last executing test programs: 2.049473766s ago: executing program 3 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700f0ffffff00000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.959525153s ago: executing program 3 (id=652): bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000000b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 4) 1.917441027s ago: executing program 3 (id=653): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.704866823s ago: executing program 3 (id=656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 1.644999539s ago: executing program 3 (id=658): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r4, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xffffff0e) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000100), r6) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.559483265s ago: executing program 2 (id=662): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.25488721s ago: executing program 4 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x0, 0xd, 0x7, 0x0, 0x6, 0x7a5d4, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe0000001, 0x0, @perf_bp={0x0, 0xe}, 0x1000d2, 0x4f, 0x51, 0x9, 0x4, 0x852, 0x2, 0x0, 0x398980e4, 0x0, 0x8000ffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) statfs(0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xfd, 0x1c8, &(0x7f0000000500)="$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") r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x48, &(0x7f00000002c0)={@broadcast, @empty, @val={@val={0x88a8, 0x7, 0x0, 0x4}}, {@llc={0x4, {@snap={0xab, 0x0, "e6", "906098", 0x8847, "020be10732143bb90e11ae136c7853a75f49d697aea02a504e5dd07cb8e10b9dcb21d9d8938721b68987"}}}}}, &(0x7f0000000380)={0x0, 0x2, [0x72d, 0xc32, 0xdf5, 0x5f3]}) 1.107311812s ago: executing program 2 (id=670): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x9, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) accept(r1, 0x0, 0x0) 1.056052565s ago: executing program 0 (id=671): socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000090f000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x3e448000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0, 0x300}) 1.055558795s ago: executing program 0 (id=672): r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xd0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x1040, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x4000, 0x77d, 0x3ff, 0x9, 0x7, 0x4, 0xce, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000e3ffff1b4e95200000001a0000000000000000002300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf2504"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) 1.049738146s ago: executing program 4 (id=673): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 989.402791ms ago: executing program 0 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) close(r0) 985.059151ms ago: executing program 4 (id=675): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 954.336234ms ago: executing program 0 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 932.985205ms ago: executing program 0 (id=677): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) 808.744015ms ago: executing program 1 (id=678): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185500, 0x12345}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 807.841615ms ago: executing program 1 (id=679): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c8, 0x10000000}) 761.615549ms ago: executing program 3 (id=680): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 702.443104ms ago: executing program 1 (id=681): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) 639.795489ms ago: executing program 1 (id=682): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 566.428745ms ago: executing program 0 (id=683): r0 = socket(0x18, 0x5, 0x86b0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000000)={0x0, 0x300}) getresuid(&(0x7f0000001400), &(0x7f0000001440)=0x0, &(0x7f0000001480)=0x0) fstat(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r9, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r10, 0x30e0}], 0x1, 0x0, 0x0, 0x0) r11 = dup2(r9, r10) fcntl$setown(r10, 0x8, r8) tkill(r8, 0x13) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x80, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) sendmmsg$unix(r3, &(0x7f0000005940)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="ef5acca0b66e7bee0f45ac0d34454cf292b28728d4c7bb3c451eed181bf88d69a8b0dd3cec8661fd71df9e425f20e569fe7302933974287cf9c44ba4ea728052af618312b250b06855143bf8332b2c85bbaa55910a54cf380c7f542e56c71318cbe18f5334ffff23aca5f2cba7ec99c6bf969e31bef433afd7ec8e65892036dbfa4712b858284ec335bf58439f18b3b6c1db5b67cd93f2de75fb06c4a0aa7893ccc5fd5b1971cf7307f8f0f92d61fe637a08908a0764025ee4", 0xb9}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c}}], 0x98, 0x24004091}}, {{&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001880)="d5dc72637d2d94e67611f7f33c5a639a844d744bb016dc4473fde38df70888a0a6fff5e4bcf4b84d8f7d63326defd2c4d38f2508777b73e42e586beaf549c7e08906ca6278b04f15e4e661988915fcc871a85c59dae2a0f26b039cb65b381337dbfebd3cf23261238c74bf5a4f475d604954e18f90e450b9ed02738f56ab7437a1592ce1b58563fc64e2f4701c7d82be28fcf5aef728bb1b9e12fcc78b", 0x9d}, {&(0x7f0000001940)="8bac9f7a636581e828a035f95c0d72dd41c69eb9f2cdc7b785fe4e76cc6fdcd764734e49c898484a33586b19b3ff42d78c006dbceea485d0b11fcecf7c04be8df060ef51756ab3b3e9027ef72ba33a02a8d1a8fea8f0a6afb63122699a7b21b2f977e6945c2d558ab71d93e450a62a37e42f9ba3cd03db40f7ab6c0b7f676a51dbc40a00be85b1a86220", 0x8a}, {&(0x7f0000001a00)="1b59dc", 0x3}, {&(0x7f0000001a40)="78fdef1a8ffa25be7aaffcbef3b0722792df55cf7c9ed4fdfec9ad9f7d5ee51312e07d96c91439c27a6258294e69bdb87bf76f8f507609c7f3bfaa1679806be71fd81ec80cc8e429646305bf687876d9ec4efc44d2929c89199b81bc4734a565104680ab9eb9b6bdc6c24929d97906f5d8135e5f1abbc308103186a843a264ed38251c6844cfcdfb6d1300c670b0521454c0af75fa5af6a95b5e0121b50c4fe9df839213cd6acada65914d96da828f1c1e77be53c000312130a900decac495e1a1d86e6f93584dfe4137869b9f21eee6da75e8a20a0769", 0xd7}, {&(0x7f0000001dc0)="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", 0x1000}], 0x5, &(0x7f0000002dc0)=[@rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r11, r0, 0xffffffffffffffff]}}], 0x60, 0x20048801}}, {{&(0x7f0000002e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000002ec0)="6e5a56f6986b7338931da9ee118815ba46be880a6cf6123f383c389ef8a3c54c206485a006e47df8cec3dff0cf8d1bb20b68c8835427cce946218d9ac28b7dbd6a4cf30ab68eda172b3870928ab21ef54006b65d842e0589677481a022e7298e3b09d7b91a7d22e54da93cecfbb60bd0d3edfeb8fec6e50e5c3a335460223b25953775dde293442fa240a2ff15769b5ae8db40e03b9985457dc5ceaa032d0632a9b843a51c86fc55f33a4379f1b1d6990750c3adb1ac0174ae597cebdd8046b76dd7a3f054a9", 0xc6}], 0x1, 0x0, 0x0, 0x40000800}}, {{&(0x7f0000002fc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003040)="0eb55cfa2e023676f2c7268a60a1fbef07c4450be5715c31f94f8417bd895cd165248893623de0a9f6f0f7df3d200307bc2d5fd3343fc6eb34ecdd5b5c3e270cfe5225ade5892d5be83e12af", 0x4c}, {&(0x7f00000030c0)="2e9cc12ec5a6042600bf95760f3d2afe76e63700c427f96ac87fedf2a22387bede495f04b331633661f877207e156778929b25b37b1841721b8005653d28ef1648b6622324363b8ed207ae6434d62af45f421655ac5abd5ed1dc12f8de9d784ac25344448a4063f05e67b058198ab3d2cebccee52bad3123971192a2deacc791be752e5de14a909390121b680ffb980f6785463b5d49f94e0d1cb955a720dabba35efffa97cd7f460cdb4e9b5a37c686029e540acfdd8b88e6f7503b2540352b0823c1fbfd78fae9ad498934d473ec6eeabca313d4de27b21051d0482f9de49176460f3773c846c2279c896361853ec5b79f158c41e15ace56682f41dfaf3f5437c1d922b3fc3ae7583858a87131e76d359676518c9e65c471ff42e6b70fb87580f615867235f5751ecc455b4cf81920295281f2225d1f74bf76b3bddf061fd36ea5da5ef0b4b73916e1cc26cac3c8f5fac6af31e604260a1beebab9ccfd5a7f1c2b2c5d763af57fea4e997d44d2a72ed99c6a707dfad3eda37d5cf05ed0e83801d4453559ad4e540ac09fcdacb666e10ee15a7b061e378c4a9ce3ef550eb396d54c94a276909e5a7148424e8d1dfebc4ee88da13a3acd95bda83536769b17012088e3d2cf9e878fb5ec2af9f368e551b10479b53641f1eb9b84e2908498209e1bec30526d50c9043257093d20d28e393b0c552f4bb7b6de6dc4f50fedb5c3a94e56d48a1880c2089be43db7e08a5b8b63ec1dd450b533b1da205ee209132cd674f9db8236fdfa96bdc18359a3406c89dba47fa9e9b0169f6c0ec325996dfb21dd56b1552761240ba9ac540e1a1e2e2cd1c1cb884479e1122154f37c9616fff792bcf475d7ea2a27cab165c9f6f7fbd066532cf18470a4bdfed7413ba0cc90867838a11ea1e03134e61a9edb05c5497ad32787c14e9b2069d40f26ddf59bccae9871047fb142ac0994f80018c57f0213d9eca241fc33ef6f36844120eb0568c00f932c17e29e2b2bfd6d004fc12a6ee6beee6d0f7f01c11fa0488f08a6baf9a3c7df625b00c7d582fdb6ecf18c1ca7882461288e9b669ed721ebadb05efb8d31973a06edfccbfec2b9bb5f4f47b33cc548a360a368a408a8ffeb2063f715b564af24e81a4c4a9fe0fa63543355f6811792170db0615daf0be78e09b3f788d2e2cfeadcf2712f723e3bf57224aad832b3c0f3e3f23781307a74d9ed34be597266edaae37e847e613a4b7afd65ad7d83348d090d80133cae9b260c971cd8ae6d7cc77bd99f267ae6c28944338d34baedbad8fa2bc37cc155f0ab9ad87de22598b820ae85777505d4364ba036f0a1be91c77447a2ea83d74dc8f74eb2cd151fff1e3f0649187bf2b3dabed00186f39334415d7a03a912b58ccea9595e5e20a9626fba0424c7bdcd55cbdf40153bbf0c9c0884215a687937541f1ee0a5420040b37dd4b8039e1f39c01020633a3ace5cb7dc1925dc4128c961bb6beff2d5eb5fb55c4e2c753041f033be9529e513cbdc66676928d91f5c3d353a64ddf3d8cb76949c03c3697a002a62e263f1cb2a8685c20dee251927a9280edf0231055fda6e828109947efb73f98acb5fb190cdbe1ae5d5530a7f3433b72f3b5aa95c0778da54f82e698b447d0ed36c5caa663b5d443848214624c24f3d1952d04d69cdfb2fdbca108a4f5325a0ccfe9cffa8f29b10516a79eb36c9f15618f68b3f1ccc07a0b6238368bd7ad5adfe177a5c17a9c411f065726bf7cd8920afb2b1ff0ca2538419ad7afe98a58a43ea72e8473464246924359742c57262dd3729db061d0bd78cba347a89a10cab2640e8181ff86bc202538d6976fa00d20ea9f79461842540361dc76f463cbedf53f55e296b3eb4ff5946734bbb3bf531020fd40624328bcec5802d46cb83d9e631c033f051cf7ff573feb9fd2b5205e19f0284cd10a12a2513b75948f41216f2a7ebc79b62804c121634ca246a37e69f7ba289b77f1487e2747e94fa3b25cb7ed2982a9eafdcb2fef9f1e6103b19eda22d19bbfa665e5dc430270733fd3996f2c27b5547437214a62de39bbef47c87d5561b40d88934664c0e773f155d69bb485290637189a4ca498bd5432c91e9d0b7834925241279f058328eb8e04c0a1e486fe239f6e58d405c403ef1a7a6c21466df33950cc0c41689bd2144e41cb93a78371382ca11f7bfca68532f7c1c7324e3f8ef3836cbec0e8ac1219293b38f76f286e968c795e878b974787a4272ef4e746b219eb788ca5f5d61c900777083f8c286ceef141c60f1986ace044fa134fc103a51de149593cfbfa9f0d37100ca713ea2af22e8084b7087ddf0d17f24363adf536356b78d376cacc77382f79a9a78d6d33a37b39d93e06449dbe7bcd35b8109b40dfd079288a8289395f4aa7ab61918050f7dacc691e4e3863d152d4c25e2be01a27e864ca24d8228aeed2f3ceff0805f217bf26857f38032e3ca4a94919d73778eeb0ccd901da49e8304adb8d667de8af0a6d08a4dd735907aafff050f5a5b61c1b38760b28870370b4f7bf7f9e7b533ded095b5b36027db289b301ae6aa91902e9ec1e7ddff5f808bd798399748d2e10f69954d74b1207b2694fe8b811996a1389a67d4373bfcd221f278db1779915ede0ae6ececeec8829760423ce2e6d6fab0a9f53228377d529e488df0addf23512269fe0d0055d113365a4a6c009d80e89a44836c2e8ba6a5a55f17bbe3158ed5b18cc1f64137c5f23bbf3e338fcc7be5a7415ce52861a6e47721b340ad41b3c9e7fd4ed6117d1c264c9220fc7f97b91a89dd8d4ef1b7f89ae0860a3f63178aa9c93de00799b564b6f3d35767228f6b22e9d9fa06f03967ffc6dd0670600f6f0ca22c9ae97f8e169585943fc7a57894f846ea0d2ee812085c98adac389b011dd7b609f7f97458b653d3c943f87ece3dd074b65ac91c006e9e1b3df899d62efd21f39f2766b1278a35c4b868810a4ecc1b07347b0f3ecce3ae3406e009a9c98879db2f80f514947c3bc4c9983aef7e59c5f3ebcbab0375aceac77b7cfc775a1de97c7abbedf1f29fd1821b65011590d7128a5935eb1b8b17f3a6ca0edae3f323695061d96ce4e7001f1fe7d1070a5780af7469148b559f988ef3b22fc12c525249d5bb5dbcd7c0cb74e9c6c3e73dbd7c04a8fb93e2a5d1270cf9be93eb6dbe3a683c72e6d9be7895e86b5fab407a426bedff80cb1773467dd838ea6df2e0f962a65a9c768ee7548342e783b161f269c37d09a9bf2292a821ac8a2f0ef6e0bd7ea475f2b19e12cb994671c5fad11b5903bf553d559a46f6816440030633e8fe2e5f4b661fb1bc9d32526965d2893649a68b0d006db88355c60e3971703fe8e8d9bcc2d7bfc9e7735d5e5d330bef63042b4a2d628f327d84cc878b3fc09222a5b2389589a07e0b2b51d485f79663a708eb4c883e6199ec51732ba81b55fc4ae772e77c20a6a99c3c073d87a4568ff379955c03b83611a7e1b9221198c2e9819cb65fb95a5600791e2230ef36ef12a8024c02f2caed85f354136abd77b770c7600f9f6ea708943877e55e67432a9488eda6d4acc0de1464651d3a47831b8e5509181d7ac0760c4e3838b997771dfcbe5bdf09e7b6829ff08d39fa649ac35ea3a533ab7a587fd1a0aece6e3fab2c8e8e9ad708820341a2560b657acc7c055de9a503ccfc3544ef50aaad7437986b28c254211839466d0feb249cf9306fd53299a65648b8a7eaed479aeb4ba2793816b77de11fa7cf06a7dcefcff60c0a6ca7f181dce253245c048b33d89f51ce383f61607626efef52bc7f7aca6c117d916c91a42adeebb0a513c1768637e3119c5f4b17037a1cf82fe57680eb3c4467adff587bf3708c84ad4aa5231c7debaad3b268db61a94a84055a762508e9ab6c32676cc6ebc87daeb7df78932696862379cd019e7399f8a39224204f6b8b28751d0d87ac57f736862cc3fb64843d22198b26e6d6b88c878f4cccace7c72c6cc739494e10a4b4c54573595fbc0223c12782001c20aadca60e3b25a2c7bbc82cd396994cc802147a68dcff1bebf3d1da77bc80a05593024cc84db735cd83e65fa48a4b2225fa7cb4afd555646e66837ce1d1c79c5d235ff177ca7d956847757ab16f19d335225612586e1973753541bc06dc8801f440311fa9bea3fb0c9819a35702213d8fc0c18d0ea10f59b2cc33d1e307c8b6372f38df596828698785c0a95450854824d3c651dbc11758d3df49705057110484c520d31cb62bcf72aba8bdac3cf5571a13f733ea031085c7f98ee142cfd97058127407df47a430ebbfceb1dc20c3b57486efba9f4d2e61288cf22f7e0411871d095baf6c98d4a5b58696d6e4020cc29c3572e6dd90c6eace18b7625cd9e14c9a13977fb3ca67ae7327c09a799849612bbf1983afa2739c8825220c57671f87f39dafd5597d406539263a55f6061289b9720dc3c3d59cf06e871a5d7da148a6012ee233374fc5e29e69cb1e4040756dcf089eb871486a2b64d68721a63ffdb3ab3ea55a53fbc524d9ef02bec164c62e04c03d6763980e4ea881d0b10e80c4765fa7f908fb1e8c34f6abfca3a716a06f0d7fe7dfca46afc354d2273ae16a080329447b9657839d0628c9eb53dcf74892e06618452f20415fa812fd76f6eb9d56cd4002e686a7838a4f330b0c72af607e9b36fe24acf2081ab722a2e04e3b6bdab8eea2e7e984c3af4c64d15add7e5d8c7b8d95df5db73ef8c2337240a9976ae7234680f7ec3706ecf3b8c32394c346a737639145379243fad509ade313469ae7d4c5b7bc15d4c3c208134e982a64efcbdeead336021c78a5e9774853e01cece94245fa9d108f8184b89af3e297c7ef594bb6f327a691ae81e5c12af3a0405c9518abafacf397eb32e62d035ab7408bc6b6bfb80d365316b117aaca7a7a42051bc1070d05b41bcedcd18fe1743b5aa2e971db5ca9dd5083fb9a7928de746fb2fe936c715eaa47dc180bca4cd9aafb3e3e258056d30570f6133c6a86f23065f83cd31185c103d31b4ef8c1b5547817292d168fce1087950035578205ef133b6697add316578dd55b8fa078ccf731d38390ae7f407ea801dd978e95d421b2ee82e2529c61b1958986b0a36af01e7d9fee85fa1a796afbfcbdcee6819906f26e349ebaac6b708cdbc22ebaa3bb8903d7fb0f6ec37f570a4436eb4ffb43cd9d3bec0cd5399a40ced6c12e2c804d2d56edde881fb52cd72dd679509c6ffd4fbb78138a6ce335a6f20d3f22a8a55ca48ce9a18854312f5f4f66347357093a5ac1d7c87f636695118b77b850d75200c0808dccbe8dcfcbd0da510b3d63ebed5e158300a418530e93f8a33321646697681eeadd81063124e3a7147240ef92ebf318a8afe97ccadaaaceca95cf033f284756f693fcfd1079e95a1221c4cfc872c4d53d8e88d41098ca2f14c9f6e15326ad05b4aa731795b3e09e3d99b061c8b2ae6139d7add5291598014608066179e9b118fa8163486ae191d1d7e82ec2a0e1e7091af5bcc5fd01ff117e870c02f18d0cb553eccfd5b8d0176394f67a515d8409c56fb2b4fe10aa69dbcdf3824f2156214bfbc8689a6a19f7f70cce84619ec0f6c4c1d402ce9fac180f33c26d086092911302204bedfe286c393508142c568870ea26d1764e0cee443412293c87a6a264bfb1a3a769369c972e041da2c71fa6e0dc6c760f03886cdb5f5cd5c3d757ce842605dc4c5a0c7ab524a72418e38f5937a97a7ff52db6de187b9247596df2eca334a46e66a934d810fee57bac7acdb9a38a5c1155040a162e0429eff254b03cad1e", 0x1000}], 0x2, &(0x7f0000004100)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r9]}}], 0x40, 0x80}}, {{&(0x7f0000004140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000045c0)=[{&(0x7f00000041c0)="1beb9aa2ec105eecbf2496f21d54b5dd490061333e8e536ab965821824420810cedd1a04fc1bae807ebd72ee52bd3d95b346cf1d470aa715cc02a8eea266850047a1daf7596fb547", 0x48}, {&(0x7f0000004240)="b8e7e08c48e6363f39ce63f8896afe7937cb733fa0abbe78e004776b6def324922144cfccebaf595c4305f9ab1d9ac7132d4a68afc398f492f8fb36dc364c9cdbd4033e6214b03d4265d152e7eaf069e63a84dae7afc23d1cc3e456388b63553fe7a8d3931571a9f25cfdaf17f0f6652de410f52311f1c3f5273c5b1194ed473cb08725085f93ab96f046d9b729abb463666a2b9055989f4c707d6cce59ec75d83992fc310a90d3465eeb887f885b2f5a8623dca978dbb1c1ce55e3c9d5e099532b5", 0xc2}, {&(0x7f0000004340)="f28f032f56ccae9c866f855ea5ccb6eeb4f6d58a49d7909a73bfc6fc01d55b0291312685e58ded8669ad7f13cf39c7588b700ccc1e461c269dd9059a7caf1cd8ed177792c870d2493e75b51f3df0a5fcfa9b344fe438", 0x56}, {&(0x7f00000043c0)="ec4e9a8decbf3a691358e2fafb6e773c7394e8e30a11bea3bdc33571486fcd7446b5d2c566ba8c1d857d4858fceca2cb79f52346b01e0df2c151e014a14940a8ec8d45050c0c601da38d0869d67367a558fc72a45b69a6a7661e2792aa3a4d55d33ea9acc535570e6c774ccd29ea593d67b70225401ccb04ee67704d1c", 0x7d}, {&(0x7f0000004440)="f428392309d65e73bf33289f18d4b1614b412a3d3db91f22ff113e7c1cbcb0e77806a5e5105b43bf8c204ed65b79efacc3799f6450d19f09306f8c24b3f428f22ae933ff02755666b024018864e088f4b730ad681beb6c39e6a6f5b2cbf1daab4a9df8092939faa097bca1daa7db2eda7b680d7b1ef738c487ba63a3265d916dd468d374f2ceeffd5bcf73de38a2f92bff0572dc95fc8e17831854fda87ced34af62e6a620a0c40472da0b3f195d3cd01c3558384a67022ef7", 0xb9}, {&(0x7f0000004500)="0d44e8068e32dc04d3f8054331fb1f440c2bb33f212358b944adb81e9684917fd444639aef7b11bfa129249b3d2b4f872c5c13fac606135036c26fe7579b07ff3bec4e220b25f8360b6168ced814c4857b9b98345857d186d284d281458b716e03a18be7b449bcb7766e113ac124e1196d9bcc17395648b438417b5ffedf94138874c8c31f8e8212b4d5cbd9c29f74f9bf258ee3386150d6b907cfdf5a772cd854497f4f513bcadd2b2c957a6d4c95ad39c3778da1f3ff", 0xb7}], 0x6, &(0x7f0000004700)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000009c65608000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="f07eacd35e782527160000000014076900000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x84}}, {{&(0x7f0000004800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004e00)=[{&(0x7f0000004880)="320f158148330ad46f7c2af7c7cee99f652233a4d1756733bbc9d4c6db3038accb5a596719c3f1", 0x27}, {&(0x7f00000048c0)="2e8a1a767fe232cf008ce8dcd3082d6ca51bc556c69022619b99cc4f6fea5f18fa7dfda8a5ff98474207979ae4cc76270adb803039147e7fbc94643fbb6bb2b7f534caed8f08d116e10df1d6713c570047d3e446faf4333fa15a5b85253ffe359283fc65a81a56a18b4b5037faa0cdc98c4604365ff5e6904146b854a4a770e3e867b5b7a6683439d05a78a783de4ae8a94c04bd547359bf24974eb2ce06b869", 0xa0}, {&(0x7f0000004980)="37daddf757dd7e99bf1a84f21ae638ed5e144e34ef76a8840fba6dc4364d3701e4", 0x21}, {&(0x7f00000049c0)="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", 0xfb}, {&(0x7f0000004ac0)="0265550c8d20ddf971f918f13dd757c849e9e6a1a0f44ec9e1281cf52372443441f650481e191c73a83c3089c8366b5ff494a90391737427c37b59c97074d89583bb14db9d5daaea8bad4bdf383be7c2fc4873b79b74f5e103902c38d7677399380b3997c1068a046fa75df9e49708e0bce346cd8b528973a5045fc6b2de1f8f0acf7a74b0", 0x85}, {&(0x7f0000004b80)="5eac82273120aee1", 0x8}, {&(0x7f0000004bc0)="5411acba289954ec971167c982d71111b32212f9a08e2328fd1d21f73116cb5e76dce56abd661d920005e3c989b9a0a2d7b73bfb94269f3897943c58478d3dce4c544de38378f8359ca8a5516e2287c44cee86c1199e772908aaa70f1120ffbe0833fce6ad6a2dff0b21d5a6fd2bd947d5dab7ee49dad8581b8a647bc66c93a79cc5e1c4856955e17fa7f57dc0fc", 0x8e}, {&(0x7f0000004c80)="1948772c13cad169f9e1c7b88d011be796d1e8222c1168abab001049574b72289c508ef819dd6191b6ce8826c97232bc60ad1817afc1fa83e11c81c2be0e9980", 0x40}, {&(0x7f0000004cc0)="60ff17016f02e9f4a8bb014f997202c135520a901058d20643dda8f92b2e2ffdbf1f69ca090dcce8d30b9a1e4392ef092bea5439ce7aad44e6c35ee1af72e7244ddbcb3a55599b8d66276c55fc07d2a5dcd90d52b11ad5aacb62630e7cf57b1bf2f23508a336f58975d08980749f8ddfde4288f6290dc92fc37c7935b615cacc974186f025e6484a927f48c1fa7286e7789c80cff33a4b9b78d3fe0e53030703eb45ed353a2fab", 0xa7}, {&(0x7f0000004d80)="fbf9e8eda267677896ed653abd7339d72383b5c4dda806c4d2339a410d46efa33c7f698ff78fed0e4990327d15ce87d43cd992a9043ddf8fb437d9a98ed54805e2d4f11d445e9dc5ee628ead87548b8c1f7fc0dd3ea68910c7b3385a38", 0x5d}], 0xa, &(0x7f0000004f00)=ANY=[@ANYBLOB="2800002000a1b292ac2f5b2a7a000000", @ANYRES32=r1, @ANYRES32=r11, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r9, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32, @ANYRES32=r9, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r9, @ANYRES32], 0x90, 0x20000000}}, {{&(0x7f0000004fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005040)="a100d2b124e8368e07b02e82a292040177a570d703a76021fff96edb40937b687667886ef051102e6538523bd98d26ee8792450c8f8fb2a80c8ec059ae508c01214cb7afa90b8e39761e0aedf3294dc01e34bb44a1a2c310def2475b2ed8f9e14d66e5c982eba9f75359850506a8ffab37baf4df3f9bb1a27cda2e3e59570c89464ab047dc2d9b709e9b0ae909060d2bdec2dcd669b9538956d4b9158e8b242f4ec8b74496cbc7c83fde7706fbb176", 0xaf}, {&(0x7f0000005100)}, {&(0x7f0000005200)="b841e38c031ad530d4e7104d9de47c7b4056b3b4d8cd2fa0116b1b3ccd8c3aca615f012ab7715e929a4b5e82ba15104264500a0c144e7356d1d3fe022bc17a554fe44b04594d19e715fc1030ae068e2f3aacb36d8d223b493d1aba337302208d78885efbdaf0e9d7b9b0a4202eccfa59d3b6c6359d8d46ced1a562e8dfa7f6b0fbd7353a3f46d2e08855921091958cc7cc368b25bfbb7826ab8845ee7de9551656099acdfd7ab43ab34f36532f40d541513ec72523f8f6c0e08d49f3bf5696362ccfc6f1ac04efacca8dad1c6f681c4f65732c2141be04264a", 0xd9}], 0x3, &(0x7f0000005340), 0x0, 0x4004801}}, {{&(0x7f0000005380)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005500)=[{&(0x7f0000005400)="79ed27836ba88251edcc1ce4de3f04a73cc0c6d1403ff1931e659041c3b7662d1ddd2c962488cf160d63295930c15d23cae5d91a73407f69ee1de1bf1fb0ce07a3245cd821215797653bec4855a437b8c885176b72", 0x55}, {&(0x7f0000005480)="510a024dc51fcff0f06f49b730ab15dbf1c7e52fc59088ca020fa09e902b14924804e0fd15b67b8c7b8ae72083afa76fdcc429b2751d9a5da67fab6ebef0da4f3b36f1bcc2a74a500a29575eb5e7e17dea2f0e210b36535ca5b8492864421666a35568a4446817dcc6", 0x69}], 0x2, 0x0, 0x0, 0x8800}}, {{&(0x7f0000005540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005900)=[{&(0x7f00000055c0)="3ac31bb1d122b11cd354eac4e400bbe43a9dd9cce77416909b964aa7ac8e563d8e145f410b5d5400b777903a30f82d30e38728db1cbd67251398a1a5115742df8f7767a331998f7fee741d20a5da963bb14d4c753170a88ebaca980512087a432ddc92c81cf64c2043a402ae988444e50452b887c56e05600432e320cdb0b4e47372082d8997f023b38c356c6cdf3221ad301c8ed4ecc4f8875fc9b4bef7854131abc4988e4a6b00ef2c3f4aba6372986014fd46909a2a85d4bab4832b388083491b9d8967f900bea23cdea9894fd9d1bfb87afe10b88698629a4f0b0d6b585f26f087", 0xe3}, {&(0x7f00000056c0)="d6a1eca01240943f405ef40d380b936e4d0e0b9a4b6f80427f6c0a7034283117f86f3d9c8e918460a7a338cdd3ad465eea7e535e79aa7f5c27676c7f8b57b63c8a6c9a3564482261c9098dc4678e82e19ea63e7f9db43227b80ebe2c7ae731b2f393f4d9894eaa01030c6d3d93d70b4ee8f5f21b965edeaa00e06612ce6c2c0a6c2c5d3d477fed4b5d6d2efcaaec56a397c6d74289288647ec1fb059cba5ae48daade35520b03cb28ef3e81bafc9f45bd7301547aa9bfcada3ea87da4df9bb6a114cc89e6d2cdd1827479f5575a971a9bdac7f591b5c2b7982", 0xd9}, {&(0x7f00000057c0)="b722a369bb4bdc6c1fef70738d25bb02e422a0d26ba8670b8de9abd615f8a0b0a8ea47c8e832ad3d8b17f13c30e9e7f1f39770476902b57fe916209254f6d98189c2f2b4f1fdb67b76109933b89c066716b3d3a0d5e9498cd8c58240224fee88d7fc04a413d15fd1", 0x68}, {&(0x7f0000005840)="a1675dbbc92543a0dea1cc8300d9b9b1c7a53221698bdb83bd3672bc10739965cd8cc55a06b69b2fa5175ae846181715c5e53dcf88ee65f9bc6abb49dce07a5f9a8f3b7d40dfb5e0429a07c3a8e4f30e4389eb818d3eb649aba44e3e687cba20b477cfa6d834e762166dee4684fb32077f921e6b4fbee16283dac6a43367507592e85438d4507f6963f9cb1760a47f35575b5524321e91a0bdc901508208b3e06f5e867520ef7d91a8cabf7ec08deda025570198c4306db991", 0xb9}], 0x4, 0x0, 0x0, 0x20000004}}], 0x9, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x7869474528530199) 563.832725ms ago: executing program 1 (id=684): r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xd0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x1040, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x4000, 0x77d, 0x3ff, 0x9, 0x7, 0x4, 0xce, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000e3ffff1b4e95200000001a0000000000000000002300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r6}, 0x18) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{0x0}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf2504"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) 467.493972ms ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020028b909616400bbc432eac97aa5000800000018230000", @ANYRES32=r1, @ANYBLOB="0000ddff810000000f1ea04d089500"/25], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 274.458088ms ago: executing program 4 (id=686): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x3b, 0x6, @local}, 0x14) 260.835649ms ago: executing program 4 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 244.210601ms ago: executing program 4 (id=688): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x77e}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x814) r4 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r4, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r5) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0xffffff0e) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000100), r5) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 87.699053ms ago: executing program 2 (id=689): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 47.488906ms ago: executing program 2 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 927.19µs ago: executing program 2 (id=691): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334b, 0x1000, 0x20000003, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=692): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) close_range(r3, r4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x3, r0}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): entered allmulticast mode [ 38.043263][ T3308] bridge_slave_0: entered promiscuous mode [ 38.061409][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.072238][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.088970][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.096093][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.103285][ T3308] bridge_slave_1: entered allmulticast mode [ 38.109881][ T3308] bridge_slave_1: entered promiscuous mode [ 38.116472][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.123458][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.149433][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.180249][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.187401][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.194650][ T3309] bridge_slave_0: entered allmulticast mode [ 38.201126][ T3309] bridge_slave_0: entered promiscuous mode [ 38.212654][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.219866][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.245806][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.257387][ T3303] team0: Port device team_slave_0 added [ 38.268416][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.275511][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.282650][ T3309] bridge_slave_1: entered allmulticast mode [ 38.289244][ T3309] bridge_slave_1: entered promiscuous mode [ 38.304725][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.314574][ T3303] team0: Port device team_slave_1 added [ 38.322489][ T3302] hsr_slave_0: entered promiscuous mode [ 38.328649][ T3302] hsr_slave_1: entered promiscuous mode [ 38.352991][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.363289][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.388483][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.407994][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.415012][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.441060][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.479939][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.486969][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.513077][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.525541][ T3308] team0: Port device team_slave_0 added [ 38.534170][ T3308] team0: Port device team_slave_1 added [ 38.540832][ T3309] team0: Port device team_slave_0 added [ 38.549095][ T3310] hsr_slave_0: entered promiscuous mode [ 38.555317][ T3310] hsr_slave_1: entered promiscuous mode [ 38.561261][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 38.567023][ T3310] Cannot create hsr debugfs directory [ 38.589520][ T3309] team0: Port device team_slave_1 added [ 38.605540][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.612557][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.638539][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.667670][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.674712][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.700672][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.721758][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.728779][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.755525][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.768360][ T3303] hsr_slave_0: entered promiscuous mode [ 38.774751][ T3303] hsr_slave_1: entered promiscuous mode [ 38.780589][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 38.786375][ T3303] Cannot create hsr debugfs directory [ 38.803530][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.810531][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.836440][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.896363][ T3308] hsr_slave_0: entered promiscuous mode [ 38.902607][ T3308] hsr_slave_1: entered promiscuous mode [ 38.908555][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 38.914281][ T3308] Cannot create hsr debugfs directory [ 38.929325][ T3309] hsr_slave_0: entered promiscuous mode [ 38.935399][ T3309] hsr_slave_1: entered promiscuous mode [ 38.941200][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 38.946975][ T3309] Cannot create hsr debugfs directory [ 39.045973][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.058540][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.069642][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.080391][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.148525][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.157317][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.168727][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.177605][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.202499][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.216235][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.236065][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.244819][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.275665][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.290390][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.299289][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.320094][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.329145][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.348172][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.365391][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.372470][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.399646][ T2836] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.406780][ T2836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.422963][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.433626][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.455022][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.463724][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.475610][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.515642][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.529779][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.543086][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.559815][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.576772][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.583871][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.593166][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.600261][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.629358][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.636551][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.646625][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.653679][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.667055][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.681105][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.688218][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.706834][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.714002][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.729021][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.742167][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.752639][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.829129][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.860118][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.897760][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.904925][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.920751][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.933975][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.941070][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.955814][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.978084][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.030466][ T3302] veth0_vlan: entered promiscuous mode [ 40.046995][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.057437][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.085371][ T3302] veth1_vlan: entered promiscuous mode [ 40.135834][ T3302] veth0_macvtap: entered promiscuous mode [ 40.160862][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.171985][ T3302] veth1_macvtap: entered promiscuous mode [ 40.196844][ T3303] veth0_vlan: entered promiscuous mode [ 40.208801][ T3309] veth0_vlan: entered promiscuous mode [ 40.224237][ T3303] veth1_vlan: entered promiscuous mode [ 40.232266][ T3310] veth0_vlan: entered promiscuous mode [ 40.239567][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.248238][ T3309] veth1_vlan: entered promiscuous mode [ 40.267900][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.286357][ T3309] veth0_macvtap: entered promiscuous mode [ 40.293498][ T309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.307551][ T3310] veth1_vlan: entered promiscuous mode [ 40.314423][ T3309] veth1_macvtap: entered promiscuous mode [ 40.321555][ T309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.333316][ T3303] veth0_macvtap: entered promiscuous mode [ 40.340928][ T3303] veth1_macvtap: entered promiscuous mode [ 40.361197][ T2836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.377949][ T2836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.387217][ T3310] veth0_macvtap: entered promiscuous mode [ 40.401458][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.409080][ T3310] veth1_macvtap: entered promiscuous mode [ 40.416785][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.430671][ T3308] veth0_vlan: entered promiscuous mode [ 40.438043][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.449754][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.461397][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.461412][ T29] audit: type=1400 audit(1755301588.327:81): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.NJF36F/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.468287][ T3308] veth1_vlan: entered promiscuous mode [ 40.498337][ T29] audit: type=1400 audit(1755301588.327:82): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.520381][ T29] audit: type=1400 audit(1755301588.327:83): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.NJF36F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.545605][ T29] audit: type=1400 audit(1755301588.327:84): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.567454][ T29] audit: type=1400 audit(1755301588.327:85): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.NJF36F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.594075][ T29] audit: type=1400 audit(1755301588.327:86): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.NJF36F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.621497][ T29] audit: type=1400 audit(1755301588.327:87): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.643811][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.644324][ T29] audit: type=1400 audit(1755301588.367:88): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.681145][ T29] audit: type=1400 audit(1755301588.367:89): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.709033][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.730036][ T29] audit: type=1400 audit(1755301588.587:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.762503][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.770677][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.802651][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.822056][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.836708][ T3308] veth0_macvtap: entered promiscuous mode [ 40.843030][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.852024][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.866262][ T3460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.894548][ T3308] veth1_macvtap: entered promiscuous mode [ 40.905267][ T3460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.917102][ T3460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.930371][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.947847][ T3460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.961780][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.989369][ T3460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.032479][ T3460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.067482][ T263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.090653][ T3491] program syz.1.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.111493][ T263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.129595][ T3496] 9pnet: Could not find request transport: t [ 41.165542][ T263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.197341][ T263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.224728][ T3503] loop4: detected capacity change from 0 to 1024 [ 41.241676][ T3503] ======================================================= [ 41.241676][ T3503] WARNING: The mand mount option has been deprecated and [ 41.241676][ T3503] and is ignored by this kernel. Remove the mand [ 41.241676][ T3503] option from the mount to silence this warning. [ 41.241676][ T3503] ======================================================= [ 41.307748][ T3509] loop1: detected capacity change from 0 to 2048 [ 41.318429][ T263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.369825][ T3509] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 41.409081][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.462026][ T3503] capability: warning: `syz.4.13' uses deprecated v2 capabilities in a way that may be insecure [ 41.534169][ T3499] Zero length message leads to an empty skb [ 41.549994][ T3503] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13: Allocating blocks 449-513 which overlap fs metadata [ 41.576428][ T3533] loop1: detected capacity change from 0 to 512 [ 41.585178][ T3533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.601872][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.615042][ T3503] SELinux: Context @ is not valid (left unmapped). [ 41.628623][ T3533] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.639419][ T3503] EXT4-fs (loop4): pa ffff888107527070: logic 48, phys. 177, len 21 [ 41.641921][ T3533] EXT4-fs (loop1): shut down requested (1) [ 41.647510][ T3503] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 41.660450][ T3503] syz.4.13 (3503) used greatest stack depth: 10568 bytes left [ 41.702279][ T3533] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 41.738315][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.749080][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.782523][ T3551] FAULT_INJECTION: forcing a failure. [ 41.782523][ T3551] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.795711][ T3551] CPU: 1 UID: 0 PID: 3551 Comm: syz.0.29 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 41.795753][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.795770][ T3551] Call Trace: [ 41.795778][ T3551] [ 41.795786][ T3551] __dump_stack+0x1d/0x30 [ 41.795816][ T3551] dump_stack_lvl+0xe8/0x140 [ 41.795903][ T3551] dump_stack+0x15/0x1b [ 41.795925][ T3551] should_fail_ex+0x265/0x280 [ 41.795951][ T3551] should_fail+0xb/0x20 [ 41.795992][ T3551] should_fail_usercopy+0x1a/0x20 [ 41.796100][ T3551] _copy_to_user+0x20/0xa0 [ 41.796139][ T3551] simple_read_from_buffer+0xb5/0x130 [ 41.796287][ T3551] proc_fail_nth_read+0x10e/0x150 [ 41.796324][ T3551] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.796351][ T3551] vfs_read+0x1a5/0x770 [ 41.796371][ T3551] ? __rcu_read_unlock+0x4f/0x70 [ 41.796440][ T3551] ? __fget_files+0x184/0x1c0 [ 41.796474][ T3551] ksys_read+0xda/0x1a0 [ 41.796506][ T3551] __x64_sys_read+0x40/0x50 [ 41.796549][ T3551] x64_sys_call+0x27bc/0x2ff0 [ 41.796572][ T3551] do_syscall_64+0xd2/0x200 [ 41.796599][ T3551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.796630][ T3551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.796663][ T3551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.796690][ T3551] RIP: 0033:0x7f50a8f4d5fc [ 41.796710][ T3551] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.796730][ T3551] RSP: 002b:00007f50a79b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.796831][ T3551] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4d5fc [ 41.796843][ T3551] RDX: 000000000000000f RSI: 00007f50a79b70a0 RDI: 0000000000000005 [ 41.796855][ T3551] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.796867][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.796878][ T3551] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 41.796900][ T3551] [ 42.493474][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 42.570164][ T3617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 42.862097][ T3638] FAULT_INJECTION: forcing a failure. [ 42.862097][ T3638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.875274][ T3638] CPU: 1 UID: 0 PID: 3638 Comm: syz.1.61 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 42.875303][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.875318][ T3638] Call Trace: [ 42.875326][ T3638] [ 42.875348][ T3638] __dump_stack+0x1d/0x30 [ 42.875374][ T3638] dump_stack_lvl+0xe8/0x140 [ 42.875436][ T3638] dump_stack+0x15/0x1b [ 42.875452][ T3638] should_fail_ex+0x265/0x280 [ 42.875479][ T3638] should_fail+0xb/0x20 [ 42.875500][ T3638] should_fail_usercopy+0x1a/0x20 [ 42.875524][ T3638] _copy_to_user+0x20/0xa0 [ 42.875626][ T3638] simple_read_from_buffer+0xb5/0x130 [ 42.875662][ T3638] proc_fail_nth_read+0x10e/0x150 [ 42.875693][ T3638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.875867][ T3638] vfs_read+0x1a5/0x770 [ 42.875896][ T3638] ? bpf_trace_run2+0x124/0x1c0 [ 42.876011][ T3638] ksys_read+0xda/0x1a0 [ 42.876043][ T3638] __x64_sys_read+0x40/0x50 [ 42.876119][ T3638] x64_sys_call+0x27bc/0x2ff0 [ 42.876211][ T3638] do_syscall_64+0xd2/0x200 [ 42.876248][ T3638] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.876280][ T3638] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.876306][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.876370][ T3638] RIP: 0033:0x7fae8f47d5fc [ 42.876386][ T3638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.876403][ T3638] RSP: 002b:00007fae8dee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.876421][ T3638] RAX: ffffffffffffffda RBX: 00007fae8f6a5fa0 RCX: 00007fae8f47d5fc [ 42.876438][ T3638] RDX: 000000000000000f RSI: 00007fae8dee70a0 RDI: 0000000000000007 [ 42.876454][ T3638] RBP: 00007fae8dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.876527][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.876543][ T3638] R13: 00007fae8f6a6038 R14: 00007fae8f6a5fa0 R15: 00007ffc4a902568 [ 42.876581][ T3638] [ 43.094949][ T3641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=3641 comm=syz.4.63 [ 43.108256][ T3641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 43.173629][ T3644] loop3: detected capacity change from 0 to 1024 [ 43.220125][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.234335][ T3647] loop1: detected capacity change from 0 to 1024 [ 43.270465][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.277114][ T3644] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.65: Allocating blocks 449-513 which overlap fs metadata [ 43.297593][ T3647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.319911][ T3643] EXT4-fs (loop3): pa ffff8881076b6070: logic 48, phys. 177, len 21 [ 43.328014][ T3643] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 43.424018][ T3659] FAULT_INJECTION: forcing a failure. [ 43.424018][ T3659] name failslab, interval 1, probability 0, space 0, times 1 [ 43.436882][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: syz.0.69 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 43.436917][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.437000][ T3659] Call Trace: [ 43.437007][ T3659] [ 43.437014][ T3659] __dump_stack+0x1d/0x30 [ 43.437035][ T3659] dump_stack_lvl+0xe8/0x140 [ 43.437054][ T3659] dump_stack+0x15/0x1b [ 43.437072][ T3659] should_fail_ex+0x265/0x280 [ 43.437102][ T3659] ? alloc_pipe_info+0xae/0x350 [ 43.437126][ T3659] should_failslab+0x8c/0xb0 [ 43.437150][ T3659] __kmalloc_cache_noprof+0x4c/0x320 [ 43.437236][ T3659] alloc_pipe_info+0xae/0x350 [ 43.437267][ T3659] splice_direct_to_actor+0x592/0x680 [ 43.437293][ T3659] ? kstrtouint_from_user+0x9f/0xf0 [ 43.437376][ T3659] ? __pfx_direct_splice_actor+0x10/0x10 [ 43.437397][ T3659] ? __rcu_read_unlock+0x4f/0x70 [ 43.437417][ T3659] ? get_pid_task+0x96/0xd0 [ 43.437436][ T3659] ? avc_policy_seqno+0x15/0x30 [ 43.437536][ T3659] ? selinux_file_permission+0x1e4/0x320 [ 43.437564][ T3659] do_splice_direct+0xda/0x150 [ 43.437588][ T3659] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 43.437620][ T3659] do_sendfile+0x380/0x650 [ 43.437659][ T3659] __x64_sys_sendfile64+0x105/0x150 [ 43.437735][ T3659] x64_sys_call+0x2bb0/0x2ff0 [ 43.437839][ T3659] do_syscall_64+0xd2/0x200 [ 43.437872][ T3659] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.437896][ T3659] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.437989][ T3659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.438048][ T3659] RIP: 0033:0x7f50a8f4ebe9 [ 43.438089][ T3659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.438173][ T3659] RSP: 002b:00007f50a79b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 43.438192][ T3659] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4ebe9 [ 43.438205][ T3659] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 43.438219][ T3659] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.438232][ T3659] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 43.438244][ T3659] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 43.438261][ T3659] [ 43.696624][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.858374][ T3673] netlink: 'syz.3.74': attribute type 6 has an invalid length. [ 44.056520][ T3688] loop4: detected capacity change from 0 to 1024 [ 44.254004][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.294944][ T3688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.665955][ T3725] FAULT_INJECTION: forcing a failure. [ 44.665955][ T3725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.679177][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.3.95 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 44.679296][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.679311][ T3725] Call Trace: [ 44.679318][ T3725] [ 44.679327][ T3725] __dump_stack+0x1d/0x30 [ 44.679412][ T3725] dump_stack_lvl+0xe8/0x140 [ 44.679485][ T3725] dump_stack+0x15/0x1b [ 44.679507][ T3725] should_fail_ex+0x265/0x280 [ 44.679542][ T3725] should_fail+0xb/0x20 [ 44.679565][ T3725] should_fail_usercopy+0x1a/0x20 [ 44.679613][ T3725] _copy_from_user+0x1c/0xb0 [ 44.679646][ T3725] ___sys_sendmsg+0xc1/0x1d0 [ 44.679739][ T3725] __sys_sendmmsg+0x178/0x300 [ 44.679774][ T3725] __x64_sys_sendmmsg+0x57/0x70 [ 44.679797][ T3725] x64_sys_call+0x1c4a/0x2ff0 [ 44.679859][ T3725] do_syscall_64+0xd2/0x200 [ 44.679938][ T3725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.680034][ T3725] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.680067][ T3725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.680147][ T3725] RIP: 0033:0x7f21f35febe9 [ 44.680192][ T3725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.680215][ T3725] RSP: 002b:00007f21f2067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.680251][ T3725] RAX: ffffffffffffffda RBX: 00007f21f3825fa0 RCX: 00007f21f35febe9 [ 44.680263][ T3725] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000005 [ 44.680274][ T3725] RBP: 00007f21f2067090 R08: 0000000000000000 R09: 0000000000000000 [ 44.680293][ T3725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.680304][ T3725] R13: 00007f21f3826038 R14: 00007f21f3825fa0 R15: 00007ffd4853e6f8 [ 44.680345][ T3725] [ 44.959594][ T3739] loop1: detected capacity change from 0 to 2048 [ 45.159204][ T3753] FAULT_INJECTION: forcing a failure. [ 45.159204][ T3753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.172382][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.1.104 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 45.172419][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.172433][ T3753] Call Trace: [ 45.172442][ T3753] [ 45.172452][ T3753] __dump_stack+0x1d/0x30 [ 45.172541][ T3753] dump_stack_lvl+0xe8/0x140 [ 45.172567][ T3753] dump_stack+0x15/0x1b [ 45.172589][ T3753] should_fail_ex+0x265/0x280 [ 45.172610][ T3753] should_fail+0xb/0x20 [ 45.172627][ T3753] should_fail_usercopy+0x1a/0x20 [ 45.172704][ T3753] _copy_from_user+0x1c/0xb0 [ 45.172784][ T3753] kstrtouint_from_user+0x69/0xf0 [ 45.172907][ T3753] ? 0xffffffff81000000 [ 45.172921][ T3753] ? selinux_file_permission+0x1e4/0x320 [ 45.172945][ T3753] proc_fail_nth_write+0x50/0x160 [ 45.172983][ T3753] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.173016][ T3753] vfs_write+0x266/0x960 [ 45.173070][ T3753] ? vfs_read+0x4e6/0x770 [ 45.173097][ T3753] ? __rcu_read_unlock+0x4f/0x70 [ 45.173127][ T3753] ? __fget_files+0x184/0x1c0 [ 45.173164][ T3753] ksys_write+0xda/0x1a0 [ 45.173212][ T3753] __x64_sys_write+0x40/0x50 [ 45.173281][ T3753] x64_sys_call+0x27fe/0x2ff0 [ 45.173310][ T3753] do_syscall_64+0xd2/0x200 [ 45.173348][ T3753] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.173378][ T3753] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.173487][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.173516][ T3753] RIP: 0033:0x7fae8f47d69f [ 45.173535][ T3753] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 45.173558][ T3753] RSP: 002b:00007fae8dec6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 45.173584][ T3753] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae8f47d69f [ 45.173634][ T3753] RDX: 0000000000000001 RSI: 00007fae8dec60a0 RDI: 0000000000000008 [ 45.173651][ T3753] RBP: 00007fae8dec6090 R08: 0000000000000000 R09: 0000000000000000 [ 45.173668][ T3753] R10: 0000000040000001 R11: 0000000000000293 R12: 0000000000000001 [ 45.173684][ T3753] R13: 00007fae8f6a6128 R14: 00007fae8f6a6090 R15: 00007ffc4a902568 [ 45.173733][ T3753] [ 45.500806][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 45.500826][ T29] audit: type=1326 audit(1755301593.367:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.548558][ T29] audit: type=1326 audit(1755301593.367:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.572178][ T29] audit: type=1326 audit(1755301593.397:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.595614][ T29] audit: type=1326 audit(1755301593.397:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.618936][ T29] audit: type=1326 audit(1755301593.397:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.642182][ T29] audit: type=1326 audit(1755301593.397:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.665686][ T29] audit: type=1326 audit(1755301593.397:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.689866][ T29] audit: type=1326 audit(1755301593.397:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.713179][ T29] audit: type=1326 audit(1755301593.397:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.736379][ T29] audit: type=1326 audit(1755301593.397:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 45.843375][ T3772] FAULT_INJECTION: forcing a failure. [ 45.843375][ T3772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.856519][ T3772] CPU: 1 UID: 0 PID: 3772 Comm: syz.4.113 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 45.856549][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.856562][ T3772] Call Trace: [ 45.856568][ T3772] [ 45.856575][ T3772] __dump_stack+0x1d/0x30 [ 45.856656][ T3772] dump_stack_lvl+0xe8/0x140 [ 45.856676][ T3772] dump_stack+0x15/0x1b [ 45.856693][ T3772] should_fail_ex+0x265/0x280 [ 45.856715][ T3772] should_fail+0xb/0x20 [ 45.856732][ T3772] should_fail_usercopy+0x1a/0x20 [ 45.856817][ T3772] _copy_from_user+0x1c/0xb0 [ 45.856881][ T3772] ___sys_sendmsg+0xc1/0x1d0 [ 45.856974][ T3772] __x64_sys_sendmsg+0xd4/0x160 [ 45.857000][ T3772] x64_sys_call+0x191e/0x2ff0 [ 45.857022][ T3772] do_syscall_64+0xd2/0x200 [ 45.857050][ T3772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.857107][ T3772] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.857138][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.857235][ T3772] RIP: 0033:0x7f35280cebe9 [ 45.857251][ T3772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.857269][ T3772] RSP: 002b:00007f3526b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.857360][ T3772] RAX: ffffffffffffffda RBX: 00007f35282f5fa0 RCX: 00007f35280cebe9 [ 45.857373][ T3772] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 45.857386][ T3772] RBP: 00007f3526b37090 R08: 0000000000000000 R09: 0000000000000000 [ 45.857398][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.857412][ T3772] R13: 00007f35282f6038 R14: 00007f35282f5fa0 R15: 00007fff2e3d7818 [ 45.857430][ T3772] [ 46.124310][ T3779] loop1: detected capacity change from 0 to 1024 [ 46.276913][ T3785] capability: warning: `syz.3.111' uses 32-bit capabilities (legacy support in use) [ 46.427073][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.468150][ T3779] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.116: Allocating blocks 449-513 which overlap fs metadata [ 46.522056][ T3779] EXT4-fs (loop1): pa ffff8881076b60e0: logic 48, phys. 177, len 21 [ 46.530260][ T3779] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.540715][ T3801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3801 comm=syz.0.123 [ 46.557723][ T3801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.123'. [ 46.568227][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.602147][ T3805] loop1: detected capacity change from 0 to 1024 [ 46.635553][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.658320][ T3805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.696732][ T3813] loop0: detected capacity change from 0 to 1024 [ 46.727378][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.742019][ T3813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.796925][ T3824] loop3: detected capacity change from 0 to 1024 [ 46.826475][ T3824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.943860][ T3824] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.129: Allocating blocks 449-513 which overlap fs metadata [ 47.011488][ T3824] EXT4-fs (loop3): pa ffff8881076b6150: logic 48, phys. 177, len 21 [ 47.019611][ T3824] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 47.075627][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.318715][ T3841] loop1: detected capacity change from 0 to 1024 [ 47.347712][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.388738][ T3845] syz.4.135 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.418168][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 47.427971][ T3845] xfrm0: entered promiscuous mode [ 47.433048][ T3845] xfrm0: entered allmulticast mode [ 47.440817][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 47.455620][ T3841] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.134: Allocating blocks 497-513 which overlap fs metadata [ 47.477040][ T3849] serio: Serial port ptm0 [ 47.499530][ T3840] EXT4-fs (loop1): pa ffff8881076b6000: logic 256, phys. 401, len 7 [ 47.507681][ T3840] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 47.583128][ T3859] FAULT_INJECTION: forcing a failure. [ 47.583128][ T3859] name failslab, interval 1, probability 0, space 0, times 0 [ 47.595913][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.4.139 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 47.595958][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.595976][ T3859] Call Trace: [ 47.595983][ T3859] [ 47.595993][ T3859] __dump_stack+0x1d/0x30 [ 47.596021][ T3859] dump_stack_lvl+0xe8/0x140 [ 47.596085][ T3859] dump_stack+0x15/0x1b [ 47.596154][ T3859] should_fail_ex+0x265/0x280 [ 47.596183][ T3859] ? __se_sys_mount+0xef/0x2e0 [ 47.596209][ T3859] should_failslab+0x8c/0xb0 [ 47.596242][ T3859] __kmalloc_cache_noprof+0x4c/0x320 [ 47.596334][ T3859] ? memdup_user+0x99/0xd0 [ 47.596362][ T3859] __se_sys_mount+0xef/0x2e0 [ 47.596422][ T3859] ? fput+0x8f/0xc0 [ 47.596516][ T3859] ? ksys_write+0x192/0x1a0 [ 47.596547][ T3859] __x64_sys_mount+0x67/0x80 [ 47.596587][ T3859] x64_sys_call+0x2b4d/0x2ff0 [ 47.596632][ T3859] do_syscall_64+0xd2/0x200 [ 47.596674][ T3859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.596703][ T3859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.596727][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.596750][ T3859] RIP: 0033:0x7f35280cebe9 [ 47.596845][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.596869][ T3859] RSP: 002b:00007f3526b16038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.596894][ T3859] RAX: ffffffffffffffda RBX: 00007f35282f6090 RCX: 00007f35280cebe9 [ 47.596911][ T3859] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 47.596925][ T3859] RBP: 00007f3526b16090 R08: 0000200000000300 R09: 0000000000000000 [ 47.596972][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.596988][ T3859] R13: 00007f35282f6128 R14: 00007f35282f6090 R15: 00007fff2e3d7818 [ 47.597012][ T3859] [ 47.828673][ T3861] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.872704][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.887313][ T3861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.141'. [ 47.908202][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.925836][ T3863] loop4: detected capacity change from 0 to 1024 [ 47.942686][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.955369][ T3861] bond0 (unregistering): Released all slaves [ 47.968222][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.981409][ T3863] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.054095][ T3874] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 48.068233][ T3874] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.081784][ T3874] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.096446][ T3874] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.105594][ T3874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.406106][ T3889] wireguard0: entered promiscuous mode [ 48.411657][ T3889] wireguard0: entered allmulticast mode [ 48.533247][ T3895] serio: Serial port ptm0 [ 49.010665][ T3923] loop2: detected capacity change from 0 to 1024 [ 49.099558][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.180667][ T3923] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.192464][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 49.536812][ T3952] FAULT_INJECTION: forcing a failure. [ 49.536812][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 49.549537][ T3952] CPU: 0 UID: 0 PID: 3952 Comm: syz.1.171 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 49.549620][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.549632][ T3952] Call Trace: [ 49.549639][ T3952] [ 49.549646][ T3952] __dump_stack+0x1d/0x30 [ 49.549686][ T3952] dump_stack_lvl+0xe8/0x140 [ 49.549711][ T3952] dump_stack+0x15/0x1b [ 49.549728][ T3952] should_fail_ex+0x265/0x280 [ 49.549749][ T3952] should_failslab+0x8c/0xb0 [ 49.549773][ T3952] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.549942][ T3952] ? __alloc_skb+0x101/0x320 [ 49.549976][ T3952] __alloc_skb+0x101/0x320 [ 49.550018][ T3952] netlink_alloc_large_skb+0xba/0xf0 [ 49.550132][ T3952] netlink_sendmsg+0x3cf/0x6b0 [ 49.550162][ T3952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.550258][ T3952] __sock_sendmsg+0x145/0x180 [ 49.550287][ T3952] ____sys_sendmsg+0x31e/0x4e0 [ 49.550310][ T3952] ___sys_sendmsg+0x17b/0x1d0 [ 49.550356][ T3952] __x64_sys_sendmsg+0xd4/0x160 [ 49.550387][ T3952] x64_sys_call+0x191e/0x2ff0 [ 49.550408][ T3952] do_syscall_64+0xd2/0x200 [ 49.550443][ T3952] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.550504][ T3952] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.550528][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.550635][ T3952] RIP: 0033:0x7fae8f47ebe9 [ 49.550654][ T3952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.550702][ T3952] RSP: 002b:00007fae8dee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.550721][ T3952] RAX: ffffffffffffffda RBX: 00007fae8f6a5fa0 RCX: 00007fae8f47ebe9 [ 49.550737][ T3952] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000005 [ 49.550763][ T3952] RBP: 00007fae8dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.550788][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.550803][ T3952] R13: 00007fae8f6a6038 R14: 00007fae8f6a5fa0 R15: 00007ffc4a902568 [ 49.550826][ T3952] [ 50.205966][ T3938] syz.3.167 (3938) used greatest stack depth: 10176 bytes left [ 50.337889][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 50.429314][ T3963] hsr_slave_1 (unregistering): left promiscuous mode [ 50.670991][ T3974] loop0: detected capacity change from 0 to 2048 [ 50.751828][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 50.751844][ T29] audit: type=1326 audit(1755301598.617:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.019533][ T3982] loop3: detected capacity change from 0 to 1024 [ 51.277683][ T29] audit: type=1326 audit(1755301598.617:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.278141][ T3974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.301054][ T29] audit: type=1326 audit(1755301598.627:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.301094][ T29] audit: type=1326 audit(1755301598.627:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.321561][ T3987] loop2: detected capacity change from 0 to 2048 [ 51.336426][ T29] audit: type=1326 audit(1755301598.627:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.389433][ T29] audit: type=1326 audit(1755301598.627:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.412934][ T29] audit: type=1326 audit(1755301598.627:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.434528][ T3974] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.436343][ T29] audit: type=1326 audit(1755301598.627:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.469973][ T29] audit: type=1326 audit(1755301598.627:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.493301][ T29] audit: type=1326 audit(1755301598.627:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f35febe9 code=0x7ffc0000 [ 51.526247][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.621344][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.633524][ T3510] loop2: p2 p3 p7 [ 51.650281][ T3987] loop2: p2 p3 p7 [ 51.669465][ T2992] loop2: p2 p3 p7 [ 51.676625][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.764663][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.764940][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 51.799530][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.863399][ T4008] loop1: detected capacity change from 0 to 1024 [ 51.895783][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.915556][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 51.928900][ T4012] FAULT_INJECTION: forcing a failure. [ 51.928900][ T4012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.936628][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.942010][ T4012] CPU: 1 UID: 0 PID: 4012 Comm: syz.0.186 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 51.942105][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.942165][ T4012] Call Trace: [ 51.942173][ T4012] [ 51.942185][ T4012] __dump_stack+0x1d/0x30 [ 51.942214][ T4012] dump_stack_lvl+0xe8/0x140 [ 51.942241][ T4012] dump_stack+0x15/0x1b [ 51.942266][ T4012] should_fail_ex+0x265/0x280 [ 51.942297][ T4012] should_fail+0xb/0x20 [ 51.942372][ T4012] should_fail_usercopy+0x1a/0x20 [ 51.942441][ T4012] _copy_to_user+0x20/0xa0 [ 51.942482][ T4012] simple_read_from_buffer+0xb5/0x130 [ 51.942513][ T4012] proc_fail_nth_read+0x10e/0x150 [ 51.942565][ T4012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.942602][ T4012] vfs_read+0x1a5/0x770 [ 51.942634][ T4012] ? __rcu_read_unlock+0x4f/0x70 [ 51.942666][ T4012] ? __fget_files+0x184/0x1c0 [ 51.942698][ T4012] ? radix_tree_lookup+0xfa/0x140 [ 51.942732][ T4012] ksys_read+0xda/0x1a0 [ 51.942765][ T4012] __x64_sys_read+0x40/0x50 [ 51.942854][ T4012] x64_sys_call+0x27bc/0x2ff0 [ 51.942884][ T4012] do_syscall_64+0xd2/0x200 [ 51.942978][ T4012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.943012][ T4012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.943048][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.943145][ T4012] RIP: 0033:0x7f50a8f4d5fc [ 51.943166][ T4012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.943192][ T4012] RSP: 002b:00007f50a79b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.943277][ T4012] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4d5fc [ 51.943295][ T4012] RDX: 000000000000000f RSI: 00007f50a79b70a0 RDI: 0000000000000005 [ 51.943377][ T4012] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.943394][ T4012] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 51.943411][ T4012] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 51.943440][ T4012] [ 52.147441][ T4025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.191'. [ 52.171895][ T4023] loop4: detected capacity change from 0 to 1024 [ 52.180342][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.184505][ T4025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 52.201274][ T4025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 52.216592][ T4023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.266976][ T4008] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.189: Allocating blocks 449-513 which overlap fs metadata [ 52.295541][ T4024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'. [ 52.319197][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 52.331085][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 52.346277][ T4015] loop2: detected capacity change from 0 to 2048 [ 52.357660][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 52.380400][ T4023] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.195: Allocating blocks 497-513 which overlap fs metadata [ 52.416836][ T4006] EXT4-fs (loop1): pa ffff8881076b61c0: logic 48, phys. 177, len 21 [ 52.424936][ T4006] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 52.436484][ T4022] EXT4-fs (loop4): pa ffff888107527150: logic 64, phys. 209, len 19 [ 52.444593][ T4022] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 52.500639][ T4015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 52.513769][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.561701][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.658647][ T4015] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.689496][ T4015] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1018 with error 28 [ 52.702101][ T4015] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.702101][ T4015] [ 52.711787][ T4015] EXT4-fs (loop2): Total free blocks count 0 [ 52.717910][ T4015] EXT4-fs (loop2): Free/Dirty block details [ 52.723814][ T4015] EXT4-fs (loop2): free_blocks=2415919104 [ 52.729559][ T4015] EXT4-fs (loop2): dirty_blocks=1024 [ 52.734874][ T4015] EXT4-fs (loop2): Block reservation details [ 52.740865][ T4015] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 52.793227][ T4060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.203'. [ 52.810389][ T4062] loop1: detected capacity change from 0 to 164 [ 52.845493][ T4062] process 'syz.1.204' launched '/dev/fd/5' with NULL argv: empty string added [ 52.862596][ T4062] syz.1.204: attempt to access beyond end of device [ 52.862596][ T4062] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 52.882633][ T4062] syz.1.204: attempt to access beyond end of device [ 52.882633][ T4062] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 52.934948][ T4015] syz.2.191 (4015) used greatest stack depth: 10120 bytes left [ 52.972768][ T4065] loop0: detected capacity change from 0 to 1024 [ 52.989107][ T263] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 53.003713][ T4065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.018133][ T4065] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.201414][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.210457][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.250546][ T4082] bridge0: port 3(vlan2) entered blocking state [ 53.256935][ T4082] bridge0: port 3(vlan2) entered disabled state [ 53.276342][ T4082] vlan2: entered allmulticast mode [ 53.281578][ T4082] bridge0: entered allmulticast mode [ 53.299323][ T4082] vlan2: left allmulticast mode [ 53.304272][ T4082] bridge0: left allmulticast mode [ 53.341930][ T4085] loop3: detected capacity change from 0 to 1024 [ 53.369047][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.541420][ T4085] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.211: Allocating blocks 497-513 which overlap fs metadata [ 53.564323][ T4092] loop4: detected capacity change from 0 to 512 [ 53.589037][ T4092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.614246][ T4084] EXT4-fs (loop3): pa ffff8881075271c0: logic 128, phys. 273, len 15 [ 53.622541][ T4084] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 53.660551][ T4092] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.702298][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.125683][ T4130] loop1: detected capacity change from 0 to 1024 [ 54.177115][ T4124] syzkaller0: entered promiscuous mode [ 54.182753][ T4124] syzkaller0: entered allmulticast mode [ 54.218412][ T4130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.289792][ T4130] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.305504][ T4137] loop2: detected capacity change from 0 to 512 [ 54.373972][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.388566][ T4137] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.472000][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.472638][ T4137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 54.535771][ T4146] loop0: detected capacity change from 0 to 1024 [ 54.544492][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.561394][ T4146] EXT4-fs: Ignoring removed nobh option [ 54.570891][ T4150] netlink: 'syz.2.233': attribute type 3 has an invalid length. [ 54.586354][ T4146] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.597306][ T4146] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.617879][ T4146] JBD2: no valid journal superblock found [ 54.623685][ T4146] EXT4-fs (loop0): Could not load journal inode [ 54.661852][ T4152] loop2: detected capacity change from 0 to 512 [ 54.697617][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.729474][ T4152] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.805359][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 54.891871][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.951887][ T4168] FAULT_INJECTION: forcing a failure. [ 54.951887][ T4168] name failslab, interval 1, probability 0, space 0, times 0 [ 54.964900][ T4168] CPU: 0 UID: 0 PID: 4168 Comm: syz.0.242 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 54.964936][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.964952][ T4168] Call Trace: [ 54.964960][ T4168] [ 54.964969][ T4168] __dump_stack+0x1d/0x30 [ 54.965074][ T4168] dump_stack_lvl+0xe8/0x140 [ 54.965100][ T4168] dump_stack+0x15/0x1b [ 54.965119][ T4168] should_fail_ex+0x265/0x280 [ 54.965180][ T4168] should_failslab+0x8c/0xb0 [ 54.965212][ T4168] __kmalloc_noprof+0xa5/0x3e0 [ 54.965239][ T4168] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 54.965293][ T4168] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 54.965376][ T4168] genl_family_rcv_msg_doit+0x48/0x1b0 [ 54.965412][ T4168] ? selinux_capable+0x31/0x40 [ 54.965478][ T4168] ? security_capable+0x83/0x90 [ 54.965527][ T4168] ? ns_capable+0x7d/0xb0 [ 54.965555][ T4168] genl_rcv_msg+0x422/0x460 [ 54.965589][ T4168] ? __pfx_ethnl_act_module_fw_flash+0x10/0x10 [ 54.965633][ T4168] netlink_rcv_skb+0x120/0x220 [ 54.965657][ T4168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.965708][ T4168] genl_rcv+0x28/0x40 [ 54.965817][ T4168] netlink_unicast+0x5c0/0x690 [ 54.965870][ T4168] netlink_sendmsg+0x58b/0x6b0 [ 54.965900][ T4168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.965950][ T4168] __sock_sendmsg+0x145/0x180 [ 54.965987][ T4168] ____sys_sendmsg+0x31e/0x4e0 [ 54.966018][ T4168] ___sys_sendmsg+0x17b/0x1d0 [ 54.966061][ T4168] __x64_sys_sendmsg+0xd4/0x160 [ 54.966138][ T4168] x64_sys_call+0x191e/0x2ff0 [ 54.966168][ T4168] do_syscall_64+0xd2/0x200 [ 54.966199][ T4168] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.966231][ T4168] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.966322][ T4168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.966354][ T4168] RIP: 0033:0x7f50a8f4ebe9 [ 54.966369][ T4168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.966388][ T4168] RSP: 002b:00007f50a79b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.966408][ T4168] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4ebe9 [ 54.966421][ T4168] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000005 [ 54.966434][ T4168] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.966446][ T4168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.966521][ T4168] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 54.966541][ T4168] [ 55.262928][ T4174] netlink: 'syz.1.244': attribute type 3 has an invalid length. [ 55.279905][ T4176] loop0: detected capacity change from 0 to 512 [ 55.331228][ T4166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 55.337921][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.345518][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 55.352883][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.374575][ T4176] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.408882][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 55.433630][ T4166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 55.468946][ T4185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 55.505936][ T4195] loop4: detected capacity change from 0 to 1024 [ 55.518224][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.527354][ T3384] vhci_hcd: vhci_device speed not set [ 55.532752][ T4166] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 55.539365][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.546833][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 55.563804][ T4195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.569139][ T4200] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 55.578566][ T4195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.582461][ T4200] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 55.582590][ T4200] vhci_hcd vhci_hcd.0: Device attached [ 55.614454][ T3384] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 55.669384][ T4205] FAULT_INJECTION: forcing a failure. [ 55.669384][ T4205] name failslab, interval 1, probability 0, space 0, times 0 [ 55.682122][ T4205] CPU: 1 UID: 0 PID: 4205 Comm: syz.1.251 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 55.682152][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.682167][ T4205] Call Trace: [ 55.682175][ T4205] [ 55.682184][ T4205] __dump_stack+0x1d/0x30 [ 55.682210][ T4205] dump_stack_lvl+0xe8/0x140 [ 55.682303][ T4205] dump_stack+0x15/0x1b [ 55.682324][ T4205] should_fail_ex+0x265/0x280 [ 55.682350][ T4205] should_failslab+0x8c/0xb0 [ 55.682380][ T4205] kmem_cache_alloc_noprof+0x50/0x310 [ 55.682409][ T4206] loop0: detected capacity change from 0 to 2048 [ 55.682445][ T4205] ? sk_prot_alloc+0x3f/0x190 [ 55.682464][ T4205] ? should_failslab+0x8c/0xb0 [ 55.682500][ T4205] sk_prot_alloc+0x3f/0x190 [ 55.682623][ T4205] sk_alloc+0x34/0x360 [ 55.682651][ T4205] inet6_create+0x3bd/0x870 [ 55.682696][ T4205] __sock_create+0x2ec/0x5b0 [ 55.682767][ T4205] sock_create_kern+0x38/0x50 [ 55.682898][ T4205] mptcp_subflow_create_socket+0x84/0x630 [ 55.682951][ T4205] __mptcp_nmpc_sk+0xb3/0x3a0 [ 55.683010][ T4205] mptcp_connect+0x58/0x890 [ 55.683135][ T4205] __inet_stream_connect+0x166/0x7e0 [ 55.683186][ T4205] ? _raw_spin_unlock_bh+0x36/0x40 [ 55.683232][ T4205] ? release_sock+0x116/0x150 [ 55.683284][ T4205] ? _raw_spin_unlock_bh+0x36/0x40 [ 55.683380][ T4205] ? lock_sock_nested+0x112/0x140 [ 55.683417][ T4205] ? selinux_netlbl_socket_connect+0x115/0x130 [ 55.683469][ T4205] inet_stream_connect+0x44/0x70 [ 55.683561][ T4205] ? __pfx_inet_stream_connect+0x10/0x10 [ 55.683590][ T4205] __sys_connect+0x1ef/0x2b0 [ 55.683643][ T4205] __x64_sys_connect+0x3f/0x50 [ 55.683688][ T4205] x64_sys_call+0x2c08/0x2ff0 [ 55.683751][ T4205] do_syscall_64+0xd2/0x200 [ 55.683788][ T4205] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.683894][ T4205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.683970][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.684002][ T4205] RIP: 0033:0x7fae8f47ebe9 [ 55.684025][ T4205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.684109][ T4205] RSP: 002b:00007fae8dee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 55.684272][ T4205] RAX: ffffffffffffffda RBX: 00007fae8f6a5fa0 RCX: 00007fae8f47ebe9 [ 55.684289][ T4205] RDX: 000000000000001c RSI: 00002000000004c0 RDI: 0000000000000003 [ 55.684306][ T4205] RBP: 00007fae8dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.684322][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.684339][ T4205] R13: 00007fae8f6a6038 R14: 00007fae8f6a5fa0 R15: 00007ffc4a902568 [ 55.684364][ T4205] [ 55.931772][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 55.931791][ T29] audit: type=1326 audit(1755301603.797:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 55.976894][ T29] audit: type=1326 audit(1755301603.797:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 56.029151][ T29] audit: type=1400 audit(1755301603.817:1534): avc: denied { mounton } for pid=4203 comm="syz.0.250" path="/52/file1" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.054037][ T29] audit: type=1400 audit(1755301603.897:1535): avc: denied { write } for pid=4208 comm="syz.1.252" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.076018][ T4206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.121128][ T29] audit: type=1400 audit(1755301603.987:1536): avc: denied { module_request } for pid=4216 comm="syz.1.255" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.162534][ T4215] loop3: detected capacity change from 0 to 1024 [ 56.184426][ T29] audit: type=1400 audit(1755301604.047:1537): avc: denied { sys_module } for pid=4216 comm="syz.1.255" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.208143][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.368432][ T29] audit: type=1400 audit(1755301604.057:1538): avc: denied { name_bind } for pid=4203 comm="syz.0.250" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.390240][ T29] audit: type=1400 audit(1755301604.057:1539): avc: denied { node_bind } for pid=4203 comm="syz.0.250" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.418522][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.432360][ T29] audit: type=1400 audit(1755301604.297:1540): avc: denied { name_bind } for pid=4225 comm="syz.4.254" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.433875][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.462829][ T4226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.467356][ T29] audit: type=1400 audit(1755301604.297:1541): avc: denied { create } for pid=4225 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.476093][ T4200] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.536329][ T4166] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 56.542975][ T4166] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.550615][ T4166] vhci_hcd vhci_hcd.0: Device attached [ 56.569250][ T4215] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.253: Allocating blocks 449-513 which overlap fs metadata [ 56.598523][ T4214] EXT4-fs (loop3): pa ffff8881076b62a0: logic 48, phys. 177, len 21 [ 56.606611][ T4214] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 56.701688][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.890015][ T4249] loop3: detected capacity change from 0 to 1024 [ 56.922598][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.948081][ T4249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.009321][ T4227] vhci_hcd: connection closed [ 57.009547][ T4201] vhci_hcd: connection closed [ 57.015946][ T4196] vhci_hcd: connection closed [ 57.021308][ T309] vhci_hcd: stop threads [ 57.030342][ T309] vhci_hcd: release socket [ 57.034853][ T309] vhci_hcd: disconnect device [ 57.037203][ T4180] vhci_hcd: connection reset by peer [ 57.045219][ T309] vhci_hcd: stop threads [ 57.049534][ T309] vhci_hcd: release socket [ 57.054074][ T309] vhci_hcd: disconnect device [ 57.060803][ T309] vhci_hcd: stop threads [ 57.065140][ T309] vhci_hcd: release socket [ 57.069626][ T309] vhci_hcd: disconnect device [ 57.117427][ T4254] netlink: 'syz.1.265': attribute type 3 has an invalid length. [ 57.133070][ T309] vhci_hcd: stop threads [ 57.137494][ T309] vhci_hcd: release socket [ 57.141933][ T309] vhci_hcd: disconnect device [ 57.286922][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 57.755542][ T4284] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 57.884910][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 57.893813][ T4297] IPVS: Error joining to the multicast group [ 58.133161][ T4319] netlink: 'syz.0.288': attribute type 3 has an invalid length. [ 58.226309][ T4335] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.348865][ T263] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 58.997355][ T4367] loop1: detected capacity change from 0 to 512 [ 59.031936][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.139940][ T4367] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.344917][ T4383] loop4: detected capacity change from 0 to 1024 [ 59.384258][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.384952][ T4383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.447358][ T4380] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.304: Allocating blocks 449-513 which overlap fs metadata [ 59.490676][ T4380] EXT4-fs (loop4): pa ffff8881075272a0: logic 48, phys. 177, len 21 [ 59.498788][ T4380] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 59.565656][ T4395] loop0: detected capacity change from 0 to 1024 [ 59.579665][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.599931][ T4395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.662768][ T4395] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.776667][ T4418] loop4: detected capacity change from 0 to 512 [ 59.802977][ T4420] loop3: detected capacity change from 0 to 512 [ 59.820375][ T4418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.842192][ T4418] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.860276][ T4420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.879659][ T4418] __nla_validate_parse: 1 callbacks suppressed [ 59.879673][ T4418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'. [ 59.896486][ T4420] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.923830][ T4420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 60.172427][ T4448] loop0: detected capacity change from 0 to 512 [ 60.187591][ T4448] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.207575][ T4448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'. [ 60.224227][ T4454] loop3: detected capacity change from 0 to 1024 [ 60.278258][ T4459] loop0: detected capacity change from 0 to 1024 [ 60.287883][ T4459] EXT4-fs: Ignoring removed nobh option [ 60.299003][ T4459] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.309983][ T4459] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.326089][ T4459] JBD2: no valid journal superblock found [ 60.334175][ T4459] EXT4-fs (loop0): Could not load journal inode [ 60.607404][ T4481] loop2: detected capacity change from 0 to 1024 [ 60.654453][ T3384] usb 5-1: enqueue for inactive port 0 [ 60.660090][ T3384] usb 5-1: enqueue for inactive port 0 [ 60.794803][ T3384] vhci_hcd: vhci_device speed not set [ 60.929808][ T4499] netlink: 'syz.3.346': attribute type 3 has an invalid length. [ 61.013984][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 61.014004][ T29] audit: type=1326 audit(1755301608.877:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 61.059956][ T29] audit: type=1326 audit(1755301608.877:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 61.083403][ T29] audit: type=1326 audit(1755301608.917:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.106737][ T29] audit: type=1326 audit(1755301608.917:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.130322][ T29] audit: type=1326 audit(1755301608.917:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.153694][ T29] audit: type=1326 audit(1755301608.917:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.177223][ T29] audit: type=1326 audit(1755301608.917:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.200563][ T29] audit: type=1326 audit(1755301608.927:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.223941][ T29] audit: type=1326 audit(1755301608.927:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.247296][ T29] audit: type=1326 audit(1755301608.927:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 61.280603][ T4514] loop4: detected capacity change from 0 to 512 [ 61.365081][ T4514] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.367523][ T4523] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 61.383766][ T4523] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 61.463988][ T4532] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 61.547748][ T4540] loop3: detected capacity change from 0 to 1024 [ 61.629344][ T4540] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.363: Allocating blocks 449-513 which overlap fs metadata [ 61.641685][ T4542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.364'. [ 61.646222][ T4539] EXT4-fs (loop3): pa ffff8881076b62a0: logic 48, phys. 177, len 21 [ 61.660147][ T4539] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 61.726475][ T4558] loop3: detected capacity change from 0 to 1024 [ 61.743916][ T4556] loop4: detected capacity change from 0 to 1024 [ 61.806000][ T4558] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.377: Allocating blocks 449-513 which overlap fs metadata [ 61.833351][ T4569] netlink: 'syz.1.371': attribute type 3 has an invalid length. [ 61.833379][ T4557] EXT4-fs (loop3): pa ffff8881075272a0: logic 48, phys. 177, len 21 [ 61.849073][ T4557] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 62.281251][ T4587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 62.319522][ T4592] loop4: detected capacity change from 0 to 512 [ 62.351646][ T4592] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.377922][ T4596] loop0: detected capacity change from 0 to 1024 [ 62.397210][ T4596] EXT4-fs: Ignoring removed nobh option [ 62.404986][ T4596] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.415920][ T4596] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.437612][ T4596] JBD2: no valid journal superblock found [ 62.443398][ T4596] EXT4-fs (loop0): Could not load journal inode [ 62.550807][ T4607] netlink: 'syz.2.385': attribute type 3 has an invalid length. [ 62.621226][ T4614] FAULT_INJECTION: forcing a failure. [ 62.621226][ T4614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.634505][ T4614] CPU: 1 UID: 0 PID: 4614 Comm: syz.0.388 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 62.634540][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.634555][ T4614] Call Trace: [ 62.634563][ T4614] [ 62.634571][ T4614] __dump_stack+0x1d/0x30 [ 62.634594][ T4614] dump_stack_lvl+0xe8/0x140 [ 62.634644][ T4614] dump_stack+0x15/0x1b [ 62.634665][ T4614] should_fail_ex+0x265/0x280 [ 62.634692][ T4614] should_fail+0xb/0x20 [ 62.634716][ T4614] should_fail_usercopy+0x1a/0x20 [ 62.634744][ T4614] _copy_from_user+0x1c/0xb0 [ 62.634779][ T4614] ___sys_sendmsg+0xc1/0x1d0 [ 62.634840][ T4614] __x64_sys_sendmsg+0xd4/0x160 [ 62.634872][ T4614] x64_sys_call+0x191e/0x2ff0 [ 62.634930][ T4614] do_syscall_64+0xd2/0x200 [ 62.634963][ T4614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.635056][ T4614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.635087][ T4614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.635112][ T4614] RIP: 0033:0x7f50a8f4ebe9 [ 62.635131][ T4614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.635221][ T4614] RSP: 002b:00007f50a79b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.635244][ T4614] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4ebe9 [ 62.635258][ T4614] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000005 [ 62.635294][ T4614] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.635372][ T4614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.635386][ T4614] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 62.635446][ T4614] [ 62.830000][ T4612] loop2: detected capacity change from 0 to 1024 [ 63.027570][ T4632] loop0: detected capacity change from 0 to 512 [ 63.067365][ T4632] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.183851][ T4646] loop0: detected capacity change from 0 to 1024 [ 63.201918][ T4646] EXT4-fs: Ignoring removed nobh option [ 63.220616][ T4646] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.231566][ T4646] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.255926][ T4646] JBD2: no valid journal superblock found [ 63.261714][ T4646] EXT4-fs (loop0): Could not load journal inode [ 63.372646][ T4656] loop0: detected capacity change from 0 to 512 [ 63.409439][ T4656] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.461046][ T4669] loop3: detected capacity change from 0 to 512 [ 63.483188][ T4662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.405'. [ 63.497508][ T4669] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.619089][ T4688] loop4: detected capacity change from 0 to 1024 [ 63.630132][ T4688] EXT4-fs: Ignoring removed nobh option [ 63.642710][ T4688] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.653650][ T4688] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.713353][ T4688] JBD2: no valid journal superblock found [ 63.719216][ T4688] EXT4-fs (loop4): Could not load journal inode [ 63.734690][ T4691] loop2: detected capacity change from 0 to 1024 [ 64.343721][ T4718] loop1: detected capacity change from 0 to 512 [ 64.373827][ T4718] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.414074][ T4723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 64.495757][ T4728] loop0: detected capacity change from 0 to 1024 [ 64.507604][ T4728] EXT4-fs: Ignoring removed nobh option [ 64.516124][ T4728] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.527222][ T4728] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.537656][ T4728] JBD2: no valid journal superblock found [ 64.543667][ T4728] EXT4-fs (loop0): Could not load journal inode [ 64.604347][ T4736] loop1: detected capacity change from 0 to 1024 [ 64.695664][ T4746] FAULT_INJECTION: forcing a failure. [ 64.695664][ T4746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.708963][ T4746] CPU: 1 UID: 0 PID: 4746 Comm: syz.0.433 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 64.708991][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.709042][ T4746] Call Trace: [ 64.709051][ T4746] [ 64.709060][ T4746] __dump_stack+0x1d/0x30 [ 64.709087][ T4746] dump_stack_lvl+0xe8/0x140 [ 64.709111][ T4746] dump_stack+0x15/0x1b [ 64.709128][ T4746] should_fail_ex+0x265/0x280 [ 64.709150][ T4746] should_fail+0xb/0x20 [ 64.709225][ T4746] should_fail_usercopy+0x1a/0x20 [ 64.709249][ T4746] _copy_from_user+0x1c/0xb0 [ 64.709280][ T4746] io_probe+0x57/0x1d0 [ 64.709312][ T4746] ? __se_sys_io_uring_register+0xd7c/0xeb0 [ 64.709423][ T4746] __se_sys_io_uring_register+0xd87/0xeb0 [ 64.709459][ T4746] ? fput+0x8f/0xc0 [ 64.709546][ T4746] ? ksys_write+0x192/0x1a0 [ 64.709621][ T4746] __x64_sys_io_uring_register+0x55/0x70 [ 64.709707][ T4746] x64_sys_call+0x18a3/0x2ff0 [ 64.709731][ T4746] do_syscall_64+0xd2/0x200 [ 64.709821][ T4746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.709851][ T4746] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.709881][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.709907][ T4746] RIP: 0033:0x7f50a8f4ebe9 [ 64.709926][ T4746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.710023][ T4746] RSP: 002b:00007f50a79b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 64.710110][ T4746] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4ebe9 [ 64.710125][ T4746] RDX: 0000200000001280 RSI: 0000000000000008 RDI: 0000000000000003 [ 64.710141][ T4746] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.710156][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.710170][ T4746] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 64.710190][ T4746] [ 65.004144][ T4751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.434'. [ 65.032372][ T4757] loop3: detected capacity change from 0 to 512 [ 65.130155][ T4757] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.220638][ T4776] netlink: 'syz.1.438': attribute type 3 has an invalid length. [ 65.267644][ T4783] loop1: detected capacity change from 0 to 1024 [ 65.279789][ T4785] FAULT_INJECTION: forcing a failure. [ 65.279789][ T4785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.293000][ T4785] CPU: 1 UID: 0 PID: 4785 Comm: syz.4.449 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 65.293037][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.293051][ T4785] Call Trace: [ 65.293060][ T4785] [ 65.293069][ T4785] __dump_stack+0x1d/0x30 [ 65.293092][ T4785] dump_stack_lvl+0xe8/0x140 [ 65.293196][ T4785] dump_stack+0x15/0x1b [ 65.293217][ T4785] should_fail_ex+0x265/0x280 [ 65.293290][ T4785] should_fail+0xb/0x20 [ 65.293312][ T4785] should_fail_usercopy+0x1a/0x20 [ 65.293339][ T4785] _copy_to_user+0x20/0xa0 [ 65.293434][ T4785] rng_dev_read+0x3ef/0x740 [ 65.293461][ T4785] ? __pfx_rng_dev_read+0x10/0x10 [ 65.293482][ T4785] vfs_readv+0x3f8/0x690 [ 65.293551][ T4785] __x64_sys_preadv+0xfd/0x1c0 [ 65.293590][ T4785] x64_sys_call+0x282a/0x2ff0 [ 65.293655][ T4785] do_syscall_64+0xd2/0x200 [ 65.293689][ T4785] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.293718][ T4785] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.293742][ T4785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.293801][ T4785] RIP: 0033:0x7f35280cebe9 [ 65.293818][ T4785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.293838][ T4785] RSP: 002b:00007f3526b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 65.293863][ T4785] RAX: ffffffffffffffda RBX: 00007f35282f5fa0 RCX: 00007f35280cebe9 [ 65.293951][ T4785] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 65.293967][ T4785] RBP: 00007f3526b37090 R08: 0000000000000000 R09: 0000000000000000 [ 65.293982][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.293998][ T4785] R13: 00007f35282f6038 R14: 00007f35282f5fa0 R15: 00007fff2e3d7818 [ 65.294017][ T4785] [ 65.613438][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.451'. [ 65.859488][ T4807] loop1: detected capacity change from 0 to 1024 [ 65.901129][ T4807] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.455: Allocating blocks 449-513 which overlap fs metadata [ 65.917822][ T4806] EXT4-fs (loop1): pa ffff888107527310: logic 48, phys. 177, len 21 [ 65.925894][ T4806] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 65.958396][ T4811] loop1: detected capacity change from 0 to 512 [ 65.982273][ T4811] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.018144][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 66.018163][ T29] audit: type=1400 audit(1755301613.887:2683): avc: denied { read append } for pid=4814 comm="syz.1.457" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.048344][ T29] audit: type=1400 audit(1755301613.887:2684): avc: denied { open } for pid=4814 comm="syz.1.457" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.107608][ T29] audit: type=1400 audit(1755301613.977:2685): avc: denied { create } for pid=4814 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.128525][ T29] audit: type=1400 audit(1755301613.977:2686): avc: denied { write } for pid=4814 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.170278][ T29] audit: type=1400 audit(1755301614.017:2687): avc: denied { write } for pid=4816 comm="syz.3.459" name="raw6" dev="proc" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.193129][ T29] audit: type=1400 audit(1755301614.017:2688): avc: denied { read append } for pid=4816 comm="syz.3.459" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.217213][ T29] audit: type=1400 audit(1755301614.017:2689): avc: denied { open } for pid=4816 comm="syz.3.459" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.241095][ T29] audit: type=1400 audit(1755301614.017:2690): avc: denied { write } for pid=4816 comm="syz.3.459" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.264660][ T29] audit: type=1400 audit(1755301614.027:2691): avc: denied { append } for pid=4820 comm="syz.0.460" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.288295][ T29] audit: type=1400 audit(1755301614.037:2692): avc: denied { write } for pid=4822 comm="syz.1.461" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.316575][ T4826] FAULT_INJECTION: forcing a failure. [ 66.316575][ T4826] name failslab, interval 1, probability 0, space 0, times 0 [ 66.329317][ T4826] CPU: 1 UID: 0 PID: 4826 Comm: syz.0.462 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 66.329349][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.329365][ T4826] Call Trace: [ 66.329373][ T4826] [ 66.329450][ T4826] __dump_stack+0x1d/0x30 [ 66.329471][ T4826] dump_stack_lvl+0xe8/0x140 [ 66.329525][ T4826] dump_stack+0x15/0x1b [ 66.329546][ T4826] should_fail_ex+0x265/0x280 [ 66.329572][ T4826] ? nfnetlink_rcv+0xa04/0x1690 [ 66.329688][ T4826] should_failslab+0x8c/0xb0 [ 66.329712][ T4826] __kmalloc_cache_noprof+0x4c/0x320 [ 66.329743][ T4826] nfnetlink_rcv+0xa04/0x1690 [ 66.329926][ T4826] netlink_unicast+0x5c0/0x690 [ 66.329969][ T4826] netlink_sendmsg+0x58b/0x6b0 [ 66.329992][ T4826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.330016][ T4826] __sock_sendmsg+0x145/0x180 [ 66.330093][ T4826] ____sys_sendmsg+0x31e/0x4e0 [ 66.330195][ T4826] ___sys_sendmsg+0x17b/0x1d0 [ 66.330229][ T4826] __x64_sys_sendmsg+0xd4/0x160 [ 66.330258][ T4826] x64_sys_call+0x191e/0x2ff0 [ 66.330357][ T4826] do_syscall_64+0xd2/0x200 [ 66.330392][ T4826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.330423][ T4826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.330454][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.330534][ T4826] RIP: 0033:0x7f50a8f4ebe9 [ 66.330554][ T4826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.330576][ T4826] RSP: 002b:00007f50a79b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.330598][ T4826] RAX: ffffffffffffffda RBX: 00007f50a9175fa0 RCX: 00007f50a8f4ebe9 [ 66.330620][ T4826] RDX: 0000000020084044 RSI: 0000200000000280 RDI: 0000000000000003 [ 66.330635][ T4826] RBP: 00007f50a79b7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.330684][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.330695][ T4826] R13: 00007f50a9176038 R14: 00007f50a9175fa0 R15: 00007ffe52057448 [ 66.330713][ T4826] [ 66.648912][ T4836] loop1: detected capacity change from 0 to 1024 [ 66.685602][ T4836] EXT4-fs: Ignoring removed nobh option [ 66.705815][ T4836] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.716764][ T4836] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.751512][ T4836] JBD2: no valid journal superblock found [ 66.757337][ T4836] EXT4-fs (loop1): Could not load journal inode [ 66.808536][ T4852] netlink: 'syz.4.473': attribute type 3 has an invalid length. [ 66.846203][ T4854] blkio.reset_stats is deprecated [ 66.929506][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 66.941131][ T4859] FAULT_INJECTION: forcing a failure. [ 66.941131][ T4859] name failslab, interval 1, probability 0, space 0, times 0 [ 66.954078][ T4859] CPU: 1 UID: 0 PID: 4859 Comm: syz.4.476 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 66.954115][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.954132][ T4859] Call Trace: [ 66.954139][ T4859] [ 66.954149][ T4859] __dump_stack+0x1d/0x30 [ 66.954175][ T4859] dump_stack_lvl+0xe8/0x140 [ 66.954249][ T4859] dump_stack+0x15/0x1b [ 66.954271][ T4859] should_fail_ex+0x265/0x280 [ 66.954299][ T4859] should_failslab+0x8c/0xb0 [ 66.954332][ T4859] kmem_cache_alloc_node_noprof+0x57/0x320 [ 66.954389][ T4859] ? __alloc_skb+0x101/0x320 [ 66.954442][ T4859] __alloc_skb+0x101/0x320 [ 66.954479][ T4859] ? audit_log_start+0x365/0x6c0 [ 66.954524][ T4859] audit_log_start+0x380/0x6c0 [ 66.954633][ T4859] audit_seccomp+0x48/0x100 [ 66.954665][ T4859] ? __seccomp_filter+0x68c/0x10d0 [ 66.954693][ T4859] __seccomp_filter+0x69d/0x10d0 [ 66.954759][ T4859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.954791][ T4859] ? vfs_write+0x7e8/0x960 [ 66.954820][ T4859] __secure_computing+0x82/0x150 [ 66.954843][ T4859] syscall_trace_enter+0xcf/0x1e0 [ 66.954872][ T4859] do_syscall_64+0xac/0x200 [ 66.954981][ T4859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.955007][ T4859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.955039][ T4859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.955066][ T4859] RIP: 0033:0x7f35280cebe9 [ 66.955104][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.955127][ T4859] RSP: 002b:00007f3526b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 66.955208][ T4859] RAX: ffffffffffffffda RBX: 00007f35282f5fa0 RCX: 00007f35280cebe9 [ 66.955225][ T4859] RDX: 0000000000100004 RSI: 0000000000000407 RDI: 0000000000000007 [ 66.955240][ T4859] RBP: 00007f3526b37090 R08: 0000000000000000 R09: 0000000000000000 [ 66.955252][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.955263][ T4859] R13: 00007f35282f6038 R14: 00007f35282f5fa0 R15: 00007fff2e3d7818 [ 66.955281][ T4859] [ 67.256344][ T4868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.287988][ T4868] loop2: detected capacity change from 0 to 512 [ 67.316111][ T4868] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.374271][ T4868] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 67.403462][ T4877] loop3: detected capacity change from 0 to 1024 [ 67.420227][ T4878] loop4: detected capacity change from 0 to 1024 [ 67.642534][ T4893] loop2: detected capacity change from 0 to 1024 [ 67.659080][ T4893] EXT4-fs: Ignoring removed nobh option [ 67.675406][ T4893] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.686389][ T4893] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.726137][ T4893] JBD2: no valid journal superblock found [ 67.731905][ T4893] EXT4-fs (loop2): Could not load journal inode [ 67.811990][ T4901] syz.1.489 uses obsolete (PF_INET,SOCK_PACKET) [ 67.926868][ T4907] loop1: detected capacity change from 0 to 512 [ 67.969732][ T4907] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.230054][ T4923] IPv6: Can't replace route, no match found [ 68.417248][ T4933] loop4: detected capacity change from 0 to 1024 [ 68.424005][ T4933] EXT4-fs: Ignoring removed nobh option [ 68.433350][ T4933] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.444458][ T4933] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.463436][ T4935] loop3: detected capacity change from 0 to 1024 [ 68.472336][ T4933] JBD2: no valid journal superblock found [ 68.478173][ T4933] EXT4-fs (loop4): Could not load journal inode [ 68.529338][ T4939] netlink: 'syz.0.503': attribute type 3 has an invalid length. [ 68.668076][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 68.765528][ T4951] netlink: 96 bytes leftover after parsing attributes in process `syz.4.508'. [ 69.033249][ T4966] loop2: detected capacity change from 0 to 1024 [ 69.041632][ T4966] EXT4-fs: Ignoring removed nobh option [ 69.056088][ T4966] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.067065][ T4966] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.100218][ T4966] JBD2: no valid journal superblock found [ 69.106024][ T4966] EXT4-fs (loop2): Could not load journal inode [ 69.114626][ T4972] netlink: 72 bytes leftover after parsing attributes in process `syz.4.518'. [ 69.217284][ T4980] loop3: detected capacity change from 0 to 512 [ 69.229080][ T4980] msdos: Unknown parameter '' [ 69.258615][ T4986] loop2: detected capacity change from 0 to 1024 [ 69.279532][ T4986] EXT4-fs: inline encryption not supported [ 69.285529][ T4986] EXT4-fs: Ignoring removed i_version option [ 69.324118][ T4986] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.353072][ T4994] loop4: detected capacity change from 0 to 2048 [ 69.388563][ T4998] loop2: detected capacity change from 0 to 1024 [ 69.407050][ T3510] loop4: p2 p3 p7 [ 69.436214][ T4994] loop4: p2 p3 p7 [ 69.607755][ T5007] netlink: 96 bytes leftover after parsing attributes in process `syz.3.530'. [ 69.621033][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 69.636032][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 69.696543][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 69.919259][ T5029] netlink: 96 bytes leftover after parsing attributes in process `syz.4.539'. [ 70.350806][ T5064] loop2: detected capacity change from 0 to 1024 [ 70.400700][ T5064] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.544: Allocating blocks 449-513 which overlap fs metadata [ 70.424329][ T5064] EXT4-fs (loop2): pa ffff8881076b6230: logic 48, phys. 177, len 21 [ 70.432417][ T5064] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 70.662983][ T5083] netlink: 96 bytes leftover after parsing attributes in process `syz.2.551'. [ 70.701161][ T5085] FAULT_INJECTION: forcing a failure. [ 70.701161][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 70.713911][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.1.552 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 70.713946][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.713958][ T5085] Call Trace: [ 70.713964][ T5085] [ 70.713970][ T5085] __dump_stack+0x1d/0x30 [ 70.714022][ T5085] dump_stack_lvl+0xe8/0x140 [ 70.714103][ T5085] dump_stack+0x15/0x1b [ 70.714125][ T5085] should_fail_ex+0x265/0x280 [ 70.714152][ T5085] should_failslab+0x8c/0xb0 [ 70.714193][ T5085] kmem_cache_alloc_noprof+0x50/0x310 [ 70.714244][ T5085] ? security_inode_alloc+0x37/0x100 [ 70.714296][ T5085] security_inode_alloc+0x37/0x100 [ 70.714329][ T5085] inode_init_always_gfp+0x4b7/0x500 [ 70.714361][ T5085] ? __pfx_proc_alloc_inode+0x10/0x10 [ 70.714466][ T5085] alloc_inode+0x58/0x170 [ 70.714492][ T5085] new_inode+0x1d/0xe0 [ 70.714521][ T5085] proc_pid_make_inode+0x1f/0xd0 [ 70.714589][ T5085] proc_pident_instantiate+0x44/0x180 [ 70.714609][ T5085] proc_pident_lookup+0x115/0x1a0 [ 70.714634][ T5085] proc_tid_base_lookup+0x2b/0x40 [ 70.714663][ T5085] __lookup_slow+0x190/0x250 [ 70.714709][ T5085] lookup_slow+0x3c/0x60 [ 70.714744][ T5085] link_path_walk+0x753/0x900 [ 70.714858][ T5085] path_openat+0x1de/0x2170 [ 70.714882][ T5085] ? _parse_integer_limit+0x170/0x190 [ 70.714910][ T5085] do_filp_open+0x109/0x230 [ 70.714933][ T5085] ? __pfx_kfree_link+0x10/0x10 [ 70.714958][ T5085] do_sys_openat2+0xa6/0x110 [ 70.715066][ T5085] __x64_sys_openat+0xf2/0x120 [ 70.715101][ T5085] x64_sys_call+0x2e9c/0x2ff0 [ 70.715192][ T5085] do_syscall_64+0xd2/0x200 [ 70.715218][ T5085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.715318][ T5085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.715397][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.715417][ T5085] RIP: 0033:0x7fae8f47d550 [ 70.715436][ T5085] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 70.715509][ T5085] RSP: 002b:00007fae8dee6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 70.715614][ T5085] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fae8f47d550 [ 70.715630][ T5085] RDX: 0000000000000002 RSI: 00007fae8dee6fa0 RDI: 00000000ffffff9c [ 70.715643][ T5085] RBP: 00007fae8dee6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 70.715659][ T5085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 70.715674][ T5085] R13: 00007fae8f6a6038 R14: 00007fae8f6a5fa0 R15: 00007ffc4a902568 [ 70.715698][ T5085] [ 71.064205][ T5092] loop1: detected capacity change from 0 to 2048 [ 71.110978][ T3510] loop1: p2 p3 p7 [ 71.155609][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 71.155627][ T29] audit: type=1400 audit(1755301619.027:3362): avc: denied { cpu } for pid=5098 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.164247][ T5092] loop1: p2 p3 p7 [ 71.209117][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 71.330247][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 71.366322][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 71.377073][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 71.389903][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 71.421540][ T29] audit: type=1326 audit(1755301619.277:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.446120][ T29] audit: type=1326 audit(1755301619.277:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.470634][ T29] audit: type=1326 audit(1755301619.287:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.494237][ T29] audit: type=1326 audit(1755301619.287:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.517816][ T29] audit: type=1326 audit(1755301619.287:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.541361][ T29] audit: type=1326 audit(1755301619.287:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.564800][ T29] audit: type=1326 audit(1755301619.287:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.588380][ T29] audit: type=1326 audit(1755301619.287:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 71.611799][ T29] audit: type=1326 audit(1755301619.287:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5119 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35280cebe9 code=0x7ffc0000 [ 72.187784][ T5143] loop2: detected capacity change from 0 to 1024 [ 72.205728][ T5143] EXT4-fs mount: 56 callbacks suppressed [ 72.205746][ T5143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.252142][ T5143] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.575: Allocating blocks 449-513 which overlap fs metadata [ 72.276425][ T5148] loop3: detected capacity change from 0 to 1024 [ 72.283256][ T5148] EXT4-fs: Ignoring removed nobh option [ 72.295632][ T5148] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 72.306631][ T5148] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 72.321049][ T5143] EXT4-fs (loop2): pa ffff888107527230: logic 48, phys. 177, len 21 [ 72.329176][ T5143] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 72.358349][ T5148] JBD2: no valid journal superblock found [ 72.364485][ T5148] EXT4-fs (loop3): Could not load journal inode [ 72.371793][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.414226][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 72.581632][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 72.880721][ T5181] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.968855][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 73.000836][ T5187] loop2: detected capacity change from 0 to 1024 [ 73.031723][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.216624][ T5187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.277712][ T5193] loop0: detected capacity change from 0 to 512 [ 73.382331][ T5193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.428213][ T5193] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.469310][ T5193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 73.596335][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.661238][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 73.809681][ T5224] mmap: syz.4.602 (5224) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.824614][ T5229] loop0: detected capacity change from 0 to 1024 [ 73.852880][ T5229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.875124][ T5229] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.947328][ T5224] FAULT_INJECTION: forcing a failure. [ 73.947328][ T5224] name failslab, interval 1, probability 0, space 0, times 0 [ 73.960021][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz.4.602 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 73.960056][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.960069][ T5224] Call Trace: [ 73.960077][ T5224] [ 73.960085][ T5224] __dump_stack+0x1d/0x30 [ 73.960109][ T5224] dump_stack_lvl+0xe8/0x140 [ 73.960132][ T5224] dump_stack+0x15/0x1b [ 73.960152][ T5224] should_fail_ex+0x265/0x280 [ 73.960179][ T5224] should_failslab+0x8c/0xb0 [ 73.960208][ T5224] kmem_cache_alloc_noprof+0x50/0x310 [ 73.960235][ T5224] ? vm_area_dup+0x33/0x2c0 [ 73.960272][ T5224] vm_area_dup+0x33/0x2c0 [ 73.960308][ T5224] __split_vma+0xe9/0x650 [ 73.960341][ T5224] ? mas_find+0x5d5/0x700 [ 73.960373][ T5224] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 73.960402][ T5224] mmap_region+0x53f/0x1630 [ 73.960427][ T5224] ? queue_stack_map_push_elem+0x310/0x450 [ 73.960468][ T5224] ? __rcu_read_unlock+0x4f/0x70 [ 73.960518][ T5224] do_mmap+0x9b3/0xbe0 [ 73.960565][ T5224] __se_sys_remap_file_pages+0x55e/0x600 [ 73.960599][ T5224] ? fput+0x8f/0xc0 [ 73.960639][ T5224] __x64_sys_remap_file_pages+0x67/0x80 [ 73.960665][ T5224] x64_sys_call+0x23af/0x2ff0 [ 73.960692][ T5224] do_syscall_64+0xd2/0x200 [ 73.960726][ T5224] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.960757][ T5224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.960789][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.960816][ T5224] RIP: 0033:0x7f35280cebe9 [ 73.960831][ T5224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.960854][ T5224] RSP: 002b:00007f3526b37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 73.960878][ T5224] RAX: ffffffffffffffda RBX: 00007f35282f5fa0 RCX: 00007f35280cebe9 [ 73.960894][ T5224] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 73.960918][ T5224] RBP: 00007f3526b37090 R08: 0000000000000000 R09: 0000000000000000 [ 73.960931][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.960943][ T5224] R13: 00007f35282f6038 R14: 00007f35282f5fa0 R15: 00007fff2e3d7818 [ 73.960963][ T5224] [ 74.542883][ T5265] netlink: 'syz.2.615': attribute type 3 has an invalid length. [ 74.716015][ T5283] netlink: 'syz.4.620': attribute type 3 has an invalid length. [ 74.790686][ T5287] loop4: detected capacity change from 0 to 512 [ 74.814735][ T5287] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.827879][ T5287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.909818][ T5287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 4: invalid block bitmap [ 74.940107][ T5287] EXT4-fs (loop4): Remounting filesystem read-only [ 74.976314][ T5287] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.047982][ T5287] EXT4-fs (loop4): 1 truncate cleaned up [ 75.054183][ T5287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.118709][ T5303] loop2: detected capacity change from 0 to 2048 [ 75.168844][ T5303] loop2: p2 p3 p7 [ 75.235691][ T5310] loop2: detected capacity change from 0 to 1024 [ 75.259434][ T5310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.291511][ T5310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.779920][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.112171][ T5341] loop4: detected capacity change from 0 to 1024 [ 76.143438][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.426095][ T5341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.832313][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 76.832331][ T29] audit: type=1326 audit(1755301624.697:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 76.896829][ T29] audit: type=1326 audit(1755301624.697:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 76.920198][ T29] audit: type=1326 audit(1755301624.707:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 76.943612][ T29] audit: type=1326 audit(1755301624.707:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 76.967060][ T29] audit: type=1326 audit(1755301624.707:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 76.990587][ T29] audit: type=1326 audit(1755301624.707:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 77.013950][ T29] audit: type=1326 audit(1755301624.707:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 77.037301][ T29] audit: type=1326 audit(1755301624.707:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 77.060699][ T29] audit: type=1326 audit(1755301624.707:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 77.083939][ T29] audit: type=1326 audit(1755301624.707:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5352 comm="syz.2.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9b6febe9 code=0x7ffc0000 [ 77.320757][ T5367] loop4: detected capacity change from 0 to 1024 [ 77.335462][ T5367] EXT4-fs: Ignoring removed nobh option [ 77.356288][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.367410][ T5367] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.400228][ T5367] JBD2: no valid journal superblock found [ 77.406030][ T5367] EXT4-fs (loop4): Could not load journal inode [ 77.448404][ T5370] netlink: 'syz.3.651': attribute type 3 has an invalid length. [ 77.583682][ T5377] FAULT_INJECTION: forcing a failure. [ 77.583682][ T5377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.596981][ T5377] CPU: 0 UID: 0 PID: 5377 Comm: syz.4.654 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 77.597016][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.597028][ T5377] Call Trace: [ 77.597036][ T5377] [ 77.597043][ T5377] __dump_stack+0x1d/0x30 [ 77.597066][ T5377] dump_stack_lvl+0xe8/0x140 [ 77.597096][ T5377] dump_stack+0x15/0x1b [ 77.597185][ T5377] should_fail_ex+0x265/0x280 [ 77.597207][ T5377] should_fail+0xb/0x20 [ 77.597225][ T5377] should_fail_usercopy+0x1a/0x20 [ 77.597290][ T5377] _copy_from_user+0x1c/0xb0 [ 77.597320][ T5377] ___sys_sendmsg+0xc1/0x1d0 [ 77.597357][ T5377] __x64_sys_sendmsg+0xd4/0x160 [ 77.597383][ T5377] x64_sys_call+0x191e/0x2ff0 [ 77.597455][ T5377] do_syscall_64+0xd2/0x200 [ 77.597494][ T5377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.597600][ T5377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.597625][ T5377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.597725][ T5377] RIP: 0033:0x7f35280cebe9 [ 77.597740][ T5377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.597758][ T5377] RSP: 002b:00007f3526b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.597777][ T5377] RAX: ffffffffffffffda RBX: 00007f35282f5fa0 RCX: 00007f35280cebe9 [ 77.597789][ T5377] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 77.597801][ T5377] RBP: 00007f3526b37090 R08: 0000000000000000 R09: 0000000000000000 [ 77.597914][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.597931][ T5377] R13: 00007f35282f6038 R14: 00007f35282f5fa0 R15: 00007fff2e3d7818 [ 77.597951][ T5377] [ 77.826005][ T5378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.655'. [ 77.939320][ T5403] loop2: detected capacity change from 0 to 1024 [ 77.985714][ T5403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.018961][ T5403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.031680][ T5410] loop4: detected capacity change from 0 to 1024 [ 78.039984][ T5410] EXT4-fs: Ignoring removed nobh option [ 78.068815][ T5417] loop0: detected capacity change from 0 to 512 [ 78.076270][ T5410] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.087196][ T5410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.101534][ T5417] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.117064][ T5410] JBD2: no valid journal superblock found [ 78.122985][ T5410] EXT4-fs (loop4): Could not load journal inode [ 78.130183][ T5417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 4: invalid block bitmap [ 78.150246][ T5417] EXT4-fs (loop0): Remounting filesystem read-only [ 78.157091][ T5417] EXT4-fs (loop0): 1 truncate cleaned up [ 78.163110][ T5417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.212506][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.323159][ T5421] loop4: detected capacity change from 0 to 256 [ 78.332395][ T5421] msdos: Unknown parameter 'xœìܱnÓPà“Ð6.S7$’%¦ [ 78.332395][ T5421] x‚"T$„%$P˜¨Ô²Ä©^Ü.ícð8< €:eAFÅIMCˆˆ]Úï[rœß79wȧóþÞÇÉþ§âÃ×;Ÿ#I1܉˜b+†1w' [ 78.439673][ T5432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.672'. [ 78.580157][ T5449] loop0: detected capacity change from 0 to 1024 [ 78.605815][ T5449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.618979][ T5449] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.691582][ T5458] loop1: detected capacity change from 0 to 512 [ 78.700195][ T5458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.725194][ T5458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 4: invalid block bitmap [ 78.739869][ T5458] EXT4-fs (loop1): Remounting filesystem read-only [ 78.746656][ T5458] EXT4-fs (loop1): 1 truncate cleaned up [ 78.752839][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.779660][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.986252][ T5469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 79.492678][ T5496] ================================================================== [ 79.500801][ T5496] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 79.507587][ T5496] [ 79.509913][ T5496] write to 0xffff88810462ee98 of 8 bytes by task 5495 on cpu 0: [ 79.517545][ T5496] vms_clear_ptes+0x18f/0x2d0 [ 79.522237][ T5496] mmap_region+0x759/0x1630 [ 79.526756][ T5496] do_mmap+0x9b3/0xbe0 [ 79.530845][ T5496] vm_mmap_pgoff+0x17a/0x2e0 [ 79.535456][ T5496] ksys_mmap_pgoff+0x2d0/0x310 [ 79.540240][ T5496] x64_sys_call+0x14a3/0x2ff0 [ 79.544925][ T5496] do_syscall_64+0xd2/0x200 [ 79.549451][ T5496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.555351][ T5496] [ 79.557682][ T5496] read to 0xffff88810462ee98 of 8 bytes by task 5496 on cpu 1: [ 79.565227][ T5496] getrusage+0xa52/0xbb0 [ 79.569495][ T5496] io_sq_thread+0x5dd/0x1190 [ 79.574115][ T5496] ret_from_fork+0xda/0x150 [ 79.578624][ T5496] ret_from_fork_asm+0x1a/0x30 [ 79.583396][ T5496] [ 79.585727][ T5496] value changed: 0x00000000000014ec -> 0x00000000000016d6 [ 79.592833][ T5496] [ 79.595159][ T5496] Reported by Kernel Concurrency Sanitizer on: [ 79.601309][ T5496] CPU: 1 UID: 0 PID: 5496 Comm: iou-sqp-5495 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 79.613896][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.623953][ T5496] ================================================================== [ 79.659512][ T5495] loop2: detected capacity change from 0 to 2048 [ 79.709325][ T3510] loop2: p2 p3 p7 [ 79.723676][ T5495] loop2: p2 p3 p7 [ 79.783164][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 79.783240][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 79.798411][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 79.818121][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 79.819334][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 79.829829][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory