}, {@multicast1, 0x1}, {@multicast2, 0x1000}, {@remote, 0xfa50}, {@loopback, 0x6}]}, @cipso={0x86, 0x17, 0x3, [{0x1, 0x2}, {0x1, 0x6, "610cf503"}, {0x2, 0x4, '}q'}, {0x5, 0x5, "dfe162"}]}, @timestamp_prespec={0x44, 0x2c, 0xe2, 0x3, 0x6, [{@loopback, 0x7}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x9}, {@multicast1}, {@remote, 0x1}]}, @ssrr={0x89, 0x13, 0x77, [@broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) bind$packet(r11, &(0x7f00000001c0)={0x11, 0xf6, r12, 0x1, 0xd3, 0x6, @remote}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) 89.704779ms ago: executing program 0 (id=13969): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000180)='kfree\x00', 0x40, 0x160, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e6b000/0x1000)=nil, 0x1000, 0x300000d, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000340), 0x10, &(0x7f0000b61000/0x2000)=nil, 0x5) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x100000000000ca, 0xffffffffffffffff, 0x100000a, 0x8, 0x0, 0x7, 0x9f}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.19409ms ago: executing program 5 (id=13970): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 2 (id=13971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x1, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x9, &(0x7f0000000600)=[{0x0, 0x26, 0x2, 0x2}, {0x5, 0x1, 0x2, 0x9a}, {0x497, 0xd, 0x6, 0x7}, {0x8, 0x4, 0x7, 0x2}, {0x5, 0x8, 0x3, 0x3}, {0x9, 0x2, 0x6, 0x8}, {0xfffd, 0x8b, 0x7, 0x5}, {0x8c, 0xf6, 0x3, 0x1fa}, {0x1, 0xba, 0x4, 0x80000000}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="303a89a1eb7921311d9ed6000000", @ANYRES16=r7, @ANYBLOB="02a928bd7000fddbdf25570000000c009900ffffff7f7b00000006009500020000000600950005000000"], 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x4, 0x1, 0x8, 0x8, 0xfffffffffffffffd, 0x9, 0xf, 0x6, 0x1}) kernel console output (not intermixed with test programs): T29] kauditd_printk_skb: 1342 callbacks suppressed [ 698.676882][ T29] audit: type=1400 audit(1758512228.748:99005): avc: denied { perfmon } for pid=7781 comm="syz.5.13135" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.709120][ T29] audit: type=1400 audit(1758512228.748:99006): avc: denied { kernel } for pid=7781 comm="syz.5.13135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 698.731392][ T29] audit: type=1400 audit(1758512228.748:99007): avc: denied { prog_load } for pid=7768 comm="syz.3.13128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.752585][ T29] audit: type=1400 audit(1758512228.758:99008): avc: denied { bpf } for pid=7768 comm="syz.3.13128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.775177][ T29] audit: type=1400 audit(1758512228.758:99009): avc: denied { perfmon } for pid=7768 comm="syz.3.13128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.806024][ T29] audit: type=1400 audit(1758512228.758:99010): avc: denied { perfmon } for pid=7781 comm="syz.5.13135" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.830145][ T29] audit: type=1400 audit(1758512228.838:99011): avc: denied { bpf } for pid=7768 comm="syz.3.13128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.850881][ T29] audit: type=1400 audit(1758512228.878:99012): avc: denied { map_create } for pid=7781 comm="syz.5.13135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.872367][ T29] audit: type=1400 audit(1758512228.878:99013): avc: denied { map_read map_write } for pid=7781 comm="syz.5.13135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.894195][ T29] audit: type=1400 audit(1758512228.878:99014): avc: denied { prog_load } for pid=7781 comm="syz.5.13135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 699.036587][ T7789] netlink: 'syz.6.13139': attribute type 21 has an invalid length. [ 699.046382][ T7792] loop5: detected capacity change from 0 to 128 [ 699.156285][ T7801] 9pnet_fd: Insufficient options for proto=fd [ 699.202296][ T7803] loop5: detected capacity change from 0 to 512 [ 699.252275][ T7805] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 699.295289][ T7803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 699.322323][ T7803] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 699.826463][ T7823] loop6: detected capacity change from 0 to 512 [ 699.828423][ T7803] EXT4-fs (loop5): 1 truncate cleaned up [ 699.835683][ T7823] EXT4-fs: Ignoring removed orlov option [ 699.848213][ T7803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.856543][ T7823] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 699.880806][ T7823] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 699.902425][ T7823] EXT4-fs (loop6): 1 orphan inode deleted [ 699.909840][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.944265][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.040355][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.386211][ T7854] __nla_validate_parse: 19 callbacks suppressed [ 700.386238][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13166'. [ 700.769749][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13179'. [ 701.404181][ T7932] netlink: 264 bytes leftover after parsing attributes in process `syz.3.13199'. [ 701.548991][ T7941] siw: device registration error -23 [ 702.302212][ T7956] FAULT_INJECTION: forcing a failure. [ 702.302212][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.318268][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.2.13206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 702.318298][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.318391][ T7956] Call Trace: [ 702.318399][ T7956] [ 702.318421][ T7956] __dump_stack+0x1d/0x30 [ 702.318443][ T7956] dump_stack_lvl+0xe8/0x140 [ 702.318464][ T7956] dump_stack+0x15/0x1b [ 702.318481][ T7956] should_fail_ex+0x265/0x280 [ 702.318535][ T7956] should_fail+0xb/0x20 [ 702.318615][ T7956] should_fail_usercopy+0x1a/0x20 [ 702.318682][ T7956] _copy_from_user+0x1c/0xb0 [ 702.318710][ T7956] ___sys_sendmsg+0xc1/0x1d0 [ 702.318751][ T7956] __x64_sys_sendmsg+0xd4/0x160 [ 702.318819][ T7956] x64_sys_call+0x191e/0x2ff0 [ 702.318921][ T7956] do_syscall_64+0xd2/0x200 [ 702.318950][ T7956] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 702.318973][ T7956] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 702.319111][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.319193][ T7956] RIP: 0033:0x7f06a2ecec29 [ 702.319208][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.319225][ T7956] RSP: 002b:00007f06a192f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.319318][ T7956] RAX: ffffffffffffffda RBX: 00007f06a3115fa0 RCX: 00007f06a2ecec29 [ 702.319340][ T7956] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 702.319352][ T7956] RBP: 00007f06a192f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.319364][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.319376][ T7956] R13: 00007f06a3116038 R14: 00007f06a3115fa0 R15: 00007fff4cd176d8 [ 702.319436][ T7956] [ 702.693400][ T7969] loop6: detected capacity change from 0 to 2048 [ 702.725628][ T7975] random: crng reseeded on system resumption [ 702.744626][ T7969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.941194][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.012705][ T7986] loop5: detected capacity change from 0 to 512 [ 703.035563][ T7986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.052942][ T7986] ext4 filesystem being mounted at /497/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.081515][ T7986] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.13221: corrupted inode contents [ 703.101550][ T7986] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.13221: mark_inode_dirty error [ 703.119530][ T7986] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.13221: corrupted inode contents [ 703.135856][ T7986] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.13221: mark_inode_dirty error [ 703.143944][ T7988] netlink: 'syz.6.13219': attribute type 1 has an invalid length. [ 703.160482][ T7986] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.13221: Failed to acquire dquot type 1 [ 703.220738][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.333823][ T8007] FAULT_INJECTION: forcing a failure. [ 703.333823][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 703.347574][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.5.13225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 703.347603][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.347658][ T8007] Call Trace: [ 703.347665][ T8007] [ 703.347673][ T8007] __dump_stack+0x1d/0x30 [ 703.347698][ T8007] dump_stack_lvl+0xe8/0x140 [ 703.347721][ T8007] dump_stack+0x15/0x1b [ 703.347795][ T8007] should_fail_ex+0x265/0x280 [ 703.347823][ T8007] should_failslab+0x8c/0xb0 [ 703.347856][ T8007] kmem_cache_alloc_noprof+0x50/0x310 [ 703.347915][ T8007] ? getname_flags+0x80/0x3b0 [ 703.347941][ T8007] getname_flags+0x80/0x3b0 [ 703.347966][ T8007] do_sys_openat2+0x60/0x110 [ 703.348043][ T8007] __x64_sys_openat+0xf2/0x120 [ 703.348076][ T8007] x64_sys_call+0x2e9c/0x2ff0 [ 703.348144][ T8007] do_syscall_64+0xd2/0x200 [ 703.348177][ T8007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 703.348200][ T8007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 703.348288][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.348311][ T8007] RIP: 0033:0x7f942d56d590 [ 703.348328][ T8007] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 703.348348][ T8007] RSP: 002b:00007f942bfcef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 703.348369][ T8007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942d56d590 [ 703.348382][ T8007] RDX: 0000000000000000 RSI: 00007f942d5f1f2e RDI: 00000000ffffff9c [ 703.348437][ T8007] RBP: 00007f942d5f1f2e R08: 0000000000000000 R09: 0000000000000000 [ 703.348449][ T8007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 703.348461][ T8007] R13: 00007f942d7b6038 R14: 00007f942d7b5fa0 R15: 00007ffe61fcba78 [ 703.348479][ T8007] [ 703.672413][ T29] kauditd_printk_skb: 1415 callbacks suppressed [ 703.672429][ T29] audit: type=1400 audit(1758513001.764:100428): avc: denied { map_create } for pid=8027 comm="syz.2.13237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.722157][ T29] audit: type=1400 audit(1758513001.775:100429): avc: denied { map_create } for pid=8028 comm="syz.6.13236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.743942][ T29] audit: type=1400 audit(1758513001.775:100430): avc: denied { map_read map_write } for pid=8028 comm="syz.6.13236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.750877][ T8033] netlink: 'syz.0.13234': attribute type 21 has an invalid length. [ 703.766613][ T29] audit: type=1400 audit(1758513001.775:100431): avc: denied { prog_load } for pid=8026 comm="syz.5.13235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.766661][ T29] audit: type=1400 audit(1758513001.775:100432): avc: denied { bpf } for pid=8026 comm="syz.5.13235" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.766689][ T29] audit: type=1400 audit(1758513001.775:100433): avc: denied { prog_load } for pid=8028 comm="syz.6.13236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.766735][ T29] audit: type=1400 audit(1758513001.775:100434): avc: denied { bpf } for pid=8028 comm="syz.6.13236" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.766762][ T29] audit: type=1400 audit(1758513001.775:100435): avc: denied { perfmon } for pid=8028 comm="syz.6.13236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.766790][ T29] audit: type=1400 audit(1758513001.775:100436): avc: denied { write } for pid=8025 comm="syz.0.13234" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 703.766821][ T29] audit: type=1400 audit(1758513001.775:100437): avc: denied { map_read map_write } for pid=8027 comm="syz.2.13237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.946938][ T8039] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 703.968067][ T8038] FAULT_INJECTION: forcing a failure. [ 703.968067][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 703.981900][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.2.13239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 703.981975][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.981989][ T8038] Call Trace: [ 703.981997][ T8038] [ 703.982005][ T8038] __dump_stack+0x1d/0x30 [ 703.982036][ T8038] dump_stack_lvl+0xe8/0x140 [ 703.982059][ T8038] dump_stack+0x15/0x1b [ 703.982141][ T8038] should_fail_ex+0x265/0x280 [ 703.982203][ T8038] ? audit_log_d_path+0x8d/0x150 [ 703.982239][ T8038] should_failslab+0x8c/0xb0 [ 703.982263][ T8038] __kmalloc_cache_noprof+0x4c/0x320 [ 703.982322][ T8038] audit_log_d_path+0x8d/0x150 [ 703.982407][ T8038] audit_log_d_path_exe+0x42/0x70 [ 703.982449][ T8038] audit_log_task+0x1e9/0x250 [ 703.982560][ T8038] audit_seccomp+0x61/0x100 [ 703.982620][ T8038] ? __seccomp_filter+0x68c/0x10d0 [ 703.982646][ T8038] __seccomp_filter+0x69d/0x10d0 [ 703.982672][ T8038] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 703.982703][ T8038] ? vfs_write+0x7e8/0x960 [ 703.982767][ T8038] ? __rcu_read_unlock+0x4f/0x70 [ 703.982790][ T8038] ? __fget_files+0x184/0x1c0 [ 703.982849][ T8038] __secure_computing+0x82/0x150 [ 703.982873][ T8038] syscall_trace_enter+0xcf/0x1e0 [ 703.982923][ T8038] do_syscall_64+0xac/0x200 [ 703.982981][ T8038] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 703.983008][ T8038] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 703.983054][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.983096][ T8038] RIP: 0033:0x7f06a2ecec29 [ 703.983113][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.983133][ T8038] RSP: 002b:00007f06a192f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007f [ 703.983179][ T8038] RAX: ffffffffffffffda RBX: 00007f06a3115fa0 RCX: 00007f06a2ecec29 [ 703.983193][ T8038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.983208][ T8038] RBP: 00007f06a192f090 R08: 0000000000000000 R09: 0000000000000000 [ 703.983221][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.983235][ T8038] R13: 00007f06a3116038 R14: 00007f06a3115fa0 R15: 00007fff4cd176d8 [ 703.983255][ T8038] [ 704.272687][ T8033] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13234'. [ 704.284850][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13234'. [ 704.419586][ T8054] FAULT_INJECTION: forcing a failure. [ 704.419586][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 704.435095][ T8054] CPU: 0 UID: 0 PID: 8054 Comm: syz.6.13245 Not tainted syzkaller #0 PREEMPT(voluntary) [ 704.435126][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.435182][ T8054] Call Trace: [ 704.435190][ T8054] [ 704.435199][ T8054] __dump_stack+0x1d/0x30 [ 704.435223][ T8054] dump_stack_lvl+0xe8/0x140 [ 704.435245][ T8054] dump_stack+0x15/0x1b [ 704.435287][ T8054] should_fail_ex+0x265/0x280 [ 704.435320][ T8054] should_failslab+0x8c/0xb0 [ 704.435408][ T8054] kmem_cache_alloc_noprof+0x50/0x310 [ 704.435439][ T8054] ? audit_log_start+0x365/0x6c0 [ 704.435473][ T8054] audit_log_start+0x365/0x6c0 [ 704.435559][ T8054] audit_seccomp+0x48/0x100 [ 704.435611][ T8054] ? __seccomp_filter+0x68c/0x10d0 [ 704.435636][ T8054] __seccomp_filter+0x69d/0x10d0 [ 704.435661][ T8054] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 704.435692][ T8054] ? vfs_write+0x7e8/0x960 [ 704.435736][ T8054] __secure_computing+0x82/0x150 [ 704.435760][ T8054] syscall_trace_enter+0xcf/0x1e0 [ 704.435787][ T8054] do_syscall_64+0xac/0x200 [ 704.435822][ T8054] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 704.435964][ T8054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 704.435997][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.436020][ T8054] RIP: 0033:0x7f6ca579d590 [ 704.436038][ T8054] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 704.436121][ T8054] RSP: 002b:00007f6ca41fef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 704.436143][ T8054] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ca579d590 [ 704.436157][ T8054] RDX: 0000000000000000 RSI: 00007f6ca5821f2e RDI: 00000000ffffff9c [ 704.436171][ T8054] RBP: 00007f6ca5821f2e R08: 0000000000000000 R09: 0000000000000000 [ 704.436184][ T8054] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 704.436198][ T8054] R13: 00007f6ca59e6038 R14: 00007f6ca59e5fa0 R15: 00007ffe3af3f9b8 [ 704.436303][ T8054] [ 704.715653][ T8060] loop5: detected capacity change from 0 to 512 [ 704.753654][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13251'. [ 704.771093][ T8060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 704.875983][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13254'. [ 706.160210][ T8101] loop5: detected capacity change from 0 to 4096 [ 706.170753][ T8101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 706.273934][ T8099] loop6: detected capacity change from 0 to 512 [ 706.284364][ T8101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.321660][ T8099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.333336][ T8105] FAULT_INJECTION: forcing a failure. [ 706.333336][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 706.333409][ T8105] CPU: 1 UID: 0 PID: 8105 Comm: syz.2.13267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 706.333443][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 706.333455][ T8105] Call Trace: [ 706.333461][ T8105] [ 706.333469][ T8105] __dump_stack+0x1d/0x30 [ 706.333493][ T8105] dump_stack_lvl+0xe8/0x140 [ 706.333516][ T8105] dump_stack+0x15/0x1b [ 706.333596][ T8105] should_fail_ex+0x265/0x280 [ 706.333691][ T8105] should_failslab+0x8c/0xb0 [ 706.333746][ T8105] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 706.333777][ T8105] ? __d_alloc+0x3d/0x340 [ 706.333810][ T8105] __d_alloc+0x3d/0x340 [ 706.333839][ T8105] d_alloc_pseudo+0x1e/0x80 [ 706.334001][ T8105] alloc_file_pseudo+0x71/0x160 [ 706.334034][ T8105] sock_alloc_file+0x9c/0x1e0 [ 706.334065][ T8105] __sys_socketpair+0x2b8/0x430 [ 706.334100][ T8105] __x64_sys_socketpair+0x52/0x60 [ 706.334121][ T8105] x64_sys_call+0x2bf2/0x2ff0 [ 706.334143][ T8105] do_syscall_64+0xd2/0x200 [ 706.334174][ T8105] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 706.334232][ T8105] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 706.334262][ T8105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.334284][ T8105] RIP: 0033:0x7f06a2ed0b7a [ 706.334308][ T8105] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.334350][ T8105] RSP: 002b:00007f06a192ef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 706.334448][ T8105] RAX: ffffffffffffffda RBX: 00007f06a3115f00 RCX: 00007f06a2ed0b7a [ 706.334462][ T8105] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 706.334475][ T8105] RBP: 00007f06a192f090 R08: 0000000000000000 R09: 0000000000000000 [ 706.334488][ T8105] R10: 00007f06a192ef98 R11: 0000000000000246 R12: 0000000000000004 [ 706.334501][ T8105] R13: 00007f06a3116038 R14: 00007f06a3115fa0 R15: 00007fff4cd176d8 [ 706.334520][ T8105] [ 706.677227][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.710232][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13273'. [ 707.056950][ T8133] lo speed is unknown, defaulting to 1000 [ 708.396582][ T8133] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13279'. [ 708.414542][ T8133] 0猉功D: entered promiscuous mode [ 708.419792][ T8133] 0猉功D: left allmulticast mode [ 708.491666][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 708.491684][ T29] audit: type=1400 audit(1758513006.783:101157): avc: denied { open } for pid=8145 comm="syz.3.13282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 708.522878][ T29] audit: type=1400 audit(1758513006.793:101158): avc: denied { perfmon } for pid=8145 comm="syz.3.13282" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.547557][ T29] audit: type=1400 audit(1758513006.793:101159): avc: denied { kernel } for pid=8145 comm="syz.3.13282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 708.569176][ T29] audit: type=1400 audit(1758513006.814:101160): avc: denied { map_create } for pid=8145 comm="syz.3.13282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.586059][ T8133] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13279'. [ 708.589652][ T29] audit: type=1400 audit(1758513006.814:101161): avc: denied { perfmon } for pid=8145 comm="syz.3.13282" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.623193][ T29] audit: type=1400 audit(1758513006.814:101162): avc: denied { map_read map_write } for pid=8145 comm="syz.3.13282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.643374][ T29] audit: type=1400 audit(1758513006.825:101163): avc: denied { prog_load } for pid=8145 comm="syz.3.13282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 708.665473][ T29] audit: type=1400 audit(1758513006.825:101164): avc: denied { bpf } for pid=8145 comm="syz.3.13282" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 708.690169][ T8133] 1猉功D: renamed from 30猉功D [ 708.703710][ T8133] 1猉功D: left promiscuous mode [ 708.710685][ T8133] 1猉功D: entered allmulticast mode [ 708.726416][ T29] audit: type=1400 audit(1758513006.940:101165): avc: denied { read write } for pid=1733 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.731571][ T8155] loop6: detected capacity change from 0 to 512 [ 708.753803][ T29] audit: type=1400 audit(1758513006.940:101166): avc: denied { open } for pid=1733 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 708.790796][ T8133] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 708.801020][ T8148] netlink: 'syz.0.13281': attribute type 21 has an invalid length. [ 708.828639][ T8155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 708.847494][ T8148] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13281'. [ 708.857592][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13281'. [ 708.863589][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13286'. [ 708.871987][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13287'. [ 708.895894][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13286'. [ 708.921826][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13286'. [ 709.020290][ T8173] loop6: detected capacity change from 0 to 1024 [ 709.040777][ T8173] EXT4-fs: Ignoring removed bh option [ 709.055260][ T8173] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 709.092974][ T8148] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 709.201239][ T8173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.225307][ T8173] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.13290: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 709.251386][ T8173] EXT4-fs (loop6): Remounting filesystem read-only [ 709.359939][ T8183] loop5: detected capacity change from 0 to 4096 [ 709.370238][ T8183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.388393][ T8183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.474438][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.808871][ T8188] lo speed is unknown, defaulting to 1000 [ 709.864335][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.039397][ T8189] 1猉功D: entered promiscuous mode [ 710.047313][ T8189] 1猉功D: left allmulticast mode [ 710.062505][ T8201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 710.189130][ T6721] kernel write not supported for file /543/oom_adj (pid: 6721 comm: kworker/0:4) [ 710.302427][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=8215 comm=syz.2.13305 [ 710.541217][ T8230] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 710.576233][ T8234] 9pnet_fd: Insufficient options for proto=fd [ 710.776544][ T8244] netlink: 'syz.3.13322': attribute type 21 has an invalid length. [ 710.807545][ T8251] FAULT_INJECTION: forcing a failure. [ 710.807545][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 710.822773][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.5.13325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 710.822874][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.822889][ T8251] Call Trace: [ 710.822896][ T8251] [ 710.822904][ T8251] __dump_stack+0x1d/0x30 [ 710.822929][ T8251] dump_stack_lvl+0xe8/0x140 [ 710.822950][ T8251] dump_stack+0x15/0x1b [ 710.822969][ T8251] should_fail_ex+0x265/0x280 [ 710.823043][ T8251] ? audit_log_d_path+0x8d/0x150 [ 710.823076][ T8251] should_failslab+0x8c/0xb0 [ 710.823156][ T8251] __kmalloc_cache_noprof+0x4c/0x320 [ 710.823188][ T8251] ? audit_log_d_path+0x7a/0x150 [ 710.823223][ T8251] audit_log_d_path+0x8d/0x150 [ 710.823299][ T8251] audit_log_d_path_exe+0x42/0x70 [ 710.823418][ T8251] audit_log_task+0x1e9/0x250 [ 710.823526][ T8251] audit_seccomp+0x61/0x100 [ 710.823554][ T8251] ? __seccomp_filter+0x68c/0x10d0 [ 710.823579][ T8251] __seccomp_filter+0x69d/0x10d0 [ 710.823605][ T8251] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 710.823675][ T8251] ? vfs_write+0x7e8/0x960 [ 710.823699][ T8251] ? __rcu_read_unlock+0x4f/0x70 [ 710.823736][ T8251] ? __fget_files+0x184/0x1c0 [ 710.823782][ T8251] __secure_computing+0x82/0x150 [ 710.823802][ T8251] syscall_trace_enter+0xcf/0x1e0 [ 710.823840][ T8251] do_syscall_64+0xac/0x200 [ 710.823877][ T8251] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 710.823934][ T8251] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 710.824008][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.824029][ T8251] RIP: 0033:0x7f942d56d63c [ 710.824046][ T8251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 710.824064][ T8251] RSP: 002b:00007f942bfcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.824087][ T8251] RAX: ffffffffffffffda RBX: 00007f942d7b5fa0 RCX: 00007f942d56d63c [ 710.824101][ T8251] RDX: 000000000000000f RSI: 00007f942bfcf0a0 RDI: 0000000000000003 [ 710.824143][ T8251] RBP: 00007f942bfcf090 R08: 0000000000000000 R09: 0000000000000000 [ 710.824156][ T8251] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 710.824169][ T8251] R13: 00007f942d7b6038 R14: 00007f942d7b5fa0 R15: 00007ffe61fcba78 [ 710.824186][ T8251] [ 711.103691][ T8246] lo speed is unknown, defaulting to 1000 [ 711.152005][ T8258] netlink: 'syz.5.13327': attribute type 1 has an invalid length. [ 711.197932][ T8250] 0猉功D: entered promiscuous mode [ 711.205926][ T8250] 0猉功D: left allmulticast mode [ 711.236203][ T8250] 1猉功D: renamed from 30猉功D [ 711.254819][ T8250] 1猉功D: left promiscuous mode [ 711.262897][ T8250] 1猉功D: entered allmulticast mode [ 711.277886][ T8250] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 711.446728][ T8270] 9pnet_fd: Insufficient options for proto=fd [ 711.467632][ T8272] loop6: detected capacity change from 0 to 512 [ 711.522082][ T8272] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 711.781246][ T8286] __nla_validate_parse: 12 callbacks suppressed [ 711.781265][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13335'. [ 711.863995][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13339'. [ 711.875066][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13339'. [ 712.087327][ T8293] siw: device registration error -23 [ 712.911079][ T8295] loop5: detected capacity change from 0 to 4096 [ 712.920712][ T8295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.968189][ T8295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.294060][ T29] kauditd_printk_skb: 1159 callbacks suppressed [ 713.294079][ T29] audit: type=1400 audit(1758513011.865:102326): avc: denied { prog_run } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 713.358140][ T29] audit: type=1400 audit(1758513011.907:102327): avc: denied { create } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.381537][ T29] audit: type=1400 audit(1758513011.907:102328): avc: denied { write } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.404689][ T29] audit: type=1400 audit(1758513011.907:102329): avc: denied { read } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.426980][ T29] audit: type=1400 audit(1758513011.907:102330): avc: denied { create } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 713.449006][ T29] audit: type=1400 audit(1758513011.917:102331): avc: denied { execmem } for pid=8296 comm="syz.6.13340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 713.473780][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.502330][ T29] audit: type=1400 audit(1758513012.012:102332): avc: denied { ioctl } for pid=8301 comm="syz.2.13341" path="socket:[140820]" dev="sockfs" ino=140820 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 713.530497][ T29] audit: type=1400 audit(1758513012.012:102333): avc: denied { write } for pid=8301 comm="syz.2.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 713.551215][ T29] audit: type=1400 audit(1758513012.012:102334): avc: denied { execute } for pid=8301 comm="syz.2.13341" dev="tmpfs" ino=2913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 713.571909][ T8303] siw: device registration error -23 [ 713.577997][ T29] audit: type=1400 audit(1758513012.012:102335): avc: denied { unmount } for pid=1316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 713.618447][ T8303] loop6: detected capacity change from 0 to 4096 [ 713.627236][ T8303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 713.672748][ T8303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.757979][ T8314] loop5: detected capacity change from 0 to 1024 [ 713.779662][ T8313] netlink: 'syz.0.13345': attribute type 21 has an invalid length. [ 713.790164][ T8313] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13345'. [ 713.801271][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13345'. [ 713.856768][ T8314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.886626][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.901791][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13347'. [ 713.922618][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13347'. [ 713.977156][ T8324] loop6: detected capacity change from 0 to 512 [ 714.026275][ T8324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 714.097726][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13348'. [ 714.120318][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.230916][ T8332] loop5: detected capacity change from 0 to 128 [ 714.282681][ T8332] netlink: 264 bytes leftover after parsing attributes in process `syz.5.13350'. [ 714.420438][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13357'. [ 714.512750][ T8350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 714.542535][ T8355] netlink: 'syz.5.13361': attribute type 21 has an invalid length. [ 714.849728][ T8375] loop5: detected capacity change from 0 to 512 [ 714.990049][ T8375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.006499][ T8375] ext4 filesystem being mounted at /538/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.068915][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.177432][ T8395] siw: device registration error -23 [ 715.768661][ T8400] Option '诩耬F滮 2蛡 锋夼 喍K*溪,蹮蕁墆B6蝔[A [ 715.768661][ T8400] Q耥卓2:[剛敺榍k醶' to dns_resolver key: bad/missing value [ 715.806336][ T8398] netem: incorrect ge model size [ 715.811333][ T8398] netem: change failed [ 715.901036][ T8398] Invalid logical block size (6) [ 716.369763][ T8431] netlink: 'syz.2.13394': attribute type 1 has an invalid length. [ 716.636472][ T8437] vlan2: entered allmulticast mode [ 721.601623][ T29] kauditd_printk_skb: 1074 callbacks suppressed [ 721.601639][ T29] audit: type=1400 audit(1758513020.589:103383): avc: denied { prog_load } for pid=8428 comm="syz.6.13393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 721.640542][ T29] audit: type=1400 audit(1758513020.589:103384): avc: denied { bpf } for pid=8428 comm="syz.6.13393" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.664384][ T29] audit: type=1400 audit(1758513020.589:103385): avc: denied { perfmon } for pid=8428 comm="syz.6.13393" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.688570][ T29] audit: type=1400 audit(1758513020.652:103386): avc: denied { read write } for pid=1316 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.715917][ T29] audit: type=1400 audit(1758513020.652:103387): avc: denied { open } for pid=1316 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.743370][ T29] audit: type=1400 audit(1758513020.652:103388): avc: denied { ioctl } for pid=1316 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.771903][ T29] audit: type=1400 audit(1758513020.673:103389): avc: denied { prog_load } for pid=8449 comm="syz.5.13399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 721.796112][ T29] audit: type=1400 audit(1758513020.673:103390): avc: denied { bpf } for pid=8449 comm="syz.5.13399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.819658][ T29] audit: type=1400 audit(1758513020.673:103391): avc: denied { perfmon } for pid=8449 comm="syz.5.13399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.843842][ T29] audit: type=1400 audit(1758513020.705:103392): avc: denied { prog_load } for pid=8449 comm="syz.5.13399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 722.268880][ T8477] loop5: detected capacity change from 0 to 512 [ 722.296073][ T8477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.320329][ T8477] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.455390][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.495095][ T8488] netlink: 'syz.6.13410': attribute type 1 has an invalid length. [ 722.531252][ T8485] lo speed is unknown, defaulting to 1000 [ 722.581666][ T8493] loop5: detected capacity change from 0 to 512 [ 722.604624][ T8493] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 722.635225][ T8493] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 722.654047][ T8486] __nla_validate_parse: 9 callbacks suppressed [ 722.654114][ T8486] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13412'. [ 722.682576][ T8486] 0猉功D: entered promiscuous mode [ 722.687853][ T8486] 0猉功D: left allmulticast mode [ 722.697949][ T8493] EXT4-fs (loop5): 1 truncate cleaned up [ 722.714541][ T8493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.758317][ T8485] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13412'. [ 722.801286][ T8485] 1猉功D: renamed from 30猉功D [ 722.818265][ T8485] 1猉功D: left promiscuous mode [ 722.824768][ T8485] 1猉功D: entered allmulticast mode [ 722.836642][ T8485] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 722.856343][ T8497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8497 comm=syz.2.13415 [ 722.891553][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.076318][ T8510] netlink: 'syz.5.13419': attribute type 1 has an invalid length. [ 723.178864][ T8512] netlink: 264 bytes leftover after parsing attributes in process `syz.2.13420'. [ 723.258301][ T8519] loop6: detected capacity change from 0 to 512 [ 723.268983][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13423'. [ 723.292400][ T8519] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 723.359491][ T8499] netlink: 'syz.0.13416': attribute type 21 has an invalid length. [ 723.540210][ T8499] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13416'. [ 723.551319][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13416'. [ 723.655015][ T8499] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 723.754676][ T8544] loop5: detected capacity change from 0 to 512 [ 723.770783][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13434'. [ 723.811997][ T8544] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 723.840670][ T8544] EXT4-fs (loop5): mount failed [ 723.907121][ T8549] lo speed is unknown, defaulting to 1000 [ 723.973405][ T8565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 724.000714][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13438'. [ 724.218086][ T8574] netlink: 264 bytes leftover after parsing attributes in process `syz.2.13442'. [ 724.496689][ T8595] FAULT_INJECTION: forcing a failure. [ 724.496689][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 724.511096][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.3.13449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 724.511130][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 724.511143][ T8595] Call Trace: [ 724.511151][ T8595] [ 724.511160][ T8595] __dump_stack+0x1d/0x30 [ 724.511183][ T8595] dump_stack_lvl+0xe8/0x140 [ 724.511225][ T8595] dump_stack+0x15/0x1b [ 724.511241][ T8595] should_fail_ex+0x265/0x280 [ 724.511265][ T8595] ? audit_log_d_path+0x8d/0x150 [ 724.511298][ T8595] should_failslab+0x8c/0xb0 [ 724.511362][ T8595] __kmalloc_cache_noprof+0x4c/0x320 [ 724.511394][ T8595] audit_log_d_path+0x8d/0x150 [ 724.511496][ T8595] audit_log_d_path_exe+0x42/0x70 [ 724.511563][ T8595] audit_log_task+0x1e9/0x250 [ 724.511595][ T8595] audit_seccomp+0x61/0x100 [ 724.511621][ T8595] ? __seccomp_filter+0x68c/0x10d0 [ 724.511678][ T8595] __seccomp_filter+0x69d/0x10d0 [ 724.511702][ T8595] ? __se_sys_statx+0x177/0x1b0 [ 724.511743][ T8595] __secure_computing+0x82/0x150 [ 724.511764][ T8595] syscall_trace_enter+0xcf/0x1e0 [ 724.511801][ T8595] do_syscall_64+0xac/0x200 [ 724.511829][ T8595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 724.511850][ T8595] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 724.511876][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.512124][ T8595] RIP: 0033:0x7fc09daad63c [ 724.512140][ T8595] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 724.512157][ T8595] RSP: 002b:00007fc09c50f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.512176][ T8595] RAX: ffffffffffffffda RBX: 00007fc09dcf5fa0 RCX: 00007fc09daad63c [ 724.512188][ T8595] RDX: 000000000000000f RSI: 00007fc09c50f0a0 RDI: 0000000000000004 [ 724.512253][ T8595] RBP: 00007fc09c50f090 R08: 0000000000000000 R09: 0000000000000000 [ 724.512265][ T8595] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 724.512276][ T8595] R13: 00007fc09dcf6038 R14: 00007fc09dcf5fa0 R15: 00007fffd8f43618 [ 724.512292][ T8595] [ 724.856951][ T8597] lo speed is unknown, defaulting to 1000 [ 724.969537][ T8604] 1猉功D: entered promiscuous mode [ 724.976449][ T8604] 1猉功D: left allmulticast mode [ 725.008343][ T8604] 0猉功D: renamed from 31猉功D [ 725.039341][ T8604] 0猉功D: left promiscuous mode [ 725.046339][ T8604] 0猉功D: entered allmulticast mode [ 725.072840][ T8616] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 725.084472][ T8604] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 725.209885][ T8625] FAULT_INJECTION: forcing a failure. [ 725.209885][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 725.224396][ T8625] CPU: 1 UID: 0 PID: 8625 Comm: syz.5.13464 Not tainted syzkaller #0 PREEMPT(voluntary) [ 725.224495][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.224516][ T8625] Call Trace: [ 725.224525][ T8625] [ 725.224534][ T8625] __dump_stack+0x1d/0x30 [ 725.224560][ T8625] dump_stack_lvl+0xe8/0x140 [ 725.224629][ T8625] dump_stack+0x15/0x1b [ 725.224649][ T8625] should_fail_ex+0x265/0x280 [ 725.224728][ T8625] should_failslab+0x8c/0xb0 [ 725.224753][ T8625] kmem_cache_alloc_noprof+0x50/0x310 [ 725.224859][ T8625] ? getname_flags+0x80/0x3b0 [ 725.224956][ T8625] getname_flags+0x80/0x3b0 [ 725.224989][ T8625] do_sys_openat2+0x60/0x110 [ 725.225026][ T8625] __x64_sys_openat+0xf2/0x120 [ 725.225076][ T8625] x64_sys_call+0x2e9c/0x2ff0 [ 725.225101][ T8625] do_syscall_64+0xd2/0x200 [ 725.225166][ T8625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 725.225195][ T8625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 725.225228][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.225268][ T8625] RIP: 0033:0x7f942d56d590 [ 725.225288][ T8625] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 725.225310][ T8625] RSP: 002b:00007f942bfcef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 725.225336][ T8625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942d56d590 [ 725.225408][ T8625] RDX: 0000000000000000 RSI: 00007f942d5f1f2e RDI: 00000000ffffff9c [ 725.225424][ T8625] RBP: 00007f942d5f1f2e R08: 0000000000000000 R09: 0000000000000000 [ 725.225439][ T8625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 725.225454][ T8625] R13: 00007f942d7b6038 R14: 00007f942d7b5fa0 R15: 00007ffe61fcba78 [ 725.225476][ T8625] [ 725.731953][ T8643] 9pnet_fd: Insufficient options for proto=fd [ 725.792717][ T8646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 726.019095][ T8659] netlink: 'syz.3.13478': attribute type 1 has an invalid length. [ 726.368539][ T29] kauditd_printk_skb: 1720 callbacks suppressed [ 726.368558][ T29] audit: type=1400 audit(1758513025.598:105112): avc: denied { bpf } for pid=8684 comm="syz.2.13490" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.399598][ T29] audit: type=1400 audit(1758513025.598:105113): avc: denied { perfmon } for pid=8684 comm="syz.2.13490" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.486148][ T29] audit: type=1400 audit(1758513025.598:105114): avc: denied { prog_load } for pid=8687 comm="syz.3.13491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.510124][ T29] audit: type=1400 audit(1758513025.598:105115): avc: denied { bpf } for pid=8687 comm="syz.3.13491" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.533783][ T29] audit: type=1400 audit(1758513025.608:105116): avc: denied { map_create } for pid=8687 comm="syz.3.13491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.557739][ T29] audit: type=1400 audit(1758513025.608:105117): avc: denied { perfmon } for pid=8687 comm="syz.3.13491" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 726.581516][ T29] audit: type=1400 audit(1758513025.608:105118): avc: denied { map_read } for pid=8687 comm="syz.3.13491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.605434][ T29] audit: type=1400 audit(1758513025.608:105119): avc: denied { prog_run } for pid=8687 comm="syz.3.13491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.618667][ T8699] 9pnet_fd: Insufficient options for proto=fd [ 726.627381][ T29] audit: type=1400 audit(1758513025.608:105120): avc: denied { kexec_image_load } for pid=8687 comm="syz.3.13491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 726.658306][ T29] audit: type=1400 audit(1758513025.640:105121): avc: denied { map_create } for pid=8683 comm="syz.6.13489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 726.816181][ T8717] FAULT_INJECTION: forcing a failure. [ 726.816181][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.830203][ T8717] CPU: 1 UID: 0 PID: 8717 Comm: syz.3.13500 Not tainted syzkaller #0 PREEMPT(voluntary) [ 726.830238][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 726.830252][ T8717] Call Trace: [ 726.830260][ T8717] [ 726.830270][ T8717] __dump_stack+0x1d/0x30 [ 726.830295][ T8717] dump_stack_lvl+0xe8/0x140 [ 726.830313][ T8717] dump_stack+0x15/0x1b [ 726.830329][ T8717] should_fail_ex+0x265/0x280 [ 726.830428][ T8717] should_fail+0xb/0x20 [ 726.830450][ T8717] should_fail_usercopy+0x1a/0x20 [ 726.830480][ T8717] _copy_from_user+0x1c/0xb0 [ 726.830551][ T8717] io_submit_one+0x52/0x11d0 [ 726.830583][ T8717] __se_sys_io_submit+0xfb/0x280 [ 726.830609][ T8717] __x64_sys_io_submit+0x43/0x50 [ 726.830671][ T8717] x64_sys_call+0x2d5d/0x2ff0 [ 726.830742][ T8717] do_syscall_64+0xd2/0x200 [ 726.830771][ T8717] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 726.830904][ T8717] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 726.830937][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.830957][ T8717] RIP: 0033:0x7fc09daaec29 [ 726.830974][ T8717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.831036][ T8717] RSP: 002b:00007fc09c50f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 726.831062][ T8717] RAX: ffffffffffffffda RBX: 00007fc09dcf5fa0 RCX: 00007fc09daaec29 [ 726.831083][ T8717] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fc09e832000 [ 726.831170][ T8717] RBP: 00007fc09c50f090 R08: 0000000000000000 R09: 0000000000000000 [ 726.831185][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.831220][ T8717] R13: 00007fc09dcf6038 R14: 00007fc09dcf5fa0 R15: 00007fffd8f43618 [ 726.831243][ T8717] [ 727.240538][ T8730] lo speed is unknown, defaulting to 1000 [ 727.817023][ T8740] loop6: detected capacity change from 0 to 512 [ 727.902484][ T8741] __nla_validate_parse: 11 callbacks suppressed [ 727.902501][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13508'. [ 727.952609][ T8741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13508'. [ 728.190266][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13517'. [ 728.239323][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13518'. [ 728.321502][ T8766] netlink: 264 bytes leftover after parsing attributes in process `syz.2.13520'. [ 728.354726][ T8768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13521'. [ 728.383791][ T8768] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13521'. [ 728.598037][ T8776] siw: device registration error -23 [ 728.792078][ T8777] siw: device registration error -23 [ 729.107493][ T8782] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 729.249174][ T8791] 9pnet_fd: Insufficient options for proto=fd [ 729.351151][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13531'. [ 729.467547][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13530'. [ 729.496618][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13534'. [ 729.611188][ T8816] netlink: 'syz.3.13537': attribute type 1 has an invalid length. [ 729.650135][ T8814] loop5: detected capacity change from 0 to 512 [ 729.819628][ T8826] 9pnet_fd: Insufficient options for proto=fd [ 729.911005][ T8832] FAULT_INJECTION: forcing a failure. [ 729.911005][ T8832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.924130][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.5.13546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 729.924160][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 729.924224][ T8832] Call Trace: [ 729.924232][ T8832] [ 729.924241][ T8832] __dump_stack+0x1d/0x30 [ 729.924265][ T8832] dump_stack_lvl+0xe8/0x140 [ 729.924288][ T8832] dump_stack+0x15/0x1b [ 729.924306][ T8832] should_fail_ex+0x265/0x280 [ 729.924333][ T8832] should_fail+0xb/0x20 [ 729.924357][ T8832] should_fail_usercopy+0x1a/0x20 [ 729.924385][ T8832] _copy_to_user+0x20/0xa0 [ 729.924465][ T8832] simple_read_from_buffer+0xb5/0x130 [ 729.924491][ T8832] proc_fail_nth_read+0x10e/0x150 [ 729.924567][ T8832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.924596][ T8832] vfs_read+0x1a5/0x770 [ 729.924675][ T8832] ? __fput+0x555/0x650 [ 729.924776][ T8832] ? __rcu_read_unlock+0x4f/0x70 [ 729.924809][ T8832] ? __fget_files+0x184/0x1c0 [ 729.924838][ T8832] ksys_read+0xda/0x1a0 [ 729.924864][ T8832] __x64_sys_read+0x40/0x50 [ 729.924959][ T8832] x64_sys_call+0x27bc/0x2ff0 [ 729.924983][ T8832] do_syscall_64+0xd2/0x200 [ 729.925013][ T8832] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 729.925036][ T8832] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 729.925086][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.925109][ T8832] RIP: 0033:0x7f942d56d63c [ 729.925127][ T8832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 729.925144][ T8832] RSP: 002b:00007f942bfcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.925197][ T8832] RAX: ffffffffffffffda RBX: 00007f942d7b5fa0 RCX: 00007f942d56d63c [ 729.925212][ T8832] RDX: 000000000000000f RSI: 00007f942bfcf0a0 RDI: 0000000000000008 [ 729.925307][ T8832] RBP: 00007f942bfcf090 R08: 0000000000000000 R09: 0000000000000000 [ 729.925320][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.925332][ T8832] R13: 00007f942d7b6038 R14: 00007f942d7b5fa0 R15: 00007ffe61fcba78 [ 729.925380][ T8832] [ 730.026074][ T8838] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 730.110760][ T8841] unsupported nla_type 52263 [ 730.205469][ T8838] FAT-fs (loop5): unable to read boot sector [ 730.211704][ T8846] loop6: detected capacity change from 0 to 512 [ 730.227023][ T8846] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 730.288624][ T8846] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 730.354855][ T8846] EXT4-fs (loop6): 1 truncate cleaned up [ 730.376741][ T8846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.409094][ T8850] netlink: 'syz.3.13553': attribute type 1 has an invalid length. [ 730.493412][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.571677][ T8871] FAULT_INJECTION: forcing a failure. [ 730.571677][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.587644][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.3.13563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 730.587673][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 730.587684][ T8871] Call Trace: [ 730.587691][ T8871] [ 730.587700][ T8871] __dump_stack+0x1d/0x30 [ 730.587727][ T8871] dump_stack_lvl+0xe8/0x140 [ 730.587750][ T8871] dump_stack+0x15/0x1b [ 730.587793][ T8871] should_fail_ex+0x265/0x280 [ 730.587819][ T8871] should_fail+0xb/0x20 [ 730.587860][ T8871] should_fail_usercopy+0x1a/0x20 [ 730.587882][ T8871] _copy_to_user+0x20/0xa0 [ 730.587966][ T8871] simple_read_from_buffer+0xb5/0x130 [ 730.587994][ T8871] proc_fail_nth_read+0x10e/0x150 [ 730.588027][ T8871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.588053][ T8871] vfs_read+0x1a5/0x770 [ 730.588074][ T8871] ? __rcu_read_unlock+0x4f/0x70 [ 730.588177][ T8871] ? __fget_files+0x184/0x1c0 [ 730.588209][ T8871] ksys_read+0xda/0x1a0 [ 730.588297][ T8871] __x64_sys_read+0x40/0x50 [ 730.588366][ T8871] x64_sys_call+0x27bc/0x2ff0 [ 730.588395][ T8871] do_syscall_64+0xd2/0x200 [ 730.588424][ T8871] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 730.588447][ T8871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 730.588481][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.588509][ T8871] RIP: 0033:0x7fc09daad63c [ 730.588524][ T8871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 730.588541][ T8871] RSP: 002b:00007fc09c50f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.588566][ T8871] RAX: ffffffffffffffda RBX: 00007fc09dcf5fa0 RCX: 00007fc09daad63c [ 730.588582][ T8871] RDX: 000000000000000f RSI: 00007fc09c50f0a0 RDI: 0000000000000004 [ 730.588598][ T8871] RBP: 00007fc09c50f090 R08: 0000000000000000 R09: 0000000000000000 [ 730.588616][ T8871] R10: 0000000000000734 R11: 0000000000000246 R12: 0000000000000001 [ 730.588631][ T8871] R13: 00007fc09dcf6038 R14: 00007fc09dcf5fa0 R15: 00007fffd8f43618 [ 730.588659][ T8871] [ 730.891939][ T8877] 9pnet_fd: Insufficient options for proto=fd [ 730.914199][ T8878] siw: device registration error -23 [ 731.147653][ T29] kauditd_printk_skb: 1226 callbacks suppressed [ 731.147670][ T29] audit: type=1400 audit(1758513030.606:106348): avc: denied { create } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 731.228200][ T29] audit: type=1400 audit(1758513030.648:106349): avc: denied { setopt } for pid=8883 comm="syz.5.13567" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 731.252926][ T29] audit: type=1400 audit(1758513030.648:106350): avc: denied { allowed } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 731.274199][ T29] audit: type=1400 audit(1758513030.648:106351): avc: denied { prog_load } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.295862][ T29] audit: type=1400 audit(1758513030.648:106352): avc: denied { bpf } for pid=8883 comm="syz.5.13567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.319122][ T29] audit: type=1400 audit(1758513030.648:106353): avc: denied { perfmon } for pid=8883 comm="syz.5.13567" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.342264][ T29] audit: type=1400 audit(1758513030.648:106354): avc: denied { bpf } for pid=8883 comm="syz.5.13567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.367520][ T29] audit: type=1400 audit(1758513030.658:106355): avc: denied { prog_run } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.388563][ T29] audit: type=1400 audit(1758513030.658:106356): avc: denied { create } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.411732][ T29] audit: type=1400 audit(1758513030.658:106357): avc: denied { create } for pid=8883 comm="syz.5.13567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 731.504618][ T8891] 9pnet_fd: Insufficient options for proto=fd [ 731.875484][ T8916] siw: device registration error -23 [ 732.533145][ T8932] FAULT_INJECTION: forcing a failure. [ 732.533145][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 732.533346][ T8934] 9pnet_fd: Insufficient options for proto=fd [ 732.548703][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.6.13587 Not tainted syzkaller #0 PREEMPT(voluntary) [ 732.548734][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 732.548747][ T8932] Call Trace: [ 732.548754][ T8932] [ 732.548763][ T8932] __dump_stack+0x1d/0x30 [ 732.548833][ T8932] dump_stack_lvl+0xe8/0x140 [ 732.548853][ T8932] dump_stack+0x15/0x1b [ 732.548871][ T8932] should_fail_ex+0x265/0x280 [ 732.548924][ T8932] should_failslab+0x8c/0xb0 [ 732.548984][ T8932] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 732.549014][ T8932] ? sidtab_sid2str_get+0xa0/0x130 [ 732.549063][ T8932] kmemdup_noprof+0x2b/0x70 [ 732.549090][ T8932] sidtab_sid2str_get+0xa0/0x130 [ 732.549112][ T8932] security_sid_to_context_core+0x1eb/0x2e0 [ 732.549172][ T8932] security_sid_to_context+0x27/0x40 [ 732.549193][ T8932] selinux_lsmprop_to_secctx+0x67/0xf0 [ 732.549341][ T8932] security_lsmprop_to_secctx+0x43/0x80 [ 732.549369][ T8932] audit_log_task_context+0x77/0x190 [ 732.549402][ T8932] audit_log_task+0xf4/0x250 [ 732.549501][ T8932] audit_seccomp+0x61/0x100 [ 732.549603][ T8932] ? __seccomp_filter+0x68c/0x10d0 [ 732.549626][ T8932] __seccomp_filter+0x69d/0x10d0 [ 732.549652][ T8932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 732.549737][ T8932] ? vfs_write+0x7e8/0x960 [ 732.549763][ T8932] __secure_computing+0x82/0x150 [ 732.549793][ T8932] syscall_trace_enter+0xcf/0x1e0 [ 732.549824][ T8932] do_syscall_64+0xac/0x200 [ 732.549855][ T8932] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 732.549923][ T8932] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 732.549969][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.550015][ T8932] RIP: 0033:0x7f6ca579ec29 [ 732.550033][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.550051][ T8932] RSP: 002b:00007f6ca41ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 732.550073][ T8932] RAX: ffffffffffffffda RBX: 00007f6ca59e5fa0 RCX: 00007f6ca579ec29 [ 732.550087][ T8932] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffffff [ 732.550146][ T8932] RBP: 00007f6ca41ff090 R08: 0000000000000004 R09: 0000000000000001 [ 732.550159][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.550171][ T8932] R13: 00007f6ca59e6038 R14: 00007f6ca59e5fa0 R15: 00007ffe3af3f9b8 [ 732.550225][ T8932] [ 732.693149][ T8933] __nla_validate_parse: 11 callbacks suppressed [ 732.693165][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13586'. [ 733.060537][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13599'. [ 733.082865][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13599'. [ 733.323957][ T8972] lo speed is unknown, defaulting to 1000 [ 733.331741][ T8972] lo speed is unknown, defaulting to 1000 [ 733.340867][ T8972] lo speed is unknown, defaulting to 1000 [ 733.352019][ T8972] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 733.363398][ T8983] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 733.424157][ T8972] lo speed is unknown, defaulting to 1000 [ 733.438393][ T8972] lo speed is unknown, defaulting to 1000 [ 733.455132][ T8972] lo speed is unknown, defaulting to 1000 [ 733.472311][ T8972] lo speed is unknown, defaulting to 1000 [ 733.478956][ T8972] lo speed is unknown, defaulting to 1000 [ 733.498052][ T8986] netlink: 'syz.6.13608': attribute type 1 has an invalid length. [ 733.510822][ T8972] lo speed is unknown, defaulting to 1000 [ 733.534270][ T8972] lo speed is unknown, defaulting to 1000 [ 733.555505][ T8972] lo speed is unknown, defaulting to 1000 [ 733.685432][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13613'. [ 733.701205][ T9004] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13613'. [ 733.719960][ T9007] FAULT_INJECTION: forcing a failure. [ 733.719960][ T9007] name failslab, interval 1, probability 0, space 0, times 0 [ 733.722580][ T9010] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 733.734305][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.3.13615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 733.734334][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.734347][ T9007] Call Trace: [ 733.734354][ T9007] [ 733.734361][ T9007] __dump_stack+0x1d/0x30 [ 733.734384][ T9007] dump_stack_lvl+0xe8/0x140 [ 733.734404][ T9007] dump_stack+0x15/0x1b [ 733.734421][ T9007] should_fail_ex+0x265/0x280 [ 733.734497][ T9007] should_failslab+0x8c/0xb0 [ 733.734523][ T9007] kmem_cache_alloc_node_noprof+0x57/0x320 [ 733.734584][ T9007] ? __alloc_skb+0x101/0x320 [ 733.734608][ T9007] __alloc_skb+0x101/0x320 [ 733.734628][ T9007] ? audit_log_start+0x365/0x6c0 [ 733.734673][ T9007] audit_log_start+0x380/0x6c0 [ 733.734705][ T9007] audit_seccomp+0x48/0x100 [ 733.734806][ T9007] ? __seccomp_filter+0x68c/0x10d0 [ 733.734903][ T9007] __seccomp_filter+0x69d/0x10d0 [ 733.734925][ T9007] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 733.735013][ T9007] ? vfs_write+0x7e8/0x960 [ 733.735040][ T9007] __secure_computing+0x82/0x150 [ 733.735062][ T9007] syscall_trace_enter+0xcf/0x1e0 [ 733.735086][ T9007] do_syscall_64+0xac/0x200 [ 733.735172][ T9007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 733.735196][ T9007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 733.735261][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.735283][ T9007] RIP: 0033:0x7fc09daaec29 [ 733.735299][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.735317][ T9007] RSP: 002b:00007fc09c50f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 733.735356][ T9007] RAX: ffffffffffffffda RBX: 00007fc09dcf5fa0 RCX: 00007fc09daaec29 [ 733.735369][ T9007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 733.735383][ T9007] RBP: 00007fc09c50f090 R08: 0000000000000000 R09: 0000000000000000 [ 733.735428][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.735441][ T9007] R13: 00007fc09dcf6038 R14: 00007fc09dcf5fa0 R15: 00007fffd8f43618 [ 733.735474][ T9007] [ 733.930910][ T9013] 9pnet_fd: Insufficient options for proto=fd [ 733.953581][ T9010] FAULT_INJECTION: forcing a failure. [ 733.953581][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 734.031871][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.2.13616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 734.031977][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.031989][ T9010] Call Trace: [ 734.031995][ T9010] [ 734.032001][ T9010] __dump_stack+0x1d/0x30 [ 734.032026][ T9010] dump_stack_lvl+0xe8/0x140 [ 734.032048][ T9010] dump_stack+0x15/0x1b [ 734.032067][ T9010] should_fail_ex+0x265/0x280 [ 734.032172][ T9010] should_failslab+0x8c/0xb0 [ 734.032280][ T9010] kmem_cache_alloc_node_noprof+0x57/0x320 [ 734.032313][ T9010] ? __alloc_skb+0x101/0x320 [ 734.032336][ T9010] ? __rtnl_unlock+0x95/0xb0 [ 734.032362][ T9010] __alloc_skb+0x101/0x320 [ 734.032384][ T9010] netlink_ack+0xfd/0x500 [ 734.032440][ T9010] netlink_rcv_skb+0x192/0x220 [ 734.032467][ T9010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 734.032514][ T9010] rtnetlink_rcv+0x1c/0x30 [ 734.032546][ T9010] netlink_unicast+0x5bd/0x690 [ 734.032573][ T9010] netlink_sendmsg+0x58b/0x6b0 [ 734.032671][ T9010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.032698][ T9010] __sock_sendmsg+0x142/0x180 [ 734.032754][ T9010] ____sys_sendmsg+0x31e/0x4e0 [ 734.032784][ T9010] ___sys_sendmsg+0x17b/0x1d0 [ 734.032835][ T9010] __x64_sys_sendmsg+0xd4/0x160 [ 734.032867][ T9010] x64_sys_call+0x191e/0x2ff0 [ 734.032941][ T9010] do_syscall_64+0xd2/0x200 [ 734.033036][ T9010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 734.033064][ T9010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 734.033125][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.033149][ T9010] RIP: 0033:0x7f06a2ecec29 [ 734.033165][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.033187][ T9010] RSP: 002b:00007f06a192f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.033220][ T9010] RAX: ffffffffffffffda RBX: 00007f06a3115fa0 RCX: 00007f06a2ecec29 [ 734.033234][ T9010] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 734.033305][ T9010] RBP: 00007f06a192f090 R08: 0000000000000000 R09: 0000000000000000 [ 734.033389][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.033406][ T9010] R13: 00007f06a3116038 R14: 00007f06a3115fa0 R15: 00007fff4cd176d8 [ 734.033425][ T9010] [ 734.468053][ T9029] netlink: 'syz.6.13625': attribute type 1 has an invalid length. [ 734.657882][ T9047] FAULT_INJECTION: forcing a failure. [ 734.657882][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 734.672581][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: syz.3.13628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 734.672615][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 734.672627][ T9047] Call Trace: [ 734.672636][ T9047] [ 734.672645][ T9047] __dump_stack+0x1d/0x30 [ 734.672718][ T9047] dump_stack_lvl+0xe8/0x140 [ 734.672751][ T9047] dump_stack+0x15/0x1b [ 734.672770][ T9047] should_fail_ex+0x265/0x280 [ 734.672865][ T9047] should_failslab+0x8c/0xb0 [ 734.672952][ T9047] kmem_cache_alloc_noprof+0x50/0x310 [ 734.672980][ T9047] ? __anon_vma_prepare+0x70/0x2f0 [ 734.672998][ T9047] ? __rcu_read_lock+0x37/0x50 [ 734.673023][ T9047] __anon_vma_prepare+0x70/0x2f0 [ 734.673101][ T9047] handle_mm_fault+0x1d58/0x2c20 [ 734.673133][ T9047] do_user_addr_fault+0x636/0x1090 [ 734.673168][ T9047] ? fpregs_restore_userregs+0xe2/0x1d0 [ 734.673270][ T9047] ? switch_fpu_return+0xe/0x20 [ 734.673363][ T9047] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 734.673443][ T9047] exc_page_fault+0x62/0xa0 [ 734.673472][ T9047] asm_exc_page_fault+0x26/0x30 [ 734.673494][ T9047] RIP: 0033:0x7fc09d970c03 [ 734.673516][ T9047] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 734.673537][ T9047] RSP: 002b:00007fc09c50e4a0 EFLAGS: 00010202 [ 734.673557][ T9047] RAX: 0000000000008000 RBX: 00007fc09c50e540 RCX: 00007fc0940ef000 [ 734.673599][ T9047] RDX: 00007fc09c50e6e0 RSI: 000000000000002e RDI: 00007fc09c50e5e0 [ 734.673614][ T9047] RBP: 0000000000000102 R08: 0000000000000006 R09: 000000000000000c [ 734.673628][ T9047] R10: 000000000000001a R11: 00007fc09c50e540 R12: 0000000000000001 [ 734.673650][ T9047] R13: 00007fc09db4da20 R14: 0000000000000001 R15: 00007fc09c50e5e0 [ 734.673742][ T9047] [ 734.673753][ T9047] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 734.721786][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13630'. [ 734.999558][ T9056] loop5: detected capacity change from 0 to 512 [ 735.026525][ T9056] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 735.048473][ T9056] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 735.068434][ T9056] EXT4-fs (loop5): 1 truncate cleaned up [ 735.077738][ T9056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.155450][ T1316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.228266][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13641'. [ 735.597801][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13652'. [ 735.605648][ T9104] FAULT_INJECTION: forcing a failure. [ 735.605648][ T9104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.621252][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.6.13653 Not tainted syzkaller #0 PREEMPT(voluntary) [ 735.621281][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.621294][ T9104] Call Trace: [ 735.621302][ T9104] [ 735.621311][ T9104] __dump_stack+0x1d/0x30 [ 735.621335][ T9104] dump_stack_lvl+0xe8/0x140 [ 735.621371][ T9104] dump_stack+0x15/0x1b [ 735.621387][ T9104] should_fail_ex+0x265/0x280 [ 735.621409][ T9104] should_fail+0xb/0x20 [ 735.621442][ T9104] should_fail_usercopy+0x1a/0x20 [ 735.621469][ T9104] _copy_from_user+0x1c/0xb0 [ 735.621497][ T9104] __sys_bind+0x106/0x2a0 [ 735.621547][ T9104] __x64_sys_bind+0x3f/0x50 [ 735.621569][ T9104] x64_sys_call+0x2b6e/0x2ff0 [ 735.621595][ T9104] do_syscall_64+0xd2/0x200 [ 735.621701][ T9104] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 735.621752][ T9104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 735.621785][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.621878][ T9104] RIP: 0033:0x7f6ca579ec29 [ 735.621896][ T9104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.621917][ T9104] RSP: 002b:00007f6ca41ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 735.621940][ T9104] RAX: ffffffffffffffda RBX: 00007f6ca59e5fa0 RCX: 00007f6ca579ec29 [ 735.621954][ T9104] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 735.621975][ T9104] RBP: 00007f6ca41ff090 R08: 0000000000000000 R09: 0000000000000000 [ 735.621992][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.622006][ T9104] R13: 00007f6ca59e6038 R14: 00007f6ca59e5fa0 R15: 00007ffe3af3f9b8 [ 735.622025][ T9104] [ 735.837396][ T9107] 9pnet_fd: Insufficient options for proto=fd [ 735.929374][ T29] kauditd_printk_skb: 1303 callbacks suppressed [ 735.929392][ T29] audit: type=1400 audit(1758513035.635:107658): avc: denied { write } for pid=9073 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 735.930544][ T9079] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 735.935863][ T29] audit: type=1400 audit(1758513035.635:107659): avc: denied { read } for pid=9073 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 736.001454][ T29] audit: type=1400 audit(1758513035.708:107660): avc: denied { map_create } for pid=9110 comm="syz.5.13666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.022662][ T29] audit: type=1400 audit(1758513035.708:107661): avc: denied { map_read map_write } for pid=9110 comm="syz.5.13666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.046076][ T29] audit: type=1400 audit(1758513035.708:107662): avc: denied { map_create } for pid=9115 comm="syz.2.13657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.073188][ T29] audit: type=1400 audit(1758513035.708:107663): avc: denied { prog_load } for pid=9115 comm="syz.2.13657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 736.094454][ T29] audit: type=1400 audit(1758513035.708:107664): avc: denied { bpf } for pid=9115 comm="syz.2.13657" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 736.115323][ T29] audit: type=1400 audit(1758513035.708:107665): avc: denied { perfmon } for pid=9115 comm="syz.2.13657" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 736.139216][ T29] audit: type=1400 audit(1758513035.708:107666): avc: denied { bpf } for pid=9115 comm="syz.2.13657" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 736.161810][ T29] audit: type=1400 audit(1758513035.708:107667): avc: denied { sys_module } for pid=9110 comm="syz.5.13666" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 736.163220][ T9111] loop5: detected capacity change from 0 to 2048 [ 736.244809][ T9111] loop5: p1 < > p4 [ 736.250970][ T9111] loop5: p4 size 8388608 extends beyond EOD, truncated [ 736.543478][ T9123] siw: device registration error -23 [ 736.647032][ T5499] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.655230][ T9149] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 736.695699][ T5499] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.781502][ T5499] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.812556][ T9163] vlan2: entered allmulticast mode [ 736.820337][ T9163] veth0_to_bond: entered allmulticast mode [ 736.831894][ T9163] veth0_to_bond: entered promiscuous mode [ 736.841973][ T9163] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 736.853360][ T9139] lo speed is unknown, defaulting to 1000 [ 736.860406][ T5499] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.874286][ T9139] lo speed is unknown, defaulting to 1000 [ 736.962771][ T9169] FAULT_INJECTION: forcing a failure. [ 736.962771][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.964449][ T5499] bridge_slave_1: left allmulticast mode [ 736.976027][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.6.13673 Not tainted syzkaller #0 PREEMPT(voluntary) [ 736.976058][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 736.976072][ T9169] Call Trace: [ 736.976080][ T9169] [ 736.976088][ T9169] __dump_stack+0x1d/0x30 [ 736.976138][ T9169] dump_stack_lvl+0xe8/0x140 [ 736.976243][ T9169] dump_stack+0x15/0x1b [ 736.976262][ T9169] should_fail_ex+0x265/0x280 [ 736.976289][ T9169] should_fail+0xb/0x20 [ 736.976312][ T9169] should_fail_usercopy+0x1a/0x20 [ 736.976365][ T9169] _copy_from_user+0x1c/0xb0 [ 736.976434][ T9169] io_submit_one+0x52/0x11d0 [ 736.976473][ T9169] __se_sys_io_submit+0xfb/0x280 [ 736.976501][ T9169] __x64_sys_io_submit+0x43/0x50 [ 736.976613][ T9169] x64_sys_call+0x2d5d/0x2ff0 [ 736.976706][ T9169] do_syscall_64+0xd2/0x200 [ 736.976741][ T9169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 736.976809][ T9169] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 736.976843][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.976899][ T9169] RIP: 0033:0x7f6ca579ec29 [ 736.976916][ T9169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.976959][ T9169] RSP: 002b:00007f6ca41ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 736.976980][ T9169] RAX: ffffffffffffffda RBX: 00007f6ca59e5fa0 RCX: 00007f6ca579ec29 [ 736.977007][ T9169] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f6ca651f000 [ 736.977029][ T9169] RBP: 00007f6ca41ff090 R08: 0000000000000000 R09: 0000000000000000 [ 736.977042][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.977055][ T9169] R13: 00007f6ca59e6038 R14: 00007f6ca59e5fa0 R15: 00007ffe3af3f9b8 [ 736.977073][ T9169] [ 737.192477][ T5499] bridge_slave_1: left promiscuous mode [ 737.199930][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.209053][ T5499] bridge_slave_0: left allmulticast mode [ 737.217040][ T5499] bridge_slave_0: left promiscuous mode [ 737.222714][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.406077][ T9180] loop6: detected capacity change from 0 to 1024 [ 737.422389][ T9180] EXT4-fs: Ignoring removed orlov option [ 737.437922][ T9180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.467371][ T5499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.482988][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.495507][ T5499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.508363][ T5499] bond0 (unregistering): Released all slaves [ 737.527165][ T5499] bond1 (unregistering): Released all slaves [ 737.564943][ T9190] __nla_validate_parse: 4 callbacks suppressed [ 737.564964][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13681'. [ 737.694800][ T5499] hsr_slave_0: left promiscuous mode [ 737.715531][ T5499] hsr_slave_1: left promiscuous mode [ 737.723152][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.732555][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.745622][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.754022][ T5499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.781813][ T5499] veth1_macvtap: left promiscuous mode [ 737.788659][ T5499] veth0_macvtap: left promiscuous mode [ 737.797090][ T5499] veth1_vlan: left promiscuous mode [ 737.802498][ T5499] veth0_vlan: left promiscuous mode [ 737.896732][ T5499] team0 (unregistering): Port device team_slave_1 removed [ 737.908059][ T5499] team0 (unregistering): Port device team_slave_0 removed [ 737.917635][ T5545] smc: removing ib device syz! [ 738.056963][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 738.079216][ T9201] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 738.079818][ T9200] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 738.095157][ T9] lo speed is unknown, defaulting to 1000 [ 738.112070][ T9] infiniband syz2: ib_query_port failed (-19) [ 738.703944][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13692'. [ 738.756872][ T9235] FAULT_INJECTION: forcing a failure. [ 738.756872][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.771841][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.0.13694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 738.771908][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 738.771997][ T9235] Call Trace: [ 738.772005][ T9235] [ 738.772015][ T9235] __dump_stack+0x1d/0x30 [ 738.772118][ T9235] dump_stack_lvl+0xe8/0x140 [ 738.772141][ T9235] dump_stack+0x15/0x1b [ 738.772161][ T9235] should_fail_ex+0x265/0x280 [ 738.772193][ T9235] should_fail+0xb/0x20 [ 738.772218][ T9235] should_fail_usercopy+0x1a/0x20 [ 738.772292][ T9235] _copy_from_user+0x1c/0xb0 [ 738.772327][ T9235] ___sys_recvmsg+0xaa/0x370 [ 738.772354][ T9235] ? 0xffffffff81000000 [ 738.772366][ T9235] ? __rcu_read_unlock+0x4f/0x70 [ 738.772426][ T9235] __x64_sys_recvmsg+0xd1/0x160 [ 738.772464][ T9235] x64_sys_call+0x2b42/0x2ff0 [ 738.772494][ T9235] do_syscall_64+0xd2/0x200 [ 738.772524][ T9235] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 738.772598][ T9235] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 738.772645][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.772665][ T9235] RIP: 0033:0x7f1ffaedec29 [ 738.772691][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.772713][ T9235] RSP: 002b:00007f1ff9947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 738.772780][ T9235] RAX: ffffffffffffffda RBX: 00007f1ffb125fa0 RCX: 00007f1ffaedec29 [ 738.772795][ T9235] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 738.772857][ T9235] RBP: 00007f1ff9947090 R08: 0000000000000000 R09: 0000000000000000 [ 738.772872][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.772887][ T9235] R13: 00007f1ffb126038 R14: 00007f1ffb125fa0 R15: 00007ffeb6f8d3c8 [ 738.772909][ T9235] [ 738.993410][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.002966][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.050221][ T9139] bridge_slave_0: entered allmulticast mode [ 739.121574][ T9139] bridge_slave_0: entered promiscuous mode [ 739.360087][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.369649][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.455444][ T9139] bridge_slave_1: entered allmulticast mode [ 739.559469][ T9139] bridge_slave_1: entered promiscuous mode [ 739.577924][ T9236] lo speed is unknown, defaulting to 1000 [ 739.731174][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.845914][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.888077][ T9139] team0: Port device team_slave_0 added [ 739.897012][ T9139] team0: Port device team_slave_1 added [ 739.946883][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.955236][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.981180][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.020472][ T9251] loop6: detected capacity change from 0 to 512 [ 740.031511][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.039340][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.067612][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.088293][ T5499] IPVS: stop unused estimator thread 0... [ 740.112084][ T9251] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 740.161572][ T9139] hsr_slave_0: entered promiscuous mode [ 740.184075][ T9139] hsr_slave_1: entered promiscuous mode [ 740.192321][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13698'. [ 740.203721][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 740.210386][ T9139] Cannot create hsr debugfs directory [ 740.297126][ T9261] netlink: 'syz.0.13697': attribute type 1 has an invalid length. [ 740.421597][ T9273] loop6: detected capacity change from 0 to 512 [ 740.463080][ T9273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.480761][ T9273] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.532675][ T9273] EXT4-fs error (device loop6): ext4_empty_dir:3086: inode #12: block 32: comm +}[@: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 740.556505][ T9273] EXT4-fs (loop6): Remounting filesystem read-only [ 740.565079][ T9273] EXT4-fs warning (device loop6): ext4_empty_dir:3089: inode #12: comm +}[@: directory missing '.' [ 740.594067][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.660464][ T9280] 9pnet_fd: Insufficient options for proto=fd [ 740.714479][ T29] kauditd_printk_skb: 775 callbacks suppressed [ 740.714495][ T29] audit: type=1400 audit(1758513040.654:108443): avc: denied { read write } for pid=1733 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 740.750004][ T29] audit: type=1400 audit(1758513040.654:108444): avc: denied { open } for pid=1733 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 740.778323][ T29] audit: type=1400 audit(1758513040.727:108445): avc: denied { ioctl } for pid=1733 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 740.836502][ T29] audit: type=1400 audit(1758513040.780:108446): avc: denied { create } for pid=9283 comm="syz.3.13708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 740.846005][ T9139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 740.858955][ T29] audit: type=1400 audit(1758513040.780:108447): avc: denied { map_create } for pid=9283 comm="syz.3.13708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 740.886063][ T29] audit: type=1400 audit(1758513040.780:108448): avc: denied { bpf } for pid=9283 comm="syz.3.13708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 740.910557][ T29] audit: type=1400 audit(1758513040.780:108449): avc: denied { map_read map_write } for pid=9283 comm="syz.3.13708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 740.931713][ T29] audit: type=1400 audit(1758513040.780:108450): avc: denied { prog_load } for pid=9283 comm="syz.3.13708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 740.953651][ T29] audit: type=1400 audit(1758513040.790:108451): avc: denied { create } for pid=9139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 740.977747][ T29] audit: type=1400 audit(1758513040.790:108452): avc: denied { bpf } for pid=9283 comm="syz.3.13708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 741.009931][ T9139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 741.049754][ T9139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 741.103032][ T9139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 741.279977][ T9309] lo speed is unknown, defaulting to 1000 [ 741.311143][ T9310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 741.333274][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13717'. [ 741.409592][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.470123][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.511976][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.519156][ T5556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.534798][ T9309] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13715'. [ 741.535580][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.550935][ T5556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.556160][ T9309] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13715'. [ 741.592204][ T9309] 0猉功D: entered promiscuous mode [ 741.599105][ T9309] 0猉功D: left allmulticast mode [ 741.607028][ T9313] netlink: 5 bytes leftover after parsing attributes in process `syz.6.13715'. [ 741.630048][ T9313] 1猉功D: renamed from 30猉功D [ 741.647614][ T9313] 1猉功D: left promiscuous mode [ 741.654642][ T9313] 1猉功D: entered allmulticast mode [ 741.665715][ T9313] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 741.771320][ T9333] loop6: detected capacity change from 0 to 128 [ 741.774209][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.811023][ T9333] netlink: 264 bytes leftover after parsing attributes in process `syz.6.13723'. [ 742.104082][ T9139] veth0_vlan: entered promiscuous mode [ 742.259040][ T9358] loop6: detected capacity change from 0 to 4096 [ 742.269077][ T9358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.314098][ T9358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.385840][ T9361] 9pnet_fd: Insufficient options for proto=fd [ 742.462264][ T9363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13729'. [ 742.570250][ T9356] lo speed is unknown, defaulting to 1000 [ 742.577974][ T9356] lo speed is unknown, defaulting to 1000 [ 742.583893][ T9356] lo speed is unknown, defaulting to 1000 [ 742.587519][ T9139] veth1_vlan: entered promiscuous mode [ 742.592616][ T9356] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 742.603254][ T9139] veth0_macvtap: entered promiscuous mode [ 742.619048][ T9356] lo speed is unknown, defaulting to 1000 [ 742.626281][ T9356] lo speed is unknown, defaulting to 1000 [ 742.632433][ T9356] lo speed is unknown, defaulting to 1000 [ 742.640156][ T9356] lo speed is unknown, defaulting to 1000 [ 742.648008][ T9356] lo speed is unknown, defaulting to 1000 [ 742.655982][ T9356] lo speed is unknown, defaulting to 1000 [ 742.664072][ T9356] lo speed is unknown, defaulting to 1000 [ 742.670346][ T9356] lo speed is unknown, defaulting to 1000 [ 742.676117][ T9139] veth1_macvtap: entered promiscuous mode [ 742.706130][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.724072][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.762376][ T9369] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 742.788898][ T5556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.804022][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.825520][ T5556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.850798][ T5499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.873060][ T5499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.241521][ T9391] loop6: detected capacity change from 0 to 512 [ 744.254315][ T9391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 744.755942][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13742'. [ 745.638916][ T9418] siw: device registration error -23 [ 745.652278][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 745.652296][ T29] audit: type=1400 audit(1758513045.819:109143): avc: denied { map_create } for pid=9416 comm="syz.5.13747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 745.680392][ T29] audit: type=1400 audit(1758513045.819:109144): avc: denied { perfmon } for pid=9416 comm="syz.5.13747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 745.703472][ T29] audit: type=1400 audit(1758513045.830:109145): avc: denied { create } for pid=9407 comm="syz.2.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 745.723966][ T29] audit: type=1400 audit(1758513045.830:109146): avc: denied { write } for pid=9407 comm="syz.2.13744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 745.753769][ T29] audit: type=1400 audit(1758513045.851:109147): avc: denied { sys_module } for pid=9404 comm="syz.3.13743" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 745.777176][ T29] audit: type=1400 audit(1758513045.851:109148): avc: denied { module_request } for pid=9404 comm="syz.3.13743" kmod="pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 745.800914][ T29] audit: type=1400 audit(1758513045.861:109149): avc: denied { bpf } for pid=9414 comm="syz.0.13746" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 745.824660][ T29] audit: type=1400 audit(1758513045.861:109150): avc: denied { prog_run } for pid=9414 comm="syz.0.13746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 745.845757][ T29] audit: type=1400 audit(1758513045.882:109151): avc: denied { prog_load } for pid=9421 comm="syz.6.13745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 745.867238][ T29] audit: type=1400 audit(1758513045.882:109152): avc: denied { bpf } for pid=9421 comm="syz.6.13745" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 745.961449][ T9423] batman_adv: batadv0: Adding interface: dummy0 [ 745.969641][ T9423] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.000398][ T9423] batman_adv: batadv0: Interface activated: dummy0 [ 746.029130][ T9424] batadv0: mtu less than device minimum [ 746.036969][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.047792][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.058614][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.069400][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.080204][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.091255][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.102150][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.113050][ T9424] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 746.140039][ T9427] netlink: 'syz.3.13748': attribute type 1 has an invalid length. [ 746.169686][ T9423] lo speed is unknown, defaulting to 1000 [ 746.177641][ T9423] lo speed is unknown, defaulting to 1000 [ 747.008258][ T9438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 747.514276][ T9450] net_ratelimit: 11 callbacks suppressed [ 747.514294][ T9450] IPv4: Oversized IP packet from 127.202.26.0 [ 747.655243][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13757'. [ 747.837464][ T9463] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 747.853342][ T9460] netlink: 'syz.5.13759': attribute type 1 has an invalid length. [ 748.066235][ T9472] siw: device registration error -23 [ 748.542033][ T9478] netlink: 'syz.0.13762': attribute type 1 has an invalid length. [ 748.594043][ T9480] loop6: detected capacity change from 0 to 128 [ 748.629216][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.629216][ T9480] loop6: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 748.647550][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.647550][ T9480] loop6: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 748.663084][ T9480] buffer_io_error: 39390 callbacks suppressed [ 748.663242][ T9480] Buffer I/O error on dev loop6, logical block 87, lost async page write [ 748.713016][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.713016][ T9480] loop6: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 748.728662][ T9480] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 748.780199][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.780199][ T9480] loop6: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 748.799109][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.799109][ T9480] loop6: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 748.813560][ T9480] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 748.826925][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.826925][ T9480] loop6: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 748.842192][ T9480] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 748.856508][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.856508][ T9480] loop6: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 748.862969][ T9433] syz.3.13749 (9433) used greatest stack depth: 6392 bytes left [ 748.879056][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.879056][ T9480] loop6: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 748.879088][ T9480] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 748.879109][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.879109][ T9480] loop6: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 748.879209][ T9480] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 748.879380][ T9480] syz.6.13765: attempt to access beyond end of device [ 748.879380][ T9480] loop6: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 748.879737][ T9480] Buffer I/O error on dev loop6, logical block 107, lost async page write [ 748.955591][ T9480] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 748.969906][ T9480] Buffer I/O error on dev loop6, logical block 119, lost async page write [ 748.983198][ T9480] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 749.591360][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13774'. [ 749.693709][ T9505] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 749.764255][ T9517] netlink: 'syz.0.13778': attribute type 1 has an invalid length. [ 750.855865][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 750.855885][ T29] audit: type=1400 audit(1758513050.313:109888): avc: denied { execmem } for pid=9519 comm="syz.2.13780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 750.883972][ T29] audit: type=1400 audit(1758513050.491:109889): avc: denied { create } for pid=9515 comm="syz.3.13777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 750.905585][ T29] audit: type=1400 audit(1758513050.491:109890): avc: denied { write } for pid=9515 comm="syz.3.13777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 750.927780][ T29] audit: type=1400 audit(1758513050.491:109891): avc: denied { prog_load } for pid=9515 comm="syz.3.13777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 750.947648][ T29] audit: type=1400 audit(1758513050.491:109892): avc: denied { bpf } for pid=9515 comm="syz.3.13777" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 750.973679][ T29] audit: type=1400 audit(1758513050.491:109893): avc: denied { perfmon } for pid=9515 comm="syz.3.13777" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 750.995153][ T29] audit: type=1400 audit(1758513050.523:109894): avc: denied { prog_load } for pid=9522 comm="syz.5.13781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 751.018825][ T29] audit: type=1400 audit(1758513050.523:109895): avc: denied { bpf } for pid=9522 comm="syz.5.13781" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 751.042476][ T29] audit: type=1400 audit(1758513050.733:109896): avc: denied { map_create } for pid=9519 comm="syz.2.13780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 751.064567][ T29] audit: type=1400 audit(1758513050.733:109897): avc: denied { perfmon } for pid=9519 comm="syz.2.13780" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 751.081641][ T9537] loop6: detected capacity change from 0 to 2048 [ 751.171449][ T9537] loop6: p1 < > p4 [ 751.208314][ T9537] loop6: p4 size 8388608 extends beyond EOD, truncated [ 751.306647][ T9531] FAULT_INJECTION: forcing a failure. [ 751.306647][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.322080][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.3.13782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 751.322167][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 751.322179][ T9531] Call Trace: [ 751.322187][ T9531] [ 751.322197][ T9531] __dump_stack+0x1d/0x30 [ 751.322267][ T9531] dump_stack_lvl+0xe8/0x140 [ 751.322286][ T9531] dump_stack+0x15/0x1b [ 751.322302][ T9531] should_fail_ex+0x265/0x280 [ 751.322327][ T9531] should_fail+0xb/0x20 [ 751.322448][ T9531] should_fail_usercopy+0x1a/0x20 [ 751.322471][ T9531] _copy_from_user+0x1c/0xb0 [ 751.322501][ T9531] __sys_sendto+0x19e/0x330 [ 751.322551][ T9531] __x64_sys_sendto+0x76/0x90 [ 751.322641][ T9531] x64_sys_call+0x2d05/0x2ff0 [ 751.322662][ T9531] do_syscall_64+0xd2/0x200 [ 751.322729][ T9531] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 751.322756][ T9531] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 751.322814][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.322918][ T9531] RIP: 0033:0x7fc09daaec29 [ 751.322935][ T9531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.323028][ T9531] RSP: 002b:00007fc09c50f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 751.323052][ T9531] RAX: ffffffffffffffda RBX: 00007fc09dcf5fa0 RCX: 00007fc09daaec29 [ 751.323152][ T9531] RDX: 000000000000000e RSI: 0000200000000180 RDI: 0000000000000008 [ 751.323167][ T9531] RBP: 00007fc09c50f090 R08: 0000200000000140 R09: 0000000000000014 [ 751.323182][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.323194][ T9531] R13: 00007fc09dcf6038 R14: 00007fc09dcf5fa0 R15: 00007fffd8f43618 [ 751.323212][ T9531] [ 751.553259][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13787'. [ 751.725577][ T9555] netlink: 264 bytes leftover after parsing attributes in process `syz.2.13790'. [ 751.888860][ T9566] netlink: 'syz.5.13794': attribute type 1 has an invalid length. [ 752.038410][ T9559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13792'. [ 752.107015][ T9573] loop5: detected capacity change from 0 to 2048 [ 752.130627][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13799'. [ 752.179615][ T9573] loop5: p1 < > p4 [ 752.187870][ T9573] loop5: p4 size 8388608 extends beyond EOD, truncated [ 752.817801][ T9621] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 752.988571][ T9628] 9pnet: Could not find request transport: fd0x0000000000000005 [ 753.208760][ T9644] lo speed is unknown, defaulting to 1000 [ 753.237957][ T9644] lo speed is unknown, defaulting to 1000 [ 753.480635][ T9655] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 753.606873][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13831'. [ 755.830907][ T29] kauditd_printk_skb: 1122 callbacks suppressed [ 755.830923][ T29] audit: type=1400 audit(1758513056.528:110975): avc: denied { map_create } for pid=9680 comm="syz.3.13838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 755.875528][ T29] audit: type=1400 audit(1758513056.528:110976): avc: denied { bpf } for pid=9680 comm="syz.3.13838" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 755.898549][ T29] audit: type=1400 audit(1758513056.528:110977): avc: denied { map_read map_write } for pid=9680 comm="syz.3.13838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 755.918741][ T29] audit: type=1400 audit(1758513056.539:110978): avc: denied { map_create } for pid=9684 comm="syz.5.13839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 755.940779][ T29] audit: type=1400 audit(1758513056.539:110979): avc: denied { bpf } for pid=9684 comm="syz.5.13839" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 755.963523][ T29] audit: type=1400 audit(1758513056.539:110980): avc: denied { map_read map_write } for pid=9684 comm="syz.5.13839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 755.988514][ T29] audit: type=1400 audit(1758513056.549:110981): avc: denied { prog_load } for pid=9684 comm="syz.5.13839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 756.009994][ T29] audit: type=1400 audit(1758513056.549:110982): avc: denied { perfmon } for pid=9684 comm="syz.5.13839" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 756.033501][ T29] audit: type=1400 audit(1758513056.549:110983): avc: denied { prog_run } for pid=9684 comm="syz.5.13839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 756.055304][ T29] audit: type=1400 audit(1758513056.570:110984): avc: denied { write } for pid=9691 comm="syz.0.13840" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 756.233278][ T9693] netlink: 'syz.5.13839': attribute type 1 has an invalid length. [ 756.676508][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13840'. [ 756.945308][ T9715] FAULT_INJECTION: forcing a failure. [ 756.945308][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 756.960005][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.5.13845 Not tainted syzkaller #0 PREEMPT(voluntary) [ 756.960090][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.960105][ T9715] Call Trace: [ 756.960112][ T9715] [ 756.960121][ T9715] __dump_stack+0x1d/0x30 [ 756.960147][ T9715] dump_stack_lvl+0xe8/0x140 [ 756.960170][ T9715] dump_stack+0x15/0x1b [ 756.960185][ T9715] should_fail_ex+0x265/0x280 [ 756.960271][ T9715] should_failslab+0x8c/0xb0 [ 756.960333][ T9715] kmem_cache_alloc_noprof+0x50/0x310 [ 756.960363][ T9715] ? audit_log_start+0x365/0x6c0 [ 756.960461][ T9715] audit_log_start+0x365/0x6c0 [ 756.960498][ T9715] audit_seccomp+0x48/0x100 [ 756.960535][ T9715] ? __seccomp_filter+0x68c/0x10d0 [ 756.960595][ T9715] __seccomp_filter+0x69d/0x10d0 [ 756.960630][ T9715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 756.960662][ T9715] ? vfs_write+0x7e8/0x960 [ 756.960686][ T9715] __secure_computing+0x82/0x150 [ 756.960706][ T9715] syscall_trace_enter+0xcf/0x1e0 [ 756.960765][ T9715] do_syscall_64+0xac/0x200 [ 756.960800][ T9715] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 756.960847][ T9715] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 756.960877][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.960902][ T9715] RIP: 0033:0x7f281f98ec29 [ 756.960978][ T9715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.960999][ T9715] RSP: 002b:00007f281e3ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 756.961023][ T9715] RAX: ffffffffffffffda RBX: 00007f281fbd5fa0 RCX: 00007f281f98ec29 [ 756.961039][ T9715] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.961054][ T9715] RBP: 00007f281e3ef090 R08: 0000000000000006 R09: 0000000000000000 [ 756.961117][ T9715] R10: 00002000002fe000 R11: 0000000000000246 R12: 0000000000000001 [ 756.961129][ T9715] R13: 00007f281fbd6038 R14: 00007f281fbd5fa0 R15: 00007ffe3fe842a8 [ 756.961146][ T9715] [ 757.208539][ T9698] team_slave_0: entered promiscuous mode [ 757.214798][ T9698] team_slave_0: left promiscuous mode [ 757.230791][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13846'. [ 757.747597][ T9745] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 757.865185][ T9748] serio: Serial port ttyS3 [ 757.955392][ T9748] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 758.128205][ T9748] vhci_hcd: invalid port number 253 [ 758.135226][ T9748] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 758.329358][ T9756] loop6: detected capacity change from 0 to 4096 [ 758.339798][ T9756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 758.439973][ T9756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.823209][ T1733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.849653][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13860'. [ 758.995694][ T9772] syz.5.13865 (9772): attempted to duplicate a private mapping with mremap. This is not supported. [ 759.179020][ T9772] Falling back ldisc for ttyS3. [ 759.264025][ T9784] loop6: detected capacity change from 0 to 1764 [ 759.308777][ T9790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 759.471417][ T9794] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 760.298858][ T9820] FAULT_INJECTION: forcing a failure. [ 760.298858][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 760.313395][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.5.13882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 760.313427][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 760.313441][ T9820] Call Trace: [ 760.313449][ T9820] [ 760.313458][ T9820] __dump_stack+0x1d/0x30 [ 760.313482][ T9820] dump_stack_lvl+0xe8/0x140 [ 760.313534][ T9820] dump_stack+0x15/0x1b [ 760.313552][ T9820] should_fail_ex+0x265/0x280 [ 760.313578][ T9820] should_failslab+0x8c/0xb0 [ 760.313605][ T9820] kmem_cache_alloc_noprof+0x50/0x310 [ 760.313688][ T9820] ? audit_log_start+0x365/0x6c0 [ 760.313732][ T9820] audit_log_start+0x365/0x6c0 [ 760.313769][ T9820] audit_seccomp+0x48/0x100 [ 760.313795][ T9820] ? __seccomp_filter+0x68c/0x10d0 [ 760.313818][ T9820] __seccomp_filter+0x69d/0x10d0 [ 760.313916][ T9820] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 760.313967][ T9820] ? vfs_write+0x7e8/0x960 [ 760.314024][ T9820] ? __rcu_read_unlock+0x4f/0x70 [ 760.314045][ T9820] ? __fget_files+0x184/0x1c0 [ 760.314072][ T9820] __secure_computing+0x82/0x150 [ 760.314129][ T9820] syscall_trace_enter+0xcf/0x1e0 [ 760.314154][ T9820] do_syscall_64+0xac/0x200 [ 760.314182][ T9820] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 760.314204][ T9820] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 760.314314][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.314336][ T9820] RIP: 0033:0x7f281f98ec29 [ 760.314351][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.314382][ T9820] RSP: 002b:00007f281e3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.314404][ T9820] RAX: ffffffffffffffda RBX: 00007f281fbd5fa0 RCX: 00007f281f98ec29 [ 760.314419][ T9820] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000006 [ 760.314433][ T9820] RBP: 00007f281e3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 760.314458][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.314470][ T9820] R13: 00007f281fbd6038 R14: 00007f281fbd5fa0 R15: 00007ffe3fe842a8 [ 760.314491][ T9820] [ 760.598695][ T29] kauditd_printk_skb: 828 callbacks suppressed [ 760.598714][ T29] audit: type=1400 audit(1758513061.536:111809): avc: denied { create } for pid=9822 comm="syz.3.13883" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 760.658477][ T29] audit: type=1400 audit(1758513061.536:111810): avc: denied { prog_load } for pid=9827 comm="syz.2.13885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 760.679682][ T29] audit: type=1400 audit(1758513061.536:111811): avc: denied { bpf } for pid=9827 comm="syz.2.13885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 760.681911][ T9823] netlink: 'syz.3.13883': attribute type 1 has an invalid length. [ 760.700528][ T29] audit: type=1400 audit(1758513061.536:111812): avc: denied { perfmon } for pid=9827 comm="syz.2.13885" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 760.700563][ T29] audit: type=1400 audit(1758513061.536:111813): avc: denied { bpf } for pid=9827 comm="syz.2.13885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 760.700652][ T29] audit: type=1400 audit(1758513061.547:111814): avc: denied { mounton } for pid=9819 comm="syz.6.13879" path="/575/file0" dev="tmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 760.702734][ T29] audit: type=1400 audit(1758513061.568:111815): avc: denied { map_read map_write } for pid=9826 comm="syz.5.13886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 760.702770][ T29] audit: type=1326 audit(1758513061.568:111816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09daaec29 code=0x7ffc0000 [ 760.702905][ T29] audit: type=1326 audit(1758513061.568:111817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.3.13883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09daaec29 code=0x7ffc0000 [ 760.702983][ T29] audit: type=1326 audit(1758513061.578:111818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9826 comm="syz.5.13886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281f98ec29 code=0x7ffc0000 [ 760.918051][ T9831] loop5: detected capacity change from 0 to 1024 [ 760.970931][ T9831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 761.037071][ T9831] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.058549][ T9841] SELinux: ebitmap: map size 512 does not match my size 64 (high bit was 0) [ 761.059081][ T9831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 761.081499][ T9841] SELinux: failed to load policy [ 761.401914][ T9851] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 761.536606][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13898'. [ 762.668678][ T9878] netlink: 'syz.5.13901': attribute type 1 has an invalid length. [ 762.678382][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13901'. [ 762.817502][ T9885] loop5: detected capacity change from 0 to 128 [ 764.224642][ T5572] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.240862][ T5572] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.262306][ T5572] $H (unregistering): (slave batadv0): Releasing backup interface [ 764.362987][ T5572] $H (unregistering): Released all slaves [ 764.443416][ T5572] bond0 (unregistering): Released all slaves [ 764.468890][ T9923] netlink: 'syz.6.13916': attribute type 1 has an invalid length. [ 764.497714][ T5572] tipc: Left network mode [ 764.501619][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13920'. [ 764.527606][ T5572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.550921][ T5572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.649515][ T5572] team0 (unregistering): Port device hsr_slave_0 removed [ 764.677164][ T5572] team0 (unregistering): Port device team_slave_0 removed [ 764.717584][ T9940] loop6: detected capacity change from 0 to 2048 [ 764.725526][ T5572] team0 (unregistering): Port device dummy0 removed [ 764.744120][ T9946] syz_tun: entered allmulticast mode [ 764.823577][ T9950] 9pnet_fd: Insufficient options for proto=fd [ 764.837512][ T9941] syz_tun: left allmulticast mode [ 764.891143][ T9948] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 764.916817][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13929'. [ 765.370143][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 765.370162][ T29] audit: type=1400 audit(1758513066.534:112729): avc: denied { prog_load } for pid=9969 comm="syz.3.13936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 765.398519][ T29] audit: type=1400 audit(1758513066.545:112730): avc: denied { bpf } for pid=9969 comm="syz.3.13936" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.421114][ T29] audit: type=1400 audit(1758513066.545:112731): avc: denied { perfmon } for pid=9969 comm="syz.3.13936" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.545662][ T9971] netlink: 'syz.6.13934': attribute type 1 has an invalid length. [ 765.611545][ T9977] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.613176][ T9968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.620707][ T9977] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 765.628837][ T9968] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64 [ 765.638336][ T9977] audit: backlog limit exceeded [ 765.648056][ T9968] audit: backlog limit exceeded [ 765.648722][ T9968] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.686293][ T5572] IPVS: stop unused estimator thread 0... [ 765.820412][ T9987] loop6: detected capacity change from 0 to 512 [ 765.829619][ T9980] loop5: detected capacity change from 0 to 2048 [ 765.842496][ T9987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 765.901094][ T9980] siw: device registration error -23 [ 765.958004][ T9999] FAULT_INJECTION: forcing a failure. [ 765.958004][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.972649][ T9998] loop6: detected capacity change from 0 to 128 [ 765.981497][ T9999] CPU: 1 UID: 0 PID: 9999 Comm: syz.2.13944 Not tainted syzkaller #0 PREEMPT(voluntary) [ 765.981577][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 765.981590][ T9999] Call Trace: [ 765.981599][ T9999] [ 765.981609][ T9999] __dump_stack+0x1d/0x30 [ 765.981633][ T9999] dump_stack_lvl+0xe8/0x140 [ 765.981655][ T9999] dump_stack+0x15/0x1b [ 765.981738][ T9999] should_fail_ex+0x265/0x280 [ 765.981767][ T9999] should_fail+0xb/0x20 [ 765.981792][ T9999] should_fail_usercopy+0x1a/0x20 [ 765.981820][ T9999] _copy_to_user+0x20/0xa0 [ 765.981915][ T9999] rng_dev_read+0x3ef/0x740 [ 765.981945][ T9999] ? __pfx_rng_dev_read+0x10/0x10 [ 765.981970][ T9999] vfs_readv+0x3f8/0x690 [ 765.982044][ T9999] __x64_sys_preadv+0xfd/0x1c0 [ 765.982071][ T9999] x64_sys_call+0x282a/0x2ff0 [ 765.982095][ T9999] do_syscall_64+0xd2/0x200 [ 765.982129][ T9999] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 765.982163][ T9999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 765.982194][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.982218][ T9999] RIP: 0033:0x7f06a2ecec29 [ 765.982235][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.982305][ T9999] RSP: 002b:00007f06a192f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 765.982325][ T9999] RAX: ffffffffffffffda RBX: 00007f06a3115fa0 RCX: 00007f06a2ecec29 [ 765.982337][ T9999] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 765.982368][ T9999] RBP: 00007f06a192f090 R08: 0000000000000000 R09: 0000000000000000 [ 765.982380][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 765.982391][ T9999] R13: 00007f06a3116038 R14: 00007f06a3115fa0 R15: 00007fff4cd176d8 [ 765.982409][ T9999] [ 766.112699][T10003] netlink: 264 bytes leftover after parsing attributes in process `syz.6.13943'. [ 766.290853][T10007] serio: Serial port ptm0 [ 766.691078][T10008] tmpfs: Bad value for 'mpol' [ 766.881892][T10026] loop6: detected capacity change from 0 to 512 [ 766.895463][T10026] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 766.924395][T10026] EXT4-fs error (device loop6): ext4_init_orphan_info:611: comm syz.6.13953: orphan file block 0: bad magic [ 766.938338][T10026] EXT4-fs (loop6): Remounting filesystem read-only [ 766.945976][T10026] EXT4-fs (loop6): mount failed [ 766.973496][T10029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13954'. [ 766.993560][T10029] netlink: 264 bytes leftover after parsing attributes in process `syz.0.13954'. [ 767.251916][T10033] netlink: 'syz.5.13955': attribute type 21 has an invalid length. [ 767.347587][T10033] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13955'. [ 767.358502][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13955'. [ 767.498210][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13955'. [ 767.655906][T10049] siw: device registration error -23 [ 767.965865][T10065] netlink: 264 bytes leftover after parsing attributes in process `syz.2.13968'. [ 768.116515][T10076] netlink: 'syz.2.13971': attribute type 1 has an invalid length. [ 768.127158][T10074] ================================================================== [ 768.135273][T10074] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 768.141890][T10074] [ 768.144391][T10074] write to 0xffff888112829f78 of 136 bytes by task 10076 on cpu 1: [ 768.152390][T10074] __bpf_get_stackid+0x761/0x800 [ 768.157343][T10074] bpf_get_stackid+0xee/0x120 [ 768.162027][T10074] bpf_get_stackid_raw_tp+0xf6/0x120 [ 768.167317][T10074] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 768.172778][T10074] bpf_trace_run3+0x10f/0x1d0 [ 768.177460][T10074] kmem_cache_free+0x257/0x300 [ 768.182233][T10074] skb_free_head+0x87/0x150 [ 768.186769][T10074] skb_release_data+0x33b/0x370 [ 768.191626][T10074] __kfree_skb+0x44/0x150 [ 768.195971][T10074] consume_skb+0x49/0x150 [ 768.200319][T10074] netlink_unicast+0x5c8/0x690 [ 768.205090][T10074] netlink_sendmsg+0x58b/0x6b0 [ 768.209863][T10074] __sock_sendmsg+0x142/0x180 [ 768.214553][T10074] ____sys_sendmsg+0x31e/0x4e0 [ 768.219324][T10074] ___sys_sendmsg+0x17b/0x1d0 [ 768.224006][T10074] __x64_sys_sendmsg+0xd4/0x160 [ 768.228861][T10074] x64_sys_call+0x191e/0x2ff0 [ 768.233544][T10074] do_syscall_64+0xd2/0x200 [ 768.238063][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.243960][T10074] [ 768.246285][T10074] read to 0xffff888112829fa8 of 8 bytes by task 10074 on cpu 0: [ 768.253911][T10074] bcmp+0x23/0x90 [ 768.257550][T10074] __bpf_get_stackid+0x371/0x800 [ 768.262498][T10074] bpf_get_stackid+0xee/0x120 [ 768.267184][T10074] bpf_get_stackid_raw_tp+0xf6/0x120 [ 768.272472][T10074] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 768.277933][T10074] bpf_trace_run3+0x10f/0x1d0 [ 768.282704][T10074] kmem_cache_free+0x257/0x300 [ 768.287490][T10074] __kfree_skb+0x109/0x150 [ 768.291913][T10074] sk_skb_reason_drop+0xbd/0x270 [ 768.296855][T10074] tcp_v6_rcv+0x18e/0x1d60 [ 768.301277][T10074] ip6_protocol_deliver_rcu+0xa17/0x10d0 [ 768.306920][T10074] ip6_input_finish+0xf0/0x1d0 [ 768.311701][T10074] ip6_input+0x5e/0x140 [ 768.315877][T10074] ip6_sublist_rcv+0x924/0xa40 [ 768.320825][T10074] ipv6_list_rcv+0x267/0x2a0 [ 768.325434][T10074] __netif_receive_skb_list_core+0x3b0/0x500 [ 768.331441][T10074] netif_receive_skb_list_internal+0x487/0x600 [ 768.337617][T10074] netif_receive_skb_list+0x31/0x200 [ 768.342917][T10074] bpf_test_run_xdp_live+0xdcb/0xfe0 [ 768.348229][T10074] bpf_prog_test_run_xdp+0x4f5/0x910 [ 768.353530][T10074] bpf_prog_test_run+0x22a/0x390 [ 768.358488][T10074] __sys_bpf+0x4b9/0x7b0 [ 768.362823][T10074] __x64_sys_bpf+0x41/0x50 [ 768.367247][T10074] x64_sys_call+0x2aea/0x2ff0 [ 768.371936][T10074] do_syscall_64+0xd2/0x200 [ 768.376462][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.382380][T10074] [ 768.384715][T10074] value changed: 0xffffffff84c2c38e -> 0xffffffff844c4ae4 [ 768.391853][T10074] [ 768.394182][T10074] Reported by Kernel Concurrency Sanitizer on: [ 768.400344][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.5.13970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 768.410248][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.420320][T10074] ================================================================== [ 768.638005][T10078] FAULT_INJECTION: forcing a failure. [ 768.638005][T10078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.652401][T10078] CPU: 0 UID: 0 PID: 10078 Comm: syz.0.13969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 768.652485][T10078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.652500][T10078] Call Trace: [ 768.652508][T10078] [ 768.652516][T10078] __dump_stack+0x1d/0x30 [ 768.652537][T10078] dump_stack_lvl+0xe8/0x140 [ 768.652555][T10078] dump_stack+0x15/0x1b [ 768.652573][T10078] should_fail_ex+0x265/0x280 [ 768.652674][T10078] should_fail+0xb/0x20 [ 768.652705][T10078] should_fail_usercopy+0x1a/0x20 [ 768.652732][T10078] _copy_to_user+0x20/0xa0 [ 768.652760][T10078] simple_read_from_buffer+0xb5/0x130 [ 768.652856][T10078] proc_fail_nth_read+0x10e/0x150 [ 768.652882][T10078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 768.652906][T10078] vfs_read+0x1a5/0x770 [ 768.652928][T10078] ? __fput+0x555/0x650 [ 768.653040][T10078] ? __rcu_read_unlock+0x4f/0x70 [ 768.653064][T10078] ? __fget_files+0x184/0x1c0 [ 768.653091][T10078] ksys_read+0xda/0x1a0 [ 768.653112][T10078] __x64_sys_read+0x40/0x50 [ 768.653132][T10078] x64_sys_call+0x27bc/0x2ff0 [ 768.653195][T10078] do_syscall_64+0xd2/0x200 [ 768.653246][T10078] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 768.653271][T10078] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 768.653367][T10078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.653402][T10078] RIP: 0033:0x7f1ffaedd63c [ 768.653419][T10078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 768.653440][T10078] RSP: 002b:00007f1ff9926030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 768.653462][T10078] RAX: ffffffffffffffda RBX: 00007f1ffb126090 RCX: 00007f1ffaedd63c [ 768.653476][T10078] RDX: 000000000000000f RSI: 00007f1ff99260a0 RDI: 0000000000000008 [ 768.653523][T10078] RBP: 00007f1ff9926090 R08: 0000000000000000 R09: 0000000000000000 [ 768.653535][T10078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.653547][T10078] R13: 00007f1ffb126128 R14: 00007f1ffb126090 R15: 00007ffeb6f8d3c8 [ 768.653564][T10078]