last executing test programs: 14.343797181s ago: executing program 2 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000200a1333b6c69c057ca0000001000280012800b00010062726964676502000700028005002600000000000c002e98db0fcfdfd2dfb1ddcb6ee25f9db5da72e9f69c95518ff5726c0000000000000200b649e45fe9e9712ed07049e9d694139f3ca4851cb98f06"], 0x48}}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0xd}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xf373, 0x2000213, r4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r9, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509fa010073797a32000000000800410073697700140033006c6f00000000000000000000000000004855c303f0919b20999f67f1a55cd59a672258dc47d6153809526ff402353a75c869cc981e7e5191eb72071571eab6d85cfe9cbfa5771830dce4fd728772ab39c36953c0f9bf2c6e21e8010000001050aea15c3983335f1367a7a92881e69ebe9aae019b02cacdb3fbce9fd1389eb66ad8311018ba73c6da010d154672aa7bfb651e5de5c9698cce161c8509e005b2049a838a643432fe980b32a5d9bdfb09a03d9558db70da356901793a951a1ddd92aded0f620cddb33543fb26243c8032d16c1d9512a8b823ec7e1e8be63d6a37c06d4483c8655ce51471afac5e9414caeee697e883147c309fdc13dbfa74b3b4f9b07d7c85035f76bf65dcf0a33594e752f6181d520f1fd8a446d68b878b4923d87071e6c2d4e388938135c06f22d877801c55fc405d9d7b355092d06559fae0edccf6dcdea938dbd51e44521186b6f4f4392b952f78b29e435326aac5e077f41492033fe5475887f3efc8fdd18458b58480993140ffa94e72f084fddf2d89bba9cd86db221ae7accd13037f862aced57933375927836cca"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r12, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r13, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r14, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 14.168572148s ago: executing program 2 (id=490): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x800000000000}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) ioprio_set$uid(0x0, r3, 0x2000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', r4, 0x7, 0x0, 0x5, 0x3, {{0x20, 0x4, 0x2, 0xf, 0x80, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x83, 0xb, "404718012ab639ea8d"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x44, [@dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_addr={0x44, 0x34, 0xb7, 0x1, 0x4, [{@loopback, 0x3}, {@rand_addr=0x64010102, 0x6}, {@broadcast, 0x4}, {@multicast2, 0x7}, {@loopback, 0xfffffffe}, {@rand_addr=0x64010101, 0x8}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x45, 0x0, 0x9, [0xbf, 0x3, 0xdc, 0x5]}, @rr={0x7, 0x7, 0x2f, [@loopback]}]}}}}}) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 14.159772189s ago: executing program 2 (id=492): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newpolicy={0xd4, 0x13, 0x800, 0x70bd25, 0x25dfdbfb, {{@in=@multicast2, @in6=@mcast2, 0x4e22, 0x6, 0x4e23, 0x1, 0xa, 0x80, 0xd0, 0xa8, r7, 0xffffffffffffffff}, {0x8, 0x1, 0x0, 0x8, 0x40000, 0xd, 0x5, 0x6}, {0x366, 0x4, 0x10000, 0x7f}, 0x5, 0x0, 0x1, 0x0, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x44b6}, @coaddr={0x14, 0xe, @in=@private=0xa010102}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.911319454s ago: executing program 2 (id=494): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) sendmmsg(0xffffffffffffffff, &(0x7f0000006d40), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 13.762563359s ago: executing program 2 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmmsg$unix(r2, &(0x7f0000001000)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000580)="498a8fd95fdc7f0efc42a940d3fa9dc5a857e972e15423249ebeda4a70bed235e7a3240af8609ff029d633a85e6bb324c4803d3ea1ec6441aee8f9f46589bd0816cdceea15e470d461e49b82e8950be0cf0e76489710004e11c0c91aa1de198fa7acd19291f2d109e2f753c61bc988bec2c438134210cf81a21954728004c721c2588e88915864fe3759d5a3837add54b6f7b1a13257f9982a68367b572fb0ccc3677ad76922d0c6af37f8cace5ecd4ec484ccf1b8724c849cfbe8aa7410e4991e54b41f7de9882222d1b7b102ef0d68c47a3eca91738c413e43a6a42ba487558e883eeb59bcdec69f306b1d01508c616054aa086a", 0xf5}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x4018000}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="a8572eb3a676f0012faaef87e146c55a4cb17316524d52a3b81d9cc8354204d02d07d72a8ae55af11b810913a37e39900799ce6d9522aa5ee4a5ff4e1247142d5f81c3666ea019c9a228bb2af7f01c64b32211f4a5bf6b32e95c6cf0189132111d80e7c86cc37197b4e462218727afb9b951f8687ce1b96b88328226", 0x7c}, {&(0x7f0000000d40)="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", 0xfd}, {&(0x7f0000000780)="a5f05ef0b4b2fc6551fb25bf94c5a9c705c742ade3e920666042c773b90b27449880e4b724dda1", 0x27}, {&(0x7f0000000980)="6adece4866bcdc46cd9f26b7dc7132e316fa268cecff8962ccdbb2f6100e5e85bc35d7830b31c256f4c06f4f8f3fe1605b42", 0x32}, {&(0x7f0000000e40)="12e459745a4f7b44fb039f7ffd696a1c0fe5219df56e4686b5417051272b1129a6cca8e29ce41f51ee", 0x29}], 0x5, &(0x7f0000000f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r1]}}, @rights={{0x34, 0x1, 0x1, [r4, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r2, r5]}}], 0x58, 0x20000000}}], 0x3, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x320}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r9}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc1400000011000100000000000000006d65aee531053faedfb1d0000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 12.73984955s ago: executing program 2 (id=507): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r0, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7ff, @private1, 0xeb3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x40a, 0x600}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x24008854) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000340), &(0x7f0000000300)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001cc0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000100)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 1.312449959s ago: executing program 4 (id=680): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1030c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000280)="74f2bde1f0d953d77d8be848580953d1d4421d4c6be2da13d8200c501698303e30cae2318f89a3d772120496211f7312dfea3792a351a2e0abbc8b5c4adcafebc8f06b4961f153d798f3b704c7d5fa850efc3b8b1c3ba8da616845", 0x5b}, {&(0x7f0000000340)="e73577defd686f518f700ef33732d58aee9ef6229751c0d6d72f8749ec24ba2078a6eba4262305342c225266843d291e9e3ee466c32e01bbda9d935a8473646db7d5f25b65358c596d581357cf269d2f4db0b9d4b0b93df7377ad1818f5f3f559d704aebb763663bb5e12ae28aab7592c89b66681b4bf10f69d0ac69b91ade167dfa565c1a2b718c284cf809b8c764d2219a6a07da3f65cc4bdb40afaa9bb965707389cbe479bef21d90ea2d3b2bb9fb832c0de08a1f269d8d85981050bdd5b3be96cdec3c99bd73fa29eae4266f17938e42ac1212867305c5e342a601cf0d7a6f9d057ca2623e258c2f544d3b4c0a0dfcb56e20", 0xf4}, {&(0x7f0000000e40)="ce5779d4e0351dbd6119b013606f81e452b7264385d39b7e21de694e0b565f8cf25af2afbd82e24dc75cb3d8d7b41b782ce7478196f343ffb0bffc7e6546218312bff778c308293278cf0421c0de0afbbd72ce888233fd6dda5bf22fd3ebb554484f2e0bc388c156cbaa6ce049a9cb626a55ef8062927bde79795b2c2db32b9643cc894729fd81cf32571d96bb979d278bacee8be4ece38b11ea1eaa139b3cc5918527fef5e6835fa93eec9ee14807bbe022c075d3dac32234e8067977c8642f9d3be0d780cf7108667fd37ba740b5654e889a746e9f723654b39f3ec089f790a980d42d898d21c974f3dbb31c0745bd92bb390e74b528a5e75bcd5ffec6dd87cfbf43e8097f356a216971a82b01d829b8a5d505bc288d261032eef330acda64be6590464fd5e934af5f0e34303ce6e830cacc05b454a402c0da3c9d1069586d1a0d92030cf33d1fae9b87edeaaea712d7ea58ea30c7d0fe2cfedd015d4cfa46a497d436ce6ff1f15510d3d12d3b5a07e4b85e2242f65e4c4569a08e779a69a13a9adc396d874d9b561f64005251b85fc2651ef0cb66269f6e713c8359e9985901293f480f57515042e6dd790f48279532ea987fcd1c84b3ac59f7c04f9b86fef35bf34205331a19bfa533f230da2ea0e47f66c3612b4503d001e53b96f332c5cf1e35042e887d88b44e09fc59ebfb84b8f679dde651f2f3eb0f5de28e5b6d11096efbe8b8106f8e165ae498447784d0a460aa7124343930ee4d7652324b2775b63d3ee6557afe40e5a7ffdb2fca6a4e5ee850746dbeed7dc2f10c2146b7afecae140d730684611e715ddfb83f72a87dfa4a62df3e59fd4b1c630aa7d53913756a51be391f4d853118dd113e70df304dfecadb590a6aee13cfbf5fde278cc84d61d7681ca5254326a8f942784293139688811b722cb086fd5a529eca4674d5cb1fb9dee2f8f4989f6e7293fd6163e556cbd0b1c17c0cc52bac3416b065c59d6fe561f65c078f734f5d1939406a1afef054e2db56d5801193921bd160a55c71726c6ec68fc0e2fb785bee97a1d2341abd71bdaa1af012138e72d2f81c9795b08c09e0f56ec46ab09b32d8ae3f2b95174e33cae4cfc37c32a4771dd35c60a8a6220b85382a41953d9fafc1c81e92e7b075fe51b2ac85c7b052f385e6c064275a13cf3216d9028e8861709ea528298c7542a8e72282292e2949793ebddd7f1dfa783d3d336b5e73c31eb48d0b36a8ae62cb1b40567b62ac74966307d142eb4b43efb28e102a2ef39e9e73def3901b0e74f9172edc1c7149270401e59652e29b012ea31b8528656acf3499e1408879ee87acb577a40eaac9f3c59d4c74f0495ca989eea00680316efe1a3c800543ecbfcd82284383385266dbb8b9fea7b1dbd4bc388b301b49dd221b67b2f71b24b25dbc34d78b5e92f6e78269e99771f18b6b8d1ce7b106b972416255754f4c0864bf2be277a25fc28b491d5df42998fddab2940aa9270ce902dd95f249aa0f04378f488ba17249995686990ea195fc5f11c4ad80943456e135035065a1fd8140ab5fab130a4810fd2af4817470ce803484979d7eb1a3d0db9299bd3fa35ed7015504ed9fd8e7", 0x472}], 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r7 = perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3", @ANYRES8=0x0, @ANYRES16, @ANYBLOB="cf2ddd9ac53dfc2d61dea89bc5b1082bc72d1cc2e5c586321420d921627f630a2471904e58b58ed3f34a78201323d76f15370c605529b4dd70bab6744e6a6e"], 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) 1.181957652s ago: executing program 4 (id=684): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @random="86fcaaa67bbe"}, 0x14) 1.09996037s ago: executing program 4 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000d00950000000000723258a9d71142347d6020db2317e709e900332a1d0f45d8aaaaf84f27dd6fa5567d0a074d65a6a4589e431ffbaac5373b2e94073e2bc0c916b9eea590770ab4b9117ec2c9a3c0024963f6f24f28b2c9438be7305a60499b160834f04bfef3f5abdda3dea0ecc292506eb97fc477083e637b82b9bb0c7fa99bc93a45fea4ac87004e77d77e6e6ef496167ef1c494793f6bfefcbb88b27089081030932a9dbc545323b92ea3cd5e95d9c53b9e7ca37217bac48df0f0ca7d4da0cefdf8e73949aeb135e72dd7520bc68b14694a86a17d8e221805271e33450ab5be6d92a3e53843ba19f0fae0bfdf146b04e9c6c57e0949edb0ad3f9aad121f2dead30aae1237ed4c3f337f8ea0ad5c1909517a8fc90a9f65c449cf7e45610514485e579410ef4c74ba70fc8ad96d173e7e03caff8d2143b53fbcef9005c78bfb59242d0a5403dec2f9c6b4c25ed79c381c222f5c9499a26c568c44d98dcde8f2564e19b0cc64970c83862d42d94d825806171429230acf7da2584439ff19e02339d52730f2f0a456e00805298e8ce29a2673a2b9f7574ca2fe2604c2a8db18dfd746799ef1c94d45407b19ae8c28b4e2f0d8a6c5b4cdfe776588def4ff1667cda9d22488cc5e0ee843c9ff793b1f755460b1e20352300a68f7ef5fcc7c048e68e17eda7b08c775ba6821d167ee9b588fa77746956d4cd87359d1fb17e18077a3bd75a6ce52fff7aae7173a31aaf7c6477078c1281c56411c67e05c7847c4d893a0bc8a5111d9de357da3123fedfd5a10a112ff1e4e2baa4ab05c34"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) poll(&(0x7f0000000a00)=[{r3, 0x2484}], 0x1, 0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000000700)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f0000000800)=""/111, 0x6f}], 0x6, &(0x7f0000000400)=""/51, 0x33}, 0x120) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000009440)=0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x44, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x20, 0x19, "e20807ffaff8d89ebe4c8eb753937dbe54561072a13805b0ccbb06bf"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20006010) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r14 = signalfd4(r4, &(0x7f0000000340)={[0x2c]}, 0x8, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r14, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x46}, 0xc, &(0x7f0000000940)={&(0x7f0000000d80)=ANY=[@ANYBLOB="32ce48ded5ce2ffbd90b4775ab148c0000008780a3c5087df1006c487369b9873286b60c470b9ab4812a753fab11dc4e6dc0393fb13140442f26a83884fc8e2f351723754ade8fba11f39774a194b754e057ef16ee6ef248a83ebd4737cc6a4c324ec1ba29761dbf92af1dd92c5798f36188ac822bebda17fa364961844308e00d825385682e3b7776e9b530a481399859122c91bd93246c0bc243b4a92e3c747c", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 860.005174ms ago: executing program 4 (id=690): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xa5, 0x0, &(0x7f0000000080)={0x3, 0x11, 0x1b, 0x6, 0xe}, 0x8, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x0}) 841.792366ms ago: executing program 3 (id=692): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1030c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000280)="74f2bde1f0d953d77d8be848580953d1d4421d4c6be2da13d8200c501698303e30cae2318f89a3d772120496211f7312dfea3792a351a2e0abbc8b5c4adcafebc8f06b4961f153d798f3b704c7d5fa850efc3b8b1c3ba8da616845", 0x5b}, {&(0x7f0000000340)="e73577defd686f518f700ef33732d58aee9ef6229751c0d6d72f8749ec24ba2078a6eba4262305342c225266843d291e9e3ee466c32e01bbda9d935a8473646db7d5f25b65358c596d581357cf269d2f4db0b9d4b0b93df7377ad1818f5f3f559d704aebb763663bb5e12ae28aab7592c89b66681b4bf10f69d0ac69b91ade167dfa565c1a2b718c284cf809b8c764d2219a6a07da3f65cc4bdb40afaa9bb965707389cbe479bef21d90ea2d3b2bb9fb832c0de08a1f269d8d85981050bdd5b3be96cdec3c99bd73fa29eae4266f17938e42ac1212867305c5e342a601cf0d7a6f9d057ca2623e258c2f544d3b4c0a0dfcb56e20", 0xf4}, {&(0x7f0000000e40)="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", 0x472}], 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r7 = perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3", @ANYRES8=0x0, @ANYRES16, @ANYBLOB="cf2ddd9ac53dfc2d61dea89bc5b1082bc72d1cc2e5c586321420d921627f630a2471904e58b58ed3f34a78201323d76f15370c605529b4dd70bab6744e6a6e"], 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) 801.34882ms ago: executing program 4 (id=694): r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x953b, @remote, 0x8}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="7c901f3103d27e1153c2ef1d24dea5e46587bc9ba60d5fef7f5bbccc4435309a25773bff4e7b41dce740cc91fbddb779c1016143236201f30fb13fdcb2bebae2d5b8263011583f67e87731e314061d35d7d9820c3d5928f02b2fe07ab9ac6a2426f645d21a1d05e488ef95b2caa58151ce6a2a6cf0ac937df6313999a9050e5df818f2c64c469b05d15d1ef2518241bd1876461b920d34bd", 0x98}, {&(0x7f0000000140)="ae832a3394f5572a539a2f7d09e39a1182eee5b059e945afb25574ff03d58dcc91a51cede1cb7cc1d34438c72f2761fb331ff1dc41c32bf166f65d2a6989f217ae6bf8329e82fe3524502f504688880a86b7598f2cdfdc81b5048cf06e4c1b169b96b10bd57f07dab2bad3924fe5369df98bca5efef5577ca8824940955f14f47476334f544c039b790f860a3f881de34257842ef668ee48fd99e055b22dfd3e865678e95d30b20120e8f89267d77c72419c94cf27a5afc41f432099d6c0a42007dedd19fce8387f16c31494002eac0654304997d401166a2485a1db45", 0xdd}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000240)="0d537e650262f35595a8b3478bb2d427056488e898d6f12dc35c8fcaea7a66ce166c4de6f4ec1c50c45106ee35fe6a89dc8a86b4eb74", 0x36}, {&(0x7f00000002c0)="5420e44b1ffd699cb157ea8befcb16cd40797303dcb976b0de2972d39b4194ca017a6b152a689a9abe8e72cae25db29809b80a05e151a8f83c11f8ce138a44172b00a413a1f479b275a54a134b07c6a9eadf440d907a5668643e24abb618b6d03d54857db7b92777d5b6b4", 0x6b}], 0x5}}], 0x1, 0x4800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x4}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 780.332842ms ago: executing program 3 (id=698): mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x68040200) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x278, 0x13, 0x200, 0x70bd2b, 0x9, {0x29, 0x6, 0x9, 0xff, {0x4e20, 0x4e24, [0x400, 0x7, 0x200, 0x8], [0x8, 0xa290, 0x7fff, 0x1], r5, [0x5, 0x7f]}, 0x5, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "2dc59d24613808fbc6f632562ce71d2d1595a31e0723f7834b39d54e2d9ec0a582335247eaec3c1f92b2334e0ad164a80b10e6b17127b9b8364302a148e7d0b047f0914936bbd3a9b9c32ab8ff8441835798aea4690cd22fc99b297e0212ecc78995eba472fe03e0a73b2fb070d52f76930e902333b0e60d5e721af3c6aa785c9bc9a6eb89f7bb916ee0a94991b0e8ce2cb9a2396a0329faeac4cc7837ae9645f4d44f6a3356c58559e7e89d48c962b202b67cf76496306290c3677e8050"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "03ac9a2ba5bfeecb36b77a31595366a1dd8eab1b1ef3a06be9205396e3a348dd8a8d8503254d27370404b348d5bb605f3ecfdecc48480a37ae745c342506c0e0403b2c1d3ae3fe05c759f14a5da66749b65817c9aedbf95156cc7f9013860a9a1f4009d64b60678fb910f683cb140855de29c0ea0103bb76a57d95"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "6cfc903c10b58be78f784a672a5ddb1c89d41ab8c4d5c4242512f7282bc864fdd48d10a58684bf978af13fb74379ef77609a011ff0408de28beb7f77d4d4bcaf22e6cb46553a539818425f3d4cc1b3124d60d9492adf2a39a4021613f0925f3c800489d8e2522f9e7df4620ed439b87544ce0f7e7c828373232ecb311781d0389c2f98b8a826e626bfc119bf26482d5a9ed40ab7dcf88c88d5e569c0c7987d90fc7393ef64b2306cb037fe6dbf85e6a9ed9d650d77a8e21deee9a1144ebed0b129c0ab173990f31fc56cc64eccae7f02dfea5305e4b49785e7283897b09a9343b5"}]}, 0x278}, 0x1, 0x0, 0x0, 0x800}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) brk(0x400000ffc000) r7 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r7, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = gettid() tkill(r10, 0x11) socket$nl_route(0x10, 0x3, 0x0) 692.561571ms ago: executing program 4 (id=699): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1cc}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 692.281151ms ago: executing program 0 (id=700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) ioprio_get$pid(0x2, 0x0) (fail_nth: 11) 562.264824ms ago: executing program 0 (id=701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) poll(&(0x7f0000000a00)=[{r3, 0x2484}], 0x1, 0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f0000000700)={&(0x7f0000000100)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f0000000800)=""/111, 0x6f}], 0x6, &(0x7f0000000400)=""/51, 0x33}, 0x120) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000009440)=0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x44, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x20, 0x19, "e20807ffaff8d89ebe4c8eb753937dbe54561072a13805b0ccbb06bf"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20006010) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r14 = signalfd4(r4, &(0x7f0000000340)={[0x2c]}, 0x8, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r14, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x46}, 0xc, &(0x7f0000000940)={&(0x7f0000000d80)=ANY=[@ANYBLOB="32ce48ded5ce2ffbd90b4775ab148c0000008780a3c5087df1006c487369b9873286b60c470b9ab4812a753fab11dc4e6dc0393fb13140442f26a83884fc8e2f351723754ade8fba11f39774a194b754e057ef16ee6ef248a83ebd4737cc6a4c324ec1ba29761dbf92af1dd92c5798f36188ac822bebda17fa364961844308e00d825385682e3b7776e9b530a481399859122c91bd93246c0bc243b4a92e3c747c", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 561.486234ms ago: executing program 1 (id=702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xde, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "203994", 0xa8, 0x2f, 0x1, @loopback, @local, {[@routing={0x2e, 0x2, 0x1, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x1}], "e6101cfee4230f7d2bdf9d5fb3c81423f0498fcc650a4c24506907c0ae1073e4bba5cbdfbca2144b3c13277fae70a72d18ae8a61c785bbe68de9ea50018e96fd86acacbdc8ca24a8e1416121b932134d00f8a723f840b7fd04c2e9568bd9815292fd8429f46bf6fe7a548b0c199a78206ff2b8392f193d87bf721b7c15627cf5005768ae8166258d"}}}}}, 0x0) 470.030293ms ago: executing program 1 (id=703): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c) 388.534492ms ago: executing program 1 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) creat(0x0, 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) 387.940821ms ago: executing program 0 (id=705): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xa5, 0x0, &(0x7f0000000080)={0x3, 0x11, 0x1b, 0x6, 0xe}, 0x8, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x0}) 383.836031ms ago: executing program 1 (id=706): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 358.447144ms ago: executing program 0 (id=707): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @random="86fcaaa67bbe"}, 0x14) 342.490576ms ago: executing program 1 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) 315.302839ms ago: executing program 0 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="b9ff030cff9e14f086f80000000095619f22", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 283.157382ms ago: executing program 1 (id=710): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x10c}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 180.423222ms ago: executing program 3 (id=711): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49c, &(0x7f0000000200)={0x0, 0x79af, 0x400, 0x4, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x104, &(0x7f0000001040)=0xdfb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095", @ANYBLOB="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", @ANYBLOB="ae78a47df710a8e680b4e12ef887219749c80f3a0b5106b40f0f7b07aed70b6f3e3fd49622870dfec2bf12b19f3cde38f9baa34e458fe3", @ANYRESOCT=r2, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001000)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffff7b, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 169.026703ms ago: executing program 0 (id=712): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r1, 0x200000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x8880) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x2, 0x40200003, 0x0, 0x6, 0x7}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000000100)=""/44, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x40, 0x112) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000cc0)={[{@noblock_validity}, {@resuid}, {@mblk_io_submit}, {@noload}, {@dioread_nolock}, {@grpjquota}, {@acl}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@grpjquota}, {@quota}, {@data_err_ignore}], [{@dont_measure}, {@obj_role}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'barrier'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x66, 0x65, 0x30, 0x31, 0x37, 0x65, 0x39], 0x2d, [0x34, 0x38, 0x33, 0x35], 0x2d, [0x34, 0x20, 0x66, 0x31], 0x2d, [0x32, 0x64, 0x32, 0x34], 0x2d, [0x30, 0x30, 0x78af27eb55855151, 0x36, 0x35, 0x39, 0x0, 0x37]}}}]}, 0xfd, 0x485, &(0x7f0000000800)="$eJzs3MtvVNUfAPDvnU5Ly+PX/hAfIGgVjcRHS8tDFm40mrjQaKILjKvaFoIM1NCaCCGKLjDGhSG6Ny5N/Atc6caoKxO3ujckxrABXY05M/eW6TADbZlhwPl8kgvn3HuHc7733DNz7jkzBNC3xtMfWcTmiPgtIkYjotx8wnj9ryuXzs7+fensbBbV6mt/ZellcfnS2dn8n6htyab6jmo1z29oUe75NyNmKpX5U3l+cunEO5OLp888dezEzNH5o/Mnpw8d2r9v19DB6QMdiTPFdXnH+ws7t7/4xoWXZw9feOunb1J9N+fHizg6abx+dVt6tNOF9diWhnRW7mFFWJMteX8frPX/0RiIkeVjo/HCRz2tHNBV1Wq12urzOXeuCvyHZdHrGgC9UXzQp+ffYrtFQ4/bwp/P1h+AUtxX8q1+pByl/JzBpufbThqOiMPn/vkybdGleQgAgEbfpfHPk63Gf6W4p+G8/+VrKGMR8f+I2BoRd0XEtoi4O6J27r0RcV+bcrI2+5tXSK4d/5Qurju4VUjjv2fyta2V479i9BdjA3luSy3+wezIscr83vya7InBDSk/teIlK33//K+fNe/7NJ9mH28Y/6UtlV+MBfN6XCw3TdDNzSzNdCT4FP+HETvKreLPltcBU9ttj4gd6yzj2ONf72x37Nr40zVujP86OrDOVP0q4rF6+5+LpvgLWdv1yamnD04fmByOyvzeyeKuuNbPv5x/tV35N27/7krtv7Hl/V+PPz0jZsMRi6fPHK+t1y6uvYzzv388267/b1vn/T+UvV5LD+X73ptZWjo1FTGUvZSyIyv2T199bZEvzk/x79nduv9vrT+e1a7E/RGRbuJdEfFARDyYt91DEfFwROy+Tvw/PvfI2+2OtW//68zKd1CKf65V+48st9hYSl1t/7UnBo7/8G278qurav/9tdSefM9q3v9WW8GbungAAABwhyjVvgOflSaW06XSxET9O/zbYmOpsrC49MSRhXdPztW/Kz8Wg6Vipmu0YT50Kp8bLvLTTfl9+bzxFwMjtfzE7EJlrtfBQ5/b1Kb/J38M9Lp2QNf5vRb0L/0f+pf+D/1L/4f+pf9DnxpqvfuDW10PoCfW/vk/3JV6ALee8T/0L/0f+pf+D32p7W/jSzf1k/87NVG+ParRMjFye1SjSESp60Vsihuf8/lgpwp95ZN6l+hE5Yvu1YmKlVf9n1msM7Gh5aEevikBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00L8BAAD//4hb4Hg=") 36.475446ms ago: executing program 3 (id=713): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xde, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "203994", 0xa8, 0x2f, 0x1, @loopback, @local, {[@routing={0x2e, 0x2, 0x1, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x1}], "e6101cfee4230f7d2bdf9d5fb3c81423f0498fcc650a4c24506907c0ae1073e4bba5cbdfbca2144b3c13277fae70a72d18ae8a61c785bbe68de9ea50018e96fd86acacbdc8ca24a8e1416121b932134d00f8a723f840b7fd04c2e9568bd9815292fd8429f46bf6fe7a548b0c199a78206ff2b8392f193d87bf721b7c15627cf5005768ae8166258d"}}}}}, 0x0) 17.422008ms ago: executing program 3 (id=714): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x408103, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c) 0s ago: executing program 3 (id=715): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2496], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x1ffffd, 0x200013, 0x2, 0x8, 0x526, 0x6}) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x1ffffd, 0x200013, 0x2, 0x8, 0x526, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) dup(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}]}) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0xa8296f9a18bf3a5d) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000003030101000000000000f7ca000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000003030101000000000000f7ca000000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) fchdir(r0) (async) fchdir(r0) kernel console output (not intermixed with test programs): dge0: port 1(bridge_slave_0) entered forwarding state [ 31.435681][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.442863][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.457882][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.471117][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.483871][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.500960][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.512565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.519648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.535607][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.542727][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.679179][ T3310] veth0_vlan: entered promiscuous mode [ 31.701963][ T3310] veth1_vlan: entered promiscuous mode [ 31.713555][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.735857][ T3310] veth0_macvtap: entered promiscuous mode [ 31.750657][ T3310] veth1_macvtap: entered promiscuous mode [ 31.757856][ T3316] veth0_vlan: entered promiscuous mode [ 31.765666][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.779814][ T3311] veth0_vlan: entered promiscuous mode [ 31.795506][ T3316] veth1_vlan: entered promiscuous mode [ 31.807964][ T3311] veth1_vlan: entered promiscuous mode [ 31.815780][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.840696][ T3316] veth0_macvtap: entered promiscuous mode [ 31.849716][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.859158][ T3316] veth1_macvtap: entered promiscuous mode [ 31.878482][ T3311] veth0_macvtap: entered promiscuous mode [ 31.894750][ T138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.907200][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.919552][ T138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.932115][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.939729][ T3311] veth1_macvtap: entered promiscuous mode [ 31.949505][ T138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.985159][ T138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.998125][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.007525][ T3322] veth0_vlan: entered promiscuous mode [ 32.013443][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.025570][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.028213][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.051107][ T3322] veth1_vlan: entered promiscuous mode [ 32.064750][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073483][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087642][ T3324] veth0_vlan: entered promiscuous mode [ 32.095705][ T3324] veth1_vlan: entered promiscuous mode [ 32.134592][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.152770][ T3322] veth0_macvtap: entered promiscuous mode [ 32.168432][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.188987][ T3324] veth0_macvtap: entered promiscuous mode [ 32.203976][ T3322] veth1_macvtap: entered promiscuous mode [ 32.214652][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227210][ T3324] veth1_macvtap: entered promiscuous mode [ 32.242873][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.243827][ T3491] process 'gtp' launched '/dev/fd/9' with NULL argv: empty string added [ 32.264068][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.272901][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.296354][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.307314][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.322317][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.331241][ T3491] xt_CT: No such helper "netbios-ns" [ 32.342156][ T3493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.346796][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.370644][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.400773][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 32.400864][ T29] audit: type=1400 audit(1763523037.641:166): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.434716][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.454074][ T3500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8'. [ 32.473383][ T29] audit: type=1400 audit(1763523037.671:167): avc: denied { create } for pid=3496 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 32.492508][ T29] audit: type=1400 audit(1763523037.671:168): avc: denied { create } for pid=3496 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.512868][ T29] audit: type=1400 audit(1763523037.671:169): avc: denied { create } for pid=3496 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.532212][ T29] audit: type=1400 audit(1763523037.691:170): avc: denied { write } for pid=3496 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.534476][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.552433][ T29] audit: type=1400 audit(1763523037.711:171): avc: denied { name_bind } for pid=3499 comm="syz.1.9" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.552538][ T29] audit: type=1400 audit(1763523037.711:172): avc: denied { node_bind } for pid=3499 comm="syz.1.9" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.617465][ T3507] FAULT_INJECTION: forcing a failure. [ 32.617465][ T3507] name failslab, interval 1, probability 0, space 0, times 1 [ 32.630251][ T3507] CPU: 0 UID: 0 PID: 3507 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.630280][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 32.630296][ T3507] Call Trace: [ 32.630303][ T3507] [ 32.630312][ T3507] __dump_stack+0x1d/0x30 [ 32.630373][ T3507] dump_stack_lvl+0xe8/0x140 [ 32.630393][ T3507] dump_stack+0x15/0x1b [ 32.630412][ T3507] should_fail_ex+0x265/0x280 [ 32.630454][ T3507] should_failslab+0x8c/0xb0 [ 32.630565][ T3507] __kvmalloc_node_noprof+0x12e/0x670 [ 32.630638][ T3507] ? io_sqe_buffers_register+0xc7/0x540 [ 32.630667][ T3507] io_sqe_buffers_register+0xc7/0x540 [ 32.630695][ T3507] ? __fget_files+0x184/0x1c0 [ 32.630795][ T3507] __se_sys_io_uring_register+0x90e/0xf00 [ 32.630839][ T3507] ? fput+0x8f/0xc0 [ 32.630859][ T3507] ? ksys_write+0x192/0x1a0 [ 32.630884][ T3507] __x64_sys_io_uring_register+0x55/0x70 [ 32.630997][ T3507] x64_sys_call+0x18a3/0x3000 [ 32.631026][ T3507] do_syscall_64+0xd2/0x200 [ 32.631047][ T3507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 32.631081][ T3507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 32.631113][ T3507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.631134][ T3507] RIP: 0033:0x7f8ab435f6c9 [ 32.631148][ T3507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.631167][ T3507] RSP: 002b:00007f8ab2dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 32.631318][ T3507] RAX: ffffffffffffffda RBX: 00007f8ab45b5fa0 RCX: 00007f8ab435f6c9 [ 32.631334][ T3507] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 32.631349][ T3507] RBP: 00007f8ab2dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 32.631364][ T3507] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 32.631429][ T3507] R13: 00007f8ab45b6038 R14: 00007f8ab45b5fa0 R15: 00007ffddab88808 [ 32.631451][ T3507] [ 32.653407][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837338][ T29] audit: type=1400 audit(1763523038.081:173): avc: denied { shutdown } for pid=3512 comm="syz.3.11" lport=44838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.859251][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877545][ T29] audit: type=1400 audit(1763523038.121:174): avc: denied { create } for pid=3506 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.914553][ T29] audit: type=1400 audit(1763523038.141:175): avc: denied { create } for pid=3509 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 32.936596][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.964254][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035414][ T3521] loop4: detected capacity change from 0 to 512 [ 33.082757][ T3528] IPv6: addrconf: prefix option has invalid lifetime [ 33.138004][ T3527] tipc: Started in network mode [ 33.143053][ T3527] tipc: Node identity ac14140f, cluster identity 4711 [ 33.174653][ T3527] tipc: New replicast peer: 255.255.255.83 [ 33.180648][ T3527] tipc: Enabled bearer , priority 10 [ 33.198332][ T3525] tipc: Started in network mode [ 33.203244][ T3525] tipc: Node identity ac14140f, cluster identity 4711 [ 33.211615][ T3525] tipc: New replicast peer: 255.255.255.83 [ 33.217609][ T3525] tipc: Enabled bearer , priority 10 [ 33.260338][ T3538] loop0: detected capacity change from 0 to 2048 [ 33.269040][ T3538] ext4: Unknown parameter 'euid<00000000000000000000' [ 33.352301][ T3543] loop1: detected capacity change from 0 to 128 [ 33.374252][ T3547] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 33.382940][ T3546] loop3: detected capacity change from 0 to 2048 [ 33.408895][ T3550] loop4: detected capacity change from 0 to 512 [ 33.415688][ T3547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.422920][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.450266][ T3550] ======================================================= [ 33.450266][ T3550] WARNING: The mand mount option has been deprecated and [ 33.450266][ T3550] and is ignored by this kernel. Remove the mand [ 33.450266][ T3550] option from the mount to silence this warning. [ 33.450266][ T3550] ======================================================= [ 33.494604][ T3546] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.535029][ T3560] syz.1.22: attempt to access beyond end of device [ 33.535029][ T3560] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.551131][ T3559] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.559458][ T3560] syz.1.22: attempt to access beyond end of device [ 33.559458][ T3560] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.573842][ T3560] syz.1.22: attempt to access beyond end of device [ 33.573842][ T3560] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 33.586327][ T3550] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.25: invalid indirect mapped block 4294967295 (level 1) [ 33.601754][ T3550] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.25: invalid indirect mapped block 4294967295 (level 1) [ 33.608039][ T3559] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 33.616076][ T3550] EXT4-fs (loop4): 2 truncates cleaned up [ 33.633116][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.696350][ T3560] syz.1.22: attempt to access beyond end of device [ 33.696350][ T3560] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 33.721326][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 33.723574][ T3560] syz.1.22: attempt to access beyond end of device [ 33.723574][ T3560] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 33.730225][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 33.756477][ T3560] syz.1.22: attempt to access beyond end of device [ 33.756477][ T3560] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 33.760956][ T3550] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.25: path /7/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 33.770100][ T3560] syz.1.22: attempt to access beyond end of device [ 33.770100][ T3560] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 33.806271][ T3560] syz.1.22: attempt to access beyond end of device [ 33.806271][ T3560] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 33.819962][ T3560] syz.1.22: attempt to access beyond end of device [ 33.819962][ T3560] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 33.855513][ T3560] syz.1.22: attempt to access beyond end of device [ 33.855513][ T3560] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 33.903767][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.937745][ T3572] loop4: detected capacity change from 0 to 512 [ 34.005520][ T3575] mmap: syz.0.29 (3575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.023651][ T3572] netlink: 'syz.4.31': attribute type 5 has an invalid length. [ 34.035892][ T3572] batman_adv: batadv0: Adding interface: vxlan0 [ 34.042165][ T3572] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.068197][ T3572] batman_adv: batadv0: Interface activated: vxlan0 [ 34.075546][ T3572] Zero length message leads to an empty skb [ 34.076200][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.099526][ T3575] FAULT_INJECTION: forcing a failure. [ 34.099526][ T3575] name failslab, interval 1, probability 0, space 0, times 0 [ 34.112302][ T3575] CPU: 0 UID: 0 PID: 3575 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.112405][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.112419][ T3575] Call Trace: [ 34.112426][ T3575] [ 34.112434][ T3575] __dump_stack+0x1d/0x30 [ 34.112460][ T3575] dump_stack_lvl+0xe8/0x140 [ 34.112483][ T3575] dump_stack+0x15/0x1b [ 34.112572][ T3575] should_fail_ex+0x265/0x280 [ 34.112646][ T3575] should_failslab+0x8c/0xb0 [ 34.112677][ T3575] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 34.112710][ T3575] ? __d_alloc+0x3d/0x340 [ 34.112743][ T3575] __d_alloc+0x3d/0x340 [ 34.112792][ T3575] ? from_vfsgid+0x70/0xa0 [ 34.112825][ T3575] d_alloc_pseudo+0x1e/0x80 [ 34.112935][ T3575] alloc_file_pseudo+0x71/0x160 [ 34.112960][ T3575] hugetlb_file_setup+0x2a6/0x3d0 [ 34.112997][ T3575] ksys_mmap_pgoff+0x157/0x310 [ 34.113030][ T3575] x64_sys_call+0x14a3/0x3000 [ 34.113139][ T3575] do_syscall_64+0xd2/0x200 [ 34.113164][ T3575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.113200][ T3575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.113272][ T3575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.113298][ T3575] RIP: 0033:0x7f7b8c61f6c9 [ 34.113316][ T3575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.113338][ T3575] RSP: 002b:00007f7b8b066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 34.113351][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.113360][ T3575] RAX: ffffffffffffffda RBX: 00007f7b8c876090 RCX: 00007f7b8c61f6c9 [ 34.113450][ T3575] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 34.113464][ T3575] RBP: 00007f7b8b066090 R08: ffffffffffffffff R09: 0000000000000000 [ 34.113478][ T3575] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 34.113492][ T3575] R13: 00007f7b8c876128 R14: 00007f7b8c876090 R15: 00007ffc5a52f178 [ 34.113518][ T3575] [ 34.311781][ T3413] IPVS: starting estimator thread 0... [ 34.315809][ T9] tipc: Node number set to 2886997007 [ 34.333344][ T3572] syz.4.31 (3572) used greatest stack depth: 10072 bytes left [ 34.375217][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.384293][ T3406] tipc: Node number set to 2886997007 [ 34.390098][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.394636][ T52] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 34.414291][ T3577] IPVS: using max 1920 ests per chain, 96000 per kthread [ 34.417129][ T52] EXT4-fs (loop3): Remounting filesystem read-only [ 34.429475][ T12] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 34.540053][ T3595] loop4: detected capacity change from 0 to 512 [ 34.542799][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.551421][ T3595] journal_path: Non-blockdev passed as './bus' [ 34.561564][ T3595] EXT4-fs: error: could not find journal device path [ 34.625831][ T3608] tipc: Enabling of bearer rejected, already enabled [ 34.665923][ T3614] loop0: detected capacity change from 0 to 1024 [ 34.672684][ T3614] EXT4-fs: inline encryption not supported [ 34.691947][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 34.705981][ T3614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.745803][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.827032][ T3630] loop0: detected capacity change from 0 to 1024 [ 34.833835][ T3630] EXT4-fs: Ignoring removed orlov option [ 34.856802][ T3630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.870352][ T3630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.914459][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 34.955290][ T3641] IPv6: addrconf: prefix option has invalid lifetime [ 34.988411][ T3631] loop2: detected capacity change from 0 to 128 [ 35.001127][ T3631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3631 comm=syz.2.49 [ 35.015033][ T3645] IPv6: Can't replace route, no match found [ 35.035428][ T3631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3631 comm=syz.2.49 [ 35.049565][ T3631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.49'. [ 35.058627][ T3631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.49'. [ 35.059887][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 35.077851][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 35.115889][ T3651] bridge: RTM_NEWNEIGH with invalid ether address [ 35.128836][ T3654] Illegal XDP return value 4294967282 on prog (id 45) dev N/A, expect packet loss! [ 35.298553][ T3406] IPVS: starting estimator thread 0... [ 35.366314][ T3687] loop1: detected capacity change from 0 to 2048 [ 35.378290][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.404266][ T3682] IPVS: using max 2352 ests per chain, 117600 per kthread [ 35.450146][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.474297][ T3695] tap0: tun_chr_ioctl cmd 1074025677 [ 35.495767][ T3695] tap0: linktype set to 774 [ 35.551361][ T3708] tipc: Started in network mode [ 35.556452][ T3708] tipc: Node identity ac14140f, cluster identity 4711 [ 35.567484][ T3708] tipc: New replicast peer: 255.255.255.83 [ 35.573343][ T3708] tipc: Enabled bearer , priority 10 [ 35.616760][ T3714] tipc: Enabling of bearer rejected, already enabled [ 35.732903][ T3732] hsr_slave_0: left promiscuous mode [ 35.739167][ T3732] hsr_slave_1: left promiscuous mode [ 35.841305][ T3742] tipc: Started in network mode [ 35.846355][ T3742] tipc: Node identity ac14140f, cluster identity 4711 [ 35.856587][ T3742] tipc: New replicast peer: 255.255.255.83 [ 35.862745][ T3742] tipc: Enabled bearer , priority 10 [ 35.888930][ T3748] 9pnet_fd: Insufficient options for proto=fd [ 35.994945][ T3757] netlink: 'syz.0.88': attribute type 4 has an invalid length. [ 36.050374][ T3767] FAULT_INJECTION: forcing a failure. [ 36.050374][ T3767] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.063509][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.063546][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.063559][ T3767] Call Trace: [ 36.063566][ T3767] [ 36.063573][ T3767] __dump_stack+0x1d/0x30 [ 36.063615][ T3767] dump_stack_lvl+0xe8/0x140 [ 36.063640][ T3767] dump_stack+0x15/0x1b [ 36.063686][ T3767] should_fail_ex+0x265/0x280 [ 36.063743][ T3767] should_fail+0xb/0x20 [ 36.063779][ T3767] should_fail_usercopy+0x1a/0x20 [ 36.063857][ T3767] _copy_from_user+0x1c/0xb0 [ 36.063884][ T3767] ___bpf_copy_key+0xaa/0x120 [ 36.063916][ T3767] map_delete_elem+0x116/0x2c0 [ 36.063948][ T3767] ? __sys_bpf+0x403/0x7c0 [ 36.063985][ T3767] __sys_bpf+0x412/0x7c0 [ 36.064014][ T3767] __x64_sys_bpf+0x41/0x50 [ 36.064087][ T3767] x64_sys_call+0x2aee/0x3000 [ 36.064115][ T3767] do_syscall_64+0xd2/0x200 [ 36.064165][ T3767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.064201][ T3767] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.064244][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.064265][ T3767] RIP: 0033:0x7fa08f1cf6c9 [ 36.064304][ T3767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.064326][ T3767] RSP: 002b:00007fa08dc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.064349][ T3767] RAX: ffffffffffffffda RBX: 00007fa08f425fa0 RCX: 00007fa08f1cf6c9 [ 36.064364][ T3767] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 36.064468][ T3767] RBP: 00007fa08dc37090 R08: 0000000000000000 R09: 0000000000000000 [ 36.064479][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.064492][ T3767] R13: 00007fa08f426038 R14: 00007fa08f425fa0 R15: 00007fffa99ab128 [ 36.064513][ T3767] [ 36.251345][ T3764] loop0: detected capacity change from 0 to 128 [ 36.273851][ T3771] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use) [ 36.283240][ T3771] FAULT_INJECTION: forcing a failure. [ 36.283240][ T3771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.296516][ T3771] CPU: 0 UID: 0 PID: 3771 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.296588][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.296602][ T3771] Call Trace: [ 36.296607][ T3771] [ 36.296613][ T3771] __dump_stack+0x1d/0x30 [ 36.296632][ T3771] dump_stack_lvl+0xe8/0x140 [ 36.296696][ T3771] dump_stack+0x15/0x1b [ 36.296719][ T3771] should_fail_ex+0x265/0x280 [ 36.296777][ T3771] should_fail+0xb/0x20 [ 36.296803][ T3771] should_fail_usercopy+0x1a/0x20 [ 36.296828][ T3771] _copy_to_user+0x20/0xa0 [ 36.296858][ T3771] __se_sys_capget+0x357/0x410 [ 36.296887][ T3771] ? __secure_computing+0x82/0x150 [ 36.296919][ T3771] __x64_sys_capget+0x31/0x40 [ 36.296957][ T3771] x64_sys_call+0x27e1/0x3000 [ 36.296983][ T3771] do_syscall_64+0xd2/0x200 [ 36.297007][ T3771] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.297112][ T3771] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.297206][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.297228][ T3771] RIP: 0033:0x7f8ab435f6c9 [ 36.297297][ T3771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.297326][ T3771] RSP: 002b:00007f8ab2dbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 36.297346][ T3771] RAX: ffffffffffffffda RBX: 00007f8ab45b5fa0 RCX: 00007f8ab435f6c9 [ 36.297358][ T3771] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000feaff9 [ 36.297400][ T3771] RBP: 00007f8ab2dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 36.297413][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.297426][ T3771] R13: 00007f8ab45b6038 R14: 00007f8ab45b5fa0 R15: 00007ffddab88808 [ 36.297446][ T3771] [ 36.512692][ T3779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.561206][ T3783] ip6t_rpfilter: unknown options [ 36.562403][ T3782] tipc: Started in network mode [ 36.571221][ T3782] tipc: Node identity ac14140f, cluster identity 4711 [ 36.607530][ T3782] tipc: New replicast peer: 255.255.255.83 [ 36.613441][ T3782] tipc: Enabled bearer , priority 10 [ 36.651569][ T3790] FAULT_INJECTION: forcing a failure. [ 36.651569][ T3790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.664813][ T3790] CPU: 0 UID: 0 PID: 3790 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.664849][ T3790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.664896][ T3790] Call Trace: [ 36.664903][ T3790] [ 36.664910][ T3790] __dump_stack+0x1d/0x30 [ 36.664933][ T3790] dump_stack_lvl+0xe8/0x140 [ 36.664956][ T3790] dump_stack+0x15/0x1b [ 36.664980][ T3790] should_fail_ex+0x265/0x280 [ 36.665026][ T3790] should_fail+0xb/0x20 [ 36.665069][ T3790] should_fail_usercopy+0x1a/0x20 [ 36.665096][ T3790] _copy_from_user+0x1c/0xb0 [ 36.665130][ T3790] memdup_user_nul+0x5f/0xe0 [ 36.665168][ T3790] sel_write_enforce+0x9c/0x2d0 [ 36.665204][ T3790] vfs_writev+0x406/0x8b0 [ 36.665307][ T3790] ? __pfx_sel_write_enforce+0x10/0x10 [ 36.665337][ T3790] ? mutex_lock+0xd/0x30 [ 36.665369][ T3790] do_writev+0xe7/0x210 [ 36.665476][ T3790] __x64_sys_writev+0x45/0x50 [ 36.665507][ T3790] x64_sys_call+0x1e9a/0x3000 [ 36.665530][ T3790] do_syscall_64+0xd2/0x200 [ 36.665584][ T3790] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.665631][ T3790] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.665694][ T3790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.665716][ T3790] RIP: 0033:0x7f303fbaf6c9 [ 36.665735][ T3790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.665759][ T3790] RSP: 002b:00007f303e60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 36.665780][ T3790] RAX: ffffffffffffffda RBX: 00007f303fe05fa0 RCX: 00007f303fbaf6c9 [ 36.665793][ T3790] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 36.665809][ T3790] RBP: 00007f303e60f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.665895][ T3790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.665907][ T3790] R13: 00007f303fe06038 R14: 00007f303fe05fa0 R15: 00007ffff353d9b8 [ 36.665932][ T3790] [ 36.866156][ T3375] tipc: Node number set to 2886997007 [ 36.874603][ T3375] tipc: Node number set to 2886997007 [ 36.920430][ T3799] loop2: detected capacity change from 0 to 128 [ 36.977587][ T3804] FAULT_INJECTION: forcing a failure. [ 36.977587][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 36.990296][ T3804] CPU: 0 UID: 0 PID: 3804 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.990332][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.990346][ T3804] Call Trace: [ 36.990353][ T3804] [ 36.990412][ T3804] __dump_stack+0x1d/0x30 [ 36.990441][ T3804] dump_stack_lvl+0xe8/0x140 [ 36.990465][ T3804] dump_stack+0x15/0x1b [ 36.990482][ T3804] should_fail_ex+0x265/0x280 [ 36.990603][ T3804] ? percpu_ref_init+0x9c/0x250 [ 36.990638][ T3804] should_failslab+0x8c/0xb0 [ 36.990681][ T3804] ? __pfx_free_ioctx_users+0x10/0x10 [ 36.990722][ T3804] __kmalloc_cache_noprof+0x4c/0x4a0 [ 36.990839][ T3804] ? __pfx_free_ioctx_users+0x10/0x10 [ 36.990879][ T3804] percpu_ref_init+0x9c/0x250 [ 36.990905][ T3804] ioctx_alloc+0x1be/0x4e0 [ 36.990935][ T3804] __se_sys_io_setup+0x6b/0x1b0 [ 36.990978][ T3804] __x64_sys_io_setup+0x31/0x40 [ 36.991014][ T3804] x64_sys_call+0x2f0e/0x3000 [ 36.991041][ T3804] do_syscall_64+0xd2/0x200 [ 36.991062][ T3804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.991164][ T3804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.991208][ T3804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.991235][ T3804] RIP: 0033:0x7f303fbaf6c9 [ 36.991251][ T3804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.991304][ T3804] RSP: 002b:00007f303e60f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 36.991327][ T3804] RAX: ffffffffffffffda RBX: 00007f303fe05fa0 RCX: 00007f303fbaf6c9 [ 36.991343][ T3804] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 0000000000000002 [ 36.991358][ T3804] RBP: 00007f303e60f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.991423][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.991438][ T3804] R13: 00007f303fe06038 R14: 00007f303fe05fa0 R15: 00007ffff353d9b8 [ 36.991457][ T3804] [ 37.224087][ T3806] loop4: detected capacity change from 0 to 128 [ 37.327024][ T3817] loop1: detected capacity change from 0 to 2048 [ 37.347417][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.382240][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.426462][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 37.426477][ T29] audit: type=1400 audit(1763523042.671:703): avc: denied { write } for pid=3821 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.532238][ T3827] loop0: detected capacity change from 0 to 1024 [ 37.541873][ T3827] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 37.553553][ T29] audit: type=1400 audit(1763523042.711:704): avc: denied { module_request } for pid=3821 comm="syz.0.111" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.576298][ T29] audit: type=1400 audit(1763523042.821:705): avc: denied { sys_module } for pid=3821 comm="syz.0.111" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.586344][ T3827] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 37.624293][ T3392] tipc: Node number set to 2886997007 [ 37.659110][ T3827] EXT4-fs (loop0): mount failed [ 37.672503][ T3836] loop1: detected capacity change from 0 to 1024 [ 37.687985][ T3836] EXT4-fs: Ignoring removed orlov option [ 37.705951][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.709109][ T29] audit: type=1400 audit(1763523042.951:706): avc: denied { write } for pid=3837 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.789030][ T29] audit: type=1400 audit(1763523042.981:707): avc: denied { ioctl } for pid=3837 comm="syz.3.115" path="socket:[5558]" dev="sockfs" ino=5558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.813751][ T29] audit: type=1400 audit(1763523042.991:708): avc: denied { append } for pid=3835 comm="syz.1.114" path="/15/bus/cpu.stat" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.836587][ T29] audit: type=1400 audit(1763523042.991:709): avc: denied { map } for pid=3835 comm="syz.1.114" path="/15/bus/cpu.stat" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.859169][ T29] audit: type=1400 audit(1763523042.991:710): avc: denied { execute } for pid=3835 comm="syz.1.114" path="/15/bus/cpu.stat" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.888960][ T29] audit: type=1400 audit(1763523043.051:711): avc: denied { create } for pid=3837 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 38.017429][ T3847] __nla_validate_parse: 7 callbacks suppressed [ 38.017448][ T3847] netlink: 240 bytes leftover after parsing attributes in process `syz.2.117'. [ 38.133037][ T3850] loop3: detected capacity change from 0 to 1024 [ 38.140014][ T3850] EXT4-fs: Ignoring removed bh option [ 38.184519][ T3850] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.349701][ T3856] usb usb8: selecting invalid altsetting 2047 [ 38.445877][ T3850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c85ce018, mo2=0000] [ 38.555603][ T3806] bio_check_eod: 14906 callbacks suppressed [ 38.555620][ T3806] syz.4.107: attempt to access beyond end of device [ 38.555620][ T3806] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 38.626863][ T3850] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.119: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.651231][ T3850] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.119: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.672394][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.682171][ T3850] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.119: Failed to acquire dquot type 0 [ 38.694132][ T3850] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 38.715904][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 38.724893][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 38.756121][ T3850] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.119: mark_inode_dirty error [ 38.794302][ T3850] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 38.804717][ T3850] EXT4-fs (loop3): 1 orphan inode deleted [ 38.810970][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.830961][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.837158][ T3875] erspan0: entered promiscuous mode [ 38.845760][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 38.867191][ T3875] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 39.012625][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.023401][ T3324] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.074320][ T3324] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 39.138077][ T3324] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 39.179333][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.188283][ T3890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.255506][ T3894] loop0: detected capacity change from 0 to 512 [ 39.262942][ T3894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.276033][ T3894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.290593][ T3890] geneve2: entered promiscuous mode [ 39.295891][ T3890] geneve2: entered allmulticast mode [ 39.332189][ T3893] loop1: detected capacity change from 0 to 512 [ 39.340554][ T3894] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.353956][ T3894] EXT4-fs (loop0): 1 truncate cleaned up [ 39.360369][ T3894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.437458][ T3893] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.443935][ T3893] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 39.458311][ T3893] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 39.474100][ T3893] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.134: attempt to clear invalid blocks 2 len 1 [ 39.541282][ T3896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.135'. [ 39.591610][ T3903] loop3: detected capacity change from 0 to 512 [ 39.622554][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.642745][ T3893] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.134: invalid indirect mapped block 1819239214 (level 0) [ 39.676333][ T3903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.713559][ T3893] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.134: invalid indirect mapped block 1819239214 (level 1) [ 39.748829][ T3893] EXT4-fs (loop1): 1 truncate cleaned up [ 39.755028][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.778528][ T3914] SELinux: policydb version -1665029 does not match my version range 15-35 [ 39.782833][ T3911] lo speed is unknown, defaulting to 1000 [ 39.787696][ T3914] SELinux: failed to load policy [ 39.798392][ T3911] lo speed is unknown, defaulting to 1000 [ 39.805848][ T3893] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 39.815521][ T3911] lo speed is unknown, defaulting to 1000 [ 39.821642][ T3911] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.829068][ T3893] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.134: Abort forced by user [ 39.841488][ T3911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.855575][ T3893] EXT4-fs (loop1): Remounting filesystem read-only [ 39.862164][ T3893] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 39.883328][ T3920] netlink: 388 bytes leftover after parsing attributes in process `syz.2.139'. [ 39.884897][ T3911] lo speed is unknown, defaulting to 1000 [ 39.904733][ T3911] lo speed is unknown, defaulting to 1000 [ 39.910918][ T3911] lo speed is unknown, defaulting to 1000 [ 39.944750][ T3911] lo speed is unknown, defaulting to 1000 [ 39.953060][ T3911] lo speed is unknown, defaulting to 1000 [ 39.982509][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.043126][ C1] hrtimer: interrupt took 40551 ns [ 40.046552][ T3937] netlink: 'syz.1.134': attribute type 21 has an invalid length. [ 40.056138][ T3937] netlink: 156 bytes leftover after parsing attributes in process `syz.1.134'. [ 40.065166][ T3937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 40.115487][ T3940] sctp: [Deprecated]: syz.2.145 (pid 3940) Use of int in max_burst socket option deprecated. [ 40.115487][ T3940] Use struct sctp_assoc_value instead [ 40.142421][ T3940] sctp: [Deprecated]: syz.2.145 (pid 3940) Use of int in max_burst socket option deprecated. [ 40.142421][ T3940] Use struct sctp_assoc_value instead [ 40.182327][ T3947] loop0: detected capacity change from 0 to 764 [ 40.190314][ T3947] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 40.210317][ T3947] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 40.219579][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.266970][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.316188][ T3954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 40.323075][ T3947] Symlink component flag not implemented [ 40.325800][ T3954] bond2: (slave batadv1): making interface the new active one [ 40.329185][ T3947] Symlink component flag not implemented (7) [ 40.337565][ T3954] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 40.413662][ T3968] loop0: detected capacity change from 0 to 1024 [ 40.428598][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.440406][ T3968] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.154: casefold flag without casefold feature [ 40.453652][ T3968] EXT4-fs (loop0): get root inode failed [ 40.459382][ T3968] EXT4-fs (loop0): mount failed [ 40.473955][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 40.509489][ T3975] program syz.2.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.577551][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.577979][ T3986] loop0: detected capacity change from 0 to 512 [ 40.597952][ T3986] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.605775][ T3986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.158: error while reading EA inode 32 err=-116 [ 40.618603][ T3986] EXT4-fs (loop0): Remounting filesystem read-only [ 40.619565][ T3989] FAULT_INJECTION: forcing a failure. [ 40.619565][ T3989] name failslab, interval 1, probability 0, space 0, times 0 [ 40.625231][ T3986] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.637832][ T3989] CPU: 1 UID: 0 PID: 3989 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.637883][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.637899][ T3989] Call Trace: [ 40.637906][ T3989] [ 40.637916][ T3989] __dump_stack+0x1d/0x30 [ 40.637997][ T3989] dump_stack_lvl+0xe8/0x140 [ 40.638027][ T3989] dump_stack+0x15/0x1b [ 40.638078][ T3989] should_fail_ex+0x265/0x280 [ 40.638125][ T3989] should_failslab+0x8c/0xb0 [ 40.638164][ T3989] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 40.638214][ T3989] ? __alloc_skb+0x101/0x320 [ 40.638271][ T3989] __alloc_skb+0x101/0x320 [ 40.638311][ T3989] netlink_alloc_large_skb+0xbf/0xf0 [ 40.638409][ T3989] netlink_sendmsg+0x3cf/0x6b0 [ 40.638439][ T3989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.638466][ T3989] __sock_sendmsg+0x145/0x180 [ 40.638501][ T3989] ____sys_sendmsg+0x31e/0x4e0 [ 40.638533][ T3989] ___sys_sendmsg+0x17b/0x1d0 [ 40.638655][ T3989] __x64_sys_sendmsg+0xd4/0x160 [ 40.638690][ T3989] x64_sys_call+0x191e/0x3000 [ 40.638777][ T3989] do_syscall_64+0xd2/0x200 [ 40.638808][ T3989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.638846][ T3989] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.638893][ T3989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.639004][ T3989] RIP: 0033:0x7fd131acf6c9 [ 40.639026][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.639050][ T3989] RSP: 002b:00007fd130516038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.639101][ T3989] RAX: ffffffffffffffda RBX: 00007fd131d26090 RCX: 00007fd131acf6c9 [ 40.639119][ T3989] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000007 [ 40.639135][ T3989] RBP: 00007fd130516090 R08: 0000000000000000 R09: 0000000000000000 [ 40.639151][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.639168][ T3989] R13: 00007fd131d26128 R14: 00007fd131d26090 R15: 00007ffe26176828 [ 40.639259][ T3989] [ 40.823851][ T3994] loop4: detected capacity change from 0 to 1024 [ 40.824624][ T3986] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.830033][ T3986] EXT4-fs (loop0): 1 orphan inode deleted [ 40.833087][ T3977] wg2: entered promiscuous mode [ 40.841354][ T3986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.848759][ T3977] wg2: entered allmulticast mode [ 40.899520][ T3994] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.910461][ T3994] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.929760][ T3994] JBD2: no valid journal superblock found [ 40.935562][ T3994] EXT4-fs (loop4): Could not load journal inode [ 40.968116][ T3991] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 40.999221][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.044576][ T4003] capability: warning: `syz.1.163' uses deprecated v2 capabilities in a way that may be insecure [ 41.055752][ T4003] program syz.1.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.108079][ T3997] lo speed is unknown, defaulting to 1000 [ 41.195951][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.226296][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.264190][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.298225][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.364082][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.374059][ T4015] loop3: detected capacity change from 0 to 512 [ 41.403415][ T4021] tipc: Enabling of bearer rejected, already enabled [ 41.448376][ T4015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.479044][ T4015] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.491760][ T4015] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.502218][ T4026] loop4: detected capacity change from 0 to 2048 [ 41.520597][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.555940][ T4042] nfs: Unknown parameter '/.:/$!%L' [ 41.593433][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.619150][ T4046] loop3: detected capacity change from 0 to 128 [ 41.620791][ T4044] loop1: detected capacity change from 0 to 2048 [ 41.696812][ T4044] Alternate GPT is invalid, using primary GPT. [ 41.703270][ T4044] loop1: p1 p2 p3 [ 41.707057][ T4044] loop1: partition table partially beyond EOD, truncated [ 41.805351][ T4053] syz.3.179: attempt to access beyond end of device [ 41.805351][ T4053] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 41.939652][ T4056] loop2: detected capacity change from 0 to 164 [ 41.955728][ T4053] syz.3.179: attempt to access beyond end of device [ 41.955728][ T4053] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 41.981474][ T4052] tipc: Enabling of bearer rejected, already enabled [ 42.072323][ T4053] syz.3.179: attempt to access beyond end of device [ 42.072323][ T4053] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 42.104438][ T4058] loop1: detected capacity change from 0 to 1024 [ 42.111831][ T4058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.118990][ T4053] syz.3.179: attempt to access beyond end of device [ 42.118990][ T4053] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 42.139063][ T4058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 42.149943][ T4053] syz.3.179: attempt to access beyond end of device [ 42.149943][ T4053] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 42.164003][ T4058] System zones: 0-1, 3-36 [ 42.170790][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.183671][ T4053] syz.3.179: attempt to access beyond end of device [ 42.183671][ T4053] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 42.227072][ T4053] syz.3.179: attempt to access beyond end of device [ 42.227072][ T4053] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 42.250310][ T4053] syz.3.179: attempt to access beyond end of device [ 42.250310][ T4053] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 42.268399][ T4053] syz.3.179: attempt to access beyond end of device [ 42.268399][ T4053] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 42.379849][ T4064] loop2: detected capacity change from 0 to 1024 [ 42.395835][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.417248][ T4064] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.475125][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 42.475140][ T29] audit: type=1400 audit(1763523047.701:992): avc: denied { bind } for pid=4063 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.501721][ T29] audit: type=1400 audit(1763523047.701:993): avc: denied { setopt } for pid=4063 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.522197][ T29] audit: type=1326 audit(1763523047.701:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.545571][ T29] audit: type=1326 audit(1763523047.701:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.568798][ T29] audit: type=1326 audit(1763523047.701:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.592033][ T29] audit: type=1326 audit(1763523047.701:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.615278][ T29] audit: type=1326 audit(1763523047.701:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.638564][ T29] audit: type=1326 audit(1763523047.701:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.661895][ T29] audit: type=1326 audit(1763523047.701:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.685787][ T29] audit: type=1326 audit(1763523047.701:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd131acf6c9 code=0x7ffc0000 [ 42.715876][ T37] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 4) [ 42.732431][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 42.744793][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.744793][ T37] [ 42.775721][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 42.810285][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 42.822719][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.822719][ T37] [ 42.836407][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.878940][ T4093] loop4: detected capacity change from 0 to 1024 [ 42.888211][ T4093] journal_path: Lookup failure for './file0' [ 42.894279][ T4093] EXT4-fs: error: could not find journal device path [ 42.935928][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.081311][ T4112] FAULT_INJECTION: forcing a failure. [ 43.081311][ T4112] name failslab, interval 1, probability 0, space 0, times 0 [ 43.094054][ T4112] CPU: 1 UID: 0 PID: 4112 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.094087][ T4112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.094107][ T4112] Call Trace: [ 43.094114][ T4112] [ 43.094121][ T4112] __dump_stack+0x1d/0x30 [ 43.094218][ T4112] dump_stack_lvl+0xe8/0x140 [ 43.094239][ T4112] dump_stack+0x15/0x1b [ 43.094258][ T4112] should_fail_ex+0x265/0x280 [ 43.094295][ T4112] should_failslab+0x8c/0xb0 [ 43.094360][ T4112] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 43.094394][ T4112] ? __d_alloc+0x3d/0x340 [ 43.094433][ T4112] __d_alloc+0x3d/0x340 [ 43.094492][ T4112] ? radix_tree_iter_tag_clear+0x105/0x180 [ 43.094536][ T4112] d_alloc_pseudo+0x1e/0x80 [ 43.094633][ T4112] alloc_file_pseudo+0x71/0x160 [ 43.094660][ T4112] anon_inode_getfd+0xc1/0x150 [ 43.094687][ T4112] btf_new_fd+0x657/0x790 [ 43.094729][ T4112] bpf_btf_load+0x112/0x130 [ 43.094788][ T4112] __sys_bpf+0x357/0x7c0 [ 43.094820][ T4112] __x64_sys_bpf+0x41/0x50 [ 43.094915][ T4112] x64_sys_call+0x2aee/0x3000 [ 43.094943][ T4112] do_syscall_64+0xd2/0x200 [ 43.094969][ T4112] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.095080][ T4112] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.095170][ T4112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.095192][ T4112] RIP: 0033:0x7fa08f1cf6c9 [ 43.095207][ T4112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.095225][ T4112] RSP: 002b:00007fa08dc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.095244][ T4112] RAX: ffffffffffffffda RBX: 00007fa08f425fa0 RCX: 00007fa08f1cf6c9 [ 43.095256][ T4112] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 43.095269][ T4112] RBP: 00007fa08dc37090 R08: 0000000000000000 R09: 0000000000000000 [ 43.095281][ T4112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.095293][ T4112] R13: 00007fa08f426038 R14: 00007fa08f425fa0 R15: 00007fffa99ab128 [ 43.095311][ T4112] [ 43.298225][ T4113] syz.3.200 uses obsolete (PF_INET,SOCK_PACKET) [ 43.398717][ T4126] loop4: detected capacity change from 0 to 164 [ 43.411461][ T4126] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.423864][ T4126] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.432634][ T4126] Symlink component flag not implemented [ 43.438328][ T4126] Symlink component flag not implemented [ 43.444584][ T4126] Symlink component flag not implemented (7) [ 43.450599][ T4126] Symlink component flag not implemented (116) [ 43.474411][ T4128] lo speed is unknown, defaulting to 1000 [ 43.779478][ T3392] IPVS: starting estimator thread 0... [ 43.822740][ T4163] loop2: detected capacity change from 0 to 2048 [ 43.852568][ T4163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.870490][ T4165] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.874413][ T4160] IPVS: using max 2064 ests per chain, 103200 per kthread [ 43.965290][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.342864][ T4192] batadv_slave_1: entered promiscuous mode [ 44.573056][ T4207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.644436][ T4207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.719382][ T4207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.785207][ T4207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.852016][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.864051][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.876390][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.898779][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.926796][ T4210] __nla_validate_parse: 7 callbacks suppressed [ 44.926815][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 44.961139][ T4212] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 44.969436][ T4212] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 44.996923][ T4212] loop4: detected capacity change from 0 to 512 [ 45.014373][ T4212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.075300][ T4212] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.117734][ T4214] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.229'. [ 45.127229][ T4214] netlink: zone id is out of range [ 45.132368][ T4214] netlink: zone id is out of range [ 45.133013][ T4212] EXT4-fs (loop4): 1 truncate cleaned up [ 45.137736][ T4214] netlink: zone id is out of range [ 45.148822][ T4214] netlink: zone id is out of range [ 45.153983][ T4214] netlink: zone id is out of range [ 45.159280][ T4214] netlink: zone id is out of range [ 45.164542][ T4214] netlink: zone id is out of range [ 45.169098][ T4191] batadv_slave_1: left promiscuous mode [ 45.169734][ T4214] netlink: zone id is out of range [ 45.181070][ T4212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.181245][ T4214] netlink: zone id is out of range [ 45.198321][ T4214] netlink: zone id is out of range [ 45.260703][ T4222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 45.329275][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.420654][ T4236] vhci_hcd: invalid port number 9 [ 45.425888][ T4236] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 45.540514][ T4240] lo speed is unknown, defaulting to 1000 [ 45.883466][ T4252] loop3: detected capacity change from 0 to 1024 [ 45.940477][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.029220][ T4252] loop3: detected capacity change from 0 to 128 [ 46.064671][ T4252] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 46.254598][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 46.263531][ T4273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 46.315303][ T4275] netlink: 'syz.2.251': attribute type 2 has an invalid length. [ 46.322987][ T4275] netlink: 191880 bytes leftover after parsing attributes in process `syz.2.251'. [ 46.336506][ T4275] 9pnet_fd: Insufficient options for proto=fd [ 46.348336][ T4275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.408734][ T4275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.430748][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.439936][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.454231][ T4275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.485031][ T10] IPVS: starting estimator thread 0... [ 46.532222][ T4275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.574203][ T4294] IPVS: using max 1920 ests per chain, 96000 per kthread [ 46.651222][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.664313][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.699536][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.713606][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.736977][ T4310] loop3: detected capacity change from 0 to 2048 [ 46.769246][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.794823][ T4310] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.261: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 46.815136][ T4317] lo: entered allmulticast mode [ 46.858846][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.892482][ T4326] loop3: detected capacity change from 0 to 512 [ 46.913730][ T4326] EXT4-fs: test_dummy_encryption option not supported [ 47.197394][ T4351] program syz.1.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.204746][ T4353] lo speed is unknown, defaulting to 1000 [ 47.212372][ T4351] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 47.213448][ T4353] lo speed is unknown, defaulting to 1000 [ 47.227032][ T4353] lo speed is unknown, defaulting to 1000 [ 47.264461][ T4356] lo speed is unknown, defaulting to 1000 [ 47.281069][ T4353] infiniband sz1: set active [ 47.285876][ T4353] infiniband sz1: added lo [ 47.288523][ T10] lo speed is unknown, defaulting to 1000 [ 47.302617][ T4353] RDS/IB: sz1: added [ 47.309251][ T4353] smc: adding ib device sz1 with port count 1 [ 47.315622][ T4353] smc: ib device sz1 port 1 has no pnetid [ 47.321744][ T3406] lo speed is unknown, defaulting to 1000 [ 47.327798][ T4353] lo speed is unknown, defaulting to 1000 [ 47.359345][ T4353] lo speed is unknown, defaulting to 1000 [ 47.405492][ T4353] lo speed is unknown, defaulting to 1000 [ 47.440505][ T4353] lo speed is unknown, defaulting to 1000 [ 47.476316][ T4353] lo speed is unknown, defaulting to 1000 [ 47.512789][ T4353] lo speed is unknown, defaulting to 1000 [ 47.857884][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 47.866842][ T4369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 47.889996][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 47.890014][ T29] audit: type=1326 audit(1763523053.131:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 47.919742][ T29] audit: type=1326 audit(1763523053.131:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 47.943194][ T29] audit: type=1326 audit(1763523053.131:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 47.966512][ T29] audit: type=1326 audit(1763523053.131:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 47.974253][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.989890][ T29] audit: type=1326 audit(1763523053.131:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.019169][ T29] audit: type=1326 audit(1763523053.131:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.042767][ T29] audit: type=1326 audit(1763523053.131:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.042802][ T29] audit: type=1326 audit(1763523053.131:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.042833][ T29] audit: type=1326 audit(1763523053.131:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.112778][ T29] audit: type=1326 audit(1763523053.131:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4370 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 48.119574][ T4374] ip6gre1: entered promiscuous mode [ 48.141593][ T4374] ip6gre1: entered allmulticast mode [ 48.171840][ T4378] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 48.180100][ T4378] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 48.268408][ T4376] netlink: 'syz.2.282': attribute type 16 has an invalid length. [ 48.276284][ T4376] netlink: 'syz.2.282': attribute type 3 has an invalid length. [ 48.571980][ T4413] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 48.583023][ T4415] FAULT_INJECTION: forcing a failure. [ 48.583023][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 48.595784][ T4415] CPU: 1 UID: 0 PID: 4415 Comm: wg1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.595816][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.595830][ T4415] Call Trace: [ 48.595837][ T4415] [ 48.595845][ T4415] __dump_stack+0x1d/0x30 [ 48.595909][ T4415] dump_stack_lvl+0xe8/0x140 [ 48.595932][ T4415] dump_stack+0x15/0x1b [ 48.595952][ T4415] should_fail_ex+0x265/0x280 [ 48.595997][ T4415] should_failslab+0x8c/0xb0 [ 48.596049][ T4415] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 48.596091][ T4415] ? sidtab_sid2str_get+0xa0/0x130 [ 48.596130][ T4415] kmemdup_noprof+0x2b/0x70 [ 48.596177][ T4415] sidtab_sid2str_get+0xa0/0x130 [ 48.596291][ T4415] security_sid_to_context_core+0x1eb/0x2e0 [ 48.596327][ T4415] security_sid_to_context+0x27/0x40 [ 48.596369][ T4415] selinux_lsmprop_to_secctx+0x67/0xf0 [ 48.596417][ T4415] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 48.596443][ T4415] audit_log_subj_ctx+0xa4/0x3e0 [ 48.596466][ T4415] ? skb_put+0xa9/0xf0 [ 48.596499][ T4415] audit_log_task_context+0x48/0x70 [ 48.596541][ T4415] audit_log_task+0xf4/0x250 [ 48.596577][ T4415] ? kstrtouint+0x76/0xc0 [ 48.596611][ T4415] audit_seccomp+0x61/0x100 [ 48.596644][ T4415] ? __seccomp_filter+0x82d/0x1250 [ 48.596732][ T4415] __seccomp_filter+0x83e/0x1250 [ 48.596763][ T4415] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.596795][ T4415] ? vfs_write+0x7e8/0x960 [ 48.596884][ T4415] __secure_computing+0x82/0x150 [ 48.596913][ T4415] syscall_trace_enter+0xcf/0x1e0 [ 48.596960][ T4415] do_syscall_64+0xac/0x200 [ 48.596977][ T4415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.597039][ T4415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.597074][ T4415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.597094][ T4415] RIP: 0033:0x7f8ab435f6c9 [ 48.597106][ T4415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.597121][ T4415] RSP: 002b:00007f8ab2dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 48.597142][ T4415] RAX: ffffffffffffffda RBX: 00007f8ab45b5fa0 RCX: 00007f8ab435f6c9 [ 48.597155][ T4415] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 48.597168][ T4415] RBP: 00007f8ab2dbf090 R08: f5ffffffffffffff R09: 0000000000000000 [ 48.597262][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.597288][ T4415] R13: 00007f8ab45b6038 R14: 00007f8ab45b5fa0 R15: 00007ffddab88808 [ 48.597307][ T4415] [ 48.605502][ T4412] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 48.667148][ T3406] kernel read not supported for file /145/net/ip_vs (pid: 3406 comm: kworker/1:3) [ 48.761664][ T4429] loop4: detected capacity change from 0 to 512 [ 48.884738][ T4429] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 48.902559][ T4429] EXT4-fs (loop4): orphan cleanup on readonly fs [ 48.910074][ T4429] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.306: Block bitmap for bg 0 marked uninitialized [ 48.929502][ T4429] EXT4-fs (loop4): Remounting filesystem read-only [ 48.938855][ T4429] EXT4-fs (loop4): 1 orphan inode deleted [ 48.952794][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.993836][ T4438] loop2: detected capacity change from 0 to 1024 [ 49.033520][ T4442] tipc: Enabling of bearer rejected, already enabled [ 49.121424][ T4443] bridge0: entered promiscuous mode [ 49.138590][ T4443] macvtap1: entered allmulticast mode [ 49.144051][ T4443] bridge0: entered allmulticast mode [ 49.154860][ T4447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=4447 comm=syz.2.308 [ 49.197464][ T4443] bridge0: left allmulticast mode [ 49.202608][ T4443] bridge0: left promiscuous mode [ 49.278508][ T4451] loop3: detected capacity change from 0 to 2048 [ 49.308567][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.391290][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.403636][ T4458] lo speed is unknown, defaulting to 1000 [ 49.412334][ T4458] lo speed is unknown, defaulting to 1000 [ 49.703552][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.822040][ T4502] bond1: option packets_per_slave: invalid value (33554432) [ 49.829534][ T4502] bond1: option packets_per_slave: allowed values 0 - 65535 [ 49.842500][ T4502] bond1 (unregistering): Released all slaves [ 49.902983][ T4502] bond1: option packets_per_slave: invalid value (33554432) [ 49.910368][ T4502] bond1: option packets_per_slave: allowed values 0 - 65535 [ 49.920237][ T4502] bond1 (unregistering): Released all slaves [ 50.007147][ T4515] __nla_validate_parse: 8 callbacks suppressed [ 50.007167][ T4515] netlink: 64 bytes leftover after parsing attributes in process `syz.1.334'. [ 50.028354][ T4517] loop3: detected capacity change from 0 to 732 [ 50.040772][ T4517] iso9660: Unknown parameter 'ÿÿ' [ 50.048490][ T4519] FAULT_INJECTION: forcing a failure. [ 50.048490][ T4519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.061655][ T4519] CPU: 0 UID: 0 PID: 4519 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.061682][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.061693][ T4519] Call Trace: [ 50.061699][ T4519] [ 50.061721][ T4519] __dump_stack+0x1d/0x30 [ 50.061744][ T4519] dump_stack_lvl+0xe8/0x140 [ 50.061765][ T4519] dump_stack+0x15/0x1b [ 50.061849][ T4519] should_fail_ex+0x265/0x280 [ 50.061885][ T4519] should_fail+0xb/0x20 [ 50.061901][ T4519] should_fail_usercopy+0x1a/0x20 [ 50.061922][ T4519] _copy_from_iter+0xd2/0xe80 [ 50.062003][ T4519] ? __build_skb_around+0x1ab/0x200 [ 50.062037][ T4519] ? __alloc_skb+0x223/0x320 [ 50.062139][ T4519] netlink_sendmsg+0x471/0x6b0 [ 50.062163][ T4519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.062183][ T4519] __sock_sendmsg+0x145/0x180 [ 50.062215][ T4519] ____sys_sendmsg+0x31e/0x4e0 [ 50.062249][ T4519] ___sys_sendmsg+0x17b/0x1d0 [ 50.062285][ T4519] __x64_sys_sendmsg+0xd4/0x160 [ 50.062309][ T4519] x64_sys_call+0x191e/0x3000 [ 50.062339][ T4519] do_syscall_64+0xd2/0x200 [ 50.062360][ T4519] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.062422][ T4519] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.062464][ T4519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.062499][ T4519] RIP: 0033:0x7fd131acf6c9 [ 50.062514][ T4519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.062532][ T4519] RSP: 002b:00007fd130537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.062551][ T4519] RAX: ffffffffffffffda RBX: 00007fd131d25fa0 RCX: 00007fd131acf6c9 [ 50.062582][ T4519] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 50.062620][ T4519] RBP: 00007fd130537090 R08: 0000000000000000 R09: 0000000000000000 [ 50.062632][ T4519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.062707][ T4519] R13: 00007fd131d26038 R14: 00007fd131d25fa0 R15: 00007ffe26176828 [ 50.062727][ T4519] [ 50.433983][ T4536] loop4: detected capacity change from 0 to 128 [ 50.500278][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 50.601492][ T4506] wg2: entered promiscuous mode [ 50.606457][ T4506] wg2: entered allmulticast mode [ 50.658959][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.686070][ T4552] netlink: 64 bytes leftover after parsing attributes in process `syz.0.348'. [ 50.707280][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.821698][ T4554] netlink: 'syz.0.349': attribute type 12 has an invalid length. [ 50.976947][ T36] IPVS: starting estimator thread 0... [ 51.002117][ T4582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 51.060161][ T4588] tipc: Enabling of bearer rejected, already enabled [ 51.064383][ T4580] IPVS: using max 1968 ests per chain, 98400 per kthread [ 51.203144][ T4602] netlink: 216 bytes leftover after parsing attributes in process `syz.3.364'. [ 51.443903][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 51.492139][ T4620] tipc: Enabling of bearer rejected, already enabled [ 51.520841][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 51.530426][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 51.553345][ T4624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=4624 comm=syz.2.373 [ 52.130288][ T4652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 52.199704][ T4661] loop3: detected capacity change from 0 to 512 [ 52.207311][ T4661] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 52.213806][ T4661] EXT4-fs (loop3): mount failed [ 52.253252][ T4667] netlink: 64 bytes leftover after parsing attributes in process `syz.3.387'. [ 52.485139][ T4707] 0ªX¹¦À: renamed from caif0 [ 52.492575][ T4707] 0ªX¹¦À: entered allmulticast mode [ 52.497965][ T4707] net_ratelimit: 50 callbacks suppressed [ 52.497976][ T4707] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.521029][ T4703] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 52.588342][ T4721] netlink: 'syz.1.405': attribute type 27 has an invalid length. [ 52.655089][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.662341][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.686268][ T4721] wg2: left promiscuous mode [ 52.690903][ T4721] wg2: left allmulticast mode [ 52.704860][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.714659][ T4721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.743191][ T4734] tipc: Enabling of bearer rejected, already enabled [ 52.756148][ T4732] tipc: Enabling of bearer rejected, already enabled [ 52.763658][ T37] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.798886][ T37] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.835540][ T37] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.871287][ T37] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.897958][ T29] kauditd_printk_skb: 1640 callbacks suppressed [ 52.897975][ T29] audit: type=1326 audit(1763523058.141:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f303fba6567 code=0x7ffc0000 [ 52.970452][ T29] audit: type=1326 audit(1763523058.141:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303fb4b789 code=0x7ffc0000 [ 52.993830][ T29] audit: type=1326 audit(1763523058.141:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 53.017252][ T29] audit: type=1326 audit(1763523058.151:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f303fba6567 code=0x7ffc0000 [ 53.040502][ T29] audit: type=1326 audit(1763523058.151:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303fb4b789 code=0x7ffc0000 [ 53.063911][ T29] audit: type=1326 audit(1763523058.151:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 53.087368][ T29] audit: type=1326 audit(1763523058.151:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f303fba6567 code=0x7ffc0000 [ 53.110637][ T29] audit: type=1326 audit(1763523058.151:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f303fb4b789 code=0x7ffc0000 [ 53.133910][ T29] audit: type=1326 audit(1763523058.151:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 53.157429][ T29] audit: type=1326 audit(1763523058.151:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4738 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 53.254838][ T4745] SELinux: Context system_u:object is not valid (left unmapped). [ 53.728361][ T4777] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 53.736757][ T4777] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 53.932223][ T4800] loop3: detected capacity change from 0 to 164 [ 53.939342][ T4800] iso9660: Bad value for 'map' [ 53.979974][ T4805] SELinux: Context system_u:object_r:dbusd_etc_t:s0 is not valid (left unmapped). [ 54.016622][ T4779] loop4: detected capacity change from 0 to 1024 [ 54.028318][ T4779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.079464][ T4815] loop3: detected capacity change from 0 to 2048 [ 54.088538][ T4779] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 54.132011][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.167181][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.494613][ T4859] tipc: Enabling of bearer rejected, already enabled [ 54.623896][ T4872] loop4: detected capacity change from 0 to 128 [ 54.635907][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.644965][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.653328][ T4874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.661824][ T4874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.685716][ T4875] bio_check_eod: 75 callbacks suppressed [ 54.685728][ T4875] syz.4.457: attempt to access beyond end of device [ 54.685728][ T4875] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 54.704983][ T4875] syz.4.457: attempt to access beyond end of device [ 54.704983][ T4875] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 54.718556][ T4875] syz.4.457: attempt to access beyond end of device [ 54.718556][ T4875] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 54.731974][ T4875] syz.4.457: attempt to access beyond end of device [ 54.731974][ T4875] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 54.745571][ T4875] syz.4.457: attempt to access beyond end of device [ 54.745571][ T4875] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 54.759989][ T4875] syz.4.457: attempt to access beyond end of device [ 54.759989][ T4875] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 54.773405][ T4875] syz.4.457: attempt to access beyond end of device [ 54.773405][ T4875] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 54.786925][ T4875] syz.4.457: attempt to access beyond end of device [ 54.786925][ T4875] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 54.800275][ T4875] syz.4.457: attempt to access beyond end of device [ 54.800275][ T4875] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 54.813605][ T4875] syz.4.457: attempt to access beyond end of device [ 54.813605][ T4875] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 55.045232][ T4884] __nla_validate_parse: 9 callbacks suppressed [ 55.045246][ T4884] netlink: 64 bytes leftover after parsing attributes in process `syz.0.461'. [ 55.224890][ T4890] loop2: detected capacity change from 0 to 512 [ 55.236652][ T4890] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.260146][ T4890] EXT4-fs (loop2): mount failed [ 55.293186][ T4890] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 55.317220][ T4890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.336446][ T4890] bond1: (slave gretap1): making interface the new active one [ 55.347015][ T4890] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 55.394570][ T4890] syz.2.464 (4890) used greatest stack depth: 9904 bytes left [ 55.623052][ T4920] loop2: detected capacity change from 0 to 8192 [ 55.663465][ T4925] loop4: detected capacity change from 0 to 512 [ 55.672219][ T4925] EXT4-fs: Ignoring removed orlov option [ 55.678082][ T4920] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.694695][ T4925] ------------[ cut here ]------------ [ 55.700180][ T4925] EA inode 11 i_nlink=2 [ 55.700496][ T4925] WARNING: CPU: 1 PID: 4925 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 55.715026][ T4925] Modules linked in: [ 55.718958][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.4.476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.728777][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.738100][ T4920] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 55.738941][ T4925] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 55.755889][ T4925] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 81 d4 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 55.775731][ T4925] RSP: 0000:ffffc900123635a0 EFLAGS: 00010246 [ 55.781842][ T4925] RAX: 76d8cbfe88433500 RBX: ffff888100605bb8 RCX: 0000000000080000 [ 55.785853][ T4928] lo speed is unknown, defaulting to 1000 [ 55.790015][ T4925] RDX: ffffc90004782000 RSI: 0000000000004408 RDI: 0000000000004409 [ 55.796099][ T4928] lo speed is unknown, defaulting to 1000 [ 55.803700][ T4925] RBP: 0000000000000002 R08: 0001c90012363427 R09: 0000000000000000 [ 55.817494][ T4925] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888100605b68 [ 55.820008][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 55.825611][ T4925] R13: 000000000000000b R14: ffff888100605b20 R15: 0000000000000001 [ 55.842376][ T4925] FS: 00007fa08dc376c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 55.851412][ T4925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.858036][ T4925] CR2: 00007f8ab2d9ed58 CR3: 0000000125d8a000 CR4: 00000000003506f0 [ 55.866060][ T4925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.874051][ T4925] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 55.882056][ T4925] Call Trace: [ 55.885471][ T4925] [ 55.888420][ T4925] ext4_xattr_set_entry+0x77f/0x1020 [ 55.893796][ T4925] ext4_xattr_ibody_set+0x184/0x3c0 [ 55.899041][ T4925] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 55.904926][ T4925] __ext4_expand_extra_isize+0x246/0x280 [ 55.910663][ T4925] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 55.916195][ T4925] ext4_evict_inode+0x80e/0xd90 [ 55.921226][ T4925] ? __pfx_ext4_evict_inode+0x10/0x10 [ 55.926738][ T4925] evict+0x2e3/0x550 [ 55.930650][ T4925] ? __dquot_initialize+0x146/0x7c0 [ 55.936002][ T4925] iput+0x4ed/0x650 [ 55.939882][ T4925] ext4_process_orphan+0x1a9/0x1c0 [ 55.945083][ T4925] ext4_orphan_cleanup+0x6a8/0xa00 [ 55.950231][ T4925] ext4_fill_super+0x3483/0x3810 [ 55.955259][ T4925] ? snprintf+0x86/0xb0 [ 55.959454][ T4925] ? set_blocksize+0x1a8/0x310 [ 55.964393][ T4925] ? sb_set_blocksize+0xe3/0x100 [ 55.969374][ T4925] ? setup_bdev_super+0x30e/0x370 [ 55.974489][ T4925] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.979854][ T4925] get_tree_bdev_flags+0x291/0x300 [ 55.985126][ T4925] ? __pfx_ext4_fill_super+0x10/0x10 [ 55.990491][ T4925] get_tree_bdev+0x1f/0x30 [ 55.994963][ T4925] ext4_get_tree+0x1c/0x30 [ 55.999477][ T4925] vfs_get_tree+0x57/0x1d0 [ 56.003921][ T4925] do_new_mount+0x24d/0x660 [ 56.008478][ T4925] path_mount+0x4a5/0xb70 [ 56.012832][ T4925] ? user_path_at+0x109/0x130 [ 56.017605][ T4925] __se_sys_mount+0x28c/0x2e0 [ 56.022320][ T4925] __x64_sys_mount+0x67/0x80 [ 56.026954][ T4925] x64_sys_call+0x2b51/0x3000 [ 56.031693][ T4925] do_syscall_64+0xd2/0x200 [ 56.036274][ T4925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.042372][ T4925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.048224][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.054233][ T4925] RIP: 0033:0x7fa08f1d0e6a [ 56.058680][ T4925] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.078398][ T4925] RSP: 002b:00007fa08dc36e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.086859][ T4925] RAX: ffffffffffffffda RBX: 00007fa08dc36ef0 RCX: 00007fa08f1d0e6a [ 56.094874][ T4925] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa08dc36eb0 [ 56.102955][ T4925] RBP: 0000200000000180 R08: 00007fa08dc36ef0 R09: 0000000001800700 [ 56.111045][ T4925] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 56.119109][ T4925] R13: 00007fa08dc36eb0 R14: 000000000000047c R15: 00002000000004c0 [ 56.127241][ T4925] [ 56.130287][ T4925] ---[ end trace 0000000000000000 ]--- [ 56.136615][ T4925] EXT4-fs (loop4): 1 orphan inode deleted [ 56.142985][ T4925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.173158][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.222229][ T4928] lo speed is unknown, defaulting to 1000 [ 56.234536][ T4928] lo speed is unknown, defaulting to 1000 [ 56.269067][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 56.309206][ T4978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.484'. [ 56.334674][ T4980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 56.343632][ T4980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 56.363252][ T3420] lo speed is unknown, defaulting to 1000 [ 56.367606][ T4982] team0: Device gtp3 is of different type [ 56.384553][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 56.464935][ T4928] lo speed is unknown, defaulting to 1000 [ 56.473292][ T5027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 56.511610][ T4928] lo speed is unknown, defaulting to 1000 [ 56.520225][ T5027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 56.662918][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.751466][ T5069] loop3: detected capacity change from 0 to 164 [ 56.888151][ T5085] loop2: detected capacity change from 0 to 2048 [ 56.916714][ T5085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.994134][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.011268][ T5098] loop4: detected capacity change from 0 to 2048 [ 57.086556][ T5098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.179797][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.251661][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 57.265116][ T5122] tipc: Enabling of bearer rejected, already enabled [ 57.386597][ T5138] loop4: detected capacity change from 0 to 512 [ 57.397530][ T5136] ALSA: seq fatal error: cannot create timer (-22) [ 57.423824][ T5138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.432698][ T5138] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.456760][ T5138] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.503: Allocating blocks 41-42 which overlap fs metadata [ 57.474308][ T5138] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.503: Allocating blocks 41-42 which overlap fs metadata [ 57.497367][ T5138] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.503: Failed to acquire dquot type 1 [ 57.524956][ T5138] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 57.549995][ T5138] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.503: corrupted inode contents [ 57.602841][ T5138] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.503: mark_inode_dirty error [ 57.644885][ T5138] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.503: corrupted inode contents [ 57.674407][ T5138] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.503: mark_inode_dirty error [ 57.696357][ T5138] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.503: corrupted inode contents [ 57.709494][ T5138] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 57.738697][ T5138] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.503: corrupted inode contents [ 57.892966][ T5138] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.503: mark_inode_dirty error [ 57.917170][ T5138] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 57.934629][ T5138] EXT4-fs (loop4): 1 truncate cleaned up [ 57.954378][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 57.954394][ T29] audit: type=1400 audit(1763523063.191:3494): avc: denied { mount } for pid=5134 comm="syz.3.501" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.994639][ T5138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.012975][ T29] audit: type=1400 audit(1763523063.251:3495): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.098014][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.126551][ T5157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5157 comm=syz.0.508 [ 58.139283][ T29] audit: type=1400 audit(1763523063.371:3496): avc: denied { create } for pid=5156 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.186426][ T29] audit: type=1326 audit(1763523063.431:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.245074][ T29] audit: type=1326 audit(1763523063.431:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.268562][ T29] audit: type=1326 audit(1763523063.461:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.292043][ T29] audit: type=1326 audit(1763523063.461:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.315489][ T29] audit: type=1326 audit(1763523063.471:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.339069][ T29] audit: type=1326 audit(1763523063.471:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.362532][ T29] audit: type=1326 audit(1763523063.471:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.4.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa08f1cf6c9 code=0x7ffc0000 [ 58.512250][ T5170] loop3: detected capacity change from 0 to 1024 [ 58.519377][ T5170] EXT4-fs: Ignoring removed bh option [ 58.540326][ T5170] EXT4-fs: inline encryption not supported [ 58.565011][ T5170] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.597333][ T5170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 58.617208][ T5170] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.512: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.636770][ T5181] batadv0: entered allmulticast mode [ 58.644430][ T5170] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.512: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.659099][ T5170] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.512: Failed to acquire dquot type 0 [ 58.680663][ T5170] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.685194][ T4258] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.691496][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 58.728165][ T5170] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.512: mark_inode_dirty error [ 58.756233][ T5170] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.777510][ T5170] EXT4-fs (loop3): 1 orphan inode deleted [ 58.790606][ T5170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.804806][ T57] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.829654][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 58.852152][ T5170] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.860926][ T5178] batadv0: left allmulticast mode [ 58.874393][ T5170] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.512: Invalid inode table block 1 in block_group 0 [ 58.887280][ T5170] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 58.906962][ T5170] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.512: mark_inode_dirty error [ 58.992086][ T5197] loop3: detected capacity change from 0 to 512 [ 59.004986][ T5197] EXT4-fs: Ignoring removed bh option [ 59.062591][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.095148][ T5197] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.282952][ T5226] serio: Serial port ttyS3 [ 59.321018][ T5226] loop4: detected capacity change from 0 to 1024 [ 59.330001][ T5226] EXT4-fs: Ignoring removed orlov option [ 59.346468][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.390936][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.427723][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.726860][ T5259] FAULT_INJECTION: forcing a failure. [ 59.726860][ T5259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.740045][ T5259] CPU: 0 UID: 0 PID: 5259 Comm: syz.3.532 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.740155][ T5259] Tainted: [W]=WARN [ 59.740164][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.740180][ T5259] Call Trace: [ 59.740187][ T5259] [ 59.740210][ T5259] __dump_stack+0x1d/0x30 [ 59.740239][ T5259] dump_stack_lvl+0xe8/0x140 [ 59.740266][ T5259] dump_stack+0x15/0x1b [ 59.740289][ T5259] should_fail_ex+0x265/0x280 [ 59.740327][ T5259] should_fail+0xb/0x20 [ 59.740342][ T5259] should_fail_usercopy+0x1a/0x20 [ 59.740385][ T5259] _copy_to_user+0x20/0xa0 [ 59.740418][ T5259] rng_dev_read+0x3ef/0x740 [ 59.740530][ T5259] ? __pfx_rng_dev_read+0x10/0x10 [ 59.740595][ T5259] vfs_readv+0x3fb/0x690 [ 59.740645][ T5259] __x64_sys_preadv+0xfd/0x1c0 [ 59.740745][ T5259] x64_sys_call+0x282e/0x3000 [ 59.740767][ T5259] do_syscall_64+0xd2/0x200 [ 59.740838][ T5259] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.740872][ T5259] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.740917][ T5259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.740946][ T5259] RIP: 0033:0x7f8ab435f6c9 [ 59.740999][ T5259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.741022][ T5259] RSP: 002b:00007f8ab2d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 59.741045][ T5259] RAX: ffffffffffffffda RBX: 00007f8ab45b6090 RCX: 00007f8ab435f6c9 [ 59.741098][ T5259] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 59.741117][ T5259] RBP: 00007f8ab2d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 59.741129][ T5259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.741145][ T5259] R13: 00007f8ab45b6128 R14: 00007f8ab45b6090 R15: 00007ffddab88808 [ 59.741170][ T5259] [ 60.238039][ T5272] lo speed is unknown, defaulting to 1000 [ 60.244344][ T5272] lo speed is unknown, defaulting to 1000 [ 60.691833][ T5312] lo speed is unknown, defaulting to 1000 [ 60.704771][ T5312] lo speed is unknown, defaulting to 1000 [ 60.975092][ T5312] loop3: detected capacity change from 0 to 256 [ 61.756305][ T5372] loop3: detected capacity change from 0 to 512 [ 61.783343][ T5372] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.554: EA inode hash validation failed [ 61.796163][ T5372] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.554: corrupted inode contents [ 61.813186][ T5372] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.554: mark_inode_dirty error [ 61.856555][ T5372] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.554: corrupted inode contents [ 61.892015][ T5372] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.554: mark_inode_dirty error [ 61.916385][ T5372] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.554: mark inode dirty (error -117) [ 61.961167][ T5372] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 61.990398][ T5372] EXT4-fs (loop3): 1 orphan inode deleted [ 61.997091][ T5372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.044313][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.231842][ T5404] __nla_validate_parse: 6 callbacks suppressed [ 62.231874][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 62.253301][ T5408] loop4: detected capacity change from 0 to 512 [ 62.304829][ T5408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.356606][ T5408] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.399912][ T5408] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.565: corrupted inode contents [ 62.444466][ T5408] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.565: mark_inode_dirty error [ 62.482780][ T5408] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.565: corrupted inode contents [ 62.565809][ T5408] vhci_hcd: invalid port number 23 [ 62.571035][ T5408] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 62.612400][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.034166][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 63.034233][ T29] audit: type=1400 audit(1763523068.271:3599): avc: denied { setopt } for pid=5430 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.034476][ T29] audit: type=1326 audit(1763523068.281:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.137937][ T29] audit: type=1326 audit(1763523068.331:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.137987][ T29] audit: type=1326 audit(1763523068.341:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138013][ T29] audit: type=1326 audit(1763523068.341:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138047][ T29] audit: type=1326 audit(1763523068.361:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138146][ T29] audit: type=1326 audit(1763523068.361:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138179][ T29] audit: type=1326 audit(1763523068.361:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138207][ T29] audit: type=1326 audit(1763523068.361:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.138232][ T29] audit: type=1326 audit(1763523068.361:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5434 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303fbaf6c9 code=0x7ffc0000 [ 63.417824][ T5446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5446 comm=syz.4.576 [ 63.736085][ T5455] rdma_rxe: rxe_newlink: failed to add lo [ 63.796264][ T5459] loop4: detected capacity change from 0 to 512 [ 63.817821][ T5459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.844425][ T5459] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.089763][ T5459] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #18: comm syz.4.580: corrupted inode contents [ 64.123081][ T5459] EXT4-fs (loop4): Remounting filesystem read-only [ 64.130562][ T5459] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 64.220749][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.398332][ T5479] ip6erspan0: entered promiscuous mode [ 64.474870][ T5485] loop4: detected capacity change from 0 to 8192 [ 64.484537][ T5485] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.517425][ T5493] binfmt_misc: register: failed to install interpreter file ./file1 [ 64.597021][ T5504] loop4: detected capacity change from 0 to 128 [ 64.599369][ T5505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5505 comm=syz.3.592 [ 64.603632][ T5504] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.984769][ T5520] dvmrp1: entered allmulticast mode [ 65.007714][ T5520] dvmrp1: left allmulticast mode [ 65.055463][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 65.550700][ T5555] tipc: Enabling of bearer rejected, already enabled [ 65.602912][ T5564] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.636730][ T5564] SELinux: policydb string length -262136 does not match expected length 8 [ 65.645725][ T5564] SELinux: failed to load policy [ 65.647732][ T5570] serio: Serial port ttyS3 [ 65.814665][ T5583] loop4: detected capacity change from 0 to 1024 [ 65.828929][ T5583] EXT4-fs: Ignoring removed nobh option [ 65.844764][ T5583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.866523][ T5583] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 65.884477][ T5583] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.619: inode #4294967295: comm syz.4.619: iget: illegal inode # [ 65.905766][ T5583] EXT4-fs (loop4): no journal found [ 65.910997][ T5583] EXT4-fs (loop4): can't get journal size [ 65.917871][ T5583] EXT4-fs (loop4): failed to initialize system zone (-22) [ 65.925060][ T5583] EXT4-fs (loop4): mount failed [ 65.941330][ T5583] netlink: 'syz.4.619': attribute type 13 has an invalid length. [ 65.977843][ T5601] FAULT_INJECTION: forcing a failure. [ 65.977843][ T5601] name failslab, interval 1, probability 0, space 0, times 0 [ 65.990662][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: syz.3.626 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.990715][ T5601] Tainted: [W]=WARN [ 65.990725][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.990760][ T5601] Call Trace: [ 65.990769][ T5601] [ 65.990779][ T5601] __dump_stack+0x1d/0x30 [ 65.990810][ T5601] dump_stack_lvl+0xe8/0x140 [ 65.990840][ T5601] dump_stack+0x15/0x1b [ 65.990866][ T5601] should_fail_ex+0x265/0x280 [ 65.990914][ T5601] should_failslab+0x8c/0xb0 [ 65.991011][ T5601] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 65.991053][ T5601] ? __alloc_skb+0x101/0x320 [ 65.991096][ T5601] __alloc_skb+0x101/0x320 [ 65.991183][ T5601] __ip_append_data+0x1935/0x2440 [ 65.991229][ T5601] ? __pfx_raw_getfrag+0x10/0x10 [ 65.991270][ T5601] ? ipv4_mtu+0x210/0x230 [ 65.991310][ T5601] ip_append_data+0xd6/0x130 [ 65.991372][ T5601] ? __pfx_raw_getfrag+0x10/0x10 [ 65.991404][ T5601] raw_sendmsg+0xc81/0xe60 [ 65.991448][ T5601] ? __pfx_raw_sendmsg+0x10/0x10 [ 65.991509][ T5601] inet_sendmsg+0xc5/0xd0 [ 65.991540][ T5601] __sock_sendmsg+0x102/0x180 [ 65.991607][ T5601] ____sys_sendmsg+0x345/0x4e0 [ 65.991637][ T5601] ___sys_sendmsg+0x17b/0x1d0 [ 65.991686][ T5601] __sys_sendmmsg+0x178/0x300 [ 65.991727][ T5601] __x64_sys_sendmmsg+0x57/0x70 [ 65.991755][ T5601] x64_sys_call+0x1c4a/0x3000 [ 65.991808][ T5601] do_syscall_64+0xd2/0x200 [ 65.991836][ T5601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.991873][ T5601] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.991918][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.991959][ T5601] RIP: 0033:0x7f8ab435f6c9 [ 65.991979][ T5601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.992006][ T5601] RSP: 002b:00007f8ab2dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.992033][ T5601] RAX: ffffffffffffffda RBX: 00007f8ab45b5fa0 RCX: 00007f8ab435f6c9 [ 65.992050][ T5601] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000005 [ 65.992067][ T5601] RBP: 00007f8ab2dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 65.992168][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.992184][ T5601] R13: 00007f8ab45b6038 R14: 00007f8ab45b5fa0 R15: 00007ffddab88808 [ 65.992218][ T5601] [ 66.234559][ T5599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=5599 comm=syz.1.625 [ 66.355038][ T5610] serio: Serial port ttyS3 [ 66.363916][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.497786][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.616016][ T5583] batman_adv: batadv0: Interface deactivated: vxlan0 [ 66.698152][ T138] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.707219][ T138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.740058][ T138] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.749157][ T138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.774033][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 66.783623][ T138] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.792577][ T138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.824076][ T138] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.833091][ T138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.021497][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 67.030507][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.645'. [ 67.284472][ T5693] FAULT_INJECTION: forcing a failure. [ 67.284472][ T5693] name failslab, interval 1, probability 0, space 0, times 0 [ 67.297274][ T5693] CPU: 0 UID: 0 PID: 5693 Comm: syz.0.653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.297385][ T5693] Tainted: [W]=WARN [ 67.297393][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.297408][ T5693] Call Trace: [ 67.297414][ T5693] [ 67.297438][ T5693] __dump_stack+0x1d/0x30 [ 67.297459][ T5693] dump_stack_lvl+0xe8/0x140 [ 67.297477][ T5693] dump_stack+0x15/0x1b [ 67.297523][ T5693] should_fail_ex+0x265/0x280 [ 67.297600][ T5693] should_failslab+0x8c/0xb0 [ 67.297634][ T5693] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 67.297670][ T5693] ? __alloc_skb+0x101/0x320 [ 67.297740][ T5693] __alloc_skb+0x101/0x320 [ 67.297772][ T5693] ? audit_log_start+0x342/0x720 [ 67.297804][ T5693] audit_log_start+0x3a0/0x720 [ 67.297827][ T5693] ? kstrtouint+0x76/0xc0 [ 67.297857][ T5693] audit_seccomp+0x48/0x100 [ 67.297954][ T5693] ? __seccomp_filter+0x82d/0x1250 [ 67.297986][ T5693] __seccomp_filter+0x83e/0x1250 [ 67.298018][ T5693] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.298081][ T5693] ? vfs_write+0x7e8/0x960 [ 67.298100][ T5693] ? __rcu_read_unlock+0x4f/0x70 [ 67.298164][ T5693] ? __fget_files+0x184/0x1c0 [ 67.298197][ T5693] __secure_computing+0x82/0x150 [ 67.298303][ T5693] syscall_trace_enter+0xcf/0x1e0 [ 67.298330][ T5693] do_syscall_64+0xac/0x200 [ 67.298354][ T5693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.298478][ T5693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.298559][ T5693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.298633][ T5693] RIP: 0033:0x7f7b8c61f6c9 [ 67.298650][ T5693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.298673][ T5693] RSP: 002b:00007f7b8b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 67.298737][ T5693] RAX: ffffffffffffffda RBX: 00007f7b8c875fa0 RCX: 00007f7b8c61f6c9 [ 67.298754][ T5693] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 67.298770][ T5693] RBP: 00007f7b8b087090 R08: 0000000000000000 R09: 0000000000000000 [ 67.298796][ T5693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.298808][ T5693] R13: 00007f7b8c876038 R14: 00007f7b8c875fa0 R15: 00007ffc5a52f178 [ 67.298829][ T5693] [ 67.647865][ T5705] tipc: Enabling of bearer rejected, already enabled [ 67.827887][ T5710] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.636632][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 68.654250][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 68.654268][ T29] audit: type=1400 audit(1763523073.891:3909): avc: denied { getopt } for pid=5735 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.702282][ T29] audit: type=1326 audit(1763523073.931:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.725715][ T29] audit: type=1326 audit(1763523073.931:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.749205][ T29] audit: type=1326 audit(1763523073.931:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.772643][ T29] audit: type=1326 audit(1763523073.931:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.795985][ T29] audit: type=1326 audit(1763523073.931:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.819395][ T29] audit: type=1326 audit(1763523073.931:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ab435df10 code=0x7ffc0000 [ 68.842739][ T29] audit: type=1326 audit(1763523073.931:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.866225][ T29] audit: type=1326 audit(1763523073.931:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.889635][ T29] audit: type=1326 audit(1763523073.931:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5721 comm="syz.3.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ab435f6c9 code=0x7ffc0000 [ 68.923443][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 69.158548][ T5769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=5769 comm=syz.3.676 [ 69.200536][ T5769] loop3: detected capacity change from 0 to 512 [ 69.214548][ T5769] EXT4-fs: Ignoring removed bh option [ 69.224640][ T5769] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.233729][ T5769] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 69.264438][ T5769] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 69.284037][ T5769] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 69.304532][ T5769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.388925][ T5773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5773 comm=syz.3.676 [ 69.495391][ T5787] tipc: Enabling of bearer rejected, already enabled [ 69.550401][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.619162][ T5804] FAULT_INJECTION: forcing a failure. [ 69.619162][ T5804] name failslab, interval 1, probability 0, space 0, times 0 [ 69.631940][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: syz.0.685 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.632013][ T5804] Tainted: [W]=WARN [ 69.632050][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.632066][ T5804] Call Trace: [ 69.632074][ T5804] [ 69.632084][ T5804] __dump_stack+0x1d/0x30 [ 69.632113][ T5804] dump_stack_lvl+0xe8/0x140 [ 69.632141][ T5804] dump_stack+0x15/0x1b [ 69.632158][ T5804] should_fail_ex+0x265/0x280 [ 69.632246][ T5804] should_failslab+0x8c/0xb0 [ 69.632284][ T5804] kmem_cache_alloc_noprof+0x50/0x480 [ 69.632321][ T5804] ? pidfs_register_pid+0x87/0x180 [ 69.632422][ T5804] pidfs_register_pid+0x87/0x180 [ 69.632505][ T5804] unix_socketpair+0x7c/0x430 [ 69.632545][ T5804] __sys_socketpair+0x21d/0x430 [ 69.632651][ T5804] __x64_sys_socketpair+0x52/0x60 [ 69.632679][ T5804] x64_sys_call+0x2bf6/0x3000 [ 69.632701][ T5804] do_syscall_64+0xd2/0x200 [ 69.632721][ T5804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.632758][ T5804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.632880][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.632905][ T5804] RIP: 0033:0x7f7b8c61f6c9 [ 69.632920][ T5804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.633018][ T5804] RSP: 002b:00007f7b8b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 69.633038][ T5804] RAX: ffffffffffffffda RBX: 00007f7b8c875fa0 RCX: 00007f7b8c61f6c9 [ 69.633133][ T5804] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 69.633150][ T5804] RBP: 00007f7b8b087090 R08: 0000000000000000 R09: 0000000000000000 [ 69.633167][ T5804] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 69.633183][ T5804] R13: 00007f7b8c876038 R14: 00007f7b8c875fa0 R15: 00007ffc5a52f178 [ 69.633203][ T5804] [ 69.954307][ T5828] tipc: Enabling of bearer rejected, already enabled [ 69.983717][ T5844] netlink: 'syz.1.697': attribute type 39 has an invalid length. [ 70.005906][ T5846] lo speed is unknown, defaulting to 1000 [ 70.012040][ T5846] lo speed is unknown, defaulting to 1000 [ 70.040880][ T5860] FAULT_INJECTION: forcing a failure. [ 70.040880][ T5860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.054270][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz.0.700 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.054312][ T5860] Tainted: [W]=WARN [ 70.054321][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.054337][ T5860] Call Trace: [ 70.054345][ T5860] [ 70.054355][ T5860] __dump_stack+0x1d/0x30 [ 70.054378][ T5860] dump_stack_lvl+0xe8/0x140 [ 70.054453][ T5860] dump_stack+0x15/0x1b [ 70.054543][ T5860] should_fail_ex+0x265/0x280 [ 70.054626][ T5860] should_fail+0xb/0x20 [ 70.054648][ T5860] should_fail_usercopy+0x1a/0x20 [ 70.054677][ T5860] _copy_to_user+0x20/0xa0 [ 70.054711][ T5860] simple_read_from_buffer+0xb5/0x130 [ 70.054746][ T5860] proc_fail_nth_read+0x10e/0x150 [ 70.054828][ T5860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.054868][ T5860] vfs_read+0x1a8/0x770 [ 70.054912][ T5860] ? __cond_resched+0x4e/0x90 [ 70.054956][ T5860] ksys_read+0xda/0x1a0 [ 70.054992][ T5860] __x64_sys_read+0x40/0x50 [ 70.055051][ T5860] x64_sys_call+0x27c0/0x3000 [ 70.055082][ T5860] do_syscall_64+0xd2/0x200 [ 70.055109][ T5860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.055185][ T5860] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.055254][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.055283][ T5860] RIP: 0033:0x7f7b8c61e0dc [ 70.055302][ T5860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.055406][ T5860] RSP: 002b:00007f7b8b087030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.055492][ T5860] RAX: ffffffffffffffda RBX: 00007f7b8c875fa0 RCX: 00007f7b8c61e0dc [ 70.055508][ T5860] RDX: 000000000000000f RSI: 00007f7b8b0870a0 RDI: 0000000000000006 [ 70.055523][ T5860] RBP: 00007f7b8b087090 R08: 0000000000000000 R09: 0000000000000000 [ 70.055551][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.055565][ T5860] R13: 00007f7b8c876038 R14: 00007f7b8c875fa0 R15: 00007ffc5a52f178 [ 70.055586][ T5860] [ 70.061977][ T5861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5861 comm=syz.3.698 [ 70.255868][ T5846] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 70.375503][ T5846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.419038][ T5861] bond1: (slave geneve3): making interface the new active one [ 70.450990][ T5861] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 70.762772][ T5972] ================================================================== [ 70.770918][ T5972] BUG: KCSAN: data-race in copy_mm / copy_page_range [ 70.777627][ T5972] [ 70.779961][ T5972] read-write to 0xffff888104294c60 of 4 bytes by task 5973 on cpu 1: [ 70.788037][ T5972] copy_page_range+0x25e/0x3be0 [ 70.792915][ T5972] dup_mmap+0x885/0xf20 [ 70.797079][ T5972] copy_mm+0x11a/0x370 [ 70.801165][ T5972] copy_process+0xd08/0x2000 [ 70.805774][ T5972] kernel_clone+0x16c/0x5c0 [ 70.810302][ T5972] __x64_sys_clone+0xe6/0x120 [ 70.815006][ T5972] x64_sys_call+0x119c/0x3000 [ 70.819726][ T5972] do_syscall_64+0xd2/0x200 [ 70.824246][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.830173][ T5972] [ 70.832514][ T5972] read to 0xffff888104294ac0 of 1408 bytes by task 5972 on cpu 0: [ 70.840325][ T5972] copy_mm+0xe2/0x370 [ 70.844335][ T5972] copy_process+0xd08/0x2000 [ 70.848948][ T5972] kernel_clone+0x16c/0x5c0 [ 70.853477][ T5972] __x64_sys_clone+0xe6/0x120 [ 70.858178][ T5972] x64_sys_call+0x119c/0x3000 [ 70.862912][ T5972] do_syscall_64+0xd2/0x200 [ 70.867482][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.873390][ T5972] [ 70.875723][ T5972] Reported by Kernel Concurrency Sanitizer on: [ 70.881916][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.3.715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.893135][ T5972] Tainted: [W]=WARN [ 70.896939][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.906994][ T5972] ==================================================================