last executing test programs: 25.238235156s ago: executing program 2 (id=900): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x7fffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000000c0)={0x20000000}) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 21.660041482s ago: executing program 2 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}}}}]}}]}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1, 0x0, 0x2, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) epoll_create1(0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000100), 0x8) r10 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ptrace(0x10, r10) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0)={0x0, 0x2}, 0x10}, 0x94) 20.866202411s ago: executing program 2 (id=962): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) prctl$PR_SET_NAME(0xf, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x6}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0xa0, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x1}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) capset(&(0x7f0000000700)={0x20080522}, &(0x7f0000000740)={0x5, 0x9, 0xfffffff7, 0x80000001, 0x2fc3, 0x81}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x3, 0x0, 0x0, @tick=0x6, {}, {}, @time=@time={0x5, 0x3}}], 0x1c) readv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) 20.843134964s ago: executing program 2 (id=963): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/12], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0xb0, 0x14, 0xa, 0x100, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x5c, 0x8, "1d1f0a37f5be9fd0587334eb5de8867cd3d2f5b09bf54751767353284a1b93ecdfce756b64e64b4f1b5d16398ff50ed8ef6a8e0abe1797d96e13236f97a67dfffba114cbe30040a17575e885436821989d4322c0925669da"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc}]}, @NFT_MSG_NEWSETELEM={0x1eec, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e94, 0x3, 0x0, 0x1, [{0x640, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x240, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "7226ea855820d0bde11cff8c3db2c39304726dbfe9f99b8b7099a36573da39488fccf28dd39482c799106a1094debb1648bc13447cd9a337da000dd3642d2d7aadd992ac711e8d500f43656a0e11"}, @NFTA_DATA_VALUE={0x8d, 0x1, "1cfffb8b123d24e10807052404d4f4a81279ecf13a071e8f6ee29ea280394fe9adfaae3d497cdb2c15e3c0381d302bf7c1728c3b039ed18eac4d8b7c14baaee988fb9f0d7b2b7accc24ba7c7a86cab0a6b5951fbdb00963a12f621d5d74d7323d59f9c73564419ad9f57aeba909fb858fa03898cab16318593bb13194ea772b6053f1e53470493430a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "fead7c3c0d0d9c0a868d8aed5b81d48749f316a18e9b6ed94f32454bcdf6ffd4efab49d7ab6e0a0b9a9860afab9d95d81579c7606592d9caa9547838e26d4e79152253521b614fd492e3b0daf2876b011d3a1e05c308fcc3b1617b390f62bd7a24e54ce2a1d6fc65e1e455f2cacb55e3d58cc924a9ae63267c3141d671ac263ad0b0dc1b46c2b668671a61aeecab612ce9849db4d95f2cba6e38c0904debd4cda3099c74bb6e56ff14ce3f9f8df7eb4755960fa406c9c1fa7000efd0e292fb1dc5dc"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x32c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "8b72a54f6deab31e30461e6bae5ba6933c9bdfbd0f5b78"}, @NFTA_DATA_VALUE={0xe2, 0x1, "6525136d56ae845bcdb561531461838b1a2f11486da4f571a28ff0541622ed430b24741a1144d23621e79048115a552b0d3fbda1e237770105d5de3b587e5954fd188028a34ca63c44b6254a83d92935ff812a1ccce18d5bff7e6dbaacb01b4dae7fbfa72a032ce3de9652b84aead3b8eec0f2963dad6b2622bcb8cc93729dac773fdfa937a53a8b2fc0b6250b297e06840872081f07aab928485a6c6c6d5e34d26aa56fc0b7e2f7ac3f8dd08bd5034f2ce35cf2183f3dd3db7f9cf47f57b574064556219cd6730a7c8829f230a66e546c9cbd94460606a605893dc86bff"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "0dab3eec74441c5bf6ce73efc0bba477dfac6c94dcde0e23c50b6ad364ad7df1c061a44dc5acd2e60e62567c6e17c4394f19d91468f7a09fbfcd1550c00ff76d49927f80694033bddcf42eccf348e097bb067acfd46e6b2b25a3ffb7adc9df8723baf3fd392905cde2d986383c5679c0b7405a4ea718539ae11f363b3b06151fdf4f8c2a33910b7ed98839265d5ede4147b36d15b2cb5f7a7a65a99207837ca5d653199a007c2fe9ae4e35884c5d1bb40eb7af11c0a1b86d59cc0a6196e4cea91c2b772c2a6a72e03b"}, @NFTA_DATA_VALUE={0xd3, 0x1, "4edca47f67c2c62cf055d28f72cb270a925caf50eb15ca2dc789c6514a437beecd53071431c11990dfde1b2e2b0ca2e0f591d6439f99c93cf0695cdaa05fa3202fb1145d37d757281561a513b5431df28a8a71ed3ff0fddf76ad6faeb767bbe2a105cacc1d39c12dcf251f95af007e139079d90173bd6e7da3306c0c81674b819dbdb67c339e998652288b4fd4602fe3bf54ca62f3e8c2ceeef5040924ca1b1f8e0c7e88a85f8d3d67506df3b64a85c31eb628e3e93efc2f7688242b5baf561759f1157074bb7ba365d3049579e4fe"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x4b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x30, 0x1, "6a5512f4b889bdfc51bb606c84efdcd4ccd67fcad6ab590c65bac8fe94ee7568e32e85e502db4a75fc01e9a7"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x344, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x320, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_FROM_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0x4c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_RANGE_TO_DATA={0x198, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "4b91d9f648eb63cca09804ecebb2a300bd2b515948768016f717784f7f034096aab74c364d1fc663ca55f0bbdd916febe10b482a3ee37c66f556760412c0a5cb735235308370fb14d6c6a3a6327b48a0d056223452be2e838f313459004f3db16d9303a8173f29b4e912abbbcd060f8200996b5f57eae1e19e38ed3803f9ba5e82cc5c511fdc36ec45801768a434743b40620ba9d731b8a584eac67e2801"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "42ef35937a67ff116175f374e96b0e672a5ddea368f8a781799566489bb6422a8cda3769f431cb00e0d5431464579c6b4bac248646d294c38c70fc7fcc5d348fa1faff858fb8cae446495a9ccb280b42fda04a2d9b2899ecdfc6c4ff575f213d16eef04797900a6c615943611f1869c0f5e9201e36c30f60dffecedff8873f2bfbde680abeee80c2b774424a938306481e1f9b2cce8d5e23e84b8dc522cf69336b375295def38d3b2a9d90be7a1129073caefdab4239deea"}]}, @NFTA_RANGE_FROM_DATA={0xe0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "af6da912834c7b8e7bbb591cef69b761ff86ba67366068f1aa25bef9f83513486f25f8ca99398b707495583ca0d383f71139381d76cfe48270456c67d6f6668d3cc89f8438d00a7bc09a6c8cd4f2c24938640329c4a75d91288d771d6e8274dfb12a79839a39c318a5576daf08446ebdd1877f3ff72ac114e0ccc39e6f817a34e467fc63ca217b9160a909fcbef130dfeda0a2d82a1f727a82b5442f8b4cd2a581c1ed7a670615c9ab8136edf3619c946b5f2f47e26d0a066b7f1017ac5cd5b46892bc40ae865fc11d94a574de768cb85e53a9514c624f79"}]}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "ea26b544e0fcf763bed4ba5ef1f46d0933dea52759131e35ae36a1bdc0c0da955145e8eac5919d4a"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd, 0x1, "0c5a717f23388fc23e"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "e82a760d79696ff3fd6d5d6462c4617acd9805889d2a2f28b8b11e6bc21c7c6259815bfa3b2780cd1f83de8e7bc93516d9761147161d8e9895bcec4457418724a74f770d1c"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x112}]}, {0x1364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "365357bf1a14a866e3b85ff6e313a04c1c130ab13d6ba3a56d9e183290470ebf8074b3e5cf06bcc9fd317230886e2822ec0bccdd3c82be4a7f755455ad77cd1c373a3c49ce4a87fdb10401e7627314deba8b72227cc866a06a2cc0f7cc3e655ef4c47b0fa2ce9a157b465c95878330d917d5321990c563b401f85f285e7e645c98313b74db0b312ecfc8dba086fd03a9b71612b4d111cca6e98b698d08dc225ae9cc91eb2e618cfddc8d65c2f69ff2a248b1e3889877882646b963b1eaef47ad0a0f3fa18986cdd4f64cd039fa96763702"}, @NFTA_DATA_VALUE={0x5e, 0x1, "c5c38239ca4b60d0d72550b460be7cb2284ab172f8ea2ca80df405cc70955fdc7642f5b853d5480003ac15cb94f7dfbc830a4e5062ed302684d1fb309de52a158689674142f49c04a6ccab60a6bdbd808ded64c60259458ceebc"}, @NFTA_DATA_VALUE={0x69, 0x1, "adbe6b3aa60e2d9682350a407a13dd3f7f0a590ba59a966192add485e8bfc9f5edc6c8f5874b83f2972af1b7b5bee587070c5983291ce63e7a66c57fef4ec994f3d73e25b83a5df4ad2a39b897e8718c7709cfeb6ebe1b4daeeebc418b03a2a9eec0903285"}]}, @NFTA_SET_ELEM_DATA={0x11b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xcd, 0x1, "0b0d62e200bfe9e8438a1230d963a354bcbb328f0a6ab0382ec07ba640e368b1015401a47121cfe3d075637fe08f8b615fa532be0cdd75d7c3a01a706d6453d6fe8dd2a795307c603eacd5611320747fe3d27afca169db91a9c73022ba8bad2f96d83f8811cb38bcc03303deca8e97db5f2eb1660ef0a616e550b3d1a9db95b1f87df2aabdcf1f7053aa238e028cc55aa8f044281dcbfd0e393b482bc73e4519389be907d9f9786f2becf86926249d33742ad2e51800016a14ab858fb7a41b94206fddff1396e5c523"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x5, 0x1, "11"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xec, 0x5, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x56e}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4ca}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x235}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x6f, 0xc, "90f51224cfd74a22318f26ff7b7214b2167c4e923fc6a3b923d92266071c2c1e1a99f2aabb8b9db7fc5b4c11024745e86fb00d62bb4dffad78d100a2b724d95e5da6330b8fca2dbf18af1b8580a792adc90eb0bd6ca359f22f02b7cbdd46a22ffbef245744115453ee2228"}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x160, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0xb8, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x82}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xcf}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xfd}]}}}, {0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x23b0}, 0x1, 0x0, 0x0, 0x8000841}, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000003c0), 0x1, 0x446, &(0x7f0000000c00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents64(r4, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.57817277s ago: executing program 2 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x7}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 20.166308621s ago: executing program 2 (id=967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 20.141192704s ago: executing program 32 (id=967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.909063941s ago: executing program 1 (id=1352): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @perf_bp={0x0, 0x8}, 0x10a010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 5.62001785s ago: executing program 1 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}}}}]}}]}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1, 0x0, 0x2, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) epoll_create1(0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000100), 0x8) r10 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ptrace(0x10, r10) r11 = syz_open_procfs(r10, &(0x7f0000000040)='status\x00') pread64(r11, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0)={0x0, 0x2}, 0x10}, 0x94) 4.203901761s ago: executing program 1 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0xd8, 0x5, 0x46, 0x9, 0x6, 0x2, 0x3, 0x0, 0x370, 0x40, 0x1af, 0xffff7fff, 0x1, 0x38, 0x4, 0x9, 0x4, 0x5}, [{0x6474e551, 0x8, 0x5, 0x100000000, 0x10, 0x7, 0x8000000000000001, 0xffffffffffffff49}, {0x60000000, 0x8, 0x10, 0x5, 0x9, 0x995, 0x1ff800000}, {0x5, 0xffffffff, 0x9, 0x32, 0x6, 0x6e, 0x1, 0x1}, {0x0, 0x7, 0x7, 0xa, 0x4, 0x4, 0x8, 0x3}], "c2c0979a72c14644f63427a1f67d4fa4a62c5c2df0b3499db105d2cf7cc4fcc16d60c041276e95c14e9496285e382083db1d6223f7dbcae50fdb1ba17047bbac70919902ddb946809f55201ed3de53ed11a46c300b25f58ab2acad3827d198c86b6a5c08d5a51789566ff58497ad4e3c06a60c3bf050b88858f25bd585fac31ac233b8312279b67fe13b2147da4c1f4ea9fe5e93c73b", ['\x00', '\x00', '\x00', '\x00']}, 0x5b6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) signalfd4(r0, &(0x7f0000000180)={[0x1]}, 0x8, 0x800) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) 4.082233143s ago: executing program 1 (id=1374): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000000c0)={0x20000000}) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.171701243s ago: executing program 4 (id=1399): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) unshare(0x22020400) mount(0x0, 0x0, 0x0, 0x42010, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x2090) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) 2.146118006s ago: executing program 4 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') 2.135091297s ago: executing program 4 (id=1401): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@noload}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@block_validity}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") timer_create(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a"], 0x2c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 2.091875692s ago: executing program 4 (id=1402): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x7cc2958f3f13c549, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="00009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) 2.00329327s ago: executing program 4 (id=1409): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) shutdown(r1, 0x0) 1.906150429s ago: executing program 5 (id=1413): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@noload}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@block_validity}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") timer_create(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a"], 0x2c}}, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 1.545290256s ago: executing program 4 (id=1415): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x7fffffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000000c0)={0x20000000}) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.093426301s ago: executing program 5 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 1.092918471s ago: executing program 5 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') 1.058650554s ago: executing program 5 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @perf_bp={0x0, 0x8}, 0x10a010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.029049617s ago: executing program 0 (id=1420): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x7cc2958f3f13c549, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="00009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x20c1b, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x0, 0x0, 0x7cce8c743ee810dd}) 989.754261ms ago: executing program 5 (id=1421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 937.150126ms ago: executing program 0 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 908.930729ms ago: executing program 0 (id=1423): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @perf_bp={0x0, 0x8}, 0x10a010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 849.907995ms ago: executing program 0 (id=1424): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) unshare(0x22020400) mount(0x0, 0x0, 0x0, 0x42010, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x2090) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) 773.943893ms ago: executing program 0 (id=1425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) connect$tipc(r4, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x807f, 0x1000000, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) timer_create(0xfffffff4, 0x0, &(0x7f00000004c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x8004, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@newtaction={0x60, 0x30, 0x200, 0x70bd2b, 0x25dfdbde, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x64, 0xf2, 0x3, 0x40000007}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xd854}, 0x4000814) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000ebe0ad79d04923e6efa80700ff2a52ffdbdf250d00000008000400dd0d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x40000) 344.073475ms ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x6002, 0x10000, 0x0, 0x6, 0x10000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x7ff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) syz_usb_disconnect(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xea67}, 0x18) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r11, 0x0, &(0x7f0000000040)='./file0\x00', 0xe4, 0x183000, 0x12345}) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r14, &(0x7f0000000040), 0x8) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x2c, 0x2, @thr={&(0x7f00000005c0)="2f07cd259433d25e1eedeca3641bfe943320177cf15a21710918f4ddbdf7aacc1e7731b24c1555f8aef8e986c3b7f710eafcf2cabf6a289c46411b042465c553ffd115dfe8ae55ebf5324ce02931c5e63dd082948fc643ca4eb5eae24d2e9118723fa641231e2444aa62268bfed86a71250502d4983776951d04ec6fa741b16ab3c3afb566b4d2011ff6e72dab0e1f9b53816ba8c8a03cf3f8921f8d7a28b1136a52", &(0x7f0000000340)="378ee4b5060951"}}, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe3d}, 0x94) 274.932333ms ago: executing program 3 (id=1433): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0xbc3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64], 0x48) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 274.314842ms ago: executing program 3 (id=1434): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00') 254.023394ms ago: executing program 3 (id=1435): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) unshare(0x22020400) mount(0x0, 0x0, 0x0, 0x42010, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x2090) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) 195.70581ms ago: executing program 3 (id=1436): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4, @perf_bp={0x0, 0x8}, 0x10a010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 193.84527ms ago: executing program 3 (id=1437): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) unshare(0x22020400) mount(0x0, 0x0, 0x0, 0x42010, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x2090) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) 170.810673ms ago: executing program 3 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x19c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001b) r5 = open(&(0x7f0000000000)='.\x00', 0x161000, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r11], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r15 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000180000028000000", @ANYRES32], 0x50) write$selinux_load(r15, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, r5, 0x0) 31.464886ms ago: executing program 1 (id=1439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000300000000000019078ac1e0001ac141421a017453cde60feb42d0d2a6ec39de3aa03099078000701004510011d"], 0x0) 488.25µs ago: executing program 5 (id=1440): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@noload}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@block_validity}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") timer_create(0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 0s ago: executing program 1 (id=1441): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0001c0 RDI: 0000000000000005 [ 77.362716][ T6766] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.362728][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.362741][ T6766] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 77.362762][ T6766] [ 77.362779][ T6766] Mem-Info: [ 77.575557][ T6766] active_anon:40750 inactive_anon:1 isolated_anon:0 [ 77.575557][ T6766] active_file:20316 inactive_file:2281 isolated_file:0 [ 77.575557][ T6766] unevictable:0 dirty:480 writeback:0 [ 77.575557][ T6766] slab_reclaimable:3231 slab_unreclaimable:41478 [ 77.575557][ T6766] mapped:39663 shmem:36601 pagetables:1341 [ 77.575557][ T6766] sec_pagetables:0 bounce:0 [ 77.575557][ T6766] kernel_misc_reclaimable:0 [ 77.575557][ T6766] free:1827125 free_pcp:6620 free_cma:0 [ 77.620613][ T6766] Node 0 active_anon:163116kB inactive_anon:4kB active_file:81264kB inactive_file:9124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158652kB dirty:1920kB writeback:0kB shmem:146404kB kernel_stack:4416kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.648186][ T6766] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.677912][ T6766] lowmem_reserve[]: 0 2881 7859 7859 [ 77.683255][ T6766] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 77.714634][ T6766] lowmem_reserve[]: 0 0 4978 4978 [ 77.719751][ T6766] Node 0 Normal free:4346284kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156272kB inactive_anon:4kB active_file:81264kB inactive_file:9124kB unevictable:0kB writepending:1920kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:29968kB local_pcp:13508kB free_cma:0kB [ 77.752881][ T6766] lowmem_reserve[]: 0 0 0 0 [ 77.757401][ T6766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.770097][ T6766] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 77.786273][ T6766] Node 0 Normal: 1*4kB (E) 3*8kB (UME) 2*16kB (ME) 1*32kB (E) 3*64kB (ME) 6*128kB (UME) 3*256kB (UE) 7*512kB (UE) 13*1024kB (UE) 5*2048kB (U) 1054*4096kB (UM) = 4346140kB [ 77.803588][ T6766] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 77.813021][ T6766] 55743 total pagecache pages [ 77.817757][ T6766] 2 pages in swap cache [ 77.821959][ T6766] Free swap = 124988kB [ 77.826131][ T6766] Total swap = 124996kB [ 77.830314][ T6766] 2097051 pages RAM [ 77.834110][ T6766] 0 pages HighMem/MovableOnly [ 77.838784][ T6766] 81087 pages reserved [ 77.848589][ T29] kauditd_printk_skb: 2825 callbacks suppressed [ 77.848601][ T29] audit: type=1400 audit(1763141977.558:11401): avc: denied { create } for pid=6765 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.876004][ T6784] FAULT_INJECTION: forcing a failure. [ 77.876004][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 77.888636][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.4.749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.888667][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.888680][ T6784] Call Trace: [ 77.888687][ T6784] [ 77.888694][ T6784] __dump_stack+0x1d/0x30 [ 77.888715][ T6784] dump_stack_lvl+0xe8/0x140 [ 77.888732][ T6784] dump_stack+0x15/0x1b [ 77.888829][ T6784] should_fail_ex+0x265/0x280 [ 77.888850][ T6784] ? audit_log_d_path+0x8d/0x150 [ 77.888873][ T6784] should_failslab+0x8c/0xb0 [ 77.888930][ T6784] __kmalloc_cache_noprof+0x4c/0x4a0 [ 77.888959][ T6784] audit_log_d_path+0x8d/0x150 [ 77.888999][ T6784] audit_log_d_path_exe+0x42/0x70 [ 77.889018][ T6784] audit_log_task+0x1e9/0x250 [ 77.889050][ T6784] ? kstrtouint+0x76/0xc0 [ 77.889111][ T6784] audit_seccomp+0x61/0x100 [ 77.889136][ T6784] ? __seccomp_filter+0x82d/0x1250 [ 77.889159][ T6784] __seccomp_filter+0x83e/0x1250 [ 77.889242][ T6784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.889269][ T6784] ? vfs_write+0x7e8/0x960 [ 77.889309][ T6784] ? __rcu_read_unlock+0x4f/0x70 [ 77.889336][ T6784] ? __fget_files+0x184/0x1c0 [ 77.889368][ T6784] __secure_computing+0x82/0x150 [ 77.889477][ T6784] syscall_trace_enter+0xcf/0x1e0 [ 77.889507][ T6784] do_syscall_64+0xac/0x200 [ 77.889530][ T6784] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.889555][ T6784] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.889612][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.889636][ T6784] RIP: 0033:0x7f91a9b3f6c9 [ 77.889652][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.889671][ T6784] RSP: 002b:00007f91a859f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 77.889734][ T6784] RAX: ffffffffffffffda RBX: 00007f91a9d95fa0 RCX: 00007f91a9b3f6c9 [ 77.889747][ T6784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000000000000 [ 77.889785][ T6784] RBP: 00007f91a859f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.889795][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.889806][ T6784] R13: 00007f91a9d96038 R14: 00007f91a9d95fa0 R15: 00007ffe7074e288 [ 77.889825][ T6784] [ 78.116432][ T29] audit: type=1326 audit(1763141977.578:11402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 78.139925][ T29] audit: type=1326 audit(1763141977.578:11403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 78.163311][ T29] audit: type=1326 audit(1763141977.578:11404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 78.186696][ T29] audit: type=1326 audit(1763141977.578:11405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91a9b3df10 code=0x7ffc0000 [ 78.210112][ T29] audit: type=1326 audit(1763141977.578:11406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91a9b3e17f code=0x7ffc0000 [ 78.233392][ T29] audit: type=1326 audit(1763141977.578:11407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 78.238994][ T6777] SELinux: failed to load policy [ 78.258488][ T29] audit: type=1326 audit(1763141977.968:11408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f91a9b3e0dc code=0x7ffc0000 [ 78.274795][ T6789] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.284239][ T29] audit: type=1326 audit(1763141977.968:11409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91a9b3e17f code=0x7ffc0000 [ 78.293669][ T6788] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 78.314499][ T29] audit: type=1326 audit(1763141977.968:11410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91a9b3e32a code=0x7ffc0000 [ 78.322174][ T6788] netlink: 52 bytes leftover after parsing attributes in process `syz.1.750'. [ 78.489578][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 78.504158][ T6809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.515208][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 78.519684][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6807 comm=syz.3.755 [ 78.574273][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 78.587524][ T6807] netlink: 'syz.3.755': attribute type 4 has an invalid length. [ 78.613201][ T6798] loop4: detected capacity change from 0 to 32768 [ 78.740769][ T6820] loop3: detected capacity change from 0 to 128 [ 78.968358][ T6836] FAULT_INJECTION: forcing a failure. [ 78.968358][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.981593][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.3.768 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.981631][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.981641][ T6836] Call Trace: [ 78.981647][ T6836] [ 78.981653][ T6836] __dump_stack+0x1d/0x30 [ 78.981731][ T6836] dump_stack_lvl+0xe8/0x140 [ 78.981748][ T6836] dump_stack+0x15/0x1b [ 78.981763][ T6836] should_fail_ex+0x265/0x280 [ 78.981780][ T6836] should_fail+0xb/0x20 [ 78.981850][ T6836] should_fail_usercopy+0x1a/0x20 [ 78.981873][ T6836] _copy_from_user+0x1c/0xb0 [ 78.981899][ T6836] __sys_bind+0x106/0x2a0 [ 78.981969][ T6836] __x64_sys_bind+0x3f/0x50 [ 78.982013][ T6836] x64_sys_call+0x2b72/0x3000 [ 78.982032][ T6836] do_syscall_64+0xd2/0x200 [ 78.982067][ T6836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.982124][ T6836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.982162][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.982184][ T6836] RIP: 0033:0x7fd8a824f6c9 [ 78.982200][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.982240][ T6836] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 78.982260][ T6836] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 78.982273][ T6836] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000004 [ 78.982329][ T6836] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.982399][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.982411][ T6836] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 78.982431][ T6836] [ 79.354856][ T6851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6851 comm=syz.0.774 [ 79.368920][ T6851] netlink: 'syz.0.774': attribute type 4 has an invalid length. [ 79.551028][ T6858] FAULT_INJECTION: forcing a failure. [ 79.551028][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 79.563752][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.0.777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.563778][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.563792][ T6858] Call Trace: [ 79.563799][ T6858] [ 79.563806][ T6858] __dump_stack+0x1d/0x30 [ 79.563850][ T6858] dump_stack_lvl+0xe8/0x140 [ 79.563868][ T6858] dump_stack+0x15/0x1b [ 79.563884][ T6858] should_fail_ex+0x265/0x280 [ 79.563905][ T6858] should_failslab+0x8c/0xb0 [ 79.563991][ T6858] kmem_cache_alloc_noprof+0x50/0x480 [ 79.564072][ T6858] ? dup_fd+0x3a/0x540 [ 79.564094][ T6858] dup_fd+0x3a/0x540 [ 79.564147][ T6858] copy_files+0x98/0xf0 [ 79.564183][ T6858] copy_process+0xc5b/0x2000 [ 79.564220][ T6858] kernel_clone+0x16c/0x5c0 [ 79.564296][ T6858] ? vfs_write+0x7e8/0x960 [ 79.564325][ T6858] __x64_sys_clone+0xe6/0x120 [ 79.564450][ T6858] x64_sys_call+0x119c/0x3000 [ 79.564472][ T6858] do_syscall_64+0xd2/0x200 [ 79.564490][ T6858] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.564515][ T6858] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 79.564590][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.564612][ T6858] RIP: 0033:0x7fafa038f6c9 [ 79.564627][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.564647][ T6858] RSP: 002b:00007faf9edeefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 79.564702][ T6858] RAX: ffffffffffffffda RBX: 00007fafa05e5fa0 RCX: 00007fafa038f6c9 [ 79.564713][ T6858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 79.564725][ T6858] RBP: 00007faf9edef090 R08: 0000000000000000 R09: 0000000000000000 [ 79.564738][ T6858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 79.564751][ T6858] R13: 00007fafa05e6038 R14: 00007fafa05e5fa0 R15: 00007ffe2b2fc7f8 [ 79.564772][ T6858] [ 79.783437][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.792160][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.822331][ T6863] bond0: entered promiscuous mode [ 79.827391][ T6863] bond_slave_0: entered promiscuous mode [ 79.827584][ T6849] loop1: detected capacity change from 0 to 32768 [ 79.833130][ T6863] bond_slave_1: entered promiscuous mode [ 79.850144][ T6863] dummy0: entered promiscuous mode [ 79.855591][ T6863] debugfs: 'hsr1' already exists in 'hsr' [ 79.861406][ T6863] Cannot create hsr debugfs directory [ 79.867219][ T6863] hsr1: entered promiscuous mode [ 79.872193][ T6863] hsr1: entered allmulticast mode [ 79.877242][ T6863] bond0: entered allmulticast mode [ 79.882376][ T6863] bond_slave_0: entered allmulticast mode [ 79.888090][ T6863] bond_slave_1: entered allmulticast mode [ 79.893848][ T6863] dummy0: entered allmulticast mode [ 79.969219][ T6874] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 80.053649][ T6886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6886 comm=syz.1.786 [ 80.067939][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 80.068653][ T6886] netlink: 'syz.1.786': attribute type 4 has an invalid length. [ 80.133228][ T6894] FAULT_INJECTION: forcing a failure. [ 80.133228][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 80.135904][ T6892] loop1: detected capacity change from 0 to 2048 [ 80.145899][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.2.789 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.145992][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.146080][ T6894] Call Trace: [ 80.146086][ T6894] [ 80.146093][ T6894] __dump_stack+0x1d/0x30 [ 80.146121][ T6894] dump_stack_lvl+0xe8/0x140 [ 80.146141][ T6894] dump_stack+0x15/0x1b [ 80.146207][ T6894] should_fail_ex+0x265/0x280 [ 80.146265][ T6894] ? __genradix_ptr_alloc+0x169/0x340 [ 80.146293][ T6894] should_failslab+0x8c/0xb0 [ 80.146351][ T6894] __kmalloc_cache_noprof+0x4c/0x4a0 [ 80.146385][ T6894] __genradix_ptr_alloc+0x169/0x340 [ 80.146415][ T6894] proc_map_files_readdir+0x36b/0x690 [ 80.146508][ T6894] iterate_dir+0x114/0x330 [ 80.146602][ T6894] ? mutex_lock+0xd/0x30 [ 80.146631][ T6894] __se_sys_getdents64+0x88/0x1b0 [ 80.146701][ T6894] ? __pfx_filldir64+0x10/0x10 [ 80.146726][ T6894] __x64_sys_getdents64+0x43/0x50 [ 80.146749][ T6894] x64_sys_call+0x2dae/0x3000 [ 80.146772][ T6894] do_syscall_64+0xd2/0x200 [ 80.146792][ T6894] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.146873][ T6894] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.146965][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.147052][ T6894] RIP: 0033:0x7f9200f4f6c9 [ 80.147067][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.147085][ T6894] RSP: 002b:00007f91ff9af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 80.147110][ T6894] RAX: ffffffffffffffda RBX: 00007f92011a5fa0 RCX: 00007f9200f4f6c9 [ 80.147122][ T6894] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 80.147135][ T6894] RBP: 00007f91ff9af090 R08: 0000000000000000 R09: 0000000000000000 [ 80.147147][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.147214][ T6894] R13: 00007f92011a6038 R14: 00007f92011a5fa0 R15: 00007ffe982b9dd8 [ 80.147232][ T6894] [ 80.360138][ T6892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.372380][ T6892] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.385273][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.408886][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.421371][ T6891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.788: bg 0: block 345: padding at end of block bitmap is not set [ 80.436388][ T6891] EXT4-fs (loop1): Remounting filesystem read-only [ 80.467049][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.614395][ T6923] loop1: detected capacity change from 0 to 512 [ 80.669211][ T6923] EXT4-fs (loop1): too many log groups per flexible block group [ 80.677155][ T6923] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 80.686654][ T6923] EXT4-fs (loop1): mount failed [ 80.712998][ T6930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6930 comm=syz.2.798 [ 80.753324][ T6930] netlink: 'syz.2.798': attribute type 4 has an invalid length. [ 80.840482][ T6942] loop4: detected capacity change from 0 to 128 [ 80.874547][ T6944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.934334][ T6948] 9pnet_fd: Insufficient options for proto=fd [ 80.985333][ T6956] loop3: detected capacity change from 0 to 1024 [ 81.028651][ T6956] EXT4-fs: Ignoring removed orlov option [ 81.066675][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.085244][ T6966] loop4: detected capacity change from 0 to 512 [ 81.123821][ T6966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.127517][ T6956] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.152608][ T6966] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.164257][ T6966] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.806: corrupted inode contents [ 81.176581][ T6966] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.806: mark_inode_dirty error [ 81.190056][ T6966] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.806: corrupted inode contents [ 81.203219][ T6966] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.806: corrupted inode contents [ 81.215126][ T6966] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.806: mark_inode_dirty error [ 81.226656][ T6966] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.806: corrupted inode contents [ 81.238560][ T6966] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.806: mark_inode_dirty error [ 81.249838][ T6966] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.806: corrupted inode contents [ 81.272996][ T6956] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.805: lblock 0 mapped to illegal pblock 0 (length 6) [ 81.275140][ T6966] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.806: mark_inode_dirty error [ 81.332502][ T6956] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.805: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 81.443390][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.483497][ T6990] netlink: 228 bytes leftover after parsing attributes in process `syz.3.807'. [ 81.599378][ T5303] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.990349][ T6921] syz.0.796 (6921) used greatest stack depth: 7480 bytes left [ 82.561687][ T7070] FAULT_INJECTION: forcing a failure. [ 82.561687][ T7070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.574783][ T7070] CPU: 1 UID: 0 PID: 7070 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.574877][ T7070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.574890][ T7070] Call Trace: [ 82.574896][ T7070] [ 82.574904][ T7070] __dump_stack+0x1d/0x30 [ 82.574928][ T7070] dump_stack_lvl+0xe8/0x140 [ 82.574947][ T7070] dump_stack+0x15/0x1b [ 82.574963][ T7070] should_fail_ex+0x265/0x280 [ 82.575025][ T7070] should_fail+0xb/0x20 [ 82.575039][ T7070] should_fail_usercopy+0x1a/0x20 [ 82.575056][ T7070] _copy_to_user+0x20/0xa0 [ 82.575078][ T7070] simple_read_from_buffer+0xb5/0x130 [ 82.575141][ T7070] proc_fail_nth_read+0x10e/0x150 [ 82.575178][ T7070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.575208][ T7070] vfs_read+0x1a8/0x770 [ 82.575332][ T7070] ? __rcu_read_unlock+0x4f/0x70 [ 82.575357][ T7070] ? __fget_files+0x184/0x1c0 [ 82.575385][ T7070] ksys_read+0xda/0x1a0 [ 82.575410][ T7070] __x64_sys_read+0x40/0x50 [ 82.575434][ T7070] x64_sys_call+0x27c0/0x3000 [ 82.575482][ T7070] do_syscall_64+0xd2/0x200 [ 82.575503][ T7070] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.575528][ T7070] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.575560][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.575597][ T7070] RIP: 0033:0x7fac59c8e0dc [ 82.575640][ T7070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.575655][ T7070] RSP: 002b:00007fac586f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.575672][ T7070] RAX: ffffffffffffffda RBX: 00007fac59ee5fa0 RCX: 00007fac59c8e0dc [ 82.575744][ T7070] RDX: 000000000000000f RSI: 00007fac586f70a0 RDI: 0000000000000004 [ 82.575756][ T7070] RBP: 00007fac586f7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.575768][ T7070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.575781][ T7070] R13: 00007fac59ee6038 R14: 00007fac59ee5fa0 R15: 00007fff2ee12358 [ 82.575800][ T7070] [ 82.641005][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 82.768908][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 82.923878][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.941478][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 82.941493][ T29] audit: type=1326 audit(1763141982.648:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 82.951507][ T7117] 9pnet_fd: Insufficient options for proto=fd [ 82.971200][ T29] audit: type=1326 audit(1763141982.648:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.000562][ T29] audit: type=1326 audit(1763141982.648:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.024043][ T29] audit: type=1326 audit(1763141982.648:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.047401][ T29] audit: type=1326 audit(1763141982.648:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.070780][ T29] audit: type=1326 audit(1763141982.648:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.094117][ T29] audit: type=1326 audit(1763141982.648:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.117464][ T29] audit: type=1326 audit(1763141982.648:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.140872][ T29] audit: type=1326 audit(1763141982.648:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.164295][ T29] audit: type=1326 audit(1763141982.648:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 83.325217][ T7129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7129 comm=syz.4.822 [ 83.339649][ T7127] FAULT_INJECTION: forcing a failure. [ 83.339649][ T7127] name failslab, interval 1, probability 0, space 0, times 0 [ 83.340424][ T7129] netlink: 'syz.4.822': attribute type 4 has an invalid length. [ 83.352354][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.352380][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.352397][ T7127] Call Trace: [ 83.352404][ T7127] [ 83.352411][ T7127] __dump_stack+0x1d/0x30 [ 83.352433][ T7127] dump_stack_lvl+0xe8/0x140 [ 83.352454][ T7127] dump_stack+0x15/0x1b [ 83.352482][ T7127] should_fail_ex+0x265/0x280 [ 83.352502][ T7127] should_failslab+0x8c/0xb0 [ 83.352604][ T7127] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 83.352633][ T7127] ? __alloc_skb+0x101/0x320 [ 83.352663][ T7127] __alloc_skb+0x101/0x320 [ 83.352688][ T7127] ? kfree+0x2d3/0x400 [ 83.352778][ T7127] tipc_msg_create+0x47/0x230 [ 83.352806][ T7127] tipc_group_proto_xmit+0xb7/0x2f0 [ 83.352838][ T7127] tipc_group_delete+0x97/0x290 [ 83.352943][ T7127] tipc_sk_leave+0xa9/0x270 [ 83.353000][ T7127] tipc_release+0x83/0xd20 [ 83.353023][ T7127] ? task_work_add+0x268/0x2c0 [ 83.353050][ T7127] sock_close+0x6b/0x150 [ 83.353071][ T7127] ? __pfx_sock_close+0x10/0x10 [ 83.353113][ T7127] __fput+0x29b/0x650 [ 83.353133][ T7127] ____fput+0x1c/0x30 [ 83.353210][ T7127] task_work_run+0x131/0x1a0 [ 83.353237][ T7127] exit_to_user_mode_loop+0xed/0x110 [ 83.353262][ T7127] do_syscall_64+0x1d6/0x200 [ 83.353315][ T7127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.353342][ T7127] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.353374][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.353395][ T7127] RIP: 0033:0x7fafa038f6c9 [ 83.353410][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.353496][ T7127] RSP: 002b:00007faf9edef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 83.353515][ T7127] RAX: 000000000000012a RBX: 00007fafa05e5fa0 RCX: 00007fafa038f6c9 [ 83.353546][ T7127] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 83.353559][ T7127] RBP: 00007faf9edef090 R08: 0000000000000000 R09: 0000000000000000 [ 83.353612][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.353624][ T7127] R13: 00007fafa05e6038 R14: 00007fafa05e5fa0 R15: 00007ffe2b2fc7f8 [ 83.353641][ T7127] [ 83.618555][ T3786] Bluetooth: hci0: command 0x1003 tx timeout [ 83.624566][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.625259][ T7132] loop1: detected capacity change from 0 to 1024 [ 83.637620][ T7132] EXT4-fs: inline encryption not supported [ 83.643689][ T7132] EXT4-fs: Ignoring removed nobh option [ 83.649367][ T7132] EXT4-fs: Ignoring removed bh option [ 83.661317][ T7132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.674663][ T7132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.695680][ T7143] loop4: detected capacity change from 0 to 512 [ 83.724121][ T7132] SELinux: failed to load policy [ 83.831589][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 83.877785][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 83.926218][ T7177] SELinux: failed to load policy [ 83.989808][ T7196] 9pnet_fd: Insufficient options for proto=fd [ 84.245612][ T7225] SELinux: failed to load policy [ 84.273837][ T7228] loop4: detected capacity change from 0 to 512 [ 84.296732][ T7228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.310773][ T7228] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.343781][ T7228] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.863: corrupted inode contents [ 84.372041][ T7228] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.863: mark_inode_dirty error [ 84.398189][ T7228] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.863: corrupted inode contents [ 84.434957][ T7228] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.863: mark_inode_dirty error [ 84.486226][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.523486][ T7249] 9pnet_fd: Insufficient options for proto=fd [ 84.635335][ T7260] SELinux: Context Ü is not valid (left unmapped). [ 84.681238][ T7266] loop4: detected capacity change from 0 to 512 [ 84.713410][ T7268] loop1: detected capacity change from 0 to 256 [ 84.725339][ T7266] EXT4-fs (loop4): too many log groups per flexible block group [ 84.739869][ T7266] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 84.762274][ T7266] EXT4-fs (loop4): mount failed [ 84.944064][ T7289] loop4: detected capacity change from 0 to 2048 [ 85.018134][ T7289] Alternate GPT is invalid, using primary GPT. [ 85.024524][ T7289] loop4: p2 p3 p7 [ 85.073401][ T7289] netlink: '+}[@': attribute type 10 has an invalid length. [ 85.082564][ T7307] FAULT_INJECTION: forcing a failure. [ 85.082564][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 85.099028][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.0.874 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.099052][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.099066][ T7307] Call Trace: [ 85.099072][ T7307] [ 85.099081][ T7307] __dump_stack+0x1d/0x30 [ 85.099110][ T7307] dump_stack_lvl+0xe8/0x140 [ 85.099130][ T7307] dump_stack+0x15/0x1b [ 85.099169][ T7307] should_fail_ex+0x265/0x280 [ 85.099185][ T7307] ? find_get_pmu_context+0x58/0x450 [ 85.099213][ T7307] should_failslab+0x8c/0xb0 [ 85.099245][ T7307] __kmalloc_cache_noprof+0x4c/0x4a0 [ 85.099277][ T7307] find_get_pmu_context+0x58/0x450 [ 85.099359][ T7307] __se_sys_perf_event_open+0x93c/0x11c0 [ 85.099456][ T7307] __x64_sys_perf_event_open+0x67/0x80 [ 85.099556][ T7307] x64_sys_call+0x7bd/0x3000 [ 85.099576][ T7307] do_syscall_64+0xd2/0x200 [ 85.099597][ T7307] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.099671][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.099690][ T7307] RIP: 0033:0x7fafa038f6c9 [ 85.099702][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.099719][ T7307] RSP: 002b:00007faf9edef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 85.099738][ T7307] RAX: ffffffffffffffda RBX: 00007fafa05e5fa0 RCX: 00007fafa038f6c9 [ 85.099790][ T7307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 85.099801][ T7307] RBP: 00007faf9edef090 R08: 0000000000000003 R09: 0000000000000000 [ 85.099811][ T7307] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 85.099823][ T7307] R13: 00007fafa05e6038 R14: 00007fafa05e5fa0 R15: 00007ffe2b2fc7f8 [ 85.099843][ T7307] [ 85.283127][ T7289] team0 (unregistering): Port device team_slave_0 removed [ 85.427154][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 85.438052][ T7333] loop4: detected capacity change from 0 to 512 [ 85.468792][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.875'. [ 85.490125][ T7333] EXT4-fs (loop4): too many log groups per flexible block group [ 85.512109][ T7336] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 85.519818][ T7336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.875'. [ 85.548522][ T7333] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 85.568036][ T7333] EXT4-fs (loop4): mount failed [ 85.583502][ T7348] loop1: detected capacity change from 0 to 512 [ 85.630949][ T7348] EXT4-fs (loop1): too many log groups per flexible block group [ 85.668456][ T7348] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 85.693006][ T7348] EXT4-fs (loop1): mount failed [ 85.788829][ T7367] SELinux: failed to load policy [ 85.933754][ T7396] loop1: detected capacity change from 0 to 512 [ 85.949735][ T7396] EXT4-fs (loop1): too many log groups per flexible block group [ 85.957496][ T7396] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 85.964462][ T7396] EXT4-fs (loop1): mount failed [ 86.206127][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 86.226775][ T7434] SELinux: failed to load policy [ 86.766932][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 86.884749][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 87.092623][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 87.124045][ T7535] bridge_slave_1: left allmulticast mode [ 87.129747][ T7535] bridge_slave_1: left promiscuous mode [ 87.135376][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.194613][ T7535] bridge_slave_0: left allmulticast mode [ 87.200385][ T7535] bridge_slave_0: left promiscuous mode [ 87.206073][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.330550][ T7565] loop1: detected capacity change from 0 to 512 [ 87.350465][ T7565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.363115][ T7565] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.392679][ T7565] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.912: corrupted inode contents [ 87.414955][ T7565] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.912: mark_inode_dirty error [ 87.429070][ T7565] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.912: corrupted inode contents [ 87.449895][ T7565] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.912: corrupted inode contents [ 87.471626][ T7565] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.912: mark_inode_dirty error [ 87.484268][ T7565] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.912: corrupted inode contents [ 87.497061][ T7565] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.912: mark_inode_dirty error [ 87.515426][ T7565] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.912: corrupted inode contents [ 87.531878][ T7565] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.912: mark_inode_dirty error [ 87.726435][ T7634] loop4: detected capacity change from 0 to 512 [ 87.739885][ T7634] EXT4-fs (loop4): too many log groups per flexible block group [ 87.747744][ T7634] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 87.754635][ T7634] EXT4-fs (loop4): mount failed [ 87.807073][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.831960][ T7655] FAULT_INJECTION: forcing a failure. [ 87.831960][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 87.844626][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.3.923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.844655][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.844666][ T7655] Call Trace: [ 87.844671][ T7655] [ 87.844677][ T7655] __dump_stack+0x1d/0x30 [ 87.844722][ T7655] dump_stack_lvl+0xe8/0x140 [ 87.844739][ T7655] dump_stack+0x15/0x1b [ 87.844767][ T7655] should_fail_ex+0x265/0x280 [ 87.844792][ T7655] should_failslab+0x8c/0xb0 [ 87.844862][ T7655] __kmalloc_noprof+0xa5/0x570 [ 87.844893][ T7655] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 87.844919][ T7655] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 87.844943][ T7655] genl_family_rcv_msg_doit+0x48/0x1b0 [ 87.845048][ T7655] ? selinux_capable+0x31/0x40 [ 87.845067][ T7655] ? security_capable+0x83/0x90 [ 87.845105][ T7655] ? ns_capable+0x7d/0xb0 [ 87.845127][ T7655] genl_rcv_msg+0x422/0x460 [ 87.845217][ T7655] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 87.845243][ T7655] netlink_rcv_skb+0x123/0x220 [ 87.845271][ T7655] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.845297][ T7655] genl_rcv+0x28/0x40 [ 87.845359][ T7655] netlink_unicast+0x5c0/0x690 [ 87.845389][ T7655] netlink_sendmsg+0x58b/0x6b0 [ 87.845406][ T7655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.845423][ T7655] __sock_sendmsg+0x145/0x180 [ 87.845477][ T7655] ____sys_sendmsg+0x31e/0x4e0 [ 87.845506][ T7655] ___sys_sendmsg+0x17b/0x1d0 [ 87.845531][ T7655] __x64_sys_sendmsg+0xd4/0x160 [ 87.845554][ T7655] x64_sys_call+0x191e/0x3000 [ 87.845576][ T7655] do_syscall_64+0xd2/0x200 [ 87.845634][ T7655] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.845663][ T7655] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.845753][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.845777][ T7655] RIP: 0033:0x7fd8a824f6c9 [ 87.845792][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.845869][ T7655] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.845889][ T7655] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 87.845900][ T7655] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 87.845910][ T7655] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.845920][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.845931][ T7655] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 87.845985][ T7655] [ 88.098466][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 88.098481][ T29] audit: type=1326 audit(1763141987.798:12057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.127990][ T29] audit: type=1326 audit(1763141987.798:12058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.151544][ T29] audit: type=1326 audit(1763141987.798:12059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.160230][ T7659] loop4: detected capacity change from 0 to 512 [ 88.174959][ T29] audit: type=1326 audit(1763141987.798:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.204585][ T29] audit: type=1326 audit(1763141987.798:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.228016][ T29] audit: type=1326 audit(1763141987.798:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.239761][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.251502][ T29] audit: type=1326 audit(1763141987.798:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.265288][ T7659] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.287468][ T29] audit: type=1326 audit(1763141987.798:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.319952][ T7659] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.924: corrupted inode contents [ 88.321209][ T29] audit: type=1326 audit(1763141987.798:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7648 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 88.332802][ T7659] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.924: mark_inode_dirty error [ 88.367764][ T7659] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.924: corrupted inode contents [ 88.371614][ T7661] 9p: Unknown access argument o: -22 [ 88.399082][ T7659] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.924: corrupted inode contents [ 88.411445][ T7659] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.924: mark_inode_dirty error [ 88.423381][ T29] audit: type=1326 audit(1763141988.128:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a824f6c9 code=0x7ffc0000 [ 88.447172][ T7659] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.924: corrupted inode contents [ 88.463740][ T7659] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.924: mark_inode_dirty error [ 88.465602][ T7669] 9pnet_fd: Insufficient options for proto=fd [ 88.475298][ T7659] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.924: corrupted inode contents [ 88.492848][ T7659] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.924: mark_inode_dirty error [ 88.525210][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.561146][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 88.563428][ T7679] loop4: detected capacity change from 0 to 512 [ 88.579864][ T7679] EXT4-fs (loop4): too many log groups per flexible block group [ 88.588019][ T7679] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 88.595479][ T7679] EXT4-fs (loop4): mount failed [ 88.646825][ T7687] loop1: detected capacity change from 0 to 1024 [ 88.653717][ T7687] EXT4-fs: inline encryption not supported [ 88.659847][ T7687] EXT4-fs: Ignoring removed nobh option [ 88.665426][ T7687] EXT4-fs: Ignoring removed bh option [ 88.679557][ T7687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.761684][ T7687] SELinux: failed to load policy [ 88.787616][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.831345][ T7704] loop1: detected capacity change from 0 to 128 [ 88.850816][ T7704] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.875526][ T7704] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.024147][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.243636][ T7750] 9pnet_fd: Insufficient options for proto=fd [ 89.414778][ T7730] loop4: detected capacity change from 0 to 32768 [ 89.437646][ T7774] loop1: detected capacity change from 0 to 512 [ 89.469844][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.482566][ T7774] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.501605][ T7774] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.942: corrupted inode contents [ 89.513704][ T7774] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.942: mark_inode_dirty error [ 89.525171][ T7774] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.942: corrupted inode contents [ 89.538917][ T7774] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.942: corrupted inode contents [ 89.550753][ T7774] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.942: mark_inode_dirty error [ 89.562116][ T7774] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.942: corrupted inode contents [ 89.573899][ T7774] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.942: mark_inode_dirty error [ 89.585156][ T7774] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.942: corrupted inode contents [ 89.596958][ T7774] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.942: mark_inode_dirty error [ 89.838867][ T7852] loop4: detected capacity change from 0 to 512 [ 89.846039][ T7852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.846243][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.855332][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.873731][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.884688][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 89.895303][ T7852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.928855][ T7852] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.946483][ T7856] bond0: entered promiscuous mode [ 89.951617][ T7856] bond_slave_0: entered promiscuous mode [ 89.957309][ T7856] bond_slave_1: entered promiscuous mode [ 89.963852][ T7856] dummy0: entered promiscuous mode [ 89.969746][ T7856] debugfs: 'hsr1' already exists in 'hsr' [ 89.975472][ T7856] Cannot create hsr debugfs directory [ 89.981023][ T7856] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 89.990859][ T7856] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 90.002287][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.002387][ T7856] hsr1: entered promiscuous mode [ 90.016174][ T7856] hsr1: entered allmulticast mode [ 90.021209][ T7856] bond0: entered allmulticast mode [ 90.026317][ T7856] bond_slave_0: entered allmulticast mode [ 90.032060][ T7856] bond_slave_1: entered allmulticast mode [ 90.037871][ T7856] dummy0: entered allmulticast mode [ 90.064885][ T7869] loop4: detected capacity change from 0 to 1024 [ 90.075024][ T7869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.106372][ T7869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.160318][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 90.176662][ T7881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7881 comm=syz.0.953 [ 90.191068][ T7881] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 90.251445][ T7890] loop1: detected capacity change from 0 to 1024 [ 90.258154][ T7890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.280005][ T7890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.290585][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.339996][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.526889][ T7912] loop4: detected capacity change from 0 to 1024 [ 90.535896][ T7910] lo speed is unknown, defaulting to 1000 [ 90.538007][ T7912] EXT4-fs: inline encryption not supported [ 90.560233][ T7912] EXT4-fs: Ignoring removed nobh option [ 90.565803][ T7912] EXT4-fs: Ignoring removed bh option [ 90.590542][ T7912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.638346][ T7912] SELinux: failed to load policy [ 90.661457][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.679423][ T7926] loop2: detected capacity change from 0 to 512 [ 90.686355][ T7926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.705643][ T7926] EXT4-fs (loop2): 1 truncate cleaned up [ 90.721809][ T7926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.766903][ T7939] loop4: detected capacity change from 0 to 512 [ 90.787225][ T7926] lo speed is unknown, defaulting to 1000 [ 90.808459][ T7939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.839474][ T7939] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.866256][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 90.867145][ T7939] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.964: corrupted inode contents [ 90.888298][ T3314] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 90.909416][ T7939] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.964: mark_inode_dirty error [ 90.920941][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 90.937474][ T7939] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.964: corrupted inode contents [ 90.951667][ T3314] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 90.987801][ T7951] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.964: corrupted inode contents [ 90.993007][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 90.999780][ T7951] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.964: mark_inode_dirty error [ 91.029705][ T3314] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 91.039411][ T7951] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.964: corrupted inode contents [ 91.052090][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 91.078018][ T7951] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.964: mark_inode_dirty error [ 91.095669][ T7951] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.964: corrupted inode contents [ 91.096660][ T3314] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 91.107606][ T7951] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.964: mark_inode_dirty error [ 91.140053][ T3314] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /165/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 91.163773][ T3314] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 91.269476][ T7865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.286069][ T7978] 9pnet_fd: Insufficient options for proto=fd [ 91.361007][ T7994] loop1: detected capacity change from 0 to 512 [ 91.391530][ T7994] EXT4-fs (loop1): too many log groups per flexible block group [ 91.406810][ T7994] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 91.413795][ T7994] EXT4-fs (loop1): mount failed [ 91.506854][ T5306] bridge_slave_1: left allmulticast mode [ 91.512597][ T5306] bridge_slave_1: left promiscuous mode [ 91.518266][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.536262][ T5306] bridge_slave_0: left allmulticast mode [ 91.541953][ T5306] bridge_slave_0: left promiscuous mode [ 91.547569][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.586299][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 91.598853][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 91.607717][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.974'. [ 91.660527][ T5306] bond0 (unregistering): left promiscuous mode [ 91.666716][ T5306] bond_slave_0: left promiscuous mode [ 91.672315][ T5306] bond_slave_1: left promiscuous mode [ 91.683658][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 91.692977][ T5306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.708324][ T5306] bond_slave_0: left allmulticast mode [ 91.718012][ T5306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.727508][ T5306] bond_slave_1: left allmulticast mode [ 91.733765][ T5306] bond0 (unregistering): Released all slaves [ 91.752539][ T8035] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 91.764732][ T8035] bond1 (unregistering): Released all slaves [ 91.775981][ T8004] lo speed is unknown, defaulting to 1000 [ 91.789251][ T5306] dummy0: left promiscuous mode [ 91.795300][ T5306] hsr_slave_0: left promiscuous mode [ 91.801654][ T5306] hsr_slave_1: left promiscuous mode [ 91.807194][ T5306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.839036][ T5306] team0 (unregistering): Port device team_slave_0 removed [ 91.865324][ T8079] FAULT_INJECTION: forcing a failure. [ 91.865324][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.878409][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.1.975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.878435][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.878448][ T8079] Call Trace: [ 91.878453][ T8079] [ 91.878459][ T8079] __dump_stack+0x1d/0x30 [ 91.878545][ T8079] dump_stack_lvl+0xe8/0x140 [ 91.878566][ T8079] dump_stack+0x15/0x1b [ 91.878583][ T8079] should_fail_ex+0x265/0x280 [ 91.878664][ T8079] should_fail+0xb/0x20 [ 91.878678][ T8079] should_fail_usercopy+0x1a/0x20 [ 91.878696][ T8079] strncpy_from_user+0x25/0x230 [ 91.878722][ T8079] ? kmem_cache_alloc_noprof+0x242/0x480 [ 91.878781][ T8079] ? getname_flags+0x80/0x3b0 [ 91.878807][ T8079] getname_flags+0xae/0x3b0 [ 91.878902][ T8079] user_path_at+0x28/0x130 [ 91.878930][ T8079] do_faccessat+0x380/0x800 [ 91.878979][ T8079] __x64_sys_faccessat2+0x51/0x60 [ 91.879005][ T8079] x64_sys_call+0x200f/0x3000 [ 91.879027][ T8079] do_syscall_64+0xd2/0x200 [ 91.879048][ T8079] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.879129][ T8079] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.879159][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.879181][ T8079] RIP: 0033:0x7fac59c8f6c9 [ 91.879193][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.879277][ T8079] RSP: 002b:00007fac586f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 91.879294][ T8079] RAX: ffffffffffffffda RBX: 00007fac59ee5fa0 RCX: 00007fac59c8f6c9 [ 91.879304][ T8079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 91.879316][ T8079] RBP: 00007fac586f7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.879362][ T8079] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001 [ 91.879373][ T8079] R13: 00007fac59ee6038 R14: 00007fac59ee5fa0 R15: 00007fff2ee12358 [ 91.879390][ T8079] [ 92.087912][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.108144][ T8085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8085 comm=syz.4.977 [ 92.109300][ T8084] FAULT_INJECTION: forcing a failure. [ 92.109300][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 92.133011][ T8084] CPU: 0 UID: 0 PID: 8084 Comm: syz.3.978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.133034][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.133046][ T8084] Call Trace: [ 92.133113][ T8084] [ 92.133119][ T8084] __dump_stack+0x1d/0x30 [ 92.133140][ T8084] dump_stack_lvl+0xe8/0x140 [ 92.133177][ T8084] dump_stack+0x15/0x1b [ 92.133191][ T8084] should_fail_ex+0x265/0x280 [ 92.133208][ T8084] should_failslab+0x8c/0xb0 [ 92.133235][ T8084] kmem_cache_alloc_noprof+0x50/0x480 [ 92.133338][ T8084] ? skb_clone+0x151/0x1f0 [ 92.133358][ T8084] skb_clone+0x151/0x1f0 [ 92.133446][ T8084] nfnetlink_rcv+0x2fc/0x16c0 [ 92.133512][ T8084] ? kmem_cache_free+0xe4/0x3d0 [ 92.133540][ T8084] ? __kfree_skb+0x109/0x150 [ 92.133569][ T8084] ? nlmon_xmit+0x4f/0x60 [ 92.133644][ T8084] ? nlmon_xmit+0x4f/0x60 [ 92.133700][ T8084] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 92.133736][ T8084] ? __dev_queue_xmit+0x1200/0x2000 [ 92.133755][ T8084] ? __dev_queue_xmit+0x182/0x2000 [ 92.133775][ T8084] ? ref_tracker_free+0x37d/0x3e0 [ 92.133834][ T8084] netlink_unicast+0x5c0/0x690 [ 92.133941][ T8084] netlink_sendmsg+0x58b/0x6b0 [ 92.133962][ T8084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.134013][ T8084] __sock_sendmsg+0x145/0x180 [ 92.134033][ T8084] ____sys_sendmsg+0x31e/0x4e0 [ 92.134064][ T8084] ___sys_sendmsg+0x17b/0x1d0 [ 92.134095][ T8084] __x64_sys_sendmsg+0xd4/0x160 [ 92.134170][ T8084] x64_sys_call+0x191e/0x3000 [ 92.134203][ T8084] do_syscall_64+0xd2/0x200 [ 92.134269][ T8084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.134317][ T8084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.134427][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.134450][ T8084] RIP: 0033:0x7fd8a824f6c9 [ 92.134465][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.134483][ T8084] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.134502][ T8084] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 92.134582][ T8084] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 92.134594][ T8084] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.134605][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.134691][ T8084] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 92.134709][ T8084] [ 92.137460][ T8085] netlink: 'syz.4.977': attribute type 4 has an invalid length. [ 92.282296][ T8093] loop3: detected capacity change from 0 to 512 [ 92.322403][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 92.357857][ T8093] EXT4-fs (loop3): too many log groups per flexible block group [ 92.413757][ T8093] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 92.422030][ T8093] EXT4-fs (loop3): mount failed [ 92.454220][ T8103] loop1: detected capacity change from 0 to 1024 [ 92.461546][ T8103] EXT4-fs: inline encryption not supported [ 92.468589][ T8103] EXT4-fs: Ignoring removed nobh option [ 92.474163][ T8103] EXT4-fs: Ignoring removed bh option [ 92.480389][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.487466][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.494850][ T8004] bridge_slave_0: entered allmulticast mode [ 92.501487][ T8004] bridge_slave_0: entered promiscuous mode [ 92.508137][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.515380][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.519489][ T8111] loop3: detected capacity change from 0 to 512 [ 92.522706][ T8004] bridge_slave_1: entered allmulticast mode [ 92.535325][ T8004] bridge_slave_1: entered promiscuous mode [ 92.536093][ T8103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.547499][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.567703][ T8111] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.584166][ T8103] SELinux: failed to load policy [ 92.592284][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.601762][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.613947][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.987: corrupted inode contents [ 92.614030][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.634732][ T8111] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.987: mark_inode_dirty error [ 92.646356][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.987: corrupted inode contents [ 92.658980][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.987: corrupted inode contents [ 92.672538][ T8111] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.987: mark_inode_dirty error [ 92.683853][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.987: corrupted inode contents [ 92.695654][ T8111] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.987: mark_inode_dirty error [ 92.706038][ T8004] team0: Port device team_slave_0 added [ 92.706920][ T8111] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.987: corrupted inode contents [ 92.715175][ T8004] team0: Port device team_slave_1 added [ 92.732742][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 92.746110][ T8111] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.987: mark_inode_dirty error [ 92.769379][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.776371][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.802276][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.814282][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.814527][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.821291][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.821319][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.880995][ T8004] hsr_slave_0: entered promiscuous mode [ 92.890086][ T8004] hsr_slave_1: entered promiscuous mode [ 92.902094][ T8004] debugfs: 'hsr0' already exists in 'hsr' [ 92.907834][ T8004] Cannot create hsr debugfs directory [ 92.985438][ T8141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8141 comm=syz.1.997 [ 92.989972][ T8142] loop3: detected capacity change from 0 to 1024 [ 93.004513][ T8142] EXT4-fs: inline encryption not supported [ 93.010522][ T8142] EXT4-fs: Ignoring removed nobh option [ 93.013680][ T8141] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 93.016087][ T8142] EXT4-fs: Ignoring removed bh option [ 93.033094][ T8004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.042010][ T8004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.050714][ T8004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.059032][ T8142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.073590][ T8004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.106238][ T8142] SELinux: failed to load policy [ 93.106301][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.118226][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.125500][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.132534][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.141509][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.163978][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.176603][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.185167][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.199487][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.206769][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 93.206782][ T29] audit: type=1326 audit(1763141992.908:12527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.210778][ T8156] loop3: detected capacity change from 0 to 512 [ 93.213032][ T29] audit: type=1326 audit(1763141992.908:12528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.218707][ T29] audit: type=1326 audit(1763141992.918:12529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.289620][ T29] audit: type=1326 audit(1763141992.918:12530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.313154][ T29] audit: type=1326 audit(1763141992.918:12531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.323181][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.337140][ T29] audit: type=1326 audit(1763141992.968:12532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.372788][ T29] audit: type=1326 audit(1763141992.968:12533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.396303][ T29] audit: type=1326 audit(1763141992.968:12534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.419788][ T29] audit: type=1326 audit(1763141992.968:12535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.443256][ T29] audit: type=1326 audit(1763141992.968:12536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8154 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 93.456027][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.473687][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.482425][ T8156] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.493460][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.500654][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.517099][ T8156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1000: corrupted inode contents [ 93.531044][ T8156] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1000: mark_inode_dirty error [ 93.577510][ T8156] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1000: corrupted inode contents [ 93.590082][ T8167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1000: corrupted inode contents [ 93.672809][ T8167] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1000: mark_inode_dirty error [ 93.716459][ T8167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1000: corrupted inode contents [ 93.775838][ T8167] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.1000: mark_inode_dirty error [ 93.821532][ T8167] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.1000: corrupted inode contents [ 93.866138][ T8167] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.1000: mark_inode_dirty error [ 93.928305][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.041965][ T8168] lo speed is unknown, defaulting to 1000 [ 94.084395][ T8181] FAULT_INJECTION: forcing a failure. [ 94.084395][ T8181] name failslab, interval 1, probability 0, space 0, times 0 [ 94.097102][ T8181] CPU: 1 UID: 0 PID: 8181 Comm: syz.0.1010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.097182][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.097193][ T8181] Call Trace: [ 94.097198][ T8181] [ 94.097205][ T8181] __dump_stack+0x1d/0x30 [ 94.097226][ T8181] dump_stack_lvl+0xe8/0x140 [ 94.097244][ T8181] dump_stack+0x15/0x1b [ 94.097400][ T8181] should_fail_ex+0x265/0x280 [ 94.097468][ T8181] ? ip6_ra_control+0x90/0x2a0 [ 94.097499][ T8181] should_failslab+0x8c/0xb0 [ 94.097527][ T8181] __kmalloc_cache_noprof+0x4c/0x4a0 [ 94.097604][ T8181] ip6_ra_control+0x90/0x2a0 [ 94.097633][ T8181] do_ipv6_setsockopt+0x1711/0x2160 [ 94.097664][ T8181] ? kstrtoull+0x111/0x140 [ 94.097691][ T8181] ? __rcu_read_unlock+0x4f/0x70 [ 94.097716][ T8181] ? avc_has_perm_noaudit+0x1b1/0x200 [ 94.097746][ T8181] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 94.097804][ T8181] ipv6_setsockopt+0x59/0x130 [ 94.097854][ T8181] rawv6_setsockopt+0x1d2/0x420 [ 94.097886][ T8181] sock_common_setsockopt+0x69/0x80 [ 94.097912][ T8181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 94.097996][ T8181] __sys_setsockopt+0x184/0x200 [ 94.098045][ T8181] __x64_sys_setsockopt+0x64/0x80 [ 94.098077][ T8181] x64_sys_call+0x20ec/0x3000 [ 94.098136][ T8181] do_syscall_64+0xd2/0x200 [ 94.098153][ T8181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.098275][ T8181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 94.098308][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.098327][ T8181] RIP: 0033:0x7fafa038f6c9 [ 94.098340][ T8181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.098396][ T8181] RSP: 002b:00007faf9edef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.098431][ T8181] RAX: ffffffffffffffda RBX: 00007fafa05e5fa0 RCX: 00007fafa038f6c9 [ 94.098444][ T8181] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000006 [ 94.098463][ T8181] RBP: 00007faf9edef090 R08: 0000000000000004 R09: 0000000000000000 [ 94.098545][ T8181] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001 [ 94.098633][ T8181] R13: 00007fafa05e6038 R14: 00007fafa05e5fa0 R15: 00007ffe2b2fc7f8 [ 94.098651][ T8181] [ 94.342909][ T8192] 9pnet_fd: Insufficient options for proto=fd [ 94.410810][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.449521][ T8202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8202 comm=syz.3.1016 [ 94.503923][ T8202] netlink: 'syz.3.1016': attribute type 4 has an invalid length. [ 94.518131][ T8212] 9pnet_fd: Insufficient options for proto=fd [ 94.586526][ T8220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8220 comm=syz.3.1022 [ 94.625722][ T8220] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 94.641427][ T8004] veth0_vlan: entered promiscuous mode [ 94.664819][ T8004] veth1_vlan: entered promiscuous mode [ 94.683133][ T8004] veth0_macvtap: entered promiscuous mode [ 94.691245][ T8004] veth1_macvtap: entered promiscuous mode [ 94.702031][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.722550][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.736683][ T8232] 9pnet_fd: Insufficient options for proto=fd [ 94.779421][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 94.790721][ T5306] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810343][ T5306] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899094][ T8239] loop4: detected capacity change from 0 to 2048 [ 94.914557][ T5306] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.949898][ T5298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.976487][ T8239] Alternate GPT is invalid, using primary GPT. [ 94.982960][ T8239] loop4: p1 p2 p3 [ 94.986667][ T8239] loop4: partition table partially beyond EOD, truncated [ 95.022208][ T5306] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.111035][ T8239] lo speed is unknown, defaulting to 1000 [ 95.257494][ T8255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8255 comm=syz.3.1031 [ 95.272314][ T8255] netlink: 'syz.3.1031': attribute type 4 has an invalid length. [ 95.632599][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 95.678003][ T8279] loop3: detected capacity change from 0 to 1024 [ 95.685085][ T8279] EXT4-fs: inline encryption not supported [ 95.693720][ T8279] EXT4-fs: Ignoring removed nobh option [ 95.699337][ T8279] EXT4-fs: Ignoring removed bh option [ 95.721844][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.762796][ T8279] SELinux: failed to load policy [ 95.781908][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.878235][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 95.918346][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 95.920990][ T8315] 9pnet_fd: Insufficient options for proto=fd [ 95.989790][ T8324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8324 comm=syz.4.1060 [ 96.004406][ T8324] netlink: 'syz.4.1060': attribute type 4 has an invalid length. [ 96.023452][ T8326] 9pnet_fd: Insufficient options for proto=fd [ 96.044537][ T8330] FAULT_INJECTION: forcing a failure. [ 96.044537][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.057719][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.4.1063 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.057747][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.057760][ T8330] Call Trace: [ 96.057765][ T8330] [ 96.057772][ T8330] __dump_stack+0x1d/0x30 [ 96.057793][ T8330] dump_stack_lvl+0xe8/0x140 [ 96.057815][ T8330] dump_stack+0x15/0x1b [ 96.057901][ T8330] should_fail_ex+0x265/0x280 [ 96.057917][ T8330] should_fail+0xb/0x20 [ 96.057934][ T8330] should_fail_usercopy+0x1a/0x20 [ 96.057983][ T8330] _copy_from_user+0x1c/0xb0 [ 96.058008][ T8330] btf_new_fd+0x20f/0x790 [ 96.058042][ T8330] bpf_btf_load+0x112/0x130 [ 96.058143][ T8330] __sys_bpf+0x357/0x7c0 [ 96.058169][ T8330] __x64_sys_bpf+0x41/0x50 [ 96.058222][ T8330] x64_sys_call+0x2aee/0x3000 [ 96.058288][ T8330] do_syscall_64+0xd2/0x200 [ 96.058325][ T8330] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.058394][ T8330] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.058472][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.058493][ T8330] RIP: 0033:0x7f91a9b3f6c9 [ 96.058516][ T8330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.058535][ T8330] RSP: 002b:00007f91a859f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.058555][ T8330] RAX: ffffffffffffffda RBX: 00007f91a9d95fa0 RCX: 00007f91a9b3f6c9 [ 96.058635][ T8330] RDX: 000000000000001f RSI: 0000200000000200 RDI: 0000000000000012 [ 96.058645][ T8330] RBP: 00007f91a859f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.058657][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.058671][ T8330] R13: 00007f91a9d96038 R14: 00007f91a9d95fa0 R15: 00007ffe7074e288 [ 96.058690][ T8330] [ 96.311498][ T8343] 9pnet_fd: Insufficient options for proto=fd [ 96.359190][ T8352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8352 comm=syz.0.1073 [ 96.376729][ T8352] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 96.405416][ T8354] SELinux: failed to load policy [ 96.410597][ T8357] FAULT_INJECTION: forcing a failure. [ 96.410597][ T8357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.423779][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.4.1075 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.423803][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.423859][ T8357] Call Trace: [ 96.423864][ T8357] [ 96.423870][ T8357] __dump_stack+0x1d/0x30 [ 96.423889][ T8357] dump_stack_lvl+0xe8/0x140 [ 96.423932][ T8357] dump_stack+0x15/0x1b [ 96.423946][ T8357] should_fail_ex+0x265/0x280 [ 96.423963][ T8357] should_fail+0xb/0x20 [ 96.424000][ T8357] should_fail_usercopy+0x1a/0x20 [ 96.424040][ T8357] _copy_from_iter+0xd2/0xe80 [ 96.424059][ T8357] ? __build_skb_around+0x1ab/0x200 [ 96.424083][ T8357] ? __alloc_skb+0x223/0x320 [ 96.424109][ T8357] netlink_sendmsg+0x471/0x6b0 [ 96.424148][ T8357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.424164][ T8357] __sock_sendmsg+0x145/0x180 [ 96.424185][ T8357] ____sys_sendmsg+0x31e/0x4e0 [ 96.424249][ T8357] ___sys_sendmsg+0x17b/0x1d0 [ 96.424276][ T8357] __x64_sys_sendmsg+0xd4/0x160 [ 96.424295][ T8357] x64_sys_call+0x191e/0x3000 [ 96.424345][ T8357] do_syscall_64+0xd2/0x200 [ 96.424369][ T8357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.424406][ T8357] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.424504][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.424533][ T8357] RIP: 0033:0x7f91a9b3f6c9 [ 96.424585][ T8357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.424600][ T8357] RSP: 002b:00007f91a859f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.424617][ T8357] RAX: ffffffffffffffda RBX: 00007f91a9d95fa0 RCX: 00007f91a9b3f6c9 [ 96.424627][ T8357] RDX: 0000000026004808 RSI: 0000200000000400 RDI: 0000000000000007 [ 96.424660][ T8357] RBP: 00007f91a859f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.424670][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.424680][ T8357] R13: 00007f91a9d96038 R14: 00007f91a9d95fa0 R15: 00007ffe7074e288 [ 96.424700][ T8357] [ 96.721896][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 96.754254][ T8380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8380 comm=syz.0.1087 [ 96.769087][ T8380] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 96.853179][ T8391] FAULT_INJECTION: forcing a failure. [ 96.853179][ T8391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.866308][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.3.1091 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.866333][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.866393][ T8391] Call Trace: [ 96.866398][ T8391] [ 96.866405][ T8391] __dump_stack+0x1d/0x30 [ 96.866428][ T8391] dump_stack_lvl+0xe8/0x140 [ 96.866454][ T8391] dump_stack+0x15/0x1b [ 96.866471][ T8391] should_fail_ex+0x265/0x280 [ 96.866488][ T8391] should_fail+0xb/0x20 [ 96.866516][ T8391] should_fail_usercopy+0x1a/0x20 [ 96.866613][ T8391] _copy_from_user+0x1c/0xb0 [ 96.866640][ T8391] lo_ioctl+0x383/0x12b0 [ 96.866669][ T8391] ? avc_has_extended_perms+0x73d/0x940 [ 96.866701][ T8391] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 96.866734][ T8391] ? do_vfs_ioctl+0x866/0xe10 [ 96.866758][ T8391] ? selinux_file_ioctl+0x308/0x3a0 [ 96.866845][ T8391] ? __pfx_lo_ioctl+0x10/0x10 [ 96.866873][ T8391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.866893][ T8391] blkdev_ioctl+0x356/0x440 [ 96.866909][ T8391] ? __pfx_blkdev_ioctl+0x10/0x10 [ 96.867051][ T8391] __se_sys_ioctl+0xce/0x140 [ 96.867073][ T8391] __x64_sys_ioctl+0x43/0x50 [ 96.867092][ T8391] x64_sys_call+0x1816/0x3000 [ 96.867114][ T8391] do_syscall_64+0xd2/0x200 [ 96.867199][ T8391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.867223][ T8391] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.867286][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.867385][ T8391] RIP: 0033:0x7fd8a824f6c9 [ 96.867398][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.867449][ T8391] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.867470][ T8391] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 96.867483][ T8391] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 96.867496][ T8391] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.867509][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.867522][ T8391] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 96.867541][ T8391] [ 97.100889][ T3786] Bluetooth: hci0: command 0x1003 tx timeout [ 97.106927][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.235509][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 97.599752][ T8427] FAULT_INJECTION: forcing a failure. [ 97.599752][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 97.612465][ T8427] CPU: 0 UID: 0 PID: 8427 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.612536][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.612547][ T8427] Call Trace: [ 97.612552][ T8427] [ 97.612561][ T8427] __dump_stack+0x1d/0x30 [ 97.612585][ T8427] dump_stack_lvl+0xe8/0x140 [ 97.612610][ T8427] dump_stack+0x15/0x1b [ 97.612652][ T8427] should_fail_ex+0x265/0x280 [ 97.612671][ T8427] should_failslab+0x8c/0xb0 [ 97.612698][ T8427] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 97.612727][ T8427] ? __alloc_skb+0x101/0x320 [ 97.612759][ T8427] __alloc_skb+0x101/0x320 [ 97.612790][ T8427] ? audit_log_start+0x342/0x720 [ 97.612814][ T8427] audit_log_start+0x3a0/0x720 [ 97.612833][ T8427] ? perf_cgroup_switch+0x10c/0x480 [ 97.612863][ T8427] ? bpf_trace_run4+0x134/0x1d0 [ 97.612889][ T8427] ? __account_obj_stock+0x211/0x350 [ 97.612922][ T8427] audit_seccomp+0x48/0x100 [ 97.612956][ T8427] ? __seccomp_filter+0x82d/0x1250 [ 97.613001][ T8427] __seccomp_filter+0x83e/0x1250 [ 97.613027][ T8427] ? make_kuid+0x13b/0x320 [ 97.613052][ T8427] __secure_computing+0x82/0x150 [ 97.613130][ T8427] syscall_trace_enter+0xcf/0x1e0 [ 97.613163][ T8427] do_syscall_64+0xac/0x200 [ 97.613185][ T8427] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.613216][ T8427] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.613262][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.613304][ T8427] RIP: 0033:0x7fafa038e0dc [ 97.613320][ T8427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.613336][ T8427] RSP: 002b:00007faf9edef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.613352][ T8427] RAX: ffffffffffffffda RBX: 00007fafa05e5fa0 RCX: 00007fafa038e0dc [ 97.613369][ T8427] RDX: 000000000000000f RSI: 00007faf9edef0a0 RDI: 0000000000000004 [ 97.613455][ T8427] RBP: 00007faf9edef090 R08: 0000000000000000 R09: 0000000000000000 [ 97.613468][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.613481][ T8427] R13: 00007fafa05e6038 R14: 00007fafa05e5fa0 R15: 00007ffe2b2fc7f8 [ 97.613540][ T8427] [ 97.922675][ T8433] loop5: detected capacity change from 0 to 512 [ 97.952182][ T8433] EXT4-fs (loop5): too many log groups per flexible block group [ 97.967590][ T8433] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 97.975984][ T8433] EXT4-fs (loop5): mount failed [ 98.035180][ T8451] netlink: 'syz.5.1116': attribute type 10 has an invalid length. [ 98.043057][ T8451] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1116'. [ 98.093778][ T8447] SELinux: failed to load policy [ 98.103788][ T8451] team0: Port device geneve1 added [ 98.275215][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 98.321755][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 98.321770][ T29] audit: type=1326 audit(1763141998.028:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.353949][ T29] audit: type=1326 audit(1763141998.028:13044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.377424][ T29] audit: type=1326 audit(1763141998.028:13045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.400952][ T29] audit: type=1326 audit(1763141998.028:13046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.424426][ T29] audit: type=1326 audit(1763141998.028:13047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.448025][ T29] audit: type=1326 audit(1763141998.028:13048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.471489][ T29] audit: type=1326 audit(1763141998.028:13049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.495052][ T29] audit: type=1326 audit(1763141998.028:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.518539][ T29] audit: type=1326 audit(1763141998.028:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.542133][ T29] audit: type=1326 audit(1763141998.028:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac59c8f6c9 code=0x7ffc0000 [ 98.621204][ T8492] SELinux: failed to load policy [ 98.934031][ T8518] netlink: 'syz.1.1144': attribute type 10 has an invalid length. [ 98.942159][ T8518] batadv0: entered allmulticast mode [ 98.949357][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.957270][ T8518] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.338137][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 99.358738][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.389575][ T8594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.437153][ T8601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8601 comm=syz.1.1183 [ 99.452602][ T8601] netlink: 'syz.1.1183': attribute type 4 has an invalid length. [ 99.612124][ T8604] FAULT_INJECTION: forcing a failure. [ 99.612124][ T8604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.625159][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.5.1185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.625200][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.625208][ T8604] Call Trace: [ 99.625212][ T8604] [ 99.625217][ T8604] __dump_stack+0x1d/0x30 [ 99.625230][ T8604] dump_stack_lvl+0xe8/0x140 [ 99.625242][ T8604] dump_stack+0x15/0x1b [ 99.625251][ T8604] should_fail_ex+0x265/0x280 [ 99.625267][ T8604] should_fail+0xb/0x20 [ 99.625276][ T8604] should_fail_usercopy+0x1a/0x20 [ 99.625288][ T8604] _copy_to_user+0x20/0xa0 [ 99.625302][ T8604] simple_read_from_buffer+0xb5/0x130 [ 99.625319][ T8604] proc_fail_nth_read+0x10e/0x150 [ 99.625337][ T8604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.625352][ T8604] vfs_read+0x1a8/0x770 [ 99.625365][ T8604] ? __rcu_read_unlock+0x4f/0x70 [ 99.625380][ T8604] ? __fget_files+0x184/0x1c0 [ 99.625460][ T8604] ksys_read+0xda/0x1a0 [ 99.625536][ T8604] __x64_sys_read+0x40/0x50 [ 99.625558][ T8604] x64_sys_call+0x27c0/0x3000 [ 99.625581][ T8604] do_syscall_64+0xd2/0x200 [ 99.625602][ T8604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.625706][ T8604] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.625750][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.625762][ T8604] RIP: 0033:0x7f390d71e0dc [ 99.625771][ T8604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.625790][ T8604] RSP: 002b:00007f390c17f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.625801][ T8604] RAX: ffffffffffffffda RBX: 00007f390d975fa0 RCX: 00007f390d71e0dc [ 99.625808][ T8604] RDX: 000000000000000f RSI: 00007f390c17f0a0 RDI: 0000000000000007 [ 99.625818][ T8604] RBP: 00007f390c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.625830][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.625841][ T8604] R13: 00007f390d976038 R14: 00007f390d975fa0 R15: 00007ffc30a97138 [ 99.625966][ T8604] [ 99.908648][ T8631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8631 comm=syz.4.1195 [ 99.933629][ T8631] netlink: 'syz.4.1195': attribute type 4 has an invalid length. [ 99.962646][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 100.030141][ T8638] SELinux: failed to load policy [ 100.249758][ T8665] 9pnet_fd: Insufficient options for proto=fd [ 100.663736][ T8688] lo speed is unknown, defaulting to 1000 [ 101.490029][ T8828] 9pnet_fd: Insufficient options for proto=fd [ 101.530776][ T8834] SELinux: failed to load policy [ 101.530812][ T8836] 9pnet_fd: Insufficient options for proto=fd [ 101.611867][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 101.736912][ T8866] 9pnet_fd: Insufficient options for proto=fd [ 101.754437][ T8863] SELinux: failed to load policy [ 101.777545][ T8868] 9pnet_fd: Insufficient options for proto=fd [ 101.870617][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 101.897536][ T8881] lo speed is unknown, defaulting to 1000 [ 102.138509][ T8895] SELinux: failed to load policy [ 102.211231][ T8900] 9pnet_fd: Insufficient options for proto=fd [ 102.307177][ T8906] lo speed is unknown, defaulting to 1000 [ 102.728935][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 102.994770][ T9001] sock: sock_set_timeout: `syz.3.1296' (pid 9001) tries to set negative timeout [ 103.013990][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 103.026373][ T9005] FAULT_INJECTION: forcing a failure. [ 103.026373][ T9005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.039472][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.3.1297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.039497][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.039510][ T9005] Call Trace: [ 103.039516][ T9005] [ 103.039521][ T9005] __dump_stack+0x1d/0x30 [ 103.039541][ T9005] dump_stack_lvl+0xe8/0x140 [ 103.039566][ T9005] dump_stack+0x15/0x1b [ 103.039590][ T9005] should_fail_ex+0x265/0x280 [ 103.039610][ T9005] should_fail+0xb/0x20 [ 103.039699][ T9005] should_fail_usercopy+0x1a/0x20 [ 103.039711][ T9005] _copy_from_iter+0xd2/0xe80 [ 103.039724][ T9005] ? __build_skb_around+0x1ab/0x200 [ 103.039740][ T9005] ? __alloc_skb+0x223/0x320 [ 103.039764][ T9005] netlink_sendmsg+0x471/0x6b0 [ 103.039854][ T9005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.039865][ T9005] __sock_sendmsg+0x145/0x180 [ 103.039879][ T9005] ____sys_sendmsg+0x31e/0x4e0 [ 103.039897][ T9005] ___sys_sendmsg+0x17b/0x1d0 [ 103.039959][ T9005] __x64_sys_sendmsg+0xd4/0x160 [ 103.039972][ T9005] x64_sys_call+0x191e/0x3000 [ 103.039984][ T9005] do_syscall_64+0xd2/0x200 [ 103.040075][ T9005] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.040090][ T9005] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.040108][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.040157][ T9005] RIP: 0033:0x7fd8a824f6c9 [ 103.040166][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.040203][ T9005] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.040215][ T9005] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 103.040222][ T9005] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 103.040230][ T9005] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.040237][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.040243][ T9005] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 103.040254][ T9005] [ 103.254451][ T9011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9011 comm=syz.0.1300 [ 103.388485][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 103.388499][ T29] audit: type=1326 audit(1763142003.088:13811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.418179][ T29] audit: type=1326 audit(1763142003.088:13812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.436291][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1309'. [ 103.441657][ T29] audit: type=1326 audit(1763142003.088:13813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.473948][ T29] audit: type=1326 audit(1763142003.088:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.497453][ T29] audit: type=1326 audit(1763142003.088:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.521111][ T29] audit: type=1326 audit(1763142003.088:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.544740][ T29] audit: type=1326 audit(1763142003.088:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.568231][ T29] audit: type=1326 audit(1763142003.088:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.591856][ T29] audit: type=1326 audit(1763142003.088:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.615319][ T29] audit: type=1326 audit(1763142003.088:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9028 comm="syz.5.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f390d71f6c9 code=0x7ffc0000 [ 103.675285][ T9042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9042 comm=syz.0.1313 [ 103.904671][ T9056] FAULT_INJECTION: forcing a failure. [ 103.904671][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 103.917330][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.5.1315 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.917354][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.917365][ T9056] Call Trace: [ 103.917371][ T9056] [ 103.917379][ T9056] __dump_stack+0x1d/0x30 [ 103.917402][ T9056] dump_stack_lvl+0xe8/0x140 [ 103.917453][ T9056] dump_stack+0x15/0x1b [ 103.917468][ T9056] should_fail_ex+0x265/0x280 [ 103.917484][ T9056] should_failslab+0x8c/0xb0 [ 103.917535][ T9056] kmem_cache_alloc_noprof+0x50/0x480 [ 103.917559][ T9056] ? copy_sighand+0x52/0x1b0 [ 103.917584][ T9056] copy_sighand+0x52/0x1b0 [ 103.917653][ T9056] copy_process+0xcaf/0x2000 [ 103.917757][ T9056] kernel_clone+0x16c/0x5c0 [ 103.917781][ T9056] ? vfs_write+0x7e8/0x960 [ 103.917805][ T9056] __x64_sys_clone+0xe6/0x120 [ 103.917841][ T9056] x64_sys_call+0x119c/0x3000 [ 103.917859][ T9056] do_syscall_64+0xd2/0x200 [ 103.917877][ T9056] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.917955][ T9056] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.917983][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.918001][ T9056] RIP: 0033:0x7f390d71f6c9 [ 103.918015][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.918032][ T9056] RSP: 002b:00007f390c13cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.918053][ T9056] RAX: ffffffffffffffda RBX: 00007f390d976180 RCX: 00007f390d71f6c9 [ 103.918144][ T9056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 103.918154][ T9056] RBP: 00007f390c13d090 R08: 0000000000000000 R09: 0000000000000000 [ 103.918165][ T9056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 103.918175][ T9056] R13: 00007f390d976218 R14: 00007f390d976180 R15: 00007ffc30a97138 [ 103.918190][ T9056] [ 104.223837][ T9064] SELinux: failed to load policy [ 104.224490][ T9070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9070 comm=syz.3.1324 [ 104.745786][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9117 comm=syz.5.1336 [ 104.998483][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1342'. [ 105.025317][ T9148] team0: Port device team_slave_1 removed [ 105.585036][ T9260] smc: net device bond0 erased user defined pnetid SYZ0 [ 105.605304][ T9258] SELinux: failed to load policy [ 105.611763][ T9264] FAULT_INJECTION: forcing a failure. [ 105.611763][ T9264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.624887][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.3.1353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.624927][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.624938][ T9264] Call Trace: [ 105.624944][ T9264] [ 105.624949][ T9264] __dump_stack+0x1d/0x30 [ 105.624968][ T9264] dump_stack_lvl+0xe8/0x140 [ 105.624985][ T9264] dump_stack+0x15/0x1b [ 105.625044][ T9264] should_fail_ex+0x265/0x280 [ 105.625060][ T9264] should_fail+0xb/0x20 [ 105.625073][ T9264] should_fail_usercopy+0x1a/0x20 [ 105.625149][ T9264] _copy_from_user+0x1c/0xb0 [ 105.625210][ T9264] ___sys_sendmsg+0xc1/0x1d0 [ 105.625235][ T9264] __x64_sys_sendmsg+0xd4/0x160 [ 105.625261][ T9264] x64_sys_call+0x191e/0x3000 [ 105.625280][ T9264] do_syscall_64+0xd2/0x200 [ 105.625297][ T9264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.625326][ T9264] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.625388][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.625406][ T9264] RIP: 0033:0x7fd8a824f6c9 [ 105.625453][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.625532][ T9264] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.625564][ T9264] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 105.625574][ T9264] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000008 [ 105.625585][ T9264] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.625595][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.625605][ T9264] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 105.625620][ T9264] [ 105.820669][ T9270] 9pnet_fd: Insufficient options for proto=fd [ 105.884749][ T9280] FAULT_INJECTION: forcing a failure. [ 105.884749][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 105.884944][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.897447][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.3.1361 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.897473][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.897484][ T9280] Call Trace: [ 105.897489][ T9280] [ 105.897496][ T9280] __dump_stack+0x1d/0x30 [ 105.897518][ T9280] dump_stack_lvl+0xe8/0x140 [ 105.897575][ T9280] dump_stack+0x15/0x1b [ 105.897592][ T9280] should_fail_ex+0x265/0x280 [ 105.897611][ T9280] should_failslab+0x8c/0xb0 [ 105.897664][ T9280] kmem_cache_alloc_noprof+0x50/0x480 [ 105.897693][ T9280] ? skb_clone+0x151/0x1f0 [ 105.897711][ T9280] skb_clone+0x151/0x1f0 [ 105.897729][ T9280] nfnetlink_rcv+0x2fc/0x16c0 [ 105.897755][ T9280] ? kmem_cache_free+0xe4/0x3d0 [ 105.897854][ T9280] ? __kfree_skb+0x109/0x150 [ 105.897882][ T9280] ? nlmon_xmit+0x4f/0x60 [ 105.897905][ T9280] ? nlmon_xmit+0x4f/0x60 [ 105.897928][ T9280] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 105.897973][ T9280] ? __dev_queue_xmit+0x1200/0x2000 [ 105.898055][ T9280] ? __dev_queue_xmit+0x182/0x2000 [ 105.898097][ T9280] ? ref_tracker_free+0x37d/0x3e0 [ 105.898167][ T9280] netlink_unicast+0x5c0/0x690 [ 105.898198][ T9280] netlink_sendmsg+0x58b/0x6b0 [ 105.898219][ T9280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.898257][ T9280] __sock_sendmsg+0x145/0x180 [ 105.898339][ T9280] ____sys_sendmsg+0x31e/0x4e0 [ 105.898373][ T9280] ___sys_sendmsg+0x17b/0x1d0 [ 105.898406][ T9280] __x64_sys_sendmsg+0xd4/0x160 [ 105.898428][ T9280] x64_sys_call+0x191e/0x3000 [ 105.898513][ T9280] do_syscall_64+0xd2/0x200 [ 105.898537][ T9280] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.898565][ T9280] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.898650][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.898714][ T9280] RIP: 0033:0x7fd8a824f6c9 [ 105.898728][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.898746][ T9280] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.898765][ T9280] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 105.898778][ T9280] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 105.898792][ T9280] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.898804][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.898815][ T9280] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 105.898872][ T9280] [ 105.942649][ T9287] FAULT_INJECTION: forcing a failure. [ 105.942649][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 105.945526][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.949809][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.5.1363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.949836][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.949848][ T9287] Call Trace: [ 105.949854][ T9287] [ 105.949861][ T9287] __dump_stack+0x1d/0x30 [ 105.950036][ T9287] dump_stack_lvl+0xe8/0x140 [ 105.950056][ T9287] dump_stack+0x15/0x1b [ 105.950073][ T9287] should_fail_ex+0x265/0x280 [ 105.950091][ T9287] ? rtnl_newlink+0x5c/0x12d0 [ 105.950151][ T9287] should_failslab+0x8c/0xb0 [ 105.950181][ T9287] __kmalloc_cache_noprof+0x4c/0x4a0 [ 105.950305][ T9287] rtnl_newlink+0x5c/0x12d0 [ 105.950332][ T9287] ? css_rstat_updated+0x79/0x240 [ 105.950372][ T9287] ? __rcu_read_unlock+0x34/0x70 [ 105.950397][ T9287] ? __memcg_slab_free_hook+0x135/0x230 [ 105.950424][ T9287] ? __rcu_read_unlock+0x4f/0x70 [ 105.950447][ T9287] ? avc_has_perm_noaudit+0x1b1/0x200 [ 105.950530][ T9287] ? cred_has_capability+0x210/0x280 [ 105.950562][ T9287] ? selinux_capable+0x31/0x40 [ 105.950584][ T9287] ? security_capable+0x83/0x90 [ 105.950694][ T9287] ? ns_capable+0x7d/0xb0 [ 105.950754][ T9287] ? __pfx_rtnl_newlink+0x10/0x10 [ 105.950819][ T9287] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 105.950910][ T9287] netlink_rcv_skb+0x123/0x220 [ 105.950944][ T9287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.950971][ T9287] rtnetlink_rcv+0x1c/0x30 [ 105.950991][ T9287] netlink_unicast+0x5c0/0x690 [ 105.951028][ T9287] netlink_sendmsg+0x58b/0x6b0 [ 105.951049][ T9287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.951068][ T9287] __sock_sendmsg+0x145/0x180 [ 105.951153][ T9287] ____sys_sendmsg+0x31e/0x4e0 [ 105.951188][ T9287] ___sys_sendmsg+0x17b/0x1d0 [ 105.951285][ T9287] __x64_sys_sendmsg+0xd4/0x160 [ 105.951307][ T9287] x64_sys_call+0x191e/0x3000 [ 105.951328][ T9287] do_syscall_64+0xd2/0x200 [ 105.951347][ T9287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 105.951431][ T9287] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 105.951462][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.951483][ T9287] RIP: 0033:0x7f390d71f6c9 [ 105.951529][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.951600][ T9287] RSP: 002b:00007f390c17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.951659][ T9287] RAX: ffffffffffffffda RBX: 00007f390d975fa0 RCX: 00007f390d71f6c9 [ 105.951670][ T9287] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 105.951679][ T9287] RBP: 00007f390c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.951689][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.951701][ T9287] R13: 00007f390d976038 R14: 00007f390d975fa0 R15: 00007ffc30a97138 [ 105.951723][ T9287] [ 106.458887][ T9277] bond0: entered promiscuous mode [ 106.464002][ T9277] bond_slave_0: entered promiscuous mode [ 106.469786][ T9277] bond_slave_1: entered promiscuous mode [ 106.475578][ T9277] batadv0: entered promiscuous mode [ 106.482310][ T9277] dummy0: entered promiscuous mode [ 106.487875][ T9277] debugfs: 'hsr1' already exists in 'hsr' [ 106.493630][ T9277] Cannot create hsr debugfs directory [ 106.503936][ T9277] hsr1: entered promiscuous mode [ 106.508972][ T9277] hsr1: entered allmulticast mode [ 106.514007][ T9277] bond0: entered allmulticast mode [ 106.519134][ T9277] bond_slave_0: entered allmulticast mode [ 106.524845][ T9277] bond_slave_1: entered allmulticast mode [ 106.536479][ T9277] dummy0: entered allmulticast mode [ 106.697183][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 106.722100][ T9307] block device autoloading is deprecated and will be removed. [ 106.914366][ T9338] vlan2: entered allmulticast mode [ 106.982798][ T9349] FAULT_INJECTION: forcing a failure. [ 106.982798][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 106.995531][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.5.1370 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.995559][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.995635][ T9349] Call Trace: [ 106.995640][ T9349] [ 106.995647][ T9349] __dump_stack+0x1d/0x30 [ 106.995671][ T9349] dump_stack_lvl+0xe8/0x140 [ 106.995693][ T9349] dump_stack+0x15/0x1b [ 106.995712][ T9349] should_fail_ex+0x265/0x280 [ 106.995732][ T9349] should_failslab+0x8c/0xb0 [ 106.995779][ T9349] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 106.995882][ T9349] ? __alloc_skb+0x101/0x320 [ 106.995912][ T9349] __alloc_skb+0x101/0x320 [ 106.995988][ T9349] netlink_ack+0xfd/0x500 [ 106.996042][ T9349] netlink_rcv_skb+0x192/0x220 [ 106.996067][ T9349] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.996097][ T9349] nfnetlink_rcv+0x167/0x16c0 [ 106.996201][ T9349] ? kmem_cache_free+0xe4/0x3d0 [ 106.996228][ T9349] ? __kfree_skb+0x109/0x150 [ 106.996253][ T9349] ? nlmon_xmit+0x4f/0x60 [ 106.996278][ T9349] ? consume_skb+0x49/0x150 [ 106.996320][ T9349] ? nlmon_xmit+0x4f/0x60 [ 106.996339][ T9349] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 106.996423][ T9349] ? __dev_queue_xmit+0x1200/0x2000 [ 106.996442][ T9349] ? __dev_queue_xmit+0x182/0x2000 [ 106.996463][ T9349] ? ref_tracker_free+0x37d/0x3e0 [ 106.996539][ T9349] ? __netlink_deliver_tap+0x4dc/0x500 [ 106.996595][ T9349] netlink_unicast+0x5c0/0x690 [ 106.996626][ T9349] netlink_sendmsg+0x58b/0x6b0 [ 106.996649][ T9349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.996669][ T9349] __sock_sendmsg+0x145/0x180 [ 106.996731][ T9349] ____sys_sendmsg+0x31e/0x4e0 [ 106.996823][ T9349] ___sys_sendmsg+0x17b/0x1d0 [ 106.996921][ T9349] __x64_sys_sendmsg+0xd4/0x160 [ 106.996940][ T9349] x64_sys_call+0x191e/0x3000 [ 106.996959][ T9349] do_syscall_64+0xd2/0x200 [ 106.997002][ T9349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.997028][ T9349] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.997056][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.997077][ T9349] RIP: 0033:0x7f390d71f6c9 [ 106.997089][ T9349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.997153][ T9349] RSP: 002b:00007f390c17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.997173][ T9349] RAX: ffffffffffffffda RBX: 00007f390d975fa0 RCX: 00007f390d71f6c9 [ 106.997229][ T9349] RDX: 00000000000008d0 RSI: 0000200000000500 RDI: 0000000000000003 [ 106.997241][ T9349] RBP: 00007f390c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.997254][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.997265][ T9349] R13: 00007f390d976038 R14: 00007f390d975fa0 R15: 00007ffc30a97138 [ 106.997309][ T9349] [ 107.328496][ T9351] Falling back ldisc for ttyS3. [ 107.334164][ T9351] program syz.1.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.377679][ T9465] SELinux: failed to load policy [ 108.611893][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 108.611904][ T29] audit: type=1400 audit(1763142008.318:13932): avc: denied { connect } for pid=9485 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.654761][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 108.826291][ T9494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9494 comm=syz.4.1388 [ 108.871981][ T29] audit: type=1326 audit(1763142008.578:13933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 108.885665][ T9498] 9pnet_fd: Insufficient options for proto=fd [ 108.895492][ T29] audit: type=1326 audit(1763142008.578:13934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 108.925172][ T29] audit: type=1326 audit(1763142008.578:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 108.948703][ T29] audit: type=1326 audit(1763142008.578:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 108.972191][ T29] audit: type=1326 audit(1763142008.578:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 108.995816][ T29] audit: type=1326 audit(1763142008.578:13938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 109.019353][ T29] audit: type=1326 audit(1763142008.578:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 109.042833][ T29] audit: type=1326 audit(1763142008.578:13940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 109.066628][ T29] audit: type=1326 audit(1763142008.578:13941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9497 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a9b3f6c9 code=0x7ffc0000 [ 109.380820][ T9522] SELinux: failed to load policy [ 109.445668][ T9526] 9pnet_fd: Insufficient options for proto=fd [ 109.507802][ T9542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9542 comm=syz.5.1411 [ 109.535537][ T9545] FAULT_INJECTION: forcing a failure. [ 109.535537][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 109.548332][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.3.1412 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.548358][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.548388][ T9545] Call Trace: [ 109.548394][ T9545] [ 109.548401][ T9545] __dump_stack+0x1d/0x30 [ 109.548423][ T9545] dump_stack_lvl+0xe8/0x140 [ 109.548582][ T9545] dump_stack+0x15/0x1b [ 109.548597][ T9545] should_fail_ex+0x265/0x280 [ 109.548613][ T9545] should_failslab+0x8c/0xb0 [ 109.548636][ T9545] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 109.548737][ T9545] ? __d_alloc+0x3d/0x340 [ 109.548761][ T9545] __d_alloc+0x3d/0x340 [ 109.548799][ T9545] ? lockref_put_return+0xf7/0x130 [ 109.548821][ T9545] d_alloc_parallel+0x58/0xc70 [ 109.548880][ T9545] ? __rcu_read_unlock+0x4f/0x70 [ 109.548901][ T9545] ? __d_lookup+0x316/0x340 [ 109.548915][ T9545] ? security_inode_permission+0x4a/0xb0 [ 109.548937][ T9545] __lookup_slow+0x8c/0x250 [ 109.549010][ T9545] lookup_slow+0x3c/0x60 [ 109.549025][ T9545] walk_component+0x1ec/0x220 [ 109.549057][ T9545] path_lookupat+0xfe/0x2a0 [ 109.549138][ T9545] filename_lookup+0x147/0x340 [ 109.549176][ T9545] user_path_at+0x3e/0x130 [ 109.549192][ T9545] do_fchmodat+0x9c/0x180 [ 109.549210][ T9545] __x64_sys_chmod+0x38/0x50 [ 109.549316][ T9545] x64_sys_call+0x2920/0x3000 [ 109.549396][ T9545] do_syscall_64+0xd2/0x200 [ 109.549426][ T9545] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.549448][ T9545] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.549533][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.549550][ T9545] RIP: 0033:0x7fd8a824f6c9 [ 109.549563][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.549577][ T9545] RSP: 002b:00007fd8a6cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 109.549593][ T9545] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824f6c9 [ 109.549604][ T9545] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000001000 [ 109.549638][ T9545] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.549648][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.549728][ T9545] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 109.549742][ T9545] [ 109.884008][ T9550] SELinux: failed to load policy [ 110.002878][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 110.398353][ T9590] 9pnet_fd: Insufficient options for proto=fd [ 110.768719][ T9642] Falling back ldisc for ttyS3. [ 110.778613][ T9642] program syz.3.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.855058][ T9661] FAULT_INJECTION: forcing a failure. [ 110.855058][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.868204][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.3.1428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.868304][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.868316][ T9661] Call Trace: [ 110.868321][ T9661] [ 110.868328][ T9661] __dump_stack+0x1d/0x30 [ 110.868352][ T9661] dump_stack_lvl+0xe8/0x140 [ 110.868373][ T9661] dump_stack+0x15/0x1b [ 110.868394][ T9661] should_fail_ex+0x265/0x280 [ 110.868428][ T9661] should_fail+0xb/0x20 [ 110.868506][ T9661] should_fail_usercopy+0x1a/0x20 [ 110.868527][ T9661] _copy_to_user+0x20/0xa0 [ 110.868580][ T9661] simple_read_from_buffer+0xb5/0x130 [ 110.868607][ T9661] proc_fail_nth_read+0x10e/0x150 [ 110.868706][ T9661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.868738][ T9661] vfs_read+0x1a8/0x770 [ 110.868762][ T9661] ? __rcu_read_unlock+0x4f/0x70 [ 110.868873][ T9661] ? __fget_files+0x184/0x1c0 [ 110.868902][ T9661] ksys_read+0xda/0x1a0 [ 110.868996][ T9661] __x64_sys_read+0x40/0x50 [ 110.869021][ T9661] x64_sys_call+0x27c0/0x3000 [ 110.869044][ T9661] do_syscall_64+0xd2/0x200 [ 110.869065][ T9661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.869166][ T9661] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.869200][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.869292][ T9661] RIP: 0033:0x7fd8a824e0dc [ 110.869307][ T9661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.869325][ T9661] RSP: 002b:00007fd8a6cb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.869345][ T9661] RAX: ffffffffffffffda RBX: 00007fd8a84a5fa0 RCX: 00007fd8a824e0dc [ 110.869419][ T9661] RDX: 000000000000000f RSI: 00007fd8a6cb70a0 RDI: 0000000000000004 [ 110.869432][ T9661] RBP: 00007fd8a6cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.869445][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.869458][ T9661] R13: 00007fd8a84a6038 R14: 00007fd8a84a5fa0 R15: 00007fff9d593828 [ 110.869477][ T9661] [ 111.323534][ T9718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.375250][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 111.387490][ T9718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.411935][ T9730] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 111.420592][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.429592][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.441454][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 111.457762][ T9730] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 111.473523][ T9730] bond1 (unregistering): Released all slaves [ 111.491069][ T9718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.501374][ T9718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.545304][ T9750] ================================================================== [ 111.553412][ T9750] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 111.562352][ T9750] [ 111.564667][ T9750] write to 0xffff88811e605b20 of 4 bytes by task 9691 on cpu 1: [ 111.572284][ T9750] selinux_inode_permission+0x3ac/0x740 [ 111.577835][ T9750] security_inode_permission+0x6d/0xb0 [ 111.583301][ T9750] inode_permission+0x106/0x310 [ 111.588147][ T9750] link_path_walk+0x162/0x900 [ 111.592813][ T9750] path_openat+0x1de/0x2170 [ 111.597298][ T9750] do_filp_open+0x109/0x230 [ 111.601787][ T9750] io_openat2+0x272/0x390 [ 111.606103][ T9750] io_openat+0x1b/0x30 [ 111.610159][ T9750] __io_issue_sqe+0xfe/0x2e0 [ 111.614745][ T9750] io_issue_sqe+0x56/0xa80 [ 111.619151][ T9750] io_submit_sqes+0x675/0x1060 [ 111.623908][ T9750] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 111.629450][ T9750] __x64_sys_io_uring_enter+0x78/0x90 [ 111.634814][ T9750] x64_sys_call+0x2df0/0x3000 [ 111.639480][ T9750] do_syscall_64+0xd2/0x200 [ 111.643966][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.649839][ T9750] [ 111.652141][ T9750] read to 0xffff88811e605b20 of 4 bytes by task 9750 on cpu 0: [ 111.659667][ T9750] selinux_inode_permission+0x334/0x740 [ 111.665201][ T9750] security_inode_permission+0x6d/0xb0 [ 111.670642][ T9750] inode_permission+0x106/0x310 [ 111.675483][ T9750] link_path_walk+0x162/0x900 [ 111.680148][ T9750] path_openat+0x1de/0x2170 [ 111.684631][ T9750] do_filp_open+0x109/0x230 [ 111.689114][ T9750] io_openat2+0x272/0x390 [ 111.693428][ T9750] io_openat+0x1b/0x30 [ 111.697478][ T9750] __io_issue_sqe+0xfe/0x2e0 [ 111.702054][ T9750] io_issue_sqe+0x56/0xa80 [ 111.706460][ T9750] io_wq_submit_work+0x3f7/0x5f0 [ 111.711387][ T9750] io_worker_handle_work+0x44e/0x9b0 [ 111.716666][ T9750] io_wq_worker+0x22e/0x860 [ 111.721156][ T9750] ret_from_fork+0x122/0x1b0 [ 111.725735][ T9750] ret_from_fork_asm+0x1a/0x30 [ 111.730481][ T9750] [ 111.732782][ T9750] value changed: 0x00000001 -> 0x00000000 [ 111.738474][ T9750] [ 111.740776][ T9750] Reported by Kernel Concurrency Sanitizer on: [ 111.746903][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: iou-wrk-9691 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.756778][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.766813][ T9750] ================================================================== [ 111.778024][ T9752] FAULT_INJECTION: forcing a failure. [ 111.778024][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.784692][ T5322] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.791214][ T9752] CPU: 1 UID: 0 PID: 9752 Comm: syz.1.1442 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.791240][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.791252][ T9752] Call Trace: [ 111.791258][ T9752] [ 111.791264][ T9752] __dump_stack+0x1d/0x30 [ 111.791360][ T9752] dump_stack_lvl+0xe8/0x140 [ 111.791379][ T9752] dump_stack+0x15/0x1b [ 111.791397][ T9752] should_fail_ex+0x265/0x280 [ 111.791416][ T9752] should_fail+0xb/0x20 [ 111.791432][ T9752] should_fail_usercopy+0x1a/0x20 [ 111.791476][ T9752] _copy_from_user+0x1c/0xb0 [ 111.791506][ T9752] __se_sys_mount+0x10d/0x2e0 [ 111.791530][ T9752] ? fput+0x8f/0xc0 [ 111.791546][ T9752] ? ksys_write+0x192/0x1a0 [ 111.791571][ T9752] __x64_sys_mount+0x67/0x80 [ 111.791683][ T9752] x64_sys_call+0x2b51/0x3000 [ 111.791758][ T9752] do_syscall_64+0xd2/0x200 [ 111.791779][ T9752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.791806][ T9752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.791838][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.791920][ T9752] RIP: 0033:0x7fac59c8f6c9 [ 111.791935][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.792012][ T9752] RSP: 002b:00007fac586f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.792030][ T9752] RAX: ffffffffffffffda RBX: 00007fac59ee5fa0 RCX: 00007fac59c8f6c9 [ 111.792042][ T9752] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 111.792113][ T9752] RBP: 00007fac586f7090 R08: 00002000000000c0 R09: 0000000000000000 [ 111.792125][ T9752] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 111.792199][ T9752] R13: 00007fac59ee6038 R14: 00007fac59ee5fa0 R15: 00007fff2ee12358 [ 111.792285][ T9752] [ 111.845778][ T9746] SELinux: failed to load policy [ 111.982209][ T9730] SELinux: policydb table sizes (1,0) do not match mine (8,7) [ 111.991342][ T9730] SELinux: failed to load policy [ 113.380796][ T9718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.433212][ T5306] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.444202][ T5296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.455053][ T5306] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465844][ T5306] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0