last executing test programs: 2.135050868s ago: executing program 0 (id=1094): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xe, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0xfffffffdfffffffc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000001dc0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="5e5dfe0a3b95af02e0ae45135109def5020f0ea4c46777fcc3b9953dada6d99b24044f5e4cfc6e60408847753167bf3a97e54a58dadbdfd2e3a347ac5b452d9fe5b836f8988e00b39fc52f1ae2086e8882e87e648a5fff98b3b455e7970d3c85a07f67c71532c21cf6773637a8", 0x6d}, {&(0x7f00000001c0)="3347b20fce805a271f0fd263b580ad3c750327672903a4e9d486ceeffb42a3cb1405e31ad416085eb3ae5c0c684ba6d7a7d9d1c39bdcc0041d2cd18adee8962552ef2face343c8920e574cac50f58267e10ce31640575e215723adbd53c5d44956c126b43102950bff4594a6070366c3a225fc326aa22f18a46906c1f60c4364d2fa5869c8e071210286e758bc837d1ce5f82cd19395a8450e3076287eba9fc6fc22d9bc45d40476dad597a01afbe1dda597dde9719ca42aab74b273b812b4316f274ab57c0eab4824b80ca0ce5a51a01fd671a6468fbba097ab739a7519e0ff278979299ff8307c59d3e4", 0xeb}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xc3c4, @mcast2, 0xfd}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000380)="38e612d913e14200ff274658f8f8edd3bca8596fc06328853730ada88d42f4b8ee26c29efda966b034c46b0eae66a1d177064dd10603bbf5e1284ed125b175feea3b4b3f7a61da564a4f7749e15f14f89e18e34ed36774cdee31f5731e4842c606a86a7069fbde8fb9c85197d8c7e56ae2c890ad74361917351aaf8adf7fdb1d1d3fb43d0bedaa82271780f271c8e811ef3f2229a7cacb264d6c39b6eb9cc20360ab8f25dd1e7985550fb19aace2a9dc4c8acd959d8b47ee2fe98e3ad0f8c985b71fea8a51f6824f490a2dddad2fa208b5261e3e169cda03fe342071f93b417e758b053a80863f5d2594b4bf4efa112b9ee6368317655e283a", 0xf9}, {&(0x7f0000000480)="142f59fb70a7e02f82fa8e8ff598ae3e0696fff640ae1879994e79284b58012238", 0x21}, {&(0x7f00000004c0)="1b68039e9d5f48e1bb2fc93ca841e2b9e70908cb0c852c4e2f994fca0d461956265f9e5a0d8ba43a5ca93e809442a8ed3422e31a6f66952208591df8a4087f24cb01ce64fc0fdc78f5555af818081cc895f5a4ac14350fe372d49d689f367a94c7ee31db544bdef3e9f9b68c4be39d08efa71d9cd4313f9ab2d3fac3ba04d73f5e9c9018ac0facd80a63ac90140df3e5", 0x90}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000680)="20dc9a09ffd7cbd857d3f98e1a8e684fd7b62e03fda0197b1422c4b801a10608157863879aec33b04506b9733fb721e37939f09428a544d637e0226912378a6c8758cf406886b451db42aa1e84c3e7de53ccd871e87b866b6da1227190d49ebcace339de945e15498fc493ed976eb1ea6703b3bf0789c3ed8c576fdd211f920f", 0x80}, {&(0x7f0000000a80)}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x170}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000001a80)="e86121ba8debb84399c6d4b3ccfbbd79a19b5626845268b671e53716e07fcc2e5210cbd02f5e8b8ee6ef06358476ede686df302b3aa06fd91a101b816d6bc84c6304872ef52e770861a04b8cb08b39a5ee38a83bce0360d760705a1fa11a4de1fbf0b272d21809f2d7cca566c4250eed2ee9fcf8d7bf1314637ec702676548bbc6424a5075b8ee7212eb304e318c388850894be3fd7e62ff8591f898040f0a0bf3d9eda99601baa9edf89227ccd9bfc12eb320cae0e96e3692a3bbd6eff4b474dd78513bfee999f74137b2f3d1760eb7fc4ddabc", 0xd4}, {&(0x7f0000000940)="33f2e43bb48ce9e8e611164d02ea5d4fb7193c3fe94f9b26dc52042d919cb0ebd0e6be03c8210d56f4c1b73102d584bd4f7dcbef9ea87c473f2fda5e4e18b39ed5e6447d9ef7cb8f973756597852151b7e8928e621453cb6ea46df101d076ed73a456aaad011b5b0ca6114b464239f199776", 0x72}], 0x2, &(0x7f0000001b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x29}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2, 0xc, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00', @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote]}}}, @dstopts={{0x28, 0x29, 0x37, {0x1, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0xe}, @enc_lim]}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x8, 0x18, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast1}, @ra, @generic={0x9, 0x97, "af7c0972405f0a20a8a05c6440a9ac9cd2174c36df8eeed274711dd89ad8dd034101b9f05854853b65e1e8e2b20313e0424ba2d2541394d911aa57684b50647b3c36a5918a1a547b181b7196e1c55b8a36e1e345d207053eb267708cd6d9251c29a72f28e485663c8798c34af56a49c770a3179b550e01ffa82f03c39991af8010b62de90357c51fa1a7ccfb3e57b652f3df609f52c882"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x75f9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5cb4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x208}}], 0x3, 0x40088c0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000001c0)=0x794a0598, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x30) 1.507680009s ago: executing program 0 (id=1101): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000380)="17f03a5900039e", 0x7}], 0x2) 1.479150681s ago: executing program 1 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.463454842s ago: executing program 1 (id=1103): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x120, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.162347136s ago: executing program 2 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020206b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x1000c72) inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x24000400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0xc68, 0xa4, {{0x48, 0x4, 0x3, 0x9, 0x120, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x27, 0x8f, [@rand_addr=0x64010100, @empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @local, @private=0xa010100, @loopback, @local]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xfe000000}, {@loopback, 0xfb}, {@local, 0xddb}, {@local, 0xd}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xe, [{@loopback, 0x1000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x7fff}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@broadcast, 0x80000001}, {@remote, 0x1}]}, @lsrr={0x83, 0x27, 0x13, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xf9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@private=0xa010102, 0xffffffff}, {@loopback, 0x63120000}, {@loopback, 0x2}, {@multicast2, 0x100}, {@private=0xa010101, 0xc48d}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3dc}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x54, r3, 0xb1b, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1a}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x28) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x40, "f27cf4fa53454c104869d3e559eeaf0e897bbf8c7064043d73496d156bf9c58ece388976"}}]}, 0x160}}, 0x4000) 1.143939618s ago: executing program 2 (id=1110): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1.128109739s ago: executing program 2 (id=1112): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 973.168902ms ago: executing program 3 (id=1116): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x400, 0x452c}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 972.587552ms ago: executing program 2 (id=1117): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x124, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 933.843495ms ago: executing program 3 (id=1118): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r8, 0x4b34, 0x3bf) ioctl$KDDISABIO(r8, 0x4b37) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000b40)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x240}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xff, 0x7fff000a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x27, 0x7fff0006}]}) 894.329038ms ago: executing program 3 (id=1119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 877.399439ms ago: executing program 3 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020206b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x1000c72) inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x24000400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0xc68, 0xa4, {{0x48, 0x4, 0x3, 0x9, 0x120, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x27, 0x8f, [@rand_addr=0x64010100, @empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @local, @private=0xa010100, @loopback, @local]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xfe000000}, {@loopback, 0xfb}, {@local, 0xddb}, {@local, 0xd}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xe, [{@loopback, 0x1000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x7fff}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@broadcast, 0x80000001}, {@remote, 0x1}]}, @lsrr={0x83, 0x27, 0x13, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xf9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@private=0xa010102, 0xffffffff}, {@loopback, 0x63120000}, {@loopback, 0x2}, {@multicast2, 0x100}, {@private=0xa010101, 0xc48d}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3dc}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x54, r3, 0xb1b, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1a}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x28) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x40, "f27cf4fa53454c104869d3e559eeaf0e897bbf8c7064043d73496d156bf9c58ece388976"}}]}, 0x160}}, 0x4000) 854.113431ms ago: executing program 3 (id=1121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff0e, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff7f) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x50) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) 823.504034ms ago: executing program 3 (id=1122): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_raw(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xfc, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 731.960331ms ago: executing program 0 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = syz_io_uring_complete(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESDEC=r0, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 663.178657ms ago: executing program 4 (id=1125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 639.030589ms ago: executing program 0 (id=1126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff0e, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff7f) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7fff, @loopback, 0x5}}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 628.225459ms ago: executing program 4 (id=1127): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) write$selinux_validatetrans(r0, &(0x7f00000000c0)={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, 'system_u:object_r:devicekit_var_lib_t:s0', 0x20, 0x3d, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x8b) 572.232674ms ago: executing program 1 (id=1128): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 571.841054ms ago: executing program 0 (id=1129): bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 528.777347ms ago: executing program 4 (id=1130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 474.083112ms ago: executing program 1 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 473.002372ms ago: executing program 4 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020206b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x1000c72) inotify_add_watch(r4, &(0x7f0000000400)='./file0\x00', 0x24000400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0xc68, 0xa4, {{0x48, 0x4, 0x3, 0x9, 0x120, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x27, 0x8f, [@rand_addr=0x64010100, @empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @local, @private=0xa010100, @loopback, @local]}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xfe000000}, {@loopback, 0xfb}, {@local, 0xddb}, {@local, 0xd}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xe, [{@loopback, 0x1000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x7fff}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@broadcast, 0x80000001}, {@remote, 0x1}]}, @lsrr={0x83, 0x27, 0x13, [@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xf9, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@private=0xa010102, 0xffffffff}, {@loopback, 0x63120000}, {@loopback, 0x2}, {@multicast2, 0x100}, {@private=0xa010101, 0xc48d}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3dc}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0x54, r3, 0xb1b, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1a}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x28) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x40, "f27cf4fa53454c104869d3e559eeaf0e897bbf8c7064043d73496d156bf9c58ece388976"}}]}, 0x160}}, 0x4000) 432.660605ms ago: executing program 1 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 393.131149ms ago: executing program 0 (id=1134): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000bc0)='team_slave_0\x00', 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1d, @private1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="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", 0x57e, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r8, &(0x7f0000001a80)=""/4058, 0xfffffffffffffef5, 0x40010000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') openat(r9, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r10 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x110, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0xf9, 0xa, "88134920d6d313af3bb2fc270d52bbbd88973959208a35518fa213db4ef584285d42bf816e82de315ad73be33546faccfde32eb0059883ba267a22ebff9c178e756dc4dc232902b56bea06ba462848929bc7311cb49a5873beb7c01fb1f4842093945018fac5de069293ae1641641b66ce42a8294e2214b2c877332c66cf3ee41c0b31867309c763326964cc3966fe9873916bff6afdbc76fbd0e0a834c9aa03e31bfd04ecfaeb43482d261dd99013ac97ada6876222ef1c6b5099769504414e43b406fd3ed57d552a8e08021457fd929d8fa5f1c78d33b0971801490d13fa112a911ab8df19dc43d4b28af6a8b29a6fdce8ce36ad"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x801) 392.778129ms ago: executing program 4 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) 369.46692ms ago: executing program 4 (id=1136): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000bc0)='team_slave_0\x00', 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1d, @private1}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="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", 0x575, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r8, &(0x7f0000001a80)=""/4058, 0xfffffffffffffef5, 0x40010000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r4, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') openat(r9, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r10 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x110, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_PAYLOAD={0xf9, 0xa, "88134920d6d313af3bb2fc270d52bbbd88973959208a35518fa213db4ef584285d42bf816e82de315ad73be33546faccfde32eb0059883ba267a22ebff9c178e756dc4dc232902b56bea06ba462848929bc7311cb49a5873beb7c01fb1f4842093945018fac5de069293ae1641641b66ce42a8294e2214b2c877332c66cf3ee41c0b31867309c763326964cc3966fe9873916bff6afdbc76fbd0e0a834c9aa03e31bfd04ecfaeb43482d261dd99013ac97ada6876222ef1c6b5099769504414e43b406fd3ed57d552a8e08021457fd929d8fa5f1c78d33b0971801490d13fa112a911ab8df19dc43d4b28af6a8b29a6fdce8ce36ad"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x801) 115.328491ms ago: executing program 2 (id=1137): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r9, 0x4b34, 0x3bf) ioctl$KDDISABIO(r9, 0x4b37) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000b40)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x240}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0xff, 0x7fff000a}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x27, 0x7fff0006}]}) 113.857511ms ago: executing program 1 (id=1147): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x124, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=1138): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0xc, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x4008040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x120, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3864e070, 0x51}}}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x81, 0x1}, {0x5, 0x7}, {0xfb, 0x4}, {0x1, 0x2}, {0x1d}, {0x6, 0x2}, {0x1}, {0x80, 0x1}, {0xc}, {0x1, 0x6}, {0xf4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x7a, 0x2}, {0x3, 0x4}, {0xba}, {0xb, 0x6}], "a1df4dca601451de"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x2}, {0x3, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x8, 0x5}, {0x71, 0x2}, {0x80, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x4}], "58bb750f45e90a05"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x9}, {0xc}, {0x0, 0x5}, {0x2, 0x4}, {0x10, 0x3}, {0xc, 0x5}, {0x81, 0x4}, {0xf, 0x4}, {0x3, 0x7}, {0x9e, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x2}, {0x0, 0x1}, {0x6, 0x6}], "1cbc2ebef03a5696"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x7}, {0x9, 0x24}, {0x8, 0x7}, {0x27, 0x3}, {0xfa, 0x3}, {0x7f, 0x2}, {0x1, 0x41}, {0xb9, 0x5}, {0x1}], "b76116998bccf3ae"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x1}, {}, {0x8, 0x3}, {0x2}, {0xf5, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x5}], "b65e3523da3248f0"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xf9, 0x7}, {0x4, 0x7}, {0x6}, {0xa2, 0x3}, {0xe, 0x5}, {0x0, 0x7}, {0x9, 0x2}, {0x4, 0x4}], "86b03e15f299f877"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40004}, 0x20040805) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) kernel console output (not intermixed with test programs): e Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.359879][ T3773] Call Trace: [ 41.359887][ T3773] [ 41.359896][ T3773] __dump_stack+0x1d/0x30 [ 41.359920][ T3773] dump_stack_lvl+0xe8/0x140 [ 41.359996][ T3773] dump_stack+0x15/0x1b [ 41.360012][ T3773] should_fail_ex+0x265/0x280 [ 41.360033][ T3773] should_fail+0xb/0x20 [ 41.360052][ T3773] should_fail_usercopy+0x1a/0x20 [ 41.360094][ T3773] strncpy_from_user+0x25/0x230 [ 41.360130][ T3773] ? kmem_cache_alloc_noprof+0x186/0x310 [ 41.360165][ T3773] ? getname_flags+0x80/0x3b0 [ 41.360266][ T3773] getname_flags+0xae/0x3b0 [ 41.360301][ T3773] user_path_at+0x28/0x130 [ 41.360335][ T3773] do_fchownat+0xb0/0x210 [ 41.360368][ T3773] __x64_sys_lchown+0x4a/0x60 [ 41.360445][ T3773] x64_sys_call+0x2861/0x2ff0 [ 41.360472][ T3773] do_syscall_64+0xd2/0x200 [ 41.360502][ T3773] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.360531][ T3773] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.360611][ T3773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.360639][ T3773] RIP: 0033:0x7f560d60ebe9 [ 41.360728][ T3773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.360748][ T3773] RSP: 002b:00007f560c06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 41.360827][ T3773] RAX: ffffffffffffffda RBX: 00007f560d835fa0 RCX: 00007f560d60ebe9 [ 41.360893][ T3773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 41.360908][ T3773] RBP: 00007f560c06f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.360920][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.360935][ T3773] R13: 00007f560d836038 R14: 00007f560d835fa0 R15: 00007fff39d31b78 [ 41.360958][ T3773] [ 41.553742][ T3765] loop3: detected capacity change from 0 to 8192 [ 41.733098][ T3788] loop1: detected capacity change from 0 to 8192 [ 41.795503][ T3794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3794 comm=syz.3.70 [ 42.463026][ T3822] FAULT_INJECTION: forcing a failure. [ 42.463026][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 42.475867][ T3822] CPU: 0 UID: 0 PID: 3822 Comm: syz.2.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.475911][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.475926][ T3822] Call Trace: [ 42.475934][ T3822] [ 42.475942][ T3822] __dump_stack+0x1d/0x30 [ 42.475969][ T3822] dump_stack_lvl+0xe8/0x140 [ 42.475993][ T3822] dump_stack+0x15/0x1b [ 42.476014][ T3822] should_fail_ex+0x265/0x280 [ 42.476040][ T3822] should_failslab+0x8c/0xb0 [ 42.476099][ T3822] kmem_cache_alloc_node_noprof+0x57/0x320 [ 42.476216][ T3822] ? __alloc_skb+0x101/0x320 [ 42.476293][ T3822] __alloc_skb+0x101/0x320 [ 42.476316][ T3822] netlink_alloc_large_skb+0xba/0xf0 [ 42.476411][ T3822] netlink_sendmsg+0x3cf/0x6b0 [ 42.476440][ T3822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.476462][ T3822] __sock_sendmsg+0x142/0x180 [ 42.476489][ T3822] ____sys_sendmsg+0x31e/0x4e0 [ 42.476550][ T3822] ___sys_sendmsg+0x17b/0x1d0 [ 42.476593][ T3822] __x64_sys_sendmsg+0xd4/0x160 [ 42.476706][ T3822] x64_sys_call+0x191e/0x2ff0 [ 42.476733][ T3822] do_syscall_64+0xd2/0x200 [ 42.476766][ T3822] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.476789][ T3822] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.476877][ T3822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.476905][ T3822] RIP: 0033:0x7fe1dd80ebe9 [ 42.476924][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.476985][ T3822] RSP: 002b:00007fe1dc277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.477008][ T3822] RAX: ffffffffffffffda RBX: 00007fe1dda35fa0 RCX: 00007fe1dd80ebe9 [ 42.477023][ T3822] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 42.477038][ T3822] RBP: 00007fe1dc277090 R08: 0000000000000000 R09: 0000000000000000 [ 42.477059][ T3822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.477074][ T3822] R13: 00007fe1dda36038 R14: 00007fe1dda35fa0 R15: 00007fffb71cc2b8 [ 42.477137][ T3822] [ 42.701521][ T3824] netlink: 'syz.3.87': attribute type 3 has an invalid length. [ 42.724357][ T3814] loop4: detected capacity change from 0 to 512 [ 42.769873][ T3814] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.832023][ T3814] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.84: bad orphan inode 13 [ 42.852421][ T3814] ext4_test_bit(bit=12, block=18) = 1 [ 42.858027][ T3814] is_bad_inode(inode)=0 [ 42.862196][ T3814] NEXT_ORPHAN(inode)=2130706432 [ 42.867254][ T3814] max_ino=32 [ 42.870469][ T3814] i_nlink=1 [ 42.903600][ T3814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.938684][ T3833] loop0: detected capacity change from 0 to 512 [ 42.948270][ T3833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.960135][ T3833] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.88: bad orphan inode 13 [ 42.975234][ T3814] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.84: deleted inode referenced: 12 [ 42.976580][ T3833] ext4_test_bit(bit=12, block=18) = 1 [ 42.992118][ T3833] is_bad_inode(inode)=0 [ 42.993257][ T3814] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.84: deleted inode referenced: 12 [ 42.996321][ T3833] NEXT_ORPHAN(inode)=2130706432 [ 42.996330][ T3833] max_ino=32 [ 42.996338][ T3833] i_nlink=1 [ 42.997376][ T3833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.011222][ T3814] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.017574][ T3833] FAULT_INJECTION: forcing a failure. [ 43.017574][ T3833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.042243][ T3845] loop2: detected capacity change from 0 to 512 [ 43.052481][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.88 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.052512][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.052534][ T3833] Call Trace: [ 43.052543][ T3833] [ 43.052554][ T3833] __dump_stack+0x1d/0x30 [ 43.052583][ T3833] dump_stack_lvl+0xe8/0x140 [ 43.052612][ T3833] dump_stack+0x15/0x1b [ 43.052703][ T3833] should_fail_ex+0x265/0x280 [ 43.052732][ T3833] should_fail+0xb/0x20 [ 43.052756][ T3833] should_fail_usercopy+0x1a/0x20 [ 43.052788][ T3833] _copy_from_user+0x1c/0xb0 [ 43.052851][ T3833] bm_register_write+0xdb/0xbf0 [ 43.052887][ T3833] ? avc_policy_seqno+0x15/0x30 [ 43.052918][ T3833] ? selinux_file_permission+0x1e4/0x320 [ 43.052951][ T3833] ? __pfx_bm_register_write+0x10/0x10 [ 43.053002][ T3833] vfs_write+0x269/0x960 [ 43.053028][ T3833] ? __rcu_read_unlock+0x4f/0x70 [ 43.053126][ T3833] ? __fget_files+0x184/0x1c0 [ 43.053163][ T3833] ksys_write+0xda/0x1a0 [ 43.053193][ T3833] __x64_sys_write+0x40/0x50 [ 43.053223][ T3833] x64_sys_call+0x27fe/0x2ff0 [ 43.053309][ T3833] do_syscall_64+0xd2/0x200 [ 43.053347][ T3833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.053380][ T3833] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.053438][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.053467][ T3833] RIP: 0033:0x7f37bbf5ebe9 [ 43.053487][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.053557][ T3833] RSP: 002b:00007f37ba9a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.053583][ T3833] RAX: ffffffffffffffda RBX: 00007f37bc186090 RCX: 00007f37bbf5ebe9 [ 43.053600][ T3833] RDX: 0000000000000032 RSI: 0000200000000200 RDI: 000000000000000b [ 43.053615][ T3833] RBP: 00007f37ba9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 43.053631][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.053648][ T3833] R13: 00007f37bc186128 R14: 00007f37bc186090 R15: 00007ffe21fbddd8 [ 43.053674][ T3833] [ 43.055564][ T3814] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 43.089255][ T3845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.133293][ T3833] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 43.139708][ T3845] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.89: bad orphan inode 13 [ 43.168789][ T3814] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.194539][ T3845] ext4_test_bit(bit=12, block=18) = 1 [ 43.239465][ T3833] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.244843][ T3845] is_bad_inode(inode)=0 [ 43.325418][ T3845] NEXT_ORPHAN(inode)=2130706432 [ 43.330296][ T3845] max_ino=32 [ 43.333558][ T3845] i_nlink=1 [ 43.337469][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.337844][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.368322][ T3834] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.89: deleted inode referenced: 12 [ 43.387038][ T3834] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.406730][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.418080][ T3834] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 43.455507][ T3834] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.519576][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.970553][ T3889] FAULT_INJECTION: forcing a failure. [ 43.970553][ T3889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.983900][ T3889] CPU: 0 UID: 0 PID: 3889 Comm: syz.4.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.983927][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.983986][ T3889] Call Trace: [ 43.983994][ T3889] [ 43.984004][ T3889] __dump_stack+0x1d/0x30 [ 43.984080][ T3889] dump_stack_lvl+0xe8/0x140 [ 43.984099][ T3889] dump_stack+0x15/0x1b [ 43.984120][ T3889] should_fail_ex+0x265/0x280 [ 43.984172][ T3889] should_fail+0xb/0x20 [ 43.984194][ T3889] should_fail_usercopy+0x1a/0x20 [ 43.984217][ T3889] strncpy_from_user+0x25/0x230 [ 43.984279][ T3889] ? kmem_cache_alloc_noprof+0x186/0x310 [ 43.984306][ T3889] ? getname_flags+0x80/0x3b0 [ 43.984336][ T3889] getname_flags+0xae/0x3b0 [ 43.984403][ T3889] __x64_sys_unlinkat+0x70/0xb0 [ 43.984485][ T3889] x64_sys_call+0x2ede/0x2ff0 [ 43.984513][ T3889] do_syscall_64+0xd2/0x200 [ 43.984612][ T3889] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.984643][ T3889] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.984699][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.984788][ T3889] RIP: 0033:0x7f039600ebe9 [ 43.984807][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.984829][ T3889] RSP: 002b:00007f0394a6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 43.984888][ T3889] RAX: ffffffffffffffda RBX: 00007f0396235fa0 RCX: 00007f039600ebe9 [ 43.985024][ T3889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 43.985040][ T3889] RBP: 00007f0394a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.985055][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.985070][ T3889] R13: 00007f0396236038 R14: 00007f0396235fa0 R15: 00007ffe580a8958 [ 43.985094][ T3889] [ 44.266175][ T3891] Zero length message leads to an empty skb [ 44.323471][ T3891] loop1: detected capacity change from 0 to 1756 [ 44.368860][ T3891] FAULT_INJECTION: forcing a failure. [ 44.368860][ T3891] name failslab, interval 1, probability 0, space 0, times 0 [ 44.381700][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.381793][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.381807][ T3891] Call Trace: [ 44.381813][ T3891] [ 44.381822][ T3891] __dump_stack+0x1d/0x30 [ 44.381848][ T3891] dump_stack_lvl+0xe8/0x140 [ 44.381873][ T3891] dump_stack+0x15/0x1b [ 44.381946][ T3891] should_fail_ex+0x265/0x280 [ 44.382008][ T3891] should_failslab+0x8c/0xb0 [ 44.382037][ T3891] kmem_cache_alloc_node_noprof+0x57/0x320 [ 44.382073][ T3891] ? __alloc_skb+0x101/0x320 [ 44.382227][ T3891] __alloc_skb+0x101/0x320 [ 44.382253][ T3891] netlink_alloc_large_skb+0xba/0xf0 [ 44.382287][ T3891] netlink_sendmsg+0x3cf/0x6b0 [ 44.382311][ T3891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.382340][ T3891] __sock_sendmsg+0x142/0x180 [ 44.382407][ T3891] ____sys_sendmsg+0x31e/0x4e0 [ 44.382440][ T3891] ___sys_sendmsg+0x17b/0x1d0 [ 44.382487][ T3891] __x64_sys_sendmsg+0xd4/0x160 [ 44.382547][ T3891] x64_sys_call+0x191e/0x2ff0 [ 44.382612][ T3891] do_syscall_64+0xd2/0x200 [ 44.382645][ T3891] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.382679][ T3891] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.382728][ T3891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.382757][ T3891] RIP: 0033:0x7f560d60ebe9 [ 44.382776][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.382796][ T3891] RSP: 002b:00007f560c06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.382819][ T3891] RAX: ffffffffffffffda RBX: 00007f560d835fa0 RCX: 00007f560d60ebe9 [ 44.382834][ T3891] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 44.382849][ T3891] RBP: 00007f560c06f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.382862][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.382955][ T3891] R13: 00007f560d836038 R14: 00007f560d835fa0 R15: 00007fff39d31b78 [ 44.382974][ T3891] [ 44.924780][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 44.924794][ T29] audit: type=1400 audit(1756243994.867:552): avc: denied { create } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.975880][ T29] audit: type=1400 audit(1756243994.887:553): avc: denied { setopt } for pid=3957 comm="syz.0.124" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.980975][ T3953] loop1: detected capacity change from 0 to 8192 [ 44.996333][ T29] audit: type=1400 audit(1756243994.897:554): avc: denied { create } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.022196][ T29] audit: type=1400 audit(1756243994.897:555): avc: denied { bind } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.041458][ T29] audit: type=1400 audit(1756243994.897:556): avc: denied { listen } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.060919][ T29] audit: type=1400 audit(1756243994.897:557): avc: denied { connect } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.080536][ T29] audit: type=1400 audit(1756243994.897:558): avc: denied { write } for pid=3957 comm="syz.0.124" path="socket:[6329]" dev="sockfs" ino=6329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.103712][ T29] audit: type=1400 audit(1756243994.897:559): avc: denied { accept } for pid=3957 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.147706][ T29] audit: type=1400 audit(1756243994.937:560): avc: denied { mounton } for pid=3951 comm="syz.1.123" path="/22/file1" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 45.170116][ T29] audit: type=1400 audit(1756243994.947:561): avc: denied { mount } for pid=3951 comm="syz.1.123" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.223148][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3974 comm=syz.1.123 [ 46.463285][ T4084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.478075][ T4084] loop3: detected capacity change from 0 to 128 [ 46.519074][ T4088] lo speed is unknown, defaulting to 1000 [ 46.530233][ T4087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.549092][ T4088] lo speed is unknown, defaulting to 1000 [ 46.560973][ T4088] lo speed is unknown, defaulting to 1000 [ 46.582813][ T4099] netlink: 'syz.0.130': attribute type 8 has an invalid length. [ 46.598557][ T4088] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.608205][ T4088] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 46.626790][ T4087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.660643][ T4088] lo speed is unknown, defaulting to 1000 [ 46.674358][ T4088] lo speed is unknown, defaulting to 1000 [ 46.687568][ T4088] lo speed is unknown, defaulting to 1000 [ 46.699743][ T4088] lo speed is unknown, defaulting to 1000 [ 46.706047][ T4088] lo speed is unknown, defaulting to 1000 [ 46.718994][ T4087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.733145][ T4088] lo speed is unknown, defaulting to 1000 [ 46.859573][ T4087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.946438][ T3546] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.982055][ T3546] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.053343][ T3546] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.137753][ T3546] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.432687][ T4123] loop1: detected capacity change from 0 to 8192 [ 47.511298][ T4126] lo speed is unknown, defaulting to 1000 [ 47.601892][ T4136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4136 comm=syz.1.139 [ 47.662972][ T10] IPVS: starting estimator thread 0... [ 47.755021][ T4145] IPVS: using max 2256 ests per chain, 112800 per kthread [ 47.888012][ T4153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 47.916681][ T4155] FAULT_INJECTION: forcing a failure. [ 47.916681][ T4155] name failslab, interval 1, probability 0, space 0, times 0 [ 47.929437][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.929469][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.929482][ T4155] Call Trace: [ 47.929489][ T4155] [ 47.929551][ T4155] __dump_stack+0x1d/0x30 [ 47.929576][ T4155] dump_stack_lvl+0xe8/0x140 [ 47.929600][ T4155] dump_stack+0x15/0x1b [ 47.929631][ T4155] should_fail_ex+0x265/0x280 [ 47.929652][ T4155] should_failslab+0x8c/0xb0 [ 47.929676][ T4155] kmem_cache_alloc_node_noprof+0x57/0x320 [ 47.929712][ T4155] ? __alloc_skb+0x101/0x320 [ 47.929733][ T4155] __alloc_skb+0x101/0x320 [ 47.929760][ T4155] netlink_alloc_large_skb+0xba/0xf0 [ 47.929801][ T4155] netlink_sendmsg+0x3cf/0x6b0 [ 47.929849][ T4155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.929922][ T4155] __sock_sendmsg+0x142/0x180 [ 47.929959][ T4155] ____sys_sendmsg+0x31e/0x4e0 [ 47.929991][ T4155] ___sys_sendmsg+0x17b/0x1d0 [ 47.930036][ T4155] __x64_sys_sendmsg+0xd4/0x160 [ 47.930099][ T4155] x64_sys_call+0x191e/0x2ff0 [ 47.930125][ T4155] do_syscall_64+0xd2/0x200 [ 47.930184][ T4155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.930226][ T4155] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.930259][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.930362][ T4155] RIP: 0033:0x7fe1dd80ebe9 [ 47.930380][ T4155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.930408][ T4155] RSP: 002b:00007fe1dc277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.930431][ T4155] RAX: ffffffffffffffda RBX: 00007fe1dda35fa0 RCX: 00007fe1dd80ebe9 [ 47.930445][ T4155] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 47.930457][ T4155] RBP: 00007fe1dc277090 R08: 0000000000000000 R09: 0000000000000000 [ 47.930502][ T4155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.930517][ T4155] R13: 00007fe1dda36038 R14: 00007fe1dda35fa0 R15: 00007fffb71cc2b8 [ 47.930541][ T4155] [ 48.151928][ T4157] netlink: 'syz.2.151': attribute type 21 has an invalid length. [ 48.159808][ T4157] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 48.260017][ T4175] lo speed is unknown, defaulting to 1000 [ 48.287779][ T4183] FAULT_INJECTION: forcing a failure. [ 48.287779][ T4183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.301155][ T4183] CPU: 0 UID: 0 PID: 4183 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.301242][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.301257][ T4183] Call Trace: [ 48.301265][ T4183] [ 48.301273][ T4183] __dump_stack+0x1d/0x30 [ 48.301359][ T4183] dump_stack_lvl+0xe8/0x140 [ 48.301381][ T4183] dump_stack+0x15/0x1b [ 48.301400][ T4183] should_fail_ex+0x265/0x280 [ 48.301449][ T4183] should_fail+0xb/0x20 [ 48.301524][ T4183] should_fail_usercopy+0x1a/0x20 [ 48.301548][ T4183] _copy_from_user+0x1c/0xb0 [ 48.301660][ T4183] __copy_msghdr+0x244/0x300 [ 48.301687][ T4183] ___sys_sendmsg+0x109/0x1d0 [ 48.301730][ T4183] __x64_sys_sendmsg+0xd4/0x160 [ 48.301762][ T4183] x64_sys_call+0x191e/0x2ff0 [ 48.301804][ T4183] do_syscall_64+0xd2/0x200 [ 48.301957][ T4183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.302054][ T4183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.302080][ T4183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.302180][ T4183] RIP: 0033:0x7f37bbf5ebe9 [ 48.302196][ T4183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.302215][ T4183] RSP: 002b:00007f37ba9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.302234][ T4183] RAX: ffffffffffffffda RBX: 00007f37bc185fa0 RCX: 00007f37bbf5ebe9 [ 48.302246][ T4183] RDX: 0000000004004854 RSI: 0000200000000100 RDI: 0000000000000003 [ 48.302258][ T4183] RBP: 00007f37ba9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.302270][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.302285][ T4183] R13: 00007f37bc186038 R14: 00007f37bc185fa0 R15: 00007ffe21fbddd8 [ 48.302304][ T4183] [ 48.528980][ T4188] FAULT_INJECTION: forcing a failure. [ 48.528980][ T4188] name failslab, interval 1, probability 0, space 0, times 0 [ 48.541847][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.541877][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.541891][ T4188] Call Trace: [ 48.541923][ T4188] [ 48.541932][ T4188] __dump_stack+0x1d/0x30 [ 48.541956][ T4188] dump_stack_lvl+0xe8/0x140 [ 48.541978][ T4188] dump_stack+0x15/0x1b [ 48.541996][ T4188] should_fail_ex+0x265/0x280 [ 48.542020][ T4188] should_failslab+0x8c/0xb0 [ 48.542101][ T4188] kmem_cache_alloc_node_noprof+0x57/0x320 [ 48.542134][ T4188] ? __alloc_skb+0x101/0x320 [ 48.542158][ T4188] __alloc_skb+0x101/0x320 [ 48.542181][ T4188] netlink_alloc_large_skb+0xba/0xf0 [ 48.542321][ T4188] netlink_sendmsg+0x3cf/0x6b0 [ 48.542347][ T4188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.542370][ T4188] __sock_sendmsg+0x142/0x180 [ 48.542507][ T4188] ____sys_sendmsg+0x31e/0x4e0 [ 48.542534][ T4188] ___sys_sendmsg+0x17b/0x1d0 [ 48.542571][ T4188] __x64_sys_sendmsg+0xd4/0x160 [ 48.542599][ T4188] x64_sys_call+0x191e/0x2ff0 [ 48.542667][ T4188] do_syscall_64+0xd2/0x200 [ 48.542696][ T4188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.542721][ T4188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.542761][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.542783][ T4188] RIP: 0033:0x7f37bbf5ebe9 [ 48.542808][ T4188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.542828][ T4188] RSP: 002b:00007f37ba9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.542851][ T4188] RAX: ffffffffffffffda RBX: 00007f37bc185fa0 RCX: 00007f37bbf5ebe9 [ 48.542865][ T4188] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.542890][ T4188] RBP: 00007f37ba9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.542905][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.542927][ T4188] R13: 00007f37bc186038 R14: 00007f37bc185fa0 R15: 00007ffe21fbddd8 [ 48.542950][ T4188] [ 48.765314][ T4191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.165'. [ 48.868247][ T4186] smc: net device bond0 applied user defined pnetid SYZ1 [ 49.040297][ T4216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4216 comm=syz.0.169 [ 49.075384][ T4214] loop1: detected capacity change from 0 to 8192 [ 49.807206][ T4236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.178'. [ 49.922419][ T4202] net_ratelimit: 1 callbacks suppressed [ 49.922437][ T4202] Set syz1 is full, maxelem 65536 reached [ 49.989144][ T4240] lo speed is unknown, defaulting to 1000 [ 50.067346][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 50.067361][ T29] audit: type=1326 audit(1756244000.007:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 50.107108][ T29] audit: type=1326 audit(1756244000.007:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 50.130589][ T29] audit: type=1326 audit(1756244000.037:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 50.153874][ T29] audit: type=1326 audit(1756244000.037:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 50.177149][ T29] audit: type=1326 audit(1756244000.037:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 50.200667][ T4245] lo speed is unknown, defaulting to 1000 [ 50.310927][ T4259] random: crng reseeded on system resumption [ 50.318235][ T29] audit: type=1400 audit(1756244000.247:667): avc: denied { read append } for pid=4256 comm="syz.0.185" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.342035][ T29] audit: type=1400 audit(1756244000.247:668): avc: denied { ioctl open } for pid=4256 comm="syz.0.185" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.416417][ T29] audit: type=1400 audit(1756244000.337:669): avc: denied { firmware_load } for pid=3577 comm="kworker/u8:53" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 50.452168][ T4262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.186'. [ 50.484649][ T4264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 50.493614][ T4264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 50.629097][ T29] audit: type=1400 audit(1756244000.567:670): avc: denied { ioctl } for pid=4274 comm="syz.1.192" path="socket:[7316]" dev="sockfs" ino=7316 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.651402][ T4268] loop4: detected capacity change from 0 to 8192 [ 50.686060][ T29] audit: type=1400 audit(1756244000.627:671): avc: denied { bind } for pid=4272 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.030767][ T4297] tmpfs: Bad value for 'mpol' [ 51.120548][ T4301] lo speed is unknown, defaulting to 1000 [ 51.461566][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 51.470647][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 51.528557][ T4315] loop4: detected capacity change from 0 to 164 [ 51.535976][ T4315] rock: directory entry would overflow storage [ 51.542165][ T4315] rock: sig=0x66, size=4, remaining=3 [ 51.550348][ T4315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.205'. [ 51.559382][ T4315] bridge_slave_1: left allmulticast mode [ 51.565071][ T4315] bridge_slave_1: left promiscuous mode [ 51.570943][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.578865][ T4315] bridge_slave_0: left allmulticast mode [ 51.584613][ T4315] bridge_slave_0: left promiscuous mode [ 51.590299][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.704356][ T4320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.207'. [ 51.732022][ T4322] random: crng reseeded on system resumption [ 51.865892][ T4328] random: crng reseeded on system resumption [ 52.486987][ T4336] loop2: detected capacity change from 0 to 8192 [ 52.739523][ T1035] IPVS: starting estimator thread 0... [ 52.784264][ T4360] random: crng reseeded on system resumption [ 52.839555][ T4357] IPVS: using max 2400 ests per chain, 120000 per kthread [ 52.858874][ T1035] IPVS: starting estimator thread 0... [ 52.963852][ T4368] IPVS: using max 2400 ests per chain, 120000 per kthread [ 53.010449][ T4377] __nla_validate_parse: 4 callbacks suppressed [ 53.010470][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 53.025589][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 53.079554][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.229'. [ 53.113042][ T4386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 53.175374][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.234'. [ 53.189739][ T4394] random: crng reseeded on system resumption [ 53.227247][ T4401] netlink: 5 bytes leftover after parsing attributes in process `syz.2.237'. [ 53.239047][ T4401] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 53.247222][ T4401] 0ªî{X¹¦: entered allmulticast mode [ 53.253307][ T4401] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 53.281668][ T4396] loop4: detected capacity change from 0 to 8192 [ 53.293374][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 53.302392][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 53.374313][ T4410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.241'. [ 53.502195][ T4418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4418 comm=syz.4.235 [ 53.517837][ T4414] loop3: detected capacity change from 0 to 8192 [ 53.559128][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 54.730337][ T4470] loop4: detected capacity change from 0 to 8192 [ 54.791297][ T4482] loop3: detected capacity change from 0 to 128 [ 54.800607][ T4482] ext4: Unknown parameter 'smackfsroot' [ 54.907115][ T4498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4498 comm=syz.4.257 [ 54.968409][ T4503] capability: warning: `syz.2.268' uses deprecated v2 capabilities in a way that may be insecure [ 55.210452][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 55.210468][ T29] audit: type=1400 audit(1756244005.147:710): avc: denied { read } for pid=4511 comm="syz.1.271" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.239795][ T29] audit: type=1400 audit(1756244005.147:711): avc: denied { open } for pid=4511 comm="syz.1.271" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.348259][ T29] audit: type=1400 audit(1756244005.207:712): avc: denied { ioctl } for pid=4511 comm="syz.1.271" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.373575][ T29] audit: type=1326 audit(1756244005.287:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.0.269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37bbf5ebe9 code=0x0 [ 55.403493][ T4513] loop3: detected capacity change from 0 to 8192 [ 55.483914][ T29] audit: type=1326 audit(1756244005.417:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 55.507382][ T29] audit: type=1326 audit(1756244005.427:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4511 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 55.561916][ T29] audit: type=1326 audit(1756244005.497:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.3.270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc44c34ebe9 code=0x0 [ 55.672704][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4524 comm=syz.3.270 [ 56.093187][ T29] audit: type=1326 audit(1756244006.027:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 56.161429][ T29] audit: type=1326 audit(1756244006.027:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 56.185090][ T29] audit: type=1326 audit(1756244006.057:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4543 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 56.988201][ T4581] loop4: detected capacity change from 0 to 8192 [ 57.195893][ T4590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4590 comm=syz.4.294 [ 57.251088][ T4596] netlink: 'syz.0.298': attribute type 30 has an invalid length. [ 57.279248][ T3596] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.303458][ T3596] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.344567][ T3596] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.373263][ T4598] loop1: detected capacity change from 0 to 8192 [ 57.380476][ T3596] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.396068][ T4598] syz.1.299: attempt to access beyond end of device [ 57.396068][ T4598] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 57.410306][ T4598] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 57.418257][ T4598] FAT-fs (loop1): Filesystem has been set read-only [ 57.428773][ T4598] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 57.438121][ T4598] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 57.480968][ T4604] IPv4: Oversized IP packet from 127.202.26.0 [ 57.739544][ T4615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4615 comm=syz.0.305 [ 57.953631][ T4633] FAULT_INJECTION: forcing a failure. [ 57.953631][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 57.966378][ T4633] CPU: 1 UID: 0 PID: 4633 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.966407][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.966419][ T4633] Call Trace: [ 57.966426][ T4633] [ 57.966433][ T4633] __dump_stack+0x1d/0x30 [ 57.966504][ T4633] dump_stack_lvl+0xe8/0x140 [ 57.966523][ T4633] dump_stack+0x15/0x1b [ 57.966538][ T4633] should_fail_ex+0x265/0x280 [ 57.966559][ T4633] should_failslab+0x8c/0xb0 [ 57.966587][ T4633] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.966696][ T4633] ? __alloc_skb+0x101/0x320 [ 57.966719][ T4633] __alloc_skb+0x101/0x320 [ 57.966737][ T4633] netlink_alloc_large_skb+0xba/0xf0 [ 57.966769][ T4633] netlink_sendmsg+0x3cf/0x6b0 [ 57.966853][ T4633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.966874][ T4633] __sock_sendmsg+0x142/0x180 [ 57.966907][ T4633] ____sys_sendmsg+0x31e/0x4e0 [ 57.966935][ T4633] ___sys_sendmsg+0x17b/0x1d0 [ 57.967026][ T4633] __x64_sys_sendmsg+0xd4/0x160 [ 57.967098][ T4633] x64_sys_call+0x191e/0x2ff0 [ 57.967126][ T4633] do_syscall_64+0xd2/0x200 [ 57.967153][ T4633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.967228][ T4633] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.967253][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.967277][ T4633] RIP: 0033:0x7fc44c34ebe9 [ 57.967296][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.967394][ T4633] RSP: 002b:00007fc44adb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.967416][ T4633] RAX: ffffffffffffffda RBX: 00007fc44c575fa0 RCX: 00007fc44c34ebe9 [ 57.967432][ T4633] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 57.967447][ T4633] RBP: 00007fc44adb7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.967462][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.967476][ T4633] R13: 00007fc44c576038 R14: 00007fc44c575fa0 R15: 00007ffedcef72b8 [ 57.967500][ T4633] [ 58.217765][ T4639] __nla_validate_parse: 10 callbacks suppressed [ 58.217781][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 58.244803][ T4639] loop3: detected capacity change from 0 to 2048 [ 58.270393][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.341549][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 58.506861][ T4692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.322'. [ 58.598886][ T4714] syzkaller1: entered promiscuous mode [ 58.604525][ T4714] syzkaller1: entered allmulticast mode [ 58.645732][ T4691] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.765299][ T4744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 58.840068][ T4741] loop4: detected capacity change from 0 to 8192 [ 58.995472][ T4767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4767 comm=syz.4.331 [ 59.489148][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'. [ 59.711367][ T4876] lo speed is unknown, defaulting to 1000 [ 60.054770][ T3404] IPVS: starting estimator thread 0... [ 60.143956][ T4908] IPVS: using max 1872 ests per chain, 93600 per kthread [ 60.744480][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 60.744496][ T29] audit: type=1326 audit(1756244010.687:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4980 comm="syz.0.351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37bbf5ebe9 code=0x0 [ 60.838072][ T4990] lo speed is unknown, defaulting to 1000 [ 60.854224][ T4991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4991 comm=syz.0.351 [ 60.912672][ T29] audit: type=1326 audit(1756244010.847:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 60.940747][ T29] audit: type=1326 audit(1756244010.877:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 60.964098][ T29] audit: type=1326 audit(1756244010.877:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 60.987683][ T29] audit: type=1326 audit(1756244010.877:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.010966][ T29] audit: type=1326 audit(1756244010.877:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.034382][ T29] audit: type=1326 audit(1756244010.877:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.057710][ T29] audit: type=1326 audit(1756244010.877:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.080999][ T29] audit: type=1326 audit(1756244010.877:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.104349][ T29] audit: type=1326 audit(1756244010.877:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 61.149743][ T5004] syzkaller1: entered promiscuous mode [ 61.155456][ T5004] syzkaller1: entered allmulticast mode [ 62.401915][ T5096] loop3: detected capacity change from 0 to 8192 [ 62.531994][ T5113] lo speed is unknown, defaulting to 1000 [ 63.290568][ T5140] loop3: detected capacity change from 0 to 8192 [ 63.311175][ T5146] loop4: detected capacity change from 0 to 8192 [ 63.385986][ T5146] 9pnet_virtio: no channels available for device syz [ 63.519449][ T5180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5180 comm=syz.3.370 [ 63.582833][ T5186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5186 comm=syz.0.372 [ 63.793484][ T5195] loop4: detected capacity change from 0 to 8192 [ 63.984875][ T5205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5205 comm=syz.4.377 [ 64.375745][ T5214] random: crng reseeded on system resumption [ 64.559342][ T5216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'. [ 64.880600][ T5265] loop2: detected capacity change from 0 to 8192 [ 64.990907][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.395'. [ 65.031705][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 65.083481][ T5299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5299 comm=syz.2.393 [ 65.331037][ T5316] loop3: detected capacity change from 0 to 8192 [ 65.614351][ T5351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5351 comm=syz.3.400 [ 66.108062][ T5406] lo speed is unknown, defaulting to 1000 [ 66.122402][ T5408] random: crng reseeded on system resumption [ 66.438029][ T5428] lo speed is unknown, defaulting to 1000 [ 66.704190][ T5435] loop2: detected capacity change from 0 to 8192 [ 66.789832][ T5444] lo speed is unknown, defaulting to 1000 [ 66.838917][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 66.838932][ T29] audit: type=1326 audit(1756244016.777:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5433 comm="syz.2.418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1dd80ebe9 code=0x0 [ 66.937394][ T5446] lo speed is unknown, defaulting to 1000 [ 66.948277][ T5454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5454 comm=syz.2.418 [ 67.204910][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 67.503458][ T5476] lo speed is unknown, defaulting to 1000 [ 67.727897][ T5517] random: crng reseeded on system resumption [ 67.772364][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 68.394021][ T5538] lo speed is unknown, defaulting to 1000 [ 68.399910][ T29] audit: type=1326 audit(1756244018.337:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.0.438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37bbf5ebe9 code=0x0 [ 68.493403][ T5534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5534 comm=syz.0.438 [ 68.817844][ T5580] lo speed is unknown, defaulting to 1000 [ 69.021907][ T29] audit: type=1326 audit(1756244018.957:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 69.045449][ T29] audit: type=1326 audit(1756244018.957:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 69.077242][ T29] audit: type=1326 audit(1756244019.017:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 69.100641][ T29] audit: type=1326 audit(1756244019.017:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 69.124117][ T29] audit: type=1326 audit(1756244019.017:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 69.149366][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 69.378630][ T5632] loop2: detected capacity change from 0 to 8192 [ 69.472591][ T29] audit: type=1400 audit(1756244019.337:1055): avc: denied { mount } for pid=5638 comm="syz.1.457" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.494911][ T29] audit: type=1400 audit(1756244019.357:1056): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.632495][ T29] audit: type=1326 audit(1756244019.457:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.2.454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1dd80ebe9 code=0x0 [ 69.673330][ T5647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5647 comm=syz.2.454 [ 69.812603][ T5653] lo speed is unknown, defaulting to 1000 [ 69.936554][ T5672] loop1: detected capacity change from 0 to 2048 [ 69.943374][ T5672] EXT4-fs: Ignoring removed nobh option [ 69.968517][ T5672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.984047][ T5672] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.121940][ T5689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 70.258250][ T5708] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 70.277612][ T5708] bond1: entered promiscuous mode [ 70.283117][ T5708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.349440][ T5721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 70.350020][ T5722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.475'. [ 70.402044][ T5727] lo speed is unknown, defaulting to 1000 [ 70.438253][ T5730] loop2: detected capacity change from 0 to 128 [ 70.445470][ T5733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.479'. [ 70.766385][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.769153][ T5769] loop2: detected capacity change from 0 to 8192 [ 71.003404][ T5805] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 71.029790][ T5800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5800 comm=syz.2.485 [ 71.184605][ T5795] loop1: detected capacity change from 0 to 128 [ 71.551136][ T5862] lo speed is unknown, defaulting to 1000 [ 71.610528][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'. [ 71.842116][ T5889] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 71.902706][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'. [ 72.322613][ T5950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.516'. [ 72.325846][ T5941] loop4: detected capacity change from 0 to 8192 [ 72.360600][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 72.389915][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 72.389931][ T29] audit: type=1326 audit(1756244022.327:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.419682][ T29] audit: type=1326 audit(1756244022.327:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.443627][ T29] audit: type=1326 audit(1756244022.327:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.467300][ T29] audit: type=1326 audit(1756244022.327:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.490681][ T29] audit: type=1326 audit(1756244022.327:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.514177][ T29] audit: type=1326 audit(1756244022.327:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.537667][ T29] audit: type=1326 audit(1756244022.327:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.561104][ T29] audit: type=1326 audit(1756244022.327:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.584357][ T29] audit: type=1326 audit(1756244022.327:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.607800][ T29] audit: type=1326 audit(1756244022.327:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.0.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 72.631111][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.638549][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.664398][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.671836][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.961539][ T5781] syz.1.487 (5781) used greatest stack depth: 9856 bytes left [ 72.983681][ T5982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'. [ 73.012113][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'. [ 73.201556][ T5782] syz.1.487 (5782) used greatest stack depth: 7336 bytes left [ 73.392870][ T6012] loop1: detected capacity change from 0 to 8192 [ 73.855094][ T6032] loop3: detected capacity change from 0 to 128 [ 73.876647][ T6034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6034 comm=syz.0.544 [ 74.038631][ T6039] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 74.391506][ T6060] loop1: detected capacity change from 0 to 8192 [ 74.445671][ T6065] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 74.997252][ T6099] lo speed is unknown, defaulting to 1000 [ 75.328567][ T6107] loop1: detected capacity change from 0 to 512 [ 75.335963][ T6107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.372262][ T6109] loop4: detected capacity change from 0 to 1024 [ 75.379163][ T6109] EXT4-fs: Ignoring removed bh option [ 75.384818][ T6109] EXT4-fs: Ignoring removed nobh option [ 75.390415][ T6109] EXT4-fs: inline encryption not supported [ 75.413669][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.427681][ T6107] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.444053][ T6107] FAULT_INJECTION: forcing a failure. [ 75.444053][ T6107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.457439][ T6107] CPU: 0 UID: 0 PID: 6107 Comm: syz.1.572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.457465][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.457526][ T6107] Call Trace: [ 75.457535][ T6107] [ 75.457544][ T6107] __dump_stack+0x1d/0x30 [ 75.457572][ T6107] dump_stack_lvl+0xe8/0x140 [ 75.457593][ T6107] dump_stack+0x15/0x1b [ 75.457666][ T6107] should_fail_ex+0x265/0x280 [ 75.457768][ T6107] should_fail_alloc_page+0xf2/0x100 [ 75.457801][ T6107] __alloc_frozen_pages_noprof+0xff/0x360 [ 75.457845][ T6107] alloc_pages_mpol+0xb3/0x250 [ 75.457877][ T6107] alloc_pages_noprof+0x90/0x130 [ 75.457917][ T6107] pte_alloc_one+0x2d/0x120 [ 75.457944][ T6107] __do_fault+0x7b/0x200 [ 75.457969][ T6107] handle_mm_fault+0xd69/0x2c20 [ 75.458000][ T6107] ? check_vma_flags+0x26e/0x340 [ 75.458095][ T6107] __get_user_pages+0x102e/0x1fa0 [ 75.458132][ T6107] __gup_longterm_locked+0x8f4/0xe60 [ 75.458161][ T6107] ? security_ptrace_access_check+0x69/0x80 [ 75.458252][ T6107] ? __ptrace_may_access+0x2c3/0x340 [ 75.458276][ T6107] pin_user_pages_remote+0x7e/0xb0 [ 75.458357][ T6107] process_vm_rw+0x484/0x960 [ 75.458448][ T6107] __x64_sys_process_vm_writev+0x78/0x90 [ 75.458478][ T6107] x64_sys_call+0x2a7c/0x2ff0 [ 75.458502][ T6107] do_syscall_64+0xd2/0x200 [ 75.458548][ T6107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.458570][ T6107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.458594][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.458653][ T6107] RIP: 0033:0x7f560d60ebe9 [ 75.458671][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.458692][ T6107] RSP: 002b:00007f560c06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 75.458714][ T6107] RAX: ffffffffffffffda RBX: 00007f560d835fa0 RCX: 00007f560d60ebe9 [ 75.458726][ T6107] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000000fd [ 75.458738][ T6107] RBP: 00007f560c06f090 R08: 0000000000000001 R09: 0000000000000000 [ 75.458750][ T6107] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 75.458804][ T6107] R13: 00007f560d836038 R14: 00007f560d835fa0 R15: 00007fff39d31b78 [ 75.458821][ T6107] [ 75.475346][ T6109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.547473][ T6117] __nla_validate_parse: 7 callbacks suppressed [ 75.547488][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.574'. [ 75.716064][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.462822][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.481170][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.585'. [ 76.528637][ T6148] loop4: detected capacity change from 0 to 1024 [ 76.540554][ T6148] EXT4-fs: Ignoring removed bh option [ 76.546664][ T6148] EXT4-fs: Ignoring removed bh option [ 76.563091][ T6148] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.575314][ T6148] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.583712][ T6148] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.591168][ T6148] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.586: Invalid inode table block 0 in block_group 0 [ 76.604124][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 76.618676][ T6148] EXT4-fs error (device loop4): ext4_quota_write:7326: inode #3: comm syz.4.586: mark_inode_dirty error [ 76.630321][ T6148] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.586: Failed to acquire dquot type 0 [ 76.642655][ T6148] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.586: Invalid inode table block 0 in block_group 0 [ 76.665877][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 76.676693][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 76.694381][ T6148] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.586: mark_inode_dirty error [ 76.727730][ T6148] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.586: Invalid inode table block 0 in block_group 0 [ 76.764570][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 76.785631][ T6148] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 76.805304][ T6148] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.586: Invalid inode table block 0 in block_group 0 [ 76.825081][ T6148] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 76.837443][ T6148] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.586: mark_inode_dirty error [ 76.848860][ T6148] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 76.875040][ T6148] EXT4-fs (loop4): 1 truncate cleaned up [ 76.886521][ T6148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.910615][ T6171] lo speed is unknown, defaulting to 1000 [ 76.966079][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.056176][ T6174] loop3: detected capacity change from 0 to 8192 [ 77.307934][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6181 comm=syz.3.596 [ 77.327064][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 77.468657][ T6198] loop4: detected capacity change from 0 to 512 [ 77.476083][ T6198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.503243][ T6198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.541907][ T6198] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.584486][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 77.584505][ T29] audit: type=1326 audit(1756244027.527:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.614512][ T29] audit: type=1326 audit(1756244027.527:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.638044][ T29] audit: type=1326 audit(1756244027.527:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.661558][ T29] audit: type=1326 audit(1756244027.527:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.685048][ T29] audit: type=1326 audit(1756244027.527:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.708454][ T29] audit: type=1326 audit(1756244027.527:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.731823][ T29] audit: type=1326 audit(1756244027.527:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.755169][ T29] audit: type=1326 audit(1756244027.527:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.778513][ T29] audit: type=1326 audit(1756244027.527:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.801812][ T29] audit: type=1326 audit(1756244027.527:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bbf5ebe9 code=0x7ffc0000 [ 77.859742][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 77.880016][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.982301][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 78.028497][ T6232] lo speed is unknown, defaulting to 1000 [ 78.125453][ T6238] loop4: detected capacity change from 0 to 8192 [ 78.142637][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 78.252214][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.618'. [ 78.342700][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6253 comm=syz.4.621 [ 78.782958][ T6269] 9pnet: Could not find request transport: fdr [ 79.204560][ T6301] lo speed is unknown, defaulting to 1000 [ 79.902129][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 79.926295][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.656'. [ 80.171215][ T6343] lo speed is unknown, defaulting to 1000 [ 80.847377][ T6356] __nla_validate_parse: 1 callbacks suppressed [ 80.847392][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 80.877660][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'. [ 80.982790][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 80.991903][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.999329][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.007017][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.014509][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.150322][ T6380] netlink: 52 bytes leftover after parsing attributes in process `syz.3.677'. [ 81.387958][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.683'. [ 81.437340][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 81.446438][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.454046][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.472826][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.480485][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.726337][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 81.840154][ T6415] lo speed is unknown, defaulting to 1000 [ 81.931883][ T6415] FAULT_INJECTION: forcing a failure. [ 81.931883][ T6415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.945075][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.945117][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.945133][ T6415] Call Trace: [ 81.945143][ T6415] [ 81.945152][ T6415] __dump_stack+0x1d/0x30 [ 81.945178][ T6415] dump_stack_lvl+0xe8/0x140 [ 81.945211][ T6415] dump_stack+0x15/0x1b [ 81.945226][ T6415] should_fail_ex+0x265/0x280 [ 81.945251][ T6415] should_fail+0xb/0x20 [ 81.945273][ T6415] should_fail_usercopy+0x1a/0x20 [ 81.945301][ T6415] _copy_from_iter+0xd2/0xe80 [ 81.945341][ T6415] ? __build_skb_around+0x1a0/0x200 [ 81.945402][ T6415] ? __alloc_skb+0x223/0x320 [ 81.945426][ T6415] netlink_sendmsg+0x471/0x6b0 [ 81.945457][ T6415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.945518][ T6415] __sock_sendmsg+0x142/0x180 [ 81.945600][ T6415] ____sys_sendmsg+0x31e/0x4e0 [ 81.945626][ T6415] ___sys_sendmsg+0x17b/0x1d0 [ 81.945665][ T6415] __x64_sys_sendmsg+0xd4/0x160 [ 81.945690][ T6415] x64_sys_call+0x191e/0x2ff0 [ 81.945779][ T6415] do_syscall_64+0xd2/0x200 [ 81.945805][ T6415] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.945828][ T6415] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.945937][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.945962][ T6415] RIP: 0033:0x7f560d60ebe9 [ 81.945977][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.946054][ T6415] RSP: 002b:00007f560c06f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.946076][ T6415] RAX: ffffffffffffffda RBX: 00007f560d835fa0 RCX: 00007f560d60ebe9 [ 81.946091][ T6415] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 81.946106][ T6415] RBP: 00007f560c06f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.946120][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.946135][ T6415] R13: 00007f560d836038 R14: 00007f560d835fa0 R15: 00007fff39d31b78 [ 81.946157][ T6415] [ 82.308680][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'. [ 82.339692][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.698'. [ 82.364932][ T6442] loop3: detected capacity change from 0 to 512 [ 82.375824][ T6442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.417944][ T6439] loop2: detected capacity change from 0 to 8192 [ 82.434334][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 82.506441][ T6460] loop1: detected capacity change from 0 to 512 [ 82.513273][ T6460] EXT4-fs: Ignoring removed oldalloc option [ 82.525280][ T6460] EXT4-fs (loop1): 1 truncate cleaned up [ 82.531631][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.624066][ T6463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6463 comm=syz.2.699 [ 82.662871][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 82.662886][ T29] audit: type=1326 audit(1756244032.597:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.700836][ T29] audit: type=1326 audit(1756244032.597:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.724334][ T29] audit: type=1326 audit(1756244032.637:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.747755][ T29] audit: type=1326 audit(1756244032.637:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.785189][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.876178][ T29] audit: type=1326 audit(1756244032.817:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.909859][ T29] audit: type=1326 audit(1756244032.817:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.933379][ T29] audit: type=1326 audit(1756244032.817:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.956785][ T29] audit: type=1326 audit(1756244032.817:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 82.980462][ T29] audit: type=1326 audit(1756244032.817:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 83.003916][ T29] audit: type=1326 audit(1756244032.817:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 83.067349][ T6476] loop1: detected capacity change from 0 to 1024 [ 83.076978][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.711'. [ 83.088591][ T6476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.109225][ T6476] bridge_slave_1: left allmulticast mode [ 83.114998][ T6476] bridge_slave_1: left promiscuous mode [ 83.120757][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.129558][ T6476] bridge_slave_0: left allmulticast mode [ 83.135419][ T6476] bridge_slave_0: left promiscuous mode [ 83.141118][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.200121][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.264478][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.309401][ T6483] loop4: detected capacity change from 0 to 8192 [ 83.462389][ T6504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6504 comm=syz.0.714 [ 83.841935][ T6515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6515 comm=syz.4.712 [ 84.118875][ T6520] FAULT_INJECTION: forcing a failure. [ 84.118875][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 84.131694][ T6520] CPU: 0 UID: 0 PID: 6520 Comm: syz.0.723 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.131723][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.131739][ T6520] Call Trace: [ 84.131746][ T6520] [ 84.131755][ T6520] __dump_stack+0x1d/0x30 [ 84.131855][ T6520] dump_stack_lvl+0xe8/0x140 [ 84.131874][ T6520] dump_stack+0x15/0x1b [ 84.131890][ T6520] should_fail_ex+0x265/0x280 [ 84.131911][ T6520] ? audit_log_d_path+0x8d/0x150 [ 84.131948][ T6520] should_failslab+0x8c/0xb0 [ 84.131980][ T6520] __kmalloc_cache_noprof+0x4c/0x320 [ 84.132016][ T6520] audit_log_d_path+0x8d/0x150 [ 84.132071][ T6520] audit_log_d_path_exe+0x42/0x70 [ 84.132137][ T6520] audit_log_task+0x1e9/0x250 [ 84.132201][ T6520] audit_seccomp+0x61/0x100 [ 84.132232][ T6520] ? __seccomp_filter+0x68c/0x10d0 [ 84.132256][ T6520] __seccomp_filter+0x69d/0x10d0 [ 84.132318][ T6520] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.132426][ T6520] ? vfs_write+0x7e8/0x960 [ 84.132531][ T6520] ? __rcu_read_unlock+0x4f/0x70 [ 84.132558][ T6520] ? __fget_files+0x184/0x1c0 [ 84.132661][ T6520] __secure_computing+0x82/0x150 [ 84.132687][ T6520] syscall_trace_enter+0xcf/0x1e0 [ 84.132776][ T6520] do_syscall_64+0xac/0x200 [ 84.132809][ T6520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.132904][ T6520] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 84.132934][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.133012][ T6520] RIP: 0033:0x7f37bbf5ebe9 [ 84.133030][ T6520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.133050][ T6520] RSP: 002b:00007f37ba9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000020 [ 84.133170][ T6520] RAX: ffffffffffffffda RBX: 00007f37bc185fa0 RCX: 00007f37bbf5ebe9 [ 84.133185][ T6520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 84.133200][ T6520] RBP: 00007f37ba9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.133215][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.133230][ T6520] R13: 00007f37bc186038 R14: 00007f37bc185fa0 R15: 00007ffe21fbddd8 [ 84.133253][ T6520] [ 84.481224][ T6545] random: crng reseeded on system resumption [ 84.782169][ T6571] loop1: detected capacity change from 0 to 1024 [ 84.795498][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 84.821040][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 84.927768][ T6580] lo speed is unknown, defaulting to 1000 [ 85.290147][ T6593] loop4: detected capacity change from 0 to 2048 [ 85.297531][ T6593] EXT4-fs: Ignoring removed nobh option [ 85.297942][ T6595] loop3: detected capacity change from 0 to 2048 [ 85.315782][ T6595] EXT4-fs: Ignoring removed nobh option [ 85.332151][ T6593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.337308][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.359086][ T6595] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.365893][ T6593] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.531373][ T6631] random: crng reseeded on system resumption [ 86.122091][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.131721][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.156168][ T6634] __nla_validate_parse: 9 callbacks suppressed [ 86.156187][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 86.175125][ T6636] loop3: detected capacity change from 0 to 512 [ 86.185967][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.198703][ T6636] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.213353][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 86.224619][ T6636] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.768: corrupted inode contents [ 86.240761][ T6636] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.768: mark_inode_dirty error [ 86.269050][ T6636] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.768: corrupted inode contents [ 86.281416][ T6636] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.768: mark_inode_dirty error [ 86.294000][ T6636] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.768: mark inode dirty (error -117) [ 86.307063][ T6636] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 86.329461][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.340637][ T6653] FAULT_INJECTION: forcing a failure. [ 86.340637][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 86.353527][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.353558][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.353573][ T6653] Call Trace: [ 86.353582][ T6653] [ 86.353609][ T6653] __dump_stack+0x1d/0x30 [ 86.353636][ T6653] dump_stack_lvl+0xe8/0x140 [ 86.353661][ T6653] dump_stack+0x15/0x1b [ 86.353682][ T6653] should_fail_ex+0x265/0x280 [ 86.353705][ T6653] should_failslab+0x8c/0xb0 [ 86.353729][ T6653] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 86.353833][ T6653] ? p9_client_create+0x59/0xbc0 [ 86.353859][ T6653] ? p9_client_create+0x207/0xbc0 [ 86.353884][ T6653] ? should_failslab+0x8c/0xb0 [ 86.353958][ T6653] kstrdup+0x3e/0xd0 [ 86.353983][ T6653] p9_client_create+0x207/0xbc0 [ 86.354015][ T6653] v9fs_session_init+0xf7/0xde0 [ 86.354064][ T6653] ? avc_has_perm_noaudit+0x1b1/0x200 [ 86.354118][ T6653] ? should_fail_ex+0xdb/0x280 [ 86.354143][ T6653] ? v9fs_mount+0x51/0x5c0 [ 86.354180][ T6653] ? should_failslab+0x8c/0xb0 [ 86.354203][ T6653] ? __kmalloc_cache_noprof+0x189/0x320 [ 86.354259][ T6653] v9fs_mount+0x67/0x5c0 [ 86.354291][ T6653] ? selinux_capable+0x31/0x40 [ 86.354377][ T6653] ? __pfx_v9fs_mount+0x10/0x10 [ 86.354411][ T6653] legacy_get_tree+0x75/0xd0 [ 86.354435][ T6653] vfs_get_tree+0x54/0x1d0 [ 86.354489][ T6653] do_new_mount+0x207/0x5e0 [ 86.354513][ T6653] ? security_capable+0x83/0x90 [ 86.354543][ T6653] path_mount+0x4a4/0xb20 [ 86.354568][ T6653] ? user_path_at+0x109/0x130 [ 86.354641][ T6653] __se_sys_mount+0x28f/0x2e0 [ 86.354741][ T6653] ? fput+0x8f/0xc0 [ 86.354781][ T6653] __x64_sys_mount+0x67/0x80 [ 86.354810][ T6653] x64_sys_call+0x2b4d/0x2ff0 [ 86.354837][ T6653] do_syscall_64+0xd2/0x200 [ 86.354872][ T6653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.354964][ T6653] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.354997][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.355025][ T6653] RIP: 0033:0x7f039600ebe9 [ 86.355104][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.355125][ T6653] RSP: 002b:00007f0394a6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.355149][ T6653] RAX: ffffffffffffffda RBX: 00007f0396235fa0 RCX: 00007f039600ebe9 [ 86.355197][ T6653] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 86.355266][ T6653] RBP: 00007f0394a6f090 R08: 0000200000000080 R09: 0000000000000000 [ 86.355340][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 86.355355][ T6653] R13: 00007f0396236038 R14: 00007f0396235fa0 R15: 00007ffe580a8958 [ 86.355379][ T6653] [ 86.623395][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.776'. [ 86.661223][ T6661] SELinux: Context system_u:object_r:src_t:s0 is not valid (left unmapped). [ 86.670851][ T6659] loop4: detected capacity change from 0 to 2048 [ 86.679427][ T6659] EXT4-fs: Ignoring removed nobh option [ 86.701686][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.716580][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.781'. [ 86.726165][ T6659] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.740659][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.780'. [ 86.793554][ T6680] FAULT_INJECTION: forcing a failure. [ 86.793554][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 86.806603][ T6680] CPU: 1 UID: 0 PID: 6680 Comm: syz.3.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.806705][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.806721][ T6680] Call Trace: [ 86.806729][ T6680] [ 86.806738][ T6680] __dump_stack+0x1d/0x30 [ 86.806765][ T6680] dump_stack_lvl+0xe8/0x140 [ 86.806789][ T6680] dump_stack+0x15/0x1b [ 86.806877][ T6680] should_fail_ex+0x265/0x280 [ 86.806905][ T6680] should_failslab+0x8c/0xb0 [ 86.806935][ T6680] kmem_cache_alloc_node_noprof+0x57/0x320 [ 86.806973][ T6680] ? __alloc_skb+0x101/0x320 [ 86.806996][ T6680] __alloc_skb+0x101/0x320 [ 86.807082][ T6680] netlink_alloc_large_skb+0xba/0xf0 [ 86.807124][ T6680] netlink_sendmsg+0x3cf/0x6b0 [ 86.807151][ T6680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.807174][ T6680] __sock_sendmsg+0x142/0x180 [ 86.807213][ T6680] ____sys_sendmsg+0x31e/0x4e0 [ 86.807237][ T6680] ___sys_sendmsg+0x17b/0x1d0 [ 86.807279][ T6680] __x64_sys_sendmsg+0xd4/0x160 [ 86.807312][ T6680] x64_sys_call+0x191e/0x2ff0 [ 86.807339][ T6680] do_syscall_64+0xd2/0x200 [ 86.807377][ T6680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.807400][ T6680] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 86.807453][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.807479][ T6680] RIP: 0033:0x7fc44c34ebe9 [ 86.807495][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.807584][ T6680] RSP: 002b:00007fc44adb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.807608][ T6680] RAX: ffffffffffffffda RBX: 00007fc44c575fa0 RCX: 00007fc44c34ebe9 [ 86.807624][ T6680] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 86.807639][ T6680] RBP: 00007fc44adb7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.807653][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.807668][ T6680] R13: 00007fc44c576038 R14: 00007fc44c575fa0 R15: 00007ffedcef72b8 [ 86.807691][ T6680] [ 87.062926][ T6687] FAULT_INJECTION: forcing a failure. [ 87.062926][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.076193][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.1.789 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.076228][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.076257][ T6687] Call Trace: [ 87.076265][ T6687] [ 87.076275][ T6687] __dump_stack+0x1d/0x30 [ 87.076301][ T6687] dump_stack_lvl+0xe8/0x140 [ 87.076383][ T6687] dump_stack+0x15/0x1b [ 87.076402][ T6687] should_fail_ex+0x265/0x280 [ 87.076427][ T6687] should_fail+0xb/0x20 [ 87.076489][ T6687] should_fail_usercopy+0x1a/0x20 [ 87.076516][ T6687] strncpy_from_user+0x25/0x230 [ 87.076545][ T6687] ? kmem_cache_alloc_noprof+0x186/0x310 [ 87.076572][ T6687] ? getname_flags+0x80/0x3b0 [ 87.076662][ T6687] getname_flags+0xae/0x3b0 [ 87.076749][ T6687] user_path_at+0x28/0x130 [ 87.076787][ T6687] do_utimes+0xd9/0x210 [ 87.076848][ T6687] __x64_sys_utimensat+0xc4/0x170 [ 87.076892][ T6687] ? ksys_write+0x192/0x1a0 [ 87.076924][ T6687] x64_sys_call+0x2fba/0x2ff0 [ 87.076948][ T6687] do_syscall_64+0xd2/0x200 [ 87.076981][ T6687] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.077053][ T6687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.077081][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.077105][ T6687] RIP: 0033:0x7f560d60ebe9 [ 87.077123][ T6687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.077140][ T6687] RSP: 002b:00007f560c06f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 87.077234][ T6687] RAX: ffffffffffffffda RBX: 00007f560d835fa0 RCX: 00007f560d60ebe9 [ 87.077246][ T6687] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: ffffffffffffffff [ 87.077258][ T6687] RBP: 00007f560c06f090 R08: 0000000000000000 R09: 0000000000000000 [ 87.077271][ T6687] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 87.077286][ T6687] R13: 00007f560d836038 R14: 00007f560d835fa0 R15: 00007fff39d31b78 [ 87.077308][ T6687] [ 87.323150][ T6683] lo speed is unknown, defaulting to 1000 [ 87.371109][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 87.411587][ T6693] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 87.451134][ T6702] loop2: detected capacity change from 0 to 8192 [ 87.496703][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 87.506812][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.614005][ T6714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.798'. [ 87.670705][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.796'. [ 87.689553][ T6721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6721 comm=syz.2.794 [ 87.706181][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 87.706200][ T29] audit: type=1326 audit(1756244037.647:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.842663][ T6730] 9pnet_fd: Insufficient options for proto=fd [ 87.857956][ T29] audit: type=1326 audit(1756244037.677:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.881590][ T29] audit: type=1326 audit(1756244037.677:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.905152][ T29] audit: type=1326 audit(1756244037.677:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.928653][ T29] audit: type=1326 audit(1756244037.677:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.951997][ T29] audit: type=1326 audit(1756244037.677:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.975327][ T29] audit: type=1326 audit(1756244037.677:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 87.998726][ T29] audit: type=1326 audit(1756244037.677:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 88.022096][ T29] audit: type=1326 audit(1756244037.677:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 88.045538][ T29] audit: type=1326 audit(1756244037.677:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.1.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f560d60ebe9 code=0x7ffc0000 [ 88.114103][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 88.189028][ T6740] loop3: detected capacity change from 0 to 2048 [ 88.196032][ T6740] EXT4-fs: Ignoring removed nobh option [ 88.215928][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.232182][ T6740] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.300776][ T6754] FAULT_INJECTION: forcing a failure. [ 88.300776][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 88.313587][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.0.811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.313620][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.313660][ T6754] Call Trace: [ 88.313669][ T6754] [ 88.313749][ T6754] __dump_stack+0x1d/0x30 [ 88.313776][ T6754] dump_stack_lvl+0xe8/0x140 [ 88.313868][ T6754] dump_stack+0x15/0x1b [ 88.313889][ T6754] should_fail_ex+0x265/0x280 [ 88.313914][ T6754] should_failslab+0x8c/0xb0 [ 88.313944][ T6754] kmem_cache_alloc_noprof+0x50/0x310 [ 88.314047][ T6754] ? __break_lease+0x78/0xe80 [ 88.314070][ T6754] ? avc_has_perm+0xf7/0x180 [ 88.314100][ T6754] __break_lease+0x78/0xe80 [ 88.314120][ T6754] ? selinux_inode_set_acl+0x1c0/0x210 [ 88.314143][ T6754] vfs_set_acl+0x2ad/0x6f0 [ 88.314204][ T6754] do_set_acl+0x97/0x130 [ 88.314366][ T6754] filename_setxattr+0x1ff/0x400 [ 88.314394][ T6754] path_setxattrat+0x2c9/0x310 [ 88.314556][ T6754] __x64_sys_lsetxattr+0x71/0x90 [ 88.314583][ T6754] x64_sys_call+0x2877/0x2ff0 [ 88.314611][ T6754] do_syscall_64+0xd2/0x200 [ 88.314645][ T6754] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.314747][ T6754] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.314778][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.314804][ T6754] RIP: 0033:0x7f37bbf5ebe9 [ 88.314872][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.314889][ T6754] RSP: 002b:00007f37ba9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 88.314908][ T6754] RAX: ffffffffffffffda RBX: 00007f37bc185fa0 RCX: 00007f37bbf5ebe9 [ 88.314923][ T6754] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000000 [ 88.314934][ T6754] RBP: 00007f37ba9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.314945][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.315008][ T6754] R13: 00007f37bc186038 R14: 00007f37bc185fa0 R15: 00007ffe21fbddd8 [ 88.315038][ T6754] [ 88.705443][ T6775] loop2: detected capacity change from 0 to 8192 [ 88.910935][ T6801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6801 comm=syz.2.821 [ 89.025073][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.221693][ T6822] loop4: detected capacity change from 0 to 8192 [ 89.377706][ T6834] lo speed is unknown, defaulting to 1000 [ 89.412955][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6835 comm=syz.4.840 [ 89.969380][ T6864] lo speed is unknown, defaulting to 1000 [ 90.358370][ T6873] ip6gretap1: entered allmulticast mode [ 90.398538][ T6875] bond1: entered promiscuous mode [ 90.454318][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.468158][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.476003][ T6877] bond1: (slave vxcan7): The slave device specified does not support setting the MAC address [ 90.490151][ T6877] bond1: (slave vxcan7): Error -95 calling set_mac_address [ 90.641853][ T6895] loop4: detected capacity change from 0 to 8192 [ 90.733694][ T6906] loop2: detected capacity change from 0 to 1024 [ 90.741545][ T6906] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 90.811274][ T6914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6914 comm=syz.4.867 [ 91.034251][ T6927] loop2: detected capacity change from 0 to 512 [ 91.064316][ T6927] lo speed is unknown, defaulting to 1000 [ 91.129884][ T6927] loop2: detected capacity change from 0 to 512 [ 91.184615][ T6925] __nla_validate_parse: 22 callbacks suppressed [ 91.184635][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 91.228086][ T6927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.240977][ T6927] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.260950][ T6927] EXT4-fs error (device loop2): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.2.873: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 91.299719][ T6927] EXT4-fs error (device loop2): ext4_get_first_dir_block:3540: inode #12: comm syz.2.873: directory missing '.' [ 91.694316][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.713187][ T6954] lo speed is unknown, defaulting to 1000 [ 91.745477][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 91.891539][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 91.918810][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'. [ 92.129001][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'. [ 92.167485][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 92.177209][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.184887][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.192728][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.200264][ T6986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.229175][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 92.286527][ T6995] FAULT_INJECTION: forcing a failure. [ 92.286527][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 92.299247][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.299278][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.299292][ T6995] Call Trace: [ 92.299300][ T6995] [ 92.299338][ T6995] __dump_stack+0x1d/0x30 [ 92.299359][ T6995] dump_stack_lvl+0xe8/0x140 [ 92.299437][ T6995] dump_stack+0x15/0x1b [ 92.299453][ T6995] should_fail_ex+0x265/0x280 [ 92.299475][ T6995] should_failslab+0x8c/0xb0 [ 92.299500][ T6995] kmem_cache_alloc_node_noprof+0x57/0x320 [ 92.299586][ T6995] ? __alloc_skb+0x101/0x320 [ 92.299627][ T6995] __alloc_skb+0x101/0x320 [ 92.299649][ T6995] netlink_alloc_large_skb+0xba/0xf0 [ 92.299703][ T6995] netlink_sendmsg+0x3cf/0x6b0 [ 92.299727][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.299750][ T6995] __sock_sendmsg+0x142/0x180 [ 92.299857][ T6995] ____sys_sendmsg+0x31e/0x4e0 [ 92.299882][ T6995] ___sys_sendmsg+0x17b/0x1d0 [ 92.299916][ T6995] __x64_sys_sendmsg+0xd4/0x160 [ 92.299970][ T6995] x64_sys_call+0x191e/0x2ff0 [ 92.300066][ T6995] do_syscall_64+0xd2/0x200 [ 92.300156][ T6995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.300180][ T6995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 92.300278][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.300321][ T6995] RIP: 0033:0x7fe1dd80ebe9 [ 92.300336][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.300358][ T6995] RSP: 002b:00007fe1dc277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.300377][ T6995] RAX: ffffffffffffffda RBX: 00007fe1dda35fa0 RCX: 00007fe1dd80ebe9 [ 92.300389][ T6995] RDX: 0000000000008004 RSI: 0000200000000240 RDI: 0000000000000003 [ 92.300401][ T6995] RBP: 00007fe1dc277090 R08: 0000000000000000 R09: 0000000000000000 [ 92.300413][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.300488][ T6995] R13: 00007fe1dda36038 R14: 00007fe1dda35fa0 R15: 00007fffb71cc2b8 [ 92.300505][ T6995] [ 92.320205][ T6997] loop3: detected capacity change from 0 to 2048 [ 92.514391][ T6997] EXT4-fs: Ignoring removed nobh option [ 92.525766][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.912'. [ 92.578699][ T6997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.592864][ T6997] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.645286][ T7024] Driver unsupported XDP return value 0 on prog (id 575) dev N/A, expect packet loss! [ 92.754748][ T7024] loop2: detected capacity change from 0 to 512 [ 92.763712][ T7024] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.768226][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 92.768245][ T29] audit: type=1400 audit(1756244042.687:2967): avc: denied { kexec_image_load } for pid=7023 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 92.798999][ T29] audit: type=1326 audit(1756244042.687:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dd80ebe9 code=0x7ffc0000 [ 92.800146][ T7024] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.822437][ T29] audit: type=1326 audit(1756244042.687:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1dd80ebe9 code=0x7ffc0000 [ 92.839722][ T7024] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.918: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 92.852214][ T29] audit: type=1326 audit(1756244042.687:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1dd80ebe9 code=0x7ffc0000 [ 92.869885][ T7020] syz.1.917 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.892704][ T29] audit: type=1326 audit(1756244042.687:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1dd80ec23 code=0x7ffc0000 [ 92.910653][ T7024] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.918: Bad quota inode: 3, type: 0 [ 92.926207][ T29] audit: type=1326 audit(1756244042.687:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1dd80d69f code=0x7ffc0000 [ 92.937257][ T7024] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 92.960462][ T29] audit: type=1326 audit(1756244042.697:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe1dd80ec77 code=0x7ffc0000 [ 92.975149][ T7024] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 92.998512][ T29] audit: type=1326 audit(1756244042.697:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1dd80d550 code=0x7ffc0000 [ 92.998549][ T29] audit: type=1326 audit(1756244042.697:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1dd80e7eb code=0x7ffc0000 [ 92.998582][ T29] audit: type=1326 audit(1756244042.697:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.2.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1dd80d84a code=0x7ffc0000 [ 93.086862][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.120292][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.165641][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.213803][ T7042] lo speed is unknown, defaulting to 1000 [ 93.262819][ T7037] loop4: detected capacity change from 0 to 512 [ 93.290027][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.926'. [ 93.314623][ T7037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 93.322804][ T7037] System zones: 1-12 [ 93.327932][ T7037] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.921: corrupted in-inode xattr: e_value size too large [ 93.342845][ T7037] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.921: couldn't read orphan inode 15 (err -117) [ 93.355809][ T7037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.545519][ T7075] hub 2-0:1.0: USB hub found [ 93.552478][ T7075] hub 2-0:1.0: 8 ports detected [ 93.571293][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.599875][ T7082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.933'. [ 93.612095][ T7082] loop4: detected capacity change from 0 to 512 [ 93.643194][ T7082] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.656380][ T7082] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.675508][ T7082] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.694362][ T7082] EXT4-fs (loop4): 1 truncate cleaned up [ 93.700442][ T7082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.778045][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.889364][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.896842][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.917969][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.925580][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.049393][ T7126] FAULT_INJECTION: forcing a failure. [ 94.049393][ T7126] name failslab, interval 1, probability 0, space 0, times 0 [ 94.062379][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.0.953 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.062422][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.062434][ T7126] Call Trace: [ 94.062441][ T7126] [ 94.062450][ T7126] __dump_stack+0x1d/0x30 [ 94.062485][ T7126] dump_stack_lvl+0xe8/0x140 [ 94.062527][ T7126] dump_stack+0x15/0x1b [ 94.062589][ T7126] should_fail_ex+0x265/0x280 [ 94.062616][ T7126] should_failslab+0x8c/0xb0 [ 94.062707][ T7126] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 94.062737][ T7126] ? sidtab_sid2str_get+0xa0/0x130 [ 94.062768][ T7126] kmemdup_noprof+0x2b/0x70 [ 94.062811][ T7126] sidtab_sid2str_get+0xa0/0x130 [ 94.062831][ T7126] security_sid_to_context_core+0x1eb/0x2e0 [ 94.062852][ T7126] security_sid_to_context+0x27/0x40 [ 94.062869][ T7126] selinux_lsmprop_to_secctx+0x67/0xf0 [ 94.062916][ T7126] security_lsmprop_to_secctx+0x43/0x80 [ 94.062960][ T7126] audit_log_task_context+0x77/0x190 [ 94.063002][ T7126] audit_log_task+0xf4/0x250 [ 94.063099][ T7126] audit_seccomp+0x61/0x100 [ 94.063130][ T7126] ? __seccomp_filter+0x68c/0x10d0 [ 94.063157][ T7126] __seccomp_filter+0x69d/0x10d0 [ 94.063312][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.063346][ T7126] ? vfs_write+0x7e8/0x960 [ 94.063437][ T7126] ? __rcu_read_unlock+0x4f/0x70 [ 94.063458][ T7126] ? __fget_files+0x184/0x1c0 [ 94.063553][ T7126] __secure_computing+0x82/0x150 [ 94.063578][ T7126] syscall_trace_enter+0xcf/0x1e0 [ 94.063605][ T7126] do_syscall_64+0xac/0x200 [ 94.063632][ T7126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.063718][ T7126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.063800][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.063826][ T7126] RIP: 0033:0x7f37bbf5ebe9 [ 94.063845][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.063922][ T7126] RSP: 002b:00007f37ba9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 94.063945][ T7126] RAX: ffffffffffffffda RBX: 00007f37bc185fa0 RCX: 00007f37bbf5ebe9 [ 94.063960][ T7126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 94.063975][ T7126] RBP: 00007f37ba9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.063990][ T7126] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 94.064004][ T7126] R13: 00007f37bc186038 R14: 00007f37bc185fa0 R15: 00007ffe21fbddd8 [ 94.064107][ T7126] [ 94.550655][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.637946][ T7139] vlan2: entered allmulticast mode [ 94.643221][ T7139] bond1: entered allmulticast mode [ 94.918494][ T7153] bond2: entered promiscuous mode [ 94.944191][ T7153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.988268][ T7164] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 95.005655][ T7163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.015611][ T7163] bond2: (slave vxcan11): The slave device specified does not support setting the MAC address [ 95.027794][ T7163] bond2: (slave vxcan11): Error -95 calling set_mac_address [ 95.047173][ T7161] lo speed is unknown, defaulting to 1000 [ 95.069244][ T7164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.086544][ T7167] bond2: (slave veth3): Enslaving as an active interface with a down link [ 95.140875][ T7158] lo speed is unknown, defaulting to 1000 [ 95.169932][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.187856][ T7164] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 95.478821][ T7178] loop4: detected capacity change from 0 to 8192 [ 95.581322][ T7188] loop1: detected capacity change from 0 to 2048 [ 95.588809][ T7188] EXT4-fs: Ignoring removed nobh option [ 95.630385][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.643238][ T7188] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.718195][ T7200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7200 comm=syz.4.970 [ 96.014382][ T7197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7197 comm=syz.0.974 [ 96.426444][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.472549][ T7223] __nla_validate_parse: 3 callbacks suppressed [ 96.472568][ T7223] netlink: 476 bytes leftover after parsing attributes in process `syz.3.984'. [ 96.489072][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 96.511089][ T7219] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 96.555143][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 96.595778][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 96.746702][ T7240] lo speed is unknown, defaulting to 1000 [ 96.822099][ T7244] loop3: detected capacity change from 0 to 512 [ 96.991258][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.005599][ T7244] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.017160][ T7244] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.989: corrupted inode contents [ 97.029241][ T7244] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.989: mark_inode_dirty error [ 97.040958][ T7244] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.989: corrupted inode contents [ 97.075114][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.086383][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 97.235643][ T7261] random: crng reseeded on system resumption [ 97.297933][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 97.357017][ T7269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7269 comm=syz.0.993 [ 97.448603][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 97.553692][ T7283] loop4: detected capacity change from 0 to 512 [ 97.565780][ T7283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.578602][ T7283] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.598145][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.634919][ T36] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 97.642403][ T36] hid-generic 0000:0003:0001.0001: unknown main item tag 0x0 [ 97.652176][ T36] hid-generic 0000:0003:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 97.752668][ T7291] vlan2: entered promiscuous mode [ 97.758013][ T7291] vlan2: entered allmulticast mode [ 97.763146][ T7291] hsr_slave_1: entered allmulticast mode [ 97.847765][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 97.973865][ T7310] lo speed is unknown, defaulting to 1000 [ 98.086161][ T7315] loop2: detected capacity change from 0 to 2048 [ 98.093009][ T7315] EXT4-fs: Ignoring removed nobh option [ 98.130846][ T7317] loop3: detected capacity change from 0 to 2048 [ 98.138703][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.151031][ T7315] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.151195][ T7317] EXT4-fs: Ignoring removed nobh option [ 98.173368][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 98.173386][ T29] audit: type=1326 audit(1756244048.107:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.216237][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 98.226345][ T29] audit: type=1326 audit(1756244048.107:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.249804][ T29] audit: type=1326 audit(1756244048.107:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.273384][ T29] audit: type=1326 audit(1756244048.107:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.296846][ T29] audit: type=1326 audit(1756244048.107:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.320351][ T29] audit: type=1326 audit(1756244048.107:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.343778][ T29] audit: type=1326 audit(1756244048.107:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.367804][ T29] audit: type=1326 audit(1756244048.107:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.391481][ T29] audit: type=1326 audit(1756244048.107:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f039600d550 code=0x7ffc0000 [ 98.415184][ T29] audit: type=1326 audit(1756244048.107:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039600ebe9 code=0x7ffc0000 [ 98.473878][ T7317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.486222][ T7317] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.704977][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 98.962988][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.002398][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.091124][ T7349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7349 comm=syz.0.1021 [ 99.639860][ T7406] loop1: detected capacity change from 0 to 8192 [ 99.743100][ T7429] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 99.767149][ T7429] bond2: entered promiscuous mode [ 99.772598][ T7429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.800690][ T7429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.808628][ T7429] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address [ 99.829782][ T7429] bond2: (slave vxcan7): Error -95 calling set_mac_address [ 100.586305][ T7535] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 100.602618][ T7535] bond1: entered promiscuous mode [ 100.608203][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.634004][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.642002][ T7535] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.655552][ T7535] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 100.919040][ T7545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7545 comm=syz.0.1042 [ 101.124548][ T7551] loop4: detected capacity change from 0 to 8192 [ 101.139184][ T7553] random: crng reseeded on system resumption [ 101.208730][ T7555] lo speed is unknown, defaulting to 1000 [ 101.530791][ T7561] loop3: detected capacity change from 0 to 8192 [ 101.713151][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7568 comm=syz.3.1049 [ 102.022589][ T7582] __nla_validate_parse: 2 callbacks suppressed [ 102.022607][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'. [ 102.052896][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'. [ 102.077302][ T7586] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 102.090212][ T7586] bond3: entered promiscuous mode [ 102.096080][ T7586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.109559][ T7586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.117070][ T7586] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 102.129255][ T7586] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 102.326133][ T7600] lo speed is unknown, defaulting to 1000 [ 102.530229][ T7608] lo speed is unknown, defaulting to 1000 [ 102.715727][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 102.878654][ T7631] loop2: detected capacity change from 0 to 2048 [ 102.885541][ T7631] EXT4-fs: Ignoring removed nobh option [ 102.895377][ T7631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.907847][ T7631] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.954507][ T7638] lo speed is unknown, defaulting to 1000 [ 103.026195][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 103.055846][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'. [ 103.220270][ T7653] loop4: detected capacity change from 0 to 8192 [ 103.281275][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 103.281292][ T29] audit: type=1326 audit(1756244053.217:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7652 comm="syz.4.1084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f039600ebe9 code=0x0 [ 103.361832][ T7658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7658 comm=syz.4.1084 [ 103.512364][ T29] audit: type=1326 audit(1756244053.447:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.538392][ T29] audit: type=1326 audit(1756244053.447:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.561908][ T29] audit: type=1326 audit(1756244053.447:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.585356][ T29] audit: type=1326 audit(1756244053.447:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.608842][ T29] audit: type=1326 audit(1756244053.447:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.632591][ T29] audit: type=1326 audit(1756244053.447:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.656174][ T29] audit: type=1326 audit(1756244053.447:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.679746][ T29] audit: type=1326 audit(1756244053.447:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.703024][ T29] audit: type=1326 audit(1756244053.477:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44c34ebe9 code=0x7ffc0000 [ 103.738441][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.774091][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1091'. [ 103.795401][ T7675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 103.821859][ T7676] loop2: detected capacity change from 0 to 2048 [ 103.828990][ T7676] EXT4-fs: Ignoring removed nobh option [ 103.866576][ T7680] lo speed is unknown, defaulting to 1000 [ 103.912060][ T7676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.924390][ T7676] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.422853][ T7703] loop4: detected capacity change from 0 to 2048 [ 104.438421][ T7703] EXT4-fs: Ignoring removed nobh option [ 104.457380][ T7703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.471188][ T7703] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.561122][ T7711] loop1: detected capacity change from 0 to 8192 [ 104.643899][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.709782][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 104.747376][ T7711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7711 comm=syz.1.1103 [ 105.055208][ T7746] loop2: detected capacity change from 0 to 8192 [ 105.239491][ T7759] loop3: detected capacity change from 0 to 8192 [ 105.257092][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.478833][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 105.493095][ T7781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7781 comm=syz.3.1122 [ 105.565877][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 105.639489][ T7797] loop4: detected capacity change from 0 to 2048 [ 105.646367][ T7797] EXT4-fs: Ignoring removed nobh option [ 105.657594][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.669823][ T7797] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.953600][ T7803] loop1: detected capacity change from 0 to 8192 [ 106.058540][ T7811] ================================================================== [ 106.066700][ T7811] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 106.073876][ T7811] [ 106.076217][ T7811] write to 0xffff888108ea73be of 2 bytes by task 7803 on cpu 0: [ 106.083866][ T7811] fat16_ent_put+0x28/0x60 [ 106.088326][ T7811] fat_ent_write+0x69/0xe0 [ 106.092772][ T7811] fat_chain_add+0x15d/0x440 [ 106.097389][ T7811] fat_get_block+0x46c/0x5e0 [ 106.102004][ T7811] __block_write_begin_int+0x3fd/0xf90 [ 106.107490][ T7811] cont_write_begin+0x5fc/0x970 [ 106.112365][ T7811] fat_write_begin+0x4f/0xe0 [ 106.116980][ T7811] cont_write_begin+0x1ad/0x970 [ 106.121846][ T7811] fat_write_begin+0x4f/0xe0 [ 106.126452][ T7811] generic_cont_expand_simple+0xb0/0x150 [ 106.132206][ T7811] fat_cont_expand+0x3e/0x170 [ 106.136910][ T7811] fat_setattr+0x2a5/0x8a0 [ 106.141336][ T7811] notify_change+0x809/0x890 [ 106.145946][ T7811] do_ftruncate+0x34b/0x450 [ 106.150464][ T7811] __x64_sys_ftruncate+0x68/0xc0 [ 106.155439][ T7811] x64_sys_call+0x2d52/0x2ff0 [ 106.160570][ T7811] do_syscall_64+0xd2/0x200 [ 106.165106][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.171020][ T7811] [ 106.173349][ T7811] read to 0xffff888108ea7200 of 512 bytes by task 7811 on cpu 1: [ 106.181070][ T7811] fat_mirror_bhs+0x1df/0x320 [ 106.185779][ T7811] fat_ent_write+0xd0/0xe0 [ 106.190279][ T7811] fat_chain_add+0x15d/0x440 [ 106.194916][ T7811] fat_get_block+0x46c/0x5e0 [ 106.199513][ T7811] __block_write_begin_int+0x3fd/0xf90 [ 106.204987][ T7811] cont_write_begin+0x5fc/0x970 [ 106.209858][ T7811] fat_write_begin+0x4f/0xe0 [ 106.214497][ T7811] generic_perform_write+0x184/0x490 [ 106.219796][ T7811] __generic_file_write_iter+0x9e/0x120 [ 106.225365][ T7811] generic_file_write_iter+0x8d/0x2f0 [ 106.230765][ T7811] do_iter_readv_writev+0x499/0x540 [ 106.235997][ T7811] vfs_writev+0x2df/0x8b0 [ 106.240345][ T7811] __se_sys_pwritev2+0xfc/0x1c0 [ 106.245211][ T7811] __x64_sys_pwritev2+0x67/0x80 [ 106.250076][ T7811] x64_sys_call+0x2c55/0x2ff0 [ 106.254763][ T7811] do_syscall_64+0xd2/0x200 [ 106.259285][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.265187][ T7811] [ 106.267516][ T7811] Reported by Kernel Concurrency Sanitizer on: [ 106.273764][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.1.1147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.283498][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.293607][ T7811] ================================================================== [ 106.314279][ T7809] loop2: detected capacity change from 0 to 8192 [ 106.471821][ T7815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7815 comm=syz.2.1138 [ 106.485000][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.