last executing test programs: 36.868110345s ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x7, 0x28680, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x20, 0x8, 0x1, 0xe89a}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0xb4, 0x5a02, 0x1e, @mcast1, @empty, 0x700, 0x7, 0x1, 0x9dee}}) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="b916309f92cfa4122e69acde57d6942974fc7e87867aba77f4b7cb39089399ebeac84493d6ca95d78f8bf75b463e9f00638895c75905c349f3ac05825ba8e451e2c4dbd11cdd27db396599dd48914a9bf404f6e1269fabaf7809337b4251df02333c8e24f3ae2c20f2c80b858076b58f2ff993047ed5081d74d29dafdac53afee367f09f2e809f2fbd624b83898a8a47", 0x90}, {&(0x7f0000000000)="d97bdf1e5a089f40601697082677ead21a9d6809058e5ad78c0609532c14ac7983fda74ab144a1123b8684a7", 0x2c}, {&(0x7f0000000340)="7361e010c97ef2a4d2315785e038bc3d852617d96f21d79a98de11e7736dfac0f15d8654f2eefe34fbbc6c95683968701b4987718e97ef464bb35f64a28ed2370933b0ff5059a8721287f7214c68c6ca811239915716f77566f15062257e8d3ccecb1281ef6635f4ef6ddcea92a687b821a7de4f1c1f2986d084724e67869b77d03fd34b50a7561e70bddba96d8f83d3a0a1d131e81dac7bbf8986c6e11627b4d668d9d06920a78b809b4b28eb1a73cdfc12a16716c775a17c5e4b8f27a1d3c35997", 0xc2}], 0x3, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000006c0)="17601aef5613a53b5ce393485ed873c5882fe414d6e2b861d2dd363fa5526dfdc39ceb8f8b2a688bb29c86d077a9e458346a1b4dea9e168d6ab06f8baf160b44261e4f5269df8426925e53d96dbe106942ce669fd00610873d30", 0x5a}, {&(0x7f0000000740)="777caa059910fc16f78a5dffaad3c0caa9cfeeb3b95dd1c8478ec8fdd7d0f914b7c7ad36fc87ac861b374e0931ce8f33324ce144e7f0199c51490d4283fa5c048cded26906a2516efe4dd4c4c970d13a00cd087a5a9fb6cbd2d6918ac02adbe13ab4bacac0f7bf4ba1adce4076a57e0ee58056c9db462ec75c27aff8209a87e292c027dc43d350feecb29212ee7aaa34180ec955d50e3af4eb48615ac934885d1e3975b0d9cc6300f026c7abc3c88c3b8cec49ab7985987d93e1704eded2fa7d52c8e0a272c18b9b8e045f4022f956682c22f2701104712b03faa85ffeed2d27961aa133ded7aad0bd3fb85f9b988c372ad695caed00667a1db6ed0062c87481f93eabb46bb980139e022329a54663db9bf3daf694c1b1cfd9502120872dd09fa0829026aec0380c85956110ad4d816b7b9555b1ed72623acc87f6f53225836c2132ca68e184ba9bff9bcb7c878aa9cc2911022cd6eda049c680229f671f470279d9c12c4e3f7e54f3a12cc254187e580be727b72ff603cac02fff7e75a2388b8f14cf3ebc00aca5b90142a04f96cc8e28f6bd76019d26234fb3d5b832e4d965010de4c0fa2f1e9d2495f8c2b7b8ca69e591748c3868308ca819c4fd08fb1474b344df1b6c4621cece04ad19e7c230bfe8c1764cb8083d22e41a804b5367cc187e21935e1c33b8af58acc48b8db49954154fd2212e18fd50852f7229d5dfaf129084edf6e4dd57791f5912d093ab264df4bec6da997f8f63cb00d5005fe4ebb54898b777e1244ddc386503bea658a47983f8b6fb41fbabd72313ff117f39fc9877bfbc73013fdb42bff21a55490c93417d8a7498cf8055c0ac87d9fb18ec842048d4179b3cd20498d32480cc7227eaf1d1688d7a8a2007c6e2bc9f03924d2d361fb81d243fdc7d1f020e38304d05d66ad77158b72fd59cfdefc643c69aab9b586dfb60c418530b257124789e28041fd9320a883e5fb0fbf073b61fb9ec9399041ea05b3484f8b4d23a775a3ba2870afaf4090eba629a0d7df67dfdcdb36ea5c27f109eba20080729d5762d6fc6fd9ce5274877696c5728a3f8b9078ebf1611b78d8b00abee9219ed774ddb35f2611b3cffd92f667b7d5aea5b8fa7f0a38e287816d560399c241b1e682a41f7fab64d18d73b09c87b534f50d6e0c402abd4803a93252c94d2eccc6816dc729baa0c70276e0d8aa97367b9f9f8acf27d1dbd8d8c80283fdf525093f3c2d0b07e427bc71f1423cbac5deea2dee8f44408fa42c78a74628e3c3bc22c8c5b44cc4d5113b9a8cb746a0a96a21749a7f9046b56d072f79ca1da3a3be9719c99ba43ca514378c46a6f2736b1b99cd2a693c3e0be700699b3f436d67dde04ef91a07873d16beba5ec45578a2a87c3750239f5d0dedb12990ec448cabb0e3fc77e381d4c6480fdcdb93c869f58472c57ddaa2e6053a0629ef20b0871998af44c39f17cbe478a80f749011838141f1fc2073b4ae43106d6cf81dff59bad9c4c29ee08a88eb3d34e113a8c211942d947ff38e976945fc7cfcb396b9925fc3403a8fc9b6b52b64529968a66475badd03d52988805477a591f01ac5b036e86cae1d9520b7d8628440a814b4703d85fe2b45ef498d010632e3010b8cb9aacd1aacada43ecb3eb609fbc4b832b5dcf38e69a509f5a554c864dac316888e86c4a71e4d63bc14e4d77e912ef82103aa9bb90aa1d2472b65bb6d564c199820b6409b55170f727603608a862d801416fc0f685a4e7ab30a30ac1fea10b5d09699766a7a7c6843a6943d5b445ea0b677b77a0580c2e8dc2ffb8f8ffd86ac819019ff3646c9d7b56495764737995a87b4a6821947a680358aa6852e08f9e97a4369c31c9f259396277ed6c3b00cbd98f995836ba1942a7ecd65cfd5896cd22d84742224a031d7565583d91fcacf614b1d5057d24d8fb6103292b68c8fdb6218a1135eec6bdb49f74bef8a996961edbdcc27eece1b53c68f9fc201451bc2056ab819ffd7a001c893590cbc7b046084bc194160020faa1bb07ef5ec0e0da5070b0bf2fbc054fb02c11f5ff59f7751a3ef2315cd3046add832d3e6c0b05769318c2f08cfa4e846dedd5f1f8d67ef478e4642e6853ac943a653b2f5a78cf33d63a8f7dab832311002b777df51e7aa76d80c81400397ef04ebf88a5bf1448ace28be5a1b76111f4a6e9d08c50fc70c443d9f050b259903613313f3707c86a0d2d8ade51c74726840c087bcc7cd33d857be4ef2f6124f43ef4922f3255c87fd40f8f215954667682987bc5393bdcfa264f0aa878a0894ea1e1c7a4c5acddf49a9f011c226e90727111ecdec270b5e8bf46b839c326540d89c5f0e958efff806617fdd1786f1b380aa4451188aff36263f7ad78c5c3784479390600c9f092967c8073e5e7904a03c8f73c275aa5a4e97664b6b70b6dfffa57e7393259705978f821754161b827b4ddbde901b367b01687c1da1b9a4f6eaead7805bee65426068eac437e1100131e87d727182790f9351ab701975fb6921d73b15a81c40443caab0ff568345e711e542c100ed61da926372ef3c58e5c480b2f1918a02b432560315ec5e5555a68ab012d3a91753fb02a420e6ff99f484dec0e2f3cac868d7b7448e3854e869609cbbac22efc7208090e69df760b99f9ac73a50f5a7a7d313bb565ef680b486c04f6ec1d3711fc29205789431a4b8543030ada746a97461451448757ebefd5f4ef4667c22867d7c52b004b40a69729ae2a357ab2901c6e8508893085d0f5bbe70e7c61ef9f5e3d5bec3f8c903149ea64b523fe2afb6652c26da2a098efc8edfa34bdaef75bf82a0307ef97d3fd37c04d99dcf146b6e521c8b86d37de6d5bbb98c96fcb37ae958aad046d0fda6dd89411200dbf42de1677e771d4868b67c1c71cbbe1ce9fc350811dfbb8e5e90126c50863dcfbd85a4f7be2221fb94ff0e35288abcc781def0a9802c11ad915c3f44da806fce566696aebee0fe3007d9eeda4236b5fec3aa7baa1a50822e1c9ab994ec014fa1a7a4bd3bc8650b5f0f5c418c3fa0ba1198ee0e7cb7aa2fff83fdfb9bea1fd3b091d5c6f19c4942d8413226c13cc6a8716e3f036141952d7c06b471b51fae92e3afaf15bbd9f44000fda6100ec9025accdf677c9574b802ed93a2d48954535b05d2994650a1a4f87de8ead53b87bd72735eb08bed708ab2de958d2b3ee4107bd839ee1b4e82a836d0795a475a7db85a48036583e95152b1b64e556321f34dc43a8d13778861c4481ed83bf5569df15e904fc6938bc1cd0e7393c43732ec71613c808d21cc0db96f3d95a2b62dfecbc4099e5d90db62bf8a9e0946b8b33c03759457ddcd55ebf0950c61d94d4f460c68dd40d7f90fae5242a9a0214fea33641de1046bc6bbee46fb331d731e0f8c0de69272a8922f065ad88e4e3ba53750b053abb322f0c2bf0dbd45ebd243513274cfe6844aed2afc9efd73cf40dc2b461b878b7538f76c48f8e9aba45baceb25bc5a4f069f66463c7aeaddf86e6fbfa9903cabc2870f5fb9200e51e414675b5993b22cd953b908f2a71d9caf9da3297bb86b19c9f834fd2294d3384d448a8a8dd886f7fab06b879132aceadae2cce24d11100561052c6c49d9f5ba134da12192eb03e33472f74d3725bd1111eccaab91e0214130062bcfb29be70802804306d6384c40a2401fd1fc7cb2dc6d792ecb078c8ae8750cafbd66f9930874eef2623fc300291f4136683632c182a34f528e6156e86d0b223f6776bb9aab502c3dc1a5f180f7ed3963d89b99d559d33fdf6e85b9cda4181790404138467d7d5c70ddc20d87d58aa3cc70fec0bb5ea21b271dd1a243264d2ae9ac1beadf054dae1b2e51fc0a4b35e0e311bccb1706466de088ec755df1f3c3cb2ebb47d9fa2a49ea9f5063b1d599d103c6f9d92f924fefa0417b2d4453f2a0454552358f6eded65eeff01439c958cd6976925000d9fccf099a2910cc3697106c358bd133aa90fae195e497edff6cedaaa1244cc7896ce7d70574fde0e68c7ad3a8e23fa3a60be718425904637ff1cbe3ac5a757a7c952dcf37275200863ecd8e927a335d2c26b4d39c8361d48e4df8f5f10018bfd15de810f5b0040d8d3c86c9a82c8e4199bea895e07fbfe738239ebdf124853f2e6f975f2a33173e11751f057181fad76afc996dce2a59b36bf1a8e2f30fdbc65fb4361face137a1efb34809b87183dd2d27ef6a6d2a4a7f83fe463a880e5e948f269d885e826fed0eb6fcacd158b80e3479546d6c86c307c09a85e2d18983c61825df813b5fa40f65088a93b2d4b71f0b748330e2b63b03d89eefdb31d44fb94eafaaf1a4fb77afbf024039b26f7c0bb52599aa2f46736fc2c5fd56a8a066bf3c08f0aa9b262143a0767c3d53c1329eabadc4433099272aca3a3573c65fffcc5333af10840ab42e2d7826b916312dadc7c11fb84d1fbe4a0b469a452fd5171e380ef39710bd936745937a653fdb05d2c32eff09a3d0c3f7320033c400dde99f6386894437d0a101273e4f6e709d1b9d31beb2ae25528f57d05184e101ee34c744e42b54655ab5322878915659fc92d44b4eb6a84f7fe160b120f9a04ffb4306806c8a7dcbb412a77aa62dbdb133a8f9e4ab645f3e401367da382ac5387b3e01d17458c2e32654671fd83ad63409dff14374a6ad4348d7898a18d50b82838005c1169ba11284f9515103789be72cb344f6ecbac94390f5c2d59ff561f67d8682422316128694a4755396912c11f07a60d985e3900afee806dd718a33273cf0c4ee8b5e15ce5ded7b1d6a8f8ac5fbdf5e9b29929f00a8448d76fad1ad4b6641f79a86cab9d16ddbe4d12ba2cfd0f118b1af32f0898bb89b82d4233e1b897c929f4fbb05f47ea1b1aa73bcd3ecb630718f9b4aaedb9d4c4410f2f321ebb8e60788226f7df9c587630596add0275b354b60fdf9b7c7d7c72f4370216e926672ac7422335fac58438d7ead37ea91dcce3cecc529027afd8bab4acb19642ed23662c7698bfa9e82457e24ece94d9c572342990e7ae226fd3cd9c068c8cb3dd60fd03fb58984438e8afab73cc2228d7d1650ad2da07108db5d047d5f973df09a35b1327b9475095bb38df489c23cc6cabe7bcb0b968082a959ac751fd98962b595c69286b9172eefaf0e5d0f58153d17de5bfc3971cc40dbf961c60a0d45b15f15b52e0e461b378a8847f39fc734840cc761f72d2420fa0054cdaeaade825b7047b054baafed9bbfacfc4c09505091ecbc1b4e4d040e369da5cc7bd4b9309a4cb5fcc4c34a5b22d6517a718929ac382ce693df494217cb0973c17e4c20e3000c7243736fe190d8756b3e74e6fa869e7d7c457fa3213d037d1c4acf8ed10beb6fc65da0635e6d4a4b9e8cc2891a77e4bbfdc3a4861c2a2ff101ad5e7661da4f7a9bea878d39cf4781a27f02390a2f252a78e42b7e6c21c3c37febabe836726288b02cd119a82e4cccee047f238d44ef34333fa5edefe3b3597f1b683ca4977531f8b05d4f646973a90dc0cc5d4abfbd7c85971a073d666a77b7289875d463a7b097d41d12c512dec5d55ab2d982992cee126abc1ab91f6ed8705b1d9385393b019359a42a3346b78eb4ca11354bfa944beaa899eaae3fe88a97a3c9cd839387cedd8109c99b29cc948b20e9e6643406962c1497fe55d96bdb2aeef16c6ac6f79e6ede3e56040bf928e5689299fef0b4011523f2b6606b1c8110fe12981516101b001b952ab925bba52ec6be7c52cdc22be145f8eb022a0a868fbf8fb5ab0630dac375e6140415ffa7541733fc56992574c5fce88134f", 0x1000}, {&(0x7f0000001740)="0f5ef33a79c9597d6fd165ede088a1740ee88e3d2d84f30c59cf1fa2c231bd86828df9897ac2725a70a9921e87e75f8c793f8517a30ee988491cec8219b56b082ce2985287885cd5cb54c938b80f4e5627e655a9861d0ce113501cd93ddfe2bca52ba5a07733362af54e6408fc27b125674d4efc04bf3e98d5e553aaab5f0012b39e9faceaeb02a027d3f42f1dd2f8798f4a321d2c0ab561ad9ba7b95ebf5c5f6513af72c15931c4b4a12ee098d53e4131e7ec8a0fed3cef0560b6286fe1c4de68413611c5a60fbb179eea293fc2ac97d5d0772e8b6f2dc364e589938efc36171aaab77acfd0a8818b6193", 0xeb}, {&(0x7f0000001840)="06bf0f138b961d323176e92bf383bcf1f7378d26354ef569597c8496cca221d67025d25dce9ba460a11ed4690379bd175a652006d69ffce48159e66004067666eaa652ab1ea107c6814e95b80b55c186", 0x50}, {&(0x7f00000018c0)="60a6a2bb9bb7a831c1ef887791d092f950723b44da30ea17833a8b55f4464d11e66abdd0aea90eaf24eb9ebe09adc30498637aef6b766924532c624331bea3dceb17977458dec99da9dc9942e6efdc1f78724aa7c2b35b12c846ca95c54e6b0216a8", 0x62}], 0x5, &(0x7f00000019c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x60}}], 0x2, 0x48004) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) (async) unshare(0x26000400) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) (async) io_uring_enter(r6, 0x627, 0xd75d, 0x43, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@mcast2, {0xff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}}, [@mark={0xc, 0x15, {0x35075a, 0xfff}}]}, 0x104}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) (rerun: 32) 36.867592775s ago: executing program 1 (id=229): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r0, 0x0, 0x1}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) 36.855896816s ago: executing program 1 (id=230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x80, 0x23}, {0x0, 0x0, 0x0, 0x0, 0x400000000, 0x800}, {0x0, 0x8, 0x0, 0xa}, 0xfffffffc, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, 0xe8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="fb6157fe0e74875fe777a59271d26b507b486d01b5bbb176de02113d25b3976e529c2848c96cc5549234851b8db1c4fde04e18c7bb419f94290171398732589e1f9de3f46f9f5f866017178f7ab212129d1c542eb7eadb0d67d9e09ba448989600fa79c5eb8181ce574203daba6826048f2b18fbcce665f67b25a267522cbfb97f8e40800fe1305bf9"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='device_pm_callback_end\x00', r4}, 0x18) acct(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) (async) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f0000000900)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}], [{@subj_user={'subj_user', 0x3d, '/:\x00'}}]}, 0xfe, 0x47a, &(0x7f0000002080)="$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") (async) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10) shmdt(0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 36.80484127s ago: executing program 1 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000380)={'NETMAP\x00'}, &(0x7f00000003c0)=0x1e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) iopl(0x3) syz_clone(0x80000, 0x0, 0x2f9f, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r12, 0x660c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', r9, r12, 0x2, 0x2, 0x4}, 0x50) 36.580269728s ago: executing program 1 (id=238): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80), 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 36.296529671s ago: executing program 1 (id=243): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="2c2a4ae40abc0d7eddba573a0dbe41febae715cb9f48f34f6ee62e74dbce9828a9cc3a0729b96941b85324a02150ff8f2de824ed2702d14b6ca103caff"], 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x801, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x801, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000380)='cpu') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000380)='cpu') socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r4, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 36.295962141s ago: executing program 32 (id=243): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="2c2a4ae40abc0d7eddba573a0dbe41febae715cb9f48f34f6ee62e74dbce9828a9cc3a0729b96941b85324a02150ff8f2de824ed2702d14b6ca103caff"], 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x801, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x801, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000380)='cpu') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000380)='cpu') socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r4, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 29.565387012s ago: executing program 3 (id=354): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x1800, 0x2400c09d}, 0x20) 29.484742299s ago: executing program 3 (id=356): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 29.364854948s ago: executing program 3 (id=360): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x9, 0x803) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 29.036698305s ago: executing program 3 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc2294133"], 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741aa2d2693d37b2a5600", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x81) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) 28.85026962s ago: executing program 3 (id=371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) io_uring_setup(0x3c90, &(0x7f0000000340)={0x0, 0xaee3, 0x7f, 0x3, 0x3eb, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 28.658967575s ago: executing program 3 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e640000000048000280"], 0x78}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 28.650939506s ago: executing program 33 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e640000000048000280"], 0x78}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) 5.033412686s ago: executing program 2 (id=815): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffcb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x100010, r4, 0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82, 0x160) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x400013) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.871292869s ago: executing program 4 (id=825): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.738529859s ago: executing program 2 (id=827): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="01000000010000000300000000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}, 0x7f}], 0x2, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) write$UHID_DESTROY(r6, &(0x7f0000000200), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040001) socket$kcm(0x10, 0x3, 0x10) 3.520999797s ago: executing program 2 (id=835): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3fffff) 3.23172802s ago: executing program 2 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0x40a9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000c5388e6140f055b8566d75b0d856000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000745266da466ff67eb718c59f9fdee31f943a7927f9b38312f085a5f372a7ac58897a5fb04c32c8007c2e0b35d77b9a3f9296fe4b23e8c9b34b014c1126edd0de2968f7a7018b7785f21ada2bd11d7ba8817a64529f69ae25f2a6bf74c3340c9e58fffbda5a6b421b37d3b1c481253702ec9d6544a60f831ed4c99d10aaf6b4fa2450aae3d8ba8c0a893dcc23cedd1a58f1022e4387302b0775d9f660f52c68f83f3d76a52754e0085b0fcdafd7afb0d1a8598ecf31c435bf55d0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r8 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x800000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0x1c}, &(0x7f0000000240)=""/54, 0x36, &(0x7f0000000280)=""/231, &(0x7f0000000380)=[r8, r8, r8, r8, r8, r8, r8], 0x7}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000004a00030000020000000000000a002000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000210000000000bb080002000100000014000100ff0100000000000000000000000000010800020002000000140001000000000000000000000000000000000114000100fe800000000000000000000000000018080002000300000014000100ff02000000000000000000000000000108"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = socket(0x2, 0xa, 0xb) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'ip6gre0\x00'}) 2.471384062s ago: executing program 5 (id=840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80), 0xfe, 0x54c, &(0x7f0000000400)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.178500775s ago: executing program 2 (id=841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2.175172035s ago: executing program 5 (id=851): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2b, 0x1, 0x6c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.147644227s ago: executing program 5 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='vnet_rx_one\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008002f1cd0370000a500"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) 1.630533759s ago: executing program 0 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4a9c92ca7de7", @ANYRES32, @ANYBLOB="466b7cf3d8ddab20094186ca263e889bf33e82292b97773cb3a67eaa5d6de57c30458015f6100f08edace8d8", @ANYRES16], 0x0, 0xfffff7fc, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a00000007000000000000000900000000800200", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/20, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) 1.629908999s ago: executing program 2 (id=845): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 1.4934083s ago: executing program 0 (id=846): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) io_uring_setup(0x3c90, &(0x7f0000000340)={0x0, 0xaee3, 0x7f, 0x3, 0x3eb}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0x2b, 0x1, 0x6c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) 1.49292659s ago: executing program 6 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfffd, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x373a635a847df2dd}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xd}, {0x0, 0xfff1}, {0x4, 0x6}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 1.414266976s ago: executing program 0 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000500)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x14064, &(0x7f0000000140)={[{@acl}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0xb, &(0x7f0000000000)=0x7, 0x4) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000380)=[{{&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000540)="510fb0c6e98814cc6ab228991bbab642086d0e3fbb18cf31a8b60978dc0d85c5228e6fad1f2d922ebfd841a8429d91296e452e25db3a22fa21c08b03da4f76f5787c55762ffd0c49a42a378ea1270161042932c815652eaac77f2585d31484aab1e9dc06b3d6a4227b588f8ac4", 0x6d}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="b9", 0x1}], 0x1}}], 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r0, @ANYRESDEC=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.342004362s ago: executing program 6 (id=849): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xe) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.208170763s ago: executing program 5 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x7}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) 1.128838599s ago: executing program 0 (id=852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xc, 0xf, 0x3, 0x1, @empty, @local, 0x10000, 0x10, 0x7, 0xfe}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1.094170972s ago: executing program 5 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x20044000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000400)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10009a0}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r11, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c080) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)=ANY=[@ANYBLOB='gid']) 1.056882915s ago: executing program 6 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0x40a9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000c5388e6140f055b8566d75b0d856000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000745266da466ff67eb718c59f9fdee31f943a7927f9b38312f085a5f372a7ac58897a5fb04c32c8007c2e0b35d77b9a3f9296fe4b23e8c9b34b014c1126edd0de2968f7a7018b7785f21ada2bd11d7ba8817a64529f69ae25f2a6bf74c3340c9e58fffbda5a6b421b37d3b1c481253702ec9d6544a60f831ed4c99d10aaf6b4fa2450aae3d8ba8c0a893dcc23cedd1a58f1022e4387302b0775d9f660f52c68f83f3d76a52754e0085b0fcdafd7afb0d1a8598ecf31c435bf55d0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r8 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x800000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0x1c}, &(0x7f0000000240)=""/54, 0x36, &(0x7f0000000280)=""/231, &(0x7f0000000380)=[r8, r8, r8, r8, r8, r8, r8], 0x7}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000004a00030000020000000000000a002000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000000000000210000000000bb080002000100000014000100ff0100000000000000000000000000010800020002000000140001000000000000000000000000000000000114000100fe800000000000000000000000000018080002000300000014000100ff02000000000000000000000000000108"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = socket(0x2, 0xa, 0xb) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'ip6gre0\x00'}) 868.83415ms ago: executing program 5 (id=856): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x3, 0x9, 0x10000) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x66}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES8, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x3}, 0x18) r4 = socket(0x10, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/dev/null\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000500)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x101c00, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r7}, &(0x7f0000000400), &(0x7f0000000a80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000340)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000380)=ANY=[@ANYBLOB="1000638e1b8e2ff97e4bee5bf70000051401002dbd7000fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 296.717846ms ago: executing program 4 (id=857): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x1, 0x1, 0x12, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='devlink_health_reporter_state_update\x00', r10, 0x0, 0x32}, 0x18) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2002008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="080002000000fcdbdf25090000000500370000000000595d3418aeb0718d073de29c782facb0a021d86a000b016a89fc693abeb9f0c2792625c8b413b0b634fe5d7ab428e4991caf0a9c2c95f189bc2d525d364186606b8426a87964e77e7672d57b5bdbcf024c157693f6e09509ec980d68f2fcab2d3fb69f2311942cfbf9a17e2d4bcd8c87510978c708f00034f05649001fcd2e4b0c82c304772e58963ed3ba991cff3ec78399052eacc8bcde8a5ee3b73abac4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) modify_ldt$read(0x0, &(0x7f0000000780)=""/241, 0xf1) mount_setattr(r11, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) 232.910571ms ago: executing program 0 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4a9c92ca7de7", @ANYRES32, @ANYBLOB="466b7cf3d8ddab20094186ca263e889bf33e82292b97773cb3a67eaa5d6de57c30458015f6100f08edace8d8", @ANYRES16], 0x0, 0xfffff7fc, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a00000007000000000000000900000000800200", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/20, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000400), &(0x7f0000000440)=0x4) 209.459763ms ago: executing program 0 (id=859): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 208.989823ms ago: executing program 4 (id=860): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x3c90, &(0x7f0000000340)={0x0, 0xaee3, 0x7f, 0x3, 0x3eb}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0x2b, 0x1, 0x6c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) 133.090479ms ago: executing program 4 (id=861): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x20, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) 111.479391ms ago: executing program 6 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfffd, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x373a635a847df2dd}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xd}, {0x0, 0xfff1}, {0x4, 0x6}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 57.135606ms ago: executing program 4 (id=863): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 55.607386ms ago: executing program 6 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x7}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) 653.24µs ago: executing program 6 (id=865): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x174}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xe) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 4 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): ] should_fail_ex+0x265/0x280 [ 47.281755][ T4120] should_failslab+0x8c/0xb0 [ 47.281788][ T4120] kmem_cache_alloc_noprof+0x50/0x310 [ 47.281825][ T4120] ? __break_lease+0x78/0xe80 [ 47.281856][ T4120] __break_lease+0x78/0xe80 [ 47.281950][ T4120] ? selinux_file_open+0x2df/0x330 [ 47.281984][ T4120] do_dentry_open+0x5be/0xa20 [ 47.282166][ T4120] vfs_open+0x37/0x1e0 [ 47.282214][ T4120] path_openat+0x1c5e/0x2170 [ 47.282256][ T4120] do_filp_open+0x109/0x230 [ 47.282295][ T4120] do_sys_openat2+0xa6/0x110 [ 47.282337][ T4120] __x64_sys_openat+0xf2/0x120 [ 47.282398][ T4120] x64_sys_call+0x2e9c/0x2ff0 [ 47.282426][ T4120] do_syscall_64+0xd2/0x200 [ 47.282519][ T4120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.282610][ T4120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.282646][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.282671][ T4120] RIP: 0033:0x7fc210f0ebe9 [ 47.282720][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.282745][ T4120] RSP: 002b:00007fc20f977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.282770][ T4120] RAX: ffffffffffffffda RBX: 00007fc211135fa0 RCX: 00007fc210f0ebe9 [ 47.282788][ T4120] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 47.282803][ T4120] RBP: 00007fc20f977090 R08: 0000000000000000 R09: 0000000000000000 [ 47.282820][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.282970][ T4120] R13: 00007fc211136038 R14: 00007fc211135fa0 R15: 00007ffcee9a5d48 [ 47.282997][ T4120] [ 47.489999][ T4116] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 47.496299][ T4116] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 47.516091][ T4116] RSP: 0018:ffffc90001c17440 EFLAGS: 00010292 [ 47.522211][ T4116] RAX: ae50b414a25cf300 RBX: ffff88811a186b10 RCX: ffff88811adca100 [ 47.530278][ T4116] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 47.538272][ T4116] RBP: 0000000000000000 R08: 0001c90001c1727f R09: 0000000000000000 [ 47.546375][ T4116] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88811a186ad0 [ 47.554392][ T4116] R13: ffff888128570000 R14: ffff888128570000 R15: ffff88811a186b08 [ 47.562447][ T4116] FS: 00007efd0576f6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 47.571443][ T4116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.578089][ T4116] CR2: 0000200000fe8000 CR3: 000000011e4de000 CR4: 00000000003506f0 [ 47.586143][ T4116] Call Trace: [ 47.589453][ T4116] [ 47.592415][ T4116] reg_set_min_max+0x215/0x260 [ 47.597246][ T4116] check_cond_jmp_op+0x1013/0x16e0 [ 47.602482][ T4116] do_check+0x332a/0x7a10 [ 47.606884][ T4116] do_check_common+0xc3a/0x12a0 [ 47.611953][ T4116] bpf_check+0x942b/0xd9e0 [ 47.616491][ T4116] ? __rcu_read_unlock+0x4f/0x70 [ 47.621617][ T4116] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 47.627692][ T4116] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 47.633413][ T4116] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 47.639447][ T4116] ? css_rstat_updated+0xb7/0x240 [ 47.644506][ T4116] ? try_charge_memcg+0x200/0x9e0 [ 47.649658][ T4116] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 47.655242][ T4116] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 47.661393][ T4116] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 47.667549][ T4116] ? css_rstat_updated+0xb7/0x240 [ 47.672645][ T4116] ? __rcu_read_unlock+0x4f/0x70 [ 47.677750][ T4116] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 47.683633][ T4116] ? should_fail_ex+0x30/0x280 [ 47.688435][ T4116] ? selinux_bpf_prog_load+0x36/0xf0 [ 47.693949][ T4116] ? should_failslab+0x8c/0xb0 [ 47.698798][ T4116] ? __kmalloc_cache_noprof+0x189/0x320 [ 47.704410][ T4116] ? selinux_bpf_prog_load+0xbf/0xf0 [ 47.709871][ T4116] ? security_bpf_prog_load+0x2c/0xa0 [ 47.715326][ T4116] bpf_prog_load+0xedd/0x1070 [ 47.720092][ T4116] ? security_bpf+0x2b/0x90 [ 47.724650][ T4116] __sys_bpf+0x462/0x7b0 [ 47.728938][ T4116] __x64_sys_bpf+0x41/0x50 [ 47.733454][ T4116] x64_sys_call+0x2aea/0x2ff0 [ 47.738236][ T4116] do_syscall_64+0xd2/0x200 [ 47.742834][ T4116] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.749010][ T4116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.754867][ T4116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.760839][ T4116] RIP: 0033:0x7efd06d0ebe9 [ 47.765325][ T4116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.785068][ T4116] RSP: 002b:00007efd0576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.793591][ T4116] RAX: ffffffffffffffda RBX: 00007efd06f35fa0 RCX: 00007efd06d0ebe9 [ 47.801691][ T4116] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 47.809765][ T4116] RBP: 00007efd06d91e19 R08: 0000000000000000 R09: 0000000000000000 [ 47.817797][ T4116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.826289][ T4116] R13: 00007efd06f36038 R14: 00007efd06f35fa0 R15: 00007ffdbf486b68 [ 47.834829][ T4116] [ 47.837968][ T4116] ---[ end trace 0000000000000000 ]--- [ 47.844592][ T4127] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.196' sets config #1 [ 47.989828][ T4140] FAULT_INJECTION: forcing a failure. [ 47.989828][ T4140] name failslab, interval 1, probability 0, space 0, times 0 [ 48.002561][ T4140] CPU: 0 UID: 0 PID: 4140 Comm: syz.2.201 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.002608][ T4140] Tainted: [W]=WARN [ 48.002621][ T4140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.002633][ T4140] Call Trace: [ 48.002639][ T4140] [ 48.002646][ T4140] __dump_stack+0x1d/0x30 [ 48.002694][ T4140] dump_stack_lvl+0xe8/0x140 [ 48.002719][ T4140] dump_stack+0x15/0x1b [ 48.002825][ T4140] should_fail_ex+0x265/0x280 [ 48.002846][ T4140] should_failslab+0x8c/0xb0 [ 48.002874][ T4140] __kmalloc_noprof+0xa5/0x3e0 [ 48.002903][ T4140] ? iovec_from_user+0x84/0x210 [ 48.003022][ T4140] iovec_from_user+0x84/0x210 [ 48.003101][ T4140] __import_iovec+0xf3/0x540 [ 48.003136][ T4140] ? _parse_integer_limit+0x170/0x190 [ 48.003163][ T4140] import_iovec+0x61/0x80 [ 48.003205][ T4140] ___sys_sendmsg+0x146/0x1d0 [ 48.003270][ T4140] __x64_sys_sendmsg+0xd4/0x160 [ 48.003302][ T4140] x64_sys_call+0x191e/0x2ff0 [ 48.003400][ T4140] do_syscall_64+0xd2/0x200 [ 48.003434][ T4140] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.003472][ T4140] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.003562][ T4140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.003657][ T4140] RIP: 0033:0x7f16dda8ebe9 [ 48.003676][ T4140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.003693][ T4140] RSP: 002b:00007f16dc4ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.003716][ T4140] RAX: ffffffffffffffda RBX: 00007f16ddcb5fa0 RCX: 00007f16dda8ebe9 [ 48.003731][ T4140] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000006 [ 48.003777][ T4140] RBP: 00007f16dc4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 48.003790][ T4140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.003805][ T4140] R13: 00007f16ddcb6038 R14: 00007f16ddcb5fa0 R15: 00007ffffc8a9018 [ 48.003906][ T4140] [ 48.005436][ T4138] veth0_to_team: entered promiscuous mode [ 48.209071][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 48.209091][ T29] audit: type=1400 audit(1756045468.100:830): avc: denied { read } for pid=4146 comm="syz.2.204" path="socket:[6773]" dev="sockfs" ino=6773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.261016][ T29] audit: type=1326 audit(1756045468.140:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.284524][ T29] audit: type=1326 audit(1756045468.140:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.308338][ T29] audit: type=1326 audit(1756045468.140:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.331615][ T29] audit: type=1326 audit(1756045468.140:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.355049][ T29] audit: type=1326 audit(1756045468.140:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.362388][ T4152] capability: warning: `syz.2.204' uses deprecated v2 capabilities in a way that may be insecure [ 48.378765][ T29] audit: type=1326 audit(1756045468.140:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.413523][ T29] audit: type=1326 audit(1756045468.140:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.437143][ T29] audit: type=1326 audit(1756045468.140:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.460431][ T29] audit: type=1326 audit(1756045468.140:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdae8eebe9 code=0x7ffc0000 [ 48.648424][ T4164] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.209' sets config #1 [ 48.704019][ T4170] loop1: detected capacity change from 0 to 512 [ 48.706988][ T4172] netlink: set zone limit has 8 unknown bytes [ 48.731207][ T4170] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.739457][ T4170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.747710][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.212: corrupted inode contents [ 48.763836][ T4170] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.212: mark_inode_dirty error [ 48.778738][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.212: corrupted inode contents [ 48.792299][ T4170] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.212: mark_inode_dirty error [ 48.804029][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.212: corrupted inode contents [ 48.816364][ T4170] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 48.825376][ T4170] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.212: corrupted inode contents [ 48.837534][ T4170] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.212: mark_inode_dirty error [ 48.848908][ T4170] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 48.858616][ T4170] EXT4-fs (loop1): 1 truncate cleaned up [ 48.864840][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 48.877343][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.940408][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.966244][ T4184] netlink: 'syz.1.218': attribute type 15 has an invalid length. [ 49.025571][ T4190] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 49.053910][ T4193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 49.060515][ T4193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 49.068155][ T4193] vhci_hcd vhci_hcd.0: Device attached [ 49.111510][ T4208] FAULT_INJECTION: forcing a failure. [ 49.111510][ T4208] name failslab, interval 1, probability 0, space 0, times 0 [ 49.124656][ T4208] CPU: 1 UID: 0 PID: 4208 Comm: syz.1.224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.124696][ T4208] Tainted: [W]=WARN [ 49.124704][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.124716][ T4208] Call Trace: [ 49.124722][ T4208] [ 49.124732][ T4208] __dump_stack+0x1d/0x30 [ 49.124826][ T4208] dump_stack_lvl+0xe8/0x140 [ 49.124844][ T4208] dump_stack+0x15/0x1b [ 49.124859][ T4208] should_fail_ex+0x265/0x280 [ 49.124906][ T4208] should_failslab+0x8c/0xb0 [ 49.124940][ T4208] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 49.125008][ T4208] ? sidtab_sid2str_get+0xa0/0x130 [ 49.125036][ T4208] kmemdup_noprof+0x2b/0x70 [ 49.125066][ T4208] sidtab_sid2str_get+0xa0/0x130 [ 49.125098][ T4208] security_sid_to_context_core+0x1eb/0x2e0 [ 49.125122][ T4208] security_sid_to_context+0x27/0x40 [ 49.125143][ T4208] selinux_lsmprop_to_secctx+0x67/0xf0 [ 49.125212][ T4208] security_lsmprop_to_secctx+0x43/0x80 [ 49.125262][ T4208] audit_log_task_context+0x77/0x190 [ 49.125305][ T4208] audit_log_task+0xf4/0x250 [ 49.125333][ T4208] audit_seccomp+0x61/0x100 [ 49.125362][ T4208] ? __seccomp_filter+0x68c/0x10d0 [ 49.125395][ T4208] __seccomp_filter+0x69d/0x10d0 [ 49.125421][ T4208] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.125453][ T4208] ? vfs_write+0x7e8/0x960 [ 49.125494][ T4208] ? __rcu_read_unlock+0x4f/0x70 [ 49.125569][ T4208] ? __fget_files+0x184/0x1c0 [ 49.125599][ T4208] __secure_computing+0x82/0x150 [ 49.125672][ T4208] syscall_trace_enter+0xcf/0x1e0 [ 49.125702][ T4208] do_syscall_64+0xac/0x200 [ 49.125888][ T4208] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.125986][ T4208] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.126017][ T4208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.126092][ T4208] RIP: 0033:0x7fc210f0ebe9 [ 49.126158][ T4208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.126233][ T4208] RSP: 002b:00007fc20f977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.126335][ T4208] RAX: ffffffffffffffda RBX: 00007fc211135fa0 RCX: 00007fc210f0ebe9 [ 49.126351][ T4208] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000007 [ 49.126371][ T4208] RBP: 00007fc20f977090 R08: 0000000000000000 R09: 0000000000000000 [ 49.126385][ T4208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.126398][ T4208] R13: 00007fc211136038 R14: 00007fc211135fa0 R15: 00007ffcee9a5d48 [ 49.126418][ T4208] [ 49.409024][ T4201] vhci_hcd: connection closed [ 49.426172][ T51] vhci_hcd: stop threads [ 49.435425][ T51] vhci_hcd: release socket [ 49.439923][ T51] vhci_hcd: disconnect device [ 49.469505][ T3377] vhci_hcd: vhci_device speed not set [ 49.490542][ C1] hrtimer: interrupt took 36311 ns [ 49.526074][ T4235] loop1: detected capacity change from 0 to 512 [ 49.545035][ T4235] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.574838][ T4235] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.591388][ T4235] EXT4-fs (loop1): 1 truncate cleaned up [ 49.608996][ T4235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.683140][ T4249] vxcan0: tx address claim with dest, not broadcast [ 49.733526][ T3303] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /53/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 49.764310][ T3303] EXT4-fs (loop1): Remounting filesystem read-only [ 49.813483][ T4254] veth0_to_team: entered promiscuous mode [ 49.943699][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.944502][ T377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.061132][ T377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.123895][ T4274] loop4: detected capacity change from 0 to 512 [ 50.134723][ T377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.162543][ T4274] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.178818][ T4274] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.193313][ T4274] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.247: corrupted inode contents [ 50.206259][ T4274] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.247: mark_inode_dirty error [ 50.218349][ T4274] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.247: corrupted inode contents [ 50.231781][ T4274] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.247: mark_inode_dirty error [ 50.253176][ T4274] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.247: corrupted inode contents [ 50.254312][ T377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.283421][ T4274] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 50.314731][ T4274] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.247: corrupted inode contents [ 50.315465][ T4269] lo speed is unknown, defaulting to 1000 [ 50.327621][ T4281] __nla_validate_parse: 10 callbacks suppressed [ 50.327639][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 50.337982][ T4285] loop2: detected capacity change from 0 to 512 [ 50.359277][ T4274] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.247: mark_inode_dirty error [ 50.373556][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.398964][ T4285] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.415079][ T4274] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 50.438848][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.450444][ T4274] EXT4-fs (loop4): 1 truncate cleaned up [ 50.465400][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 50.549897][ T290] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 50.564608][ T377] bridge_slave_1: left allmulticast mode [ 50.570353][ T377] bridge_slave_1: left promiscuous mode [ 50.571621][ T4274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.576141][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.606166][ T377] bridge_slave_0: left allmulticast mode [ 50.612065][ T377] bridge_slave_0: left promiscuous mode [ 50.612661][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.617914][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.726513][ T4309] blktrace: Concurrent blktraces are not allowed on sg0 [ 50.736611][ T377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.750850][ T377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.760643][ T377] bond0 (unregistering): Released all slaves [ 50.771531][ T4300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.251'. [ 50.780827][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 50.790380][ T4307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'. [ 50.802693][ T4303] veth0_to_team: entered promiscuous mode [ 50.838023][ T377] hsr_slave_0: left promiscuous mode [ 50.853554][ T377] hsr_slave_1: left promiscuous mode [ 50.863044][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.870626][ T377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.879511][ T377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.886982][ T377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.900709][ T377] veth1_macvtap: left promiscuous mode [ 50.923640][ T377] veth0_macvtap: left promiscuous mode [ 50.937297][ T377] veth1_vlan: left promiscuous mode [ 50.963025][ T377] veth0_vlan: left promiscuous mode [ 50.978574][ T4324] process 'syz.0.259' launched '/dev/fd/10' with NULL argv: empty string added [ 51.154401][ T377] team0 (unregistering): Port device team_slave_1 removed [ 51.168133][ T377] team0 (unregistering): Port device team_slave_0 removed [ 51.296522][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.303884][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.324444][ T4269] bridge_slave_0: entered allmulticast mode [ 51.339144][ T4269] bridge_slave_0: entered promiscuous mode [ 51.360775][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.367905][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.385260][ T4269] bridge_slave_1: entered allmulticast mode [ 51.393975][ T4269] bridge_slave_1: entered promiscuous mode [ 51.436011][ T4345] SELinux: failed to load policy [ 51.441415][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.452082][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.491128][ T4347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.267'. [ 51.502891][ T4269] team0: Port device team_slave_0 added [ 51.519784][ T4269] team0: Port device team_slave_1 added [ 51.525804][ T4349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.268'. [ 51.556556][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.563597][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.589540][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.604290][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.611422][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.637488][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.653150][ T4353] FAULT_INJECTION: forcing a failure. [ 51.653150][ T4353] name failslab, interval 1, probability 0, space 0, times 0 [ 51.665866][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: syz.4.270 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.665949][ T4353] Tainted: [W]=WARN [ 51.665957][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.666005][ T4353] Call Trace: [ 51.666012][ T4353] [ 51.666019][ T4353] __dump_stack+0x1d/0x30 [ 51.666112][ T4353] dump_stack_lvl+0xe8/0x140 [ 51.666132][ T4353] dump_stack+0x15/0x1b [ 51.666147][ T4353] should_fail_ex+0x265/0x280 [ 51.666168][ T4353] should_failslab+0x8c/0xb0 [ 51.666198][ T4353] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.666249][ T4353] ? __alloc_skb+0x101/0x320 [ 51.666283][ T4353] __alloc_skb+0x101/0x320 [ 51.666323][ T4353] ? audit_log_start+0x365/0x6c0 [ 51.666381][ T4353] audit_log_start+0x380/0x6c0 [ 51.666422][ T4353] audit_seccomp+0x48/0x100 [ 51.666454][ T4353] ? __seccomp_filter+0x68c/0x10d0 [ 51.666477][ T4353] __seccomp_filter+0x69d/0x10d0 [ 51.666551][ T4353] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.666586][ T4353] ? vfs_write+0x7e8/0x960 [ 51.666660][ T4353] ? __rcu_read_unlock+0x4f/0x70 [ 51.666686][ T4353] ? __fget_files+0x184/0x1c0 [ 51.666731][ T4353] __secure_computing+0x82/0x150 [ 51.666754][ T4353] syscall_trace_enter+0xcf/0x1e0 [ 51.666843][ T4353] do_syscall_64+0xac/0x200 [ 51.667009][ T4353] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.667056][ T4353] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.667142][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.667170][ T4353] RIP: 0033:0x7efd06d0ebe9 [ 51.667189][ T4353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.667209][ T4353] RSP: 002b:00007efd0576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 51.667228][ T4353] RAX: ffffffffffffffda RBX: 00007efd06f35fa0 RCX: 00007efd06d0ebe9 [ 51.667322][ T4353] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 51.667337][ T4353] RBP: 00007efd0576f090 R08: 0000000000001000 R09: 0000000000000000 [ 51.667448][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.667460][ T4353] R13: 00007efd06f36038 R14: 00007efd06f35fa0 R15: 00007ffdbf486b68 [ 51.667528][ T4353] [ 51.940744][ T4269] hsr_slave_0: entered promiscuous mode [ 51.947089][ T4269] hsr_slave_1: entered promiscuous mode [ 51.954340][ T4269] debugfs: 'hsr0' already exists in 'hsr' [ 51.960256][ T4269] Cannot create hsr debugfs directory [ 51.976944][ T4358] tipc: Started in network mode [ 51.982016][ T4358] tipc: Node identity be55a6bce72, cluster identity 4711 [ 51.989204][ T4358] tipc: Enabled bearer , priority 0 [ 52.008349][ T4360] loop3: detected capacity change from 0 to 512 [ 52.015879][ T4358] syzkaller0: entered promiscuous mode [ 52.021454][ T4358] syzkaller0: entered allmulticast mode [ 52.037399][ T4360] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.045615][ T4360] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.064782][ T4360] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.273: corrupted inode contents [ 52.077287][ T4360] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.273: mark_inode_dirty error [ 52.093116][ T4358] ref_ctr_offset mismatch. inode: 0xd1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 52.112733][ T4358] tipc: Resetting bearer [ 52.123190][ T4360] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.273: corrupted inode contents [ 52.147670][ T4269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.155973][ T4360] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.273: mark_inode_dirty error [ 52.169647][ T4269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.180531][ T4269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.187327][ T4360] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.273: corrupted inode contents [ 52.201784][ T4269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.208912][ T4360] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 52.223226][ T4360] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.273: corrupted inode contents [ 52.238495][ T4360] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.273: mark_inode_dirty error [ 52.259732][ T4360] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 52.281050][ T4357] tipc: Resetting bearer [ 52.288607][ T4357] tipc: Disabling bearer [ 52.296383][ T4360] EXT4-fs (loop3): 1 truncate cleaned up [ 52.302457][ T377] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 1 [ 52.315063][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.344804][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.353411][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.370562][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.383046][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.390174][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.424403][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.431552][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.455164][ T4377] FAULT_INJECTION: forcing a failure. [ 52.455164][ T4377] name failslab, interval 1, probability 0, space 0, times 0 [ 52.468067][ T4377] CPU: 1 UID: 0 PID: 4377 Comm: syz.3.275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.468101][ T4377] Tainted: [W]=WARN [ 52.468109][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.468124][ T4377] Call Trace: [ 52.468131][ T4377] [ 52.468139][ T4377] __dump_stack+0x1d/0x30 [ 52.468171][ T4377] dump_stack_lvl+0xe8/0x140 [ 52.468189][ T4377] dump_stack+0x15/0x1b [ 52.468221][ T4377] should_fail_ex+0x265/0x280 [ 52.468246][ T4377] ? tcf_ife_init+0x1a6/0x880 [ 52.468285][ T4377] should_failslab+0x8c/0xb0 [ 52.468324][ T4377] __kmalloc_cache_noprof+0x4c/0x320 [ 52.468377][ T4377] tcf_ife_init+0x1a6/0x880 [ 52.468418][ T4377] tcf_action_init_1+0x367/0x4a0 [ 52.468521][ T4377] tcf_action_init+0x267/0x6d0 [ 52.468640][ T4377] tc_ctl_action+0x291/0x830 [ 52.468691][ T4377] ? __pfx_tc_ctl_action+0x10/0x10 [ 52.468736][ T4377] rtnetlink_rcv_msg+0x65a/0x6d0 [ 52.468775][ T4377] netlink_rcv_skb+0x123/0x220 [ 52.468794][ T4377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 52.468868][ T4377] rtnetlink_rcv+0x1c/0x30 [ 52.468898][ T4377] netlink_unicast+0x5bd/0x690 [ 52.469082][ T4377] netlink_sendmsg+0x58b/0x6b0 [ 52.469114][ T4377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.469142][ T4377] __sock_sendmsg+0x145/0x180 [ 52.469177][ T4377] ____sys_sendmsg+0x31e/0x4e0 [ 52.469280][ T4377] ___sys_sendmsg+0x17b/0x1d0 [ 52.469339][ T4377] __x64_sys_sendmsg+0xd4/0x160 [ 52.469370][ T4377] x64_sys_call+0x191e/0x2ff0 [ 52.469398][ T4377] do_syscall_64+0xd2/0x200 [ 52.469431][ T4377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.469552][ T4377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.469581][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.469656][ T4377] RIP: 0033:0x7fa68b21ebe9 [ 52.469675][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.469696][ T4377] RSP: 002b:00007fa689c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.469715][ T4377] RAX: ffffffffffffffda RBX: 00007fa68b445fa0 RCX: 00007fa68b21ebe9 [ 52.469726][ T4377] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 52.469738][ T4377] RBP: 00007fa689c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.469816][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.469828][ T4377] R13: 00007fa68b446038 R14: 00007fa68b445fa0 R15: 00007ffcdd341378 [ 52.469846][ T4377] [ 52.471568][ T4378] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 52.722748][ T4378] SELinux: failed to load policy [ 52.748861][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.768854][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.278'. [ 52.828993][ T4389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.280'. [ 52.835204][ T4393] loop2: detected capacity change from 0 to 512 [ 52.845869][ T4393] EXT4-fs: Ignoring removed bh option [ 52.851828][ T4393] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.866428][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.874307][ T4393] EXT4-fs (loop2): 1 truncate cleaned up [ 52.881590][ T4393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.933459][ T4403] loop4: detected capacity change from 0 to 512 [ 52.965188][ T4397] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 52.991710][ T4403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.007353][ T4403] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.035550][ T4419] netlink: 5 bytes leftover after parsing attributes in process `syz.0.286'. [ 53.048248][ T4419] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 53.055845][ T4419] 0ªî{X¹¦: entered allmulticast mode [ 53.063029][ T4419] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 53.081598][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.117271][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.148464][ T4269] veth0_vlan: entered promiscuous mode [ 53.168087][ T4269] veth1_vlan: entered promiscuous mode [ 53.193754][ T4269] veth0_macvtap: entered promiscuous mode [ 53.207606][ T4269] veth1_macvtap: entered promiscuous mode [ 53.220033][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.248009][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.258289][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 53.258339][ T29] audit: type=1400 audit(1756045473.150:1202): avc: denied { ioctl } for pid=4442 comm="syz.0.295" path="socket:[8568]" dev="sockfs" ino=8568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.259659][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.269085][ T4443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'. [ 53.310339][ T4443] bond0: option downdelay: invalid value (18446744073709551615) [ 53.318064][ T4443] bond0: option downdelay: allowed values 0 - 2147483647 [ 53.325306][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.336528][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.360309][ T29] audit: type=1400 audit(1756045473.260:1203): avc: denied { mounton } for pid=4269 comm="syz-executor" path="/root/syzkaller.o3v647/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.369461][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.384782][ T29] audit: type=1400 audit(1756045473.260:1204): avc: denied { mount } for pid=4269 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.434360][ T29] audit: type=1400 audit(1756045473.260:1205): avc: denied { mount } for pid=4269 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.456533][ T29] audit: type=1400 audit(1756045473.260:1206): avc: denied { mounton } for pid=4269 comm="syz-executor" path="/root/syzkaller.o3v647/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.483301][ T29] audit: type=1400 audit(1756045473.260:1207): avc: denied { mounton } for pid=4269 comm="syz-executor" path="/root/syzkaller.o3v647/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.510977][ T29] audit: type=1400 audit(1756045473.320:1208): avc: denied { mounton } for pid=4269 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.534018][ T29] audit: type=1400 audit(1756045473.320:1209): avc: denied { mount } for pid=4269 comm="syz-executor" name="/" dev="gadgetfs" ino=3943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 53.557088][ T29] audit: type=1326 audit(1756045473.330:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.4.293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd06d0ebe9 code=0x0 [ 53.579873][ T29] audit: type=1400 audit(1756045473.380:1211): avc: denied { bind } for pid=4438 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.993004][ T4484] loop3: detected capacity change from 0 to 8192 [ 54.086916][ T4488] loop3: detected capacity change from 0 to 1024 [ 54.101366][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.114414][ T4488] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.199051][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.222792][ T4495] loop3: detected capacity change from 0 to 1024 [ 54.241168][ T4495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.255013][ T4495] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.273263][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.320858][ T4499] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.308' sets config #1 [ 54.364318][ T4503] bond0: option downdelay: invalid value (18446744073709551615) [ 54.372215][ T4503] bond0: option downdelay: allowed values 0 - 2147483647 [ 54.416804][ T4507] loop2: detected capacity change from 0 to 1024 [ 54.432526][ T4507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.447776][ T4511] FAULT_INJECTION: forcing a failure. [ 54.447776][ T4511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.461048][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.3.312 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.461091][ T4511] Tainted: [W]=WARN [ 54.461100][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.461115][ T4511] Call Trace: [ 54.461121][ T4511] [ 54.461172][ T4511] __dump_stack+0x1d/0x30 [ 54.461197][ T4511] dump_stack_lvl+0xe8/0x140 [ 54.461251][ T4511] dump_stack+0x15/0x1b [ 54.461274][ T4511] should_fail_ex+0x265/0x280 [ 54.461300][ T4511] should_fail+0xb/0x20 [ 54.461323][ T4511] should_fail_usercopy+0x1a/0x20 [ 54.461426][ T4511] strncpy_from_user+0x25/0x230 [ 54.461464][ T4511] ? kmem_cache_alloc_noprof+0x186/0x310 [ 54.461526][ T4511] ? getname_flags+0x80/0x3b0 [ 54.461563][ T4511] getname_flags+0xae/0x3b0 [ 54.461596][ T4511] user_path_at+0x28/0x130 [ 54.461649][ T4511] __se_sys_mount+0x25b/0x2e0 [ 54.461678][ T4511] ? fput+0x8f/0xc0 [ 54.461712][ T4511] __x64_sys_mount+0x67/0x80 [ 54.461798][ T4511] x64_sys_call+0x2b4d/0x2ff0 [ 54.461826][ T4511] do_syscall_64+0xd2/0x200 [ 54.461907][ T4511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.461971][ T4511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.462079][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.462106][ T4511] RIP: 0033:0x7fa68b21ebe9 [ 54.462125][ T4511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.462155][ T4511] RSP: 002b:00007fa689c7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.462178][ T4511] RAX: ffffffffffffffda RBX: 00007fa68b445fa0 RCX: 00007fa68b21ebe9 [ 54.462193][ T4511] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 54.462257][ T4511] RBP: 00007fa689c7f090 R08: 0000200000000140 R09: 0000000000000000 [ 54.462343][ T4511] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 54.462359][ T4511] R13: 00007fa68b446038 R14: 00007fa68b445fa0 R15: 00007ffcdd341378 [ 54.462379][ T4511] [ 54.681919][ T4516] loop5: detected capacity change from 0 to 512 [ 54.682947][ T4507] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.722554][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.733476][ T4516] EXT4-fs (loop5): too many log groups per flexible block group [ 54.741504][ T4516] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 54.759476][ T4516] EXT4-fs (loop5): mount failed [ 54.787470][ T4526] FAULT_INJECTION: forcing a failure. [ 54.787470][ T4526] name failslab, interval 1, probability 0, space 0, times 0 [ 54.800251][ T4526] CPU: 0 UID: 0 PID: 4526 Comm: syz.3.317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.800331][ T4526] Tainted: [W]=WARN [ 54.800338][ T4526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.800351][ T4526] Call Trace: [ 54.800357][ T4526] [ 54.800365][ T4526] __dump_stack+0x1d/0x30 [ 54.800388][ T4526] dump_stack_lvl+0xe8/0x140 [ 54.800444][ T4526] dump_stack+0x15/0x1b [ 54.800461][ T4526] should_fail_ex+0x265/0x280 [ 54.800484][ T4526] should_failslab+0x8c/0xb0 [ 54.800513][ T4526] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 54.800550][ T4526] ? sidtab_sid2str_get+0xa0/0x130 [ 54.800577][ T4526] kmemdup_noprof+0x2b/0x70 [ 54.800606][ T4526] sidtab_sid2str_get+0xa0/0x130 [ 54.800630][ T4526] security_sid_to_context_core+0x1eb/0x2e0 [ 54.800704][ T4526] security_sid_to_context+0x27/0x40 [ 54.800726][ T4526] avc_audit_post_callback+0x9d/0x520 [ 54.800752][ T4526] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 54.800794][ T4526] common_lsm_audit+0x1bb/0x230 [ 54.800827][ T4526] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 54.800854][ T4526] ? avc_denied+0xe4/0x100 [ 54.800889][ T4526] slow_avc_audit+0x104/0x140 [ 54.800960][ T4526] avc_has_perm+0x13a/0x180 [ 54.800988][ T4526] selinux_inode_setxattr+0x478/0x6e0 [ 54.801026][ T4526] ? mntput+0x4b/0x80 [ 54.801085][ T4526] security_inode_setxattr+0x13a/0x1b0 [ 54.801124][ T4526] __vfs_setxattr_locked+0x83/0x1d0 [ 54.801148][ T4526] vfs_setxattr+0x132/0x270 [ 54.801183][ T4526] file_setxattr+0x139/0x1b0 [ 54.801209][ T4526] path_setxattrat+0x290/0x310 [ 54.801252][ T4526] __x64_sys_fsetxattr+0x6b/0x80 [ 54.801285][ T4526] x64_sys_call+0x1ced/0x2ff0 [ 54.801307][ T4526] do_syscall_64+0xd2/0x200 [ 54.801337][ T4526] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.801414][ T4526] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.801440][ T4526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.801462][ T4526] RIP: 0033:0x7fa68b21ebe9 [ 54.801479][ T4526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.801531][ T4526] RSP: 002b:00007fa689c7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 54.801551][ T4526] RAX: ffffffffffffffda RBX: 00007fa68b445fa0 RCX: 00007fa68b21ebe9 [ 54.801563][ T4526] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000007 [ 54.801640][ T4526] RBP: 00007fa689c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.801653][ T4526] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 54.801665][ T4526] R13: 00007fa68b446038 R14: 00007fa68b445fa0 R15: 00007ffcdd341378 [ 54.801684][ T4526] [ 55.098352][ T4530] loop4: detected capacity change from 0 to 1024 [ 55.105348][ T4513] lo speed is unknown, defaulting to 1000 [ 55.132497][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.154704][ T4533] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.164888][ T4533] SELinux: failed to load policy [ 55.206764][ T4537] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.320' sets config #1 [ 55.206889][ T4527] loop2: detected capacity change from 0 to 1024 [ 55.230902][ T4530] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 55.289607][ T4527] EXT4-fs: Ignoring removed orlov option [ 55.309201][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.331353][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.373695][ T4544] FAULT_INJECTION: forcing a failure. [ 55.373695][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 55.386441][ T4544] CPU: 1 UID: 0 PID: 4544 Comm: syz.0.324 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.386545][ T4544] Tainted: [W]=WARN [ 55.386553][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.386565][ T4544] Call Trace: [ 55.386572][ T4544] [ 55.386579][ T4544] __dump_stack+0x1d/0x30 [ 55.386599][ T4544] dump_stack_lvl+0xe8/0x140 [ 55.386620][ T4544] dump_stack+0x15/0x1b [ 55.386639][ T4544] should_fail_ex+0x265/0x280 [ 55.386706][ T4544] should_failslab+0x8c/0xb0 [ 55.386797][ T4544] kmem_cache_alloc_node_noprof+0x57/0x320 [ 55.386903][ T4544] ? __alloc_skb+0x101/0x320 [ 55.386946][ T4544] __alloc_skb+0x101/0x320 [ 55.387067][ T4544] netlink_alloc_large_skb+0xba/0xf0 [ 55.387107][ T4544] netlink_sendmsg+0x3cf/0x6b0 [ 55.387138][ T4544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.387166][ T4544] __sock_sendmsg+0x145/0x180 [ 55.387279][ T4544] ____sys_sendmsg+0x31e/0x4e0 [ 55.387303][ T4544] ___sys_sendmsg+0x17b/0x1d0 [ 55.387339][ T4544] __x64_sys_sendmsg+0xd4/0x160 [ 55.387386][ T4544] x64_sys_call+0x191e/0x2ff0 [ 55.387413][ T4544] do_syscall_64+0xd2/0x200 [ 55.387448][ T4544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.387478][ T4544] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.387513][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.387538][ T4544] RIP: 0033:0x7fbdae8eebe9 [ 55.387552][ T4544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.387569][ T4544] RSP: 002b:00007fbdad357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.387587][ T4544] RAX: ffffffffffffffda RBX: 00007fbdaeb15fa0 RCX: 00007fbdae8eebe9 [ 55.387600][ T4544] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000004 [ 55.387617][ T4544] RBP: 00007fbdad357090 R08: 0000000000000000 R09: 0000000000000000 [ 55.387633][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.387648][ T4544] R13: 00007fbdaeb16038 R14: 00007fbdaeb15fa0 R15: 00007ffc5e582218 [ 55.387671][ T4544] [ 55.687342][ T4554] binfmt_misc: register: failed to install interpreter file ./file2 [ 55.698187][ T4547] lo speed is unknown, defaulting to 1000 [ 55.724551][ T4560] loop5: detected capacity change from 0 to 512 [ 55.789964][ T4560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.815222][ T4560] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.843196][ T4570] __nla_validate_parse: 5 callbacks suppressed [ 55.843214][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 55.899164][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.936479][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 55.999778][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 56.034971][ T4576] loop3: detected capacity change from 0 to 1024 [ 56.053474][ T4580] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.334' sets config #1 [ 56.064320][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.075535][ T4522] syz.2.315 (4522) used greatest stack depth: 6216 bytes left [ 56.084564][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.095337][ T4576] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.106963][ T4547] loop4: detected capacity change from 0 to 164 [ 56.118809][ T4547] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 56.126623][ T4547] netlink: 'syz.4.323': attribute type 17 has an invalid length. [ 56.138293][ T4547] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.156415][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.191991][ T4552] lo speed is unknown, defaulting to 1000 [ 56.225104][ T4595] FAULT_INJECTION: forcing a failure. [ 56.225104][ T4595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.238452][ T4595] CPU: 0 UID: 0 PID: 4595 Comm: syz.2.340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.238513][ T4595] Tainted: [W]=WARN [ 56.238521][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.238537][ T4595] Call Trace: [ 56.238546][ T4595] [ 56.238557][ T4595] __dump_stack+0x1d/0x30 [ 56.238582][ T4595] dump_stack_lvl+0xe8/0x140 [ 56.238672][ T4595] dump_stack+0x15/0x1b [ 56.238693][ T4595] should_fail_ex+0x265/0x280 [ 56.238719][ T4595] should_fail+0xb/0x20 [ 56.238786][ T4595] should_fail_usercopy+0x1a/0x20 [ 56.238828][ T4595] strncpy_from_user+0x25/0x230 [ 56.238925][ T4595] ? kmem_cache_alloc_noprof+0x186/0x310 [ 56.238960][ T4595] ? getname_flags+0x80/0x3b0 [ 56.239055][ T4595] getname_flags+0xae/0x3b0 [ 56.239089][ T4595] do_readlinkat+0x64/0x320 [ 56.239132][ T4595] __x64_sys_readlinkat+0x51/0x60 [ 56.239213][ T4595] x64_sys_call+0x16b4/0x2ff0 [ 56.239247][ T4595] do_syscall_64+0xd2/0x200 [ 56.239350][ T4595] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.239431][ T4595] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.239480][ T4595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.239506][ T4595] RIP: 0033:0x7f16dda8ebe9 [ 56.239525][ T4595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.239547][ T4595] RSP: 002b:00007f16dc4ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 56.239572][ T4595] RAX: ffffffffffffffda RBX: 00007f16ddcb5fa0 RCX: 00007f16dda8ebe9 [ 56.239618][ T4595] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000007 [ 56.239634][ T4595] RBP: 00007f16dc4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 56.239649][ T4595] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 56.239664][ T4595] R13: 00007f16ddcb6038 R14: 00007f16ddcb5fa0 R15: 00007ffffc8a9018 [ 56.239688][ T4595] [ 56.467183][ T4604] loop2: detected capacity change from 0 to 512 [ 56.475675][ T4602] loop5: detected capacity change from 0 to 2048 [ 56.482822][ T4602] EXT4-fs: dax option not supported [ 56.508191][ T4604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.521453][ T4604] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.558527][ T4612] loop3: detected capacity change from 0 to 256 [ 56.567729][ T4610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.344'. [ 56.569372][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.614692][ T4616] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.347' sets config #1 [ 56.650454][ T4619] loop2: detected capacity change from 0 to 1024 [ 56.662068][ T4619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.689568][ T4619] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.725919][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.766104][ T4631] netlink: 'syz.0.352': attribute type 13 has an invalid length. [ 56.786013][ T4631] 0ªî{X¹¦: left allmulticast mode [ 56.793017][ T4631] 0ªî{X¹¦: refused to change device tx_queue_len [ 56.800245][ T4631] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.804914][ T4640] loop3: detected capacity change from 0 to 512 [ 56.838730][ T4643] loop2: detected capacity change from 0 to 128 [ 56.852502][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.867087][ T4640] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.882873][ T4648] loop4: detected capacity change from 0 to 512 [ 56.897876][ T4650] loop2: detected capacity change from 0 to 512 [ 56.905271][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.906067][ T4647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.358'. [ 56.914763][ T4648] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.932648][ T4648] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.941270][ T4648] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.355: corrupted inode contents [ 56.958445][ T4648] EXT4-fs (loop4): Remounting filesystem read-only [ 56.960143][ T4650] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.973157][ T4650] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.979914][ T4648] EXT4-fs (loop4): 1 truncate cleaned up [ 56.986942][ T405] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.997613][ T405] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 56.999149][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.359: corrupted inode contents [ 57.020508][ T4650] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.359: mark_inode_dirty error [ 57.032037][ T405] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.037869][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.359: corrupted inode contents [ 57.043429][ T4648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.056954][ T4650] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.359: mark_inode_dirty error [ 57.079512][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.359: corrupted inode contents [ 57.094224][ T4650] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 57.101258][ T4656] batman_adv: batadv0: Adding interface: ipvlan2 [ 57.103590][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.359: corrupted inode contents [ 57.109160][ T4656] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.123106][ T4650] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.359: mark_inode_dirty error [ 57.146297][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.146321][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.159252][ T4650] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 57.188221][ T4656] batman_adv: batadv0: Interface activated: ipvlan2 [ 57.189963][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.197914][ T4650] EXT4-fs (loop2): 1 truncate cleaned up [ 57.211337][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 57.243249][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.258880][ T4663] loop5: detected capacity change from 0 to 1024 [ 57.264920][ T4666] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.362' sets config #1 [ 57.278313][ T4665] loop3: detected capacity change from 0 to 2048 [ 57.295270][ T4663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.296136][ T4670] tls_set_device_offload_rx: netdev not found [ 57.322821][ T4665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.335003][ T4663] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.335470][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.371782][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.391217][ T4676] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 57.427557][ T4679] loop4: detected capacity change from 0 to 512 [ 57.441738][ T4683] loop2: detected capacity change from 0 to 512 [ 57.443998][ T3302] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad extended attribute block 3724 [ 57.463160][ T3302] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad extended attribute block 3724 [ 57.464001][ T4679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.489185][ T4683] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.490040][ T4679] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.506312][ T4683] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.366: inode #218103808: comm syz.2.366: iget: illegal inode # [ 57.522867][ T4657] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.533702][ T4683] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.366: Bad quota inode: 218103808, type: 2 [ 57.552689][ T4657] bond0: (slave syz_tun): Releasing backup interface [ 57.559661][ T4683] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 57.577255][ T4683] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 57.579540][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.584838][ T4683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.606691][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.369'. [ 57.618552][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.626704][ T4683] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 57.639745][ T4683] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.366: inode #218103808: comm syz.2.366: iget: illegal inode # [ 57.655126][ T4683] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.366: Bad quota inode: 218103808, type: 2 [ 57.668609][ T4683] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 57.668998][ T31] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.704048][ T4696] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.366: iget: bad i_size value: 360287970189639690 [ 57.750878][ T31] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.764792][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.798894][ T4709] tls_set_device_offload_rx: netdev not found [ 57.805256][ T4707] loop2: detected capacity change from 0 to 512 [ 57.816614][ T31] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.833818][ T4707] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.844469][ T4707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.856520][ T4699] lo speed is unknown, defaulting to 1000 [ 57.863604][ T4715] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.378' sets config #1 [ 57.878490][ T4707] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.376: corrupted inode contents [ 57.878907][ T31] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.892042][ T4707] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.376: mark_inode_dirty error [ 57.912383][ T4707] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.376: corrupted inode contents [ 57.924818][ T4707] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.376: mark_inode_dirty error [ 57.937855][ T4707] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.376: corrupted inode contents [ 57.957029][ T4707] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 57.977290][ T4707] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.376: corrupted inode contents [ 57.989811][ T4720] loop4: detected capacity change from 0 to 1024 [ 57.994347][ T4699] chnl_net:caif_netlink_parms(): no params data found [ 58.003320][ T4720] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 58.013304][ T4707] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.376: mark_inode_dirty error [ 58.019440][ T4720] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.034095][ T4707] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 58.036808][ T4720] EXT4-fs (loop4): invalid journal inode [ 58.044017][ T4707] EXT4-fs (loop2): 1 truncate cleaned up [ 58.055243][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 58.068359][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.115720][ T4726] loop2: detected capacity change from 0 to 1024 [ 58.128468][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.138680][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.152370][ T31] bond0 (unregistering): (slave team0): Releasing backup interface [ 58.161949][ T4726] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.162008][ T31] bond0 (unregistering): Released all slaves [ 58.192167][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.199497][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.206799][ T4699] bridge_slave_0: entered allmulticast mode [ 58.213375][ T4699] bridge_slave_0: entered promiscuous mode [ 58.220705][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.227789][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.235801][ T4699] bridge_slave_1: entered allmulticast mode [ 58.242548][ T4699] bridge_slave_1: entered promiscuous mode [ 58.248844][ T31] tipc: Left network mode [ 58.267111][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 58.267129][ T29] audit: type=1400 audit(1756045478.160:1504): avc: denied { create } for pid=4731 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.270277][ T4732] loop2: detected capacity change from 0 to 128 [ 58.273487][ T29] audit: type=1400 audit(1756045478.160:1505): avc: denied { connect } for pid=4731 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.299862][ T4732] syz.2.381: attempt to access beyond end of device [ 58.299862][ T4732] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 58.327089][ T29] audit: type=1326 audit(1756045478.190:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.355758][ T29] audit: type=1326 audit(1756045478.190:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.379134][ T29] audit: type=1326 audit(1756045478.190:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.399165][ T4732] syz.2.381: attempt to access beyond end of device [ 58.399165][ T4732] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 58.402735][ T29] audit: type=1326 audit(1756045478.190:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.439378][ T29] audit: type=1326 audit(1756045478.190:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.444699][ T4732] syz.2.381: attempt to access beyond end of device [ 58.444699][ T4732] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 58.463003][ T29] audit: type=1326 audit(1756045478.190:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.500097][ T29] audit: type=1326 audit(1756045478.230:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.523533][ T29] audit: type=1326 audit(1756045478.230:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 58.553117][ T4732] syz.2.381: attempt to access beyond end of device [ 58.553117][ T4732] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 58.566895][ T4732] syz.2.381: attempt to access beyond end of device [ 58.566895][ T4732] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 58.582341][ T4699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.591831][ T4732] syz.2.381: attempt to access beyond end of device [ 58.591831][ T4732] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 58.602914][ T4733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.381'. [ 58.605314][ T4732] syz.2.381: attempt to access beyond end of device [ 58.605314][ T4732] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 58.630997][ T4736] loop5: detected capacity change from 0 to 512 [ 58.631183][ T31] hsr_slave_0: left promiscuous mode [ 58.638070][ T4732] syz.2.381: attempt to access beyond end of device [ 58.638070][ T4732] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 58.656091][ T31] hsr_slave_1: left promiscuous mode [ 58.656272][ T4732] syz.2.381: attempt to access beyond end of device [ 58.656272][ T4732] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 58.668099][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.675033][ T4732] syz.2.381: attempt to access beyond end of device [ 58.675033][ T4732] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 58.682246][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.718262][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.725917][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.734242][ T31] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 58.741177][ T31] batman_adv: batadv0: Removing interface: ipvlan2 [ 58.748404][ T4736] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.764813][ T31] veth1_macvtap: left promiscuous mode [ 58.770574][ T31] veth0_macvtap: left promiscuous mode [ 58.776134][ T31] veth1_vlan: left promiscuous mode [ 58.781478][ T31] veth0_vlan: left promiscuous mode [ 58.816967][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.385'. [ 58.849855][ T4743] netlink: 84 bytes leftover after parsing attributes in process `syz.5.385'. [ 58.918202][ T31] team0 (unregistering): Port device team_slave_1 removed [ 58.930964][ T31] team0 (unregistering): Port device team_slave_0 removed [ 58.966333][ T31] team0 (unregistering): Port device dummy0 removed [ 58.985024][ T4699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.994207][ T4741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.384'. [ 59.015327][ T4752] tls_set_device_offload_rx: netdev not found [ 59.052931][ T4699] team0: Port device team_slave_0 added [ 59.061756][ T4699] team0: Port device team_slave_1 added [ 59.075332][ T4754] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.389' sets config #1 [ 59.093587][ T4756] loop2: detected capacity change from 0 to 512 [ 59.102012][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.109014][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.135682][ T4699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.148538][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.155590][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.181965][ T4699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.199679][ T4756] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 59.213239][ T4756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.233453][ T4756] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.390: corrupted inode contents [ 59.250721][ T4699] hsr_slave_0: entered promiscuous mode [ 59.252135][ T4756] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.390: mark_inode_dirty error [ 59.267350][ T4699] hsr_slave_1: entered promiscuous mode [ 59.268343][ T4756] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.390: corrupted inode contents [ 59.276259][ T4699] debugfs: 'hsr0' already exists in 'hsr' [ 59.290904][ T4699] Cannot create hsr debugfs directory [ 59.303841][ T4756] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.390: mark_inode_dirty error [ 59.361313][ T4756] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.390: corrupted inode contents [ 59.385209][ T4756] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 59.399324][ T4756] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.390: corrupted inode contents [ 59.415833][ T4756] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.390: mark_inode_dirty error [ 59.451529][ T4699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.467013][ T4756] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 59.467444][ T4699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.486476][ T4756] EXT4-fs (loop2): 1 truncate cleaned up [ 59.492502][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 59.514449][ T4699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.535004][ T4699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.553797][ T4769] loop2: detected capacity change from 0 to 512 [ 59.583842][ T4769] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.614927][ T4699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.655681][ T4773] lo speed is unknown, defaulting to 1000 [ 59.692300][ T4699] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.711267][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.718428][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.741853][ T4699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.752371][ T4699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.770279][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.777795][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.842953][ T4699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.008250][ T4699] veth0_vlan: entered promiscuous mode [ 60.018603][ T4699] veth1_vlan: entered promiscuous mode [ 60.038003][ T4699] veth0_macvtap: entered promiscuous mode [ 60.047130][ T4699] veth1_macvtap: entered promiscuous mode [ 60.064907][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.079606][ T4808] tls_set_device_offload_rx: netdev not found [ 60.079973][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.100644][ T290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.111271][ T290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.136121][ T4812] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.401' sets config #1 [ 60.137717][ T290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.154430][ T290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.209544][ T4818] lo speed is unknown, defaulting to 1000 [ 60.429198][ T4834] loop4: detected capacity change from 0 to 8192 [ 60.503103][ T4843] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.415' sets config #1 [ 60.506952][ T4847] netlink: 'syz.4.414': attribute type 7 has an invalid length. [ 60.520063][ T4841] tls_set_device_offload_rx: netdev not found [ 60.580037][ T4853] loop6: detected capacity change from 0 to 512 [ 60.603697][ T4853] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.834186][ T4881] tls_set_device_offload_rx: netdev not found [ 60.865553][ T4883] __nla_validate_parse: 6 callbacks suppressed [ 60.865572][ T4883] netlink: 132 bytes leftover after parsing attributes in process `syz.6.428'. [ 60.899548][ T4885] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.429' sets config #1 [ 61.538908][ T4908] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 61.569664][ T4911] tls_set_device_offload_rx: netdev not found [ 61.582739][ T4908] bond2: entered promiscuous mode [ 61.588242][ T4908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.606496][ T4913] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.441' sets config #1 [ 61.665364][ T4916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.442'. [ 62.195968][ T4939] tls_set_device_offload_rx: netdev not found [ 62.384087][ T4951] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.455' sets config #1 [ 62.408595][ T4953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.456'. [ 62.514869][ T4960] rdma_op ffff88811d590180 conn xmit_rdma 0000000000000000 [ 62.556272][ T4961] vhci_hcd: invalid port number 129 [ 62.561569][ T4961] vhci_hcd: default hub control req: 0200 v0005 i0081 l0 [ 62.833143][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 62.881125][ T4970] loop2: detected capacity change from 0 to 2048 [ 63.141548][ T4984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.468'. [ 63.326294][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 63.326311][ T29] audit: type=1400 audit(1756045483.220:1747): avc: denied { firmware_load } for pid=4990 comm="syz.2.471" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 63.368101][ T4992] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 63.377693][ T4992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 63.403031][ T29] audit: type=1400 audit(1756045483.270:1748): avc: denied { remount } for pid=4994 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.422856][ T29] audit: type=1400 audit(1756045483.300:1749): avc: denied { block_suspend } for pid=4997 comm="syz.0.473" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.447778][ T5002] syzkaller0: refused to change device tx_queue_len [ 63.454786][ T4998] syzkaller0: refused to change device tx_queue_len [ 63.497493][ T29] audit: type=1400 audit(1756045483.390:1750): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.521611][ T29] audit: type=1326 audit(1756045483.420:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5003 comm="syz.2.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x0 [ 63.521700][ T5000] loop6: detected capacity change from 0 to 512 [ 63.556606][ T5000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 63.581686][ T5000] EXT4-fs (loop6): 1 truncate cleaned up [ 63.628322][ T29] audit: type=1400 audit(1756045483.520:1752): avc: denied { name_bind } for pid=5011 comm="syz.4.479" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.662765][ T5016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.480'. [ 63.679744][ T29] audit: type=1400 audit(1756045483.520:1753): avc: denied { create } for pid=5011 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.699431][ T29] audit: type=1326 audit(1756045483.530:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5011 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd06d0ebe9 code=0x7ffc0000 [ 63.722826][ T29] audit: type=1326 audit(1756045483.530:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5011 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efd06d0ebe9 code=0x7ffc0000 [ 63.746219][ T29] audit: type=1400 audit(1756045483.530:1756): avc: denied { connect } for pid=5011 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.771581][ T5014] tmpfs: Unknown parameter 'iÇ ' [ 63.873080][ T5027] loop4: detected capacity change from 0 to 1024 [ 63.894974][ T5027] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.951528][ T5039] loop4: detected capacity change from 0 to 1024 [ 64.017253][ T5046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.492'. [ 64.097767][ T5049] loop6: detected capacity change from 0 to 512 [ 64.148395][ T5049] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.187023][ T5067] tls_set_device_offload_rx: netdev not found [ 64.193564][ T5065] loop5: detected capacity change from 0 to 1024 [ 64.213390][ T5065] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.231825][ T5074] netlink: 830 bytes leftover after parsing attributes in process `syz.6.493'. [ 64.282147][ T5084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.506'. [ 64.370739][ T5090] loop4: detected capacity change from 0 to 512 [ 64.402100][ T5090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.428361][ T5090] EXT4-fs (loop4): 1 truncate cleaned up [ 64.529028][ T5103] tls_set_device_offload_rx: netdev not found [ 64.532549][ T5104] loop2: detected capacity change from 0 to 1024 [ 64.565344][ T5104] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.602647][ T5114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.518'. [ 64.659467][ T5123] geneve2: entered promiscuous mode [ 64.664736][ T5123] geneve2: entered allmulticast mode [ 64.673620][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53952 - 0 [ 64.682634][ T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 59171 - 0 [ 64.694451][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53952 - 0 [ 64.703428][ T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 59171 - 0 [ 64.714750][ T5123] FAULT_INJECTION: forcing a failure. [ 64.714750][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.714780][ T5123] CPU: 1 UID: 0 PID: 5123 Comm: syz.2.522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.714870][ T5123] Tainted: [W]=WARN [ 64.714930][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.714947][ T5123] Call Trace: [ 64.714955][ T5123] [ 64.714963][ T5123] __dump_stack+0x1d/0x30 [ 64.714990][ T5123] dump_stack_lvl+0xe8/0x140 [ 64.715011][ T5123] dump_stack+0x15/0x1b [ 64.715050][ T5123] should_fail_ex+0x265/0x280 [ 64.715079][ T5123] should_fail+0xb/0x20 [ 64.715101][ T5123] should_fail_usercopy+0x1a/0x20 [ 64.715133][ T5123] _copy_from_iter+0xd2/0xe80 [ 64.715166][ T5123] ? __build_skb_around+0x1a0/0x200 [ 64.715291][ T5123] ? __alloc_skb+0x223/0x320 [ 64.715372][ T5123] netlink_sendmsg+0x471/0x6b0 [ 64.715449][ T5123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.715479][ T5123] __sock_sendmsg+0x145/0x180 [ 64.715519][ T5123] ____sys_sendmsg+0x345/0x4e0 [ 64.715553][ T5123] ___sys_sendmsg+0x17b/0x1d0 [ 64.715603][ T5123] __sys_sendmmsg+0x178/0x300 [ 64.715724][ T5123] __x64_sys_sendmmsg+0x57/0x70 [ 64.715754][ T5123] x64_sys_call+0x1c4a/0x2ff0 [ 64.715852][ T5123] do_syscall_64+0xd2/0x200 [ 64.715957][ T5123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.715990][ T5123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.716036][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.716064][ T5123] RIP: 0033:0x7f16dda8ebe9 [ 64.716084][ T5123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.716107][ T5123] RSP: 002b:00007f16dc4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.716132][ T5123] RAX: ffffffffffffffda RBX: 00007f16ddcb5fa0 RCX: 00007f16dda8ebe9 [ 64.716213][ T5123] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000e [ 64.716230][ T5123] RBP: 00007f16dc4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 64.716246][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.716263][ T5123] R13: 00007f16ddcb6038 R14: 00007f16ddcb5fa0 R15: 00007ffffc8a9018 [ 64.716351][ T5123] [ 64.716431][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53952 - 0 [ 64.946904][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 59171 - 0 [ 64.947117][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53952 - 0 [ 64.964585][ T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 59171 - 0 [ 65.088744][ T5138] tls_set_device_offload_rx: netdev not found [ 65.113589][ T5140] loop5: detected capacity change from 0 to 1024 [ 65.132900][ T5136] geneve2: entered promiscuous mode [ 65.138241][ T5136] geneve2: entered allmulticast mode [ 65.147790][ T5140] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.157657][ T51] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 42705 - 0 [ 65.166696][ T51] netdevsim netdevsim6 netdevsim0: set [1, 2] type 2 family 0 port 52669 - 0 [ 65.175889][ T51] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 42705 - 0 [ 65.184947][ T51] netdevsim netdevsim6 netdevsim1: set [1, 2] type 2 family 0 port 52669 - 0 [ 65.202340][ T51] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 42705 - 0 [ 65.211315][ T51] netdevsim netdevsim6 netdevsim2: set [1, 2] type 2 family 0 port 52669 - 0 [ 65.220460][ T51] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 42705 - 0 [ 65.229311][ T51] netdevsim netdevsim6 netdevsim3: set [1, 2] type 2 family 0 port 52669 - 0 [ 65.378426][ T5176] lo speed is unknown, defaulting to 1000 [ 65.497918][ T5182] syzkaller0: entered promiscuous mode [ 65.502915][ T5184] loop6: detected capacity change from 0 to 1024 [ 65.504116][ T5182] syzkaller0: entered allmulticast mode [ 65.528246][ T5182] FAULT_INJECTION: forcing a failure. [ 65.528246][ T5182] name failslab, interval 1, probability 0, space 0, times 0 [ 65.541002][ T5182] CPU: 0 UID: 0 PID: 5182 Comm: syz.4.542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.541039][ T5182] Tainted: [W]=WARN [ 65.541045][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.541056][ T5182] Call Trace: [ 65.541062][ T5182] [ 65.541069][ T5182] __dump_stack+0x1d/0x30 [ 65.541179][ T5182] dump_stack_lvl+0xe8/0x140 [ 65.541248][ T5182] dump_stack+0x15/0x1b [ 65.541278][ T5182] should_fail_ex+0x265/0x280 [ 65.541297][ T5182] should_failslab+0x8c/0xb0 [ 65.541319][ T5182] __kmalloc_noprof+0xa5/0x3e0 [ 65.541420][ T5182] ? nsim_fib_event_nb+0x246/0xcb0 [ 65.541448][ T5182] nsim_fib_event_nb+0x246/0xcb0 [ 65.541468][ T5182] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 65.541487][ T5182] atomic_notifier_call_chain+0x76/0x1c0 [ 65.541596][ T5182] call_fib_notifiers+0x65/0xa0 [ 65.541621][ T5182] call_fib6_notifiers+0x30/0x40 [ 65.541640][ T5182] fib6_del+0x749/0x8b0 [ 65.541665][ T5182] ? fib6_del+0x301/0x8b0 [ 65.541755][ T5182] fib6_clean_node+0x167/0x280 [ 65.541784][ T5182] fib6_walk_continue+0x39c/0x440 [ 65.541838][ T5182] fib6_walk+0xc5/0x180 [ 65.541870][ T5182] ? __pfx_fib6_ifdown+0x10/0x10 [ 65.541886][ T5182] fib6_clean_all+0xca/0x140 [ 65.541913][ T5182] ? __pfx_fib6_clean_node+0x10/0x10 [ 65.542013][ T5182] ? __pfx_fib6_ifdown+0x10/0x10 [ 65.542057][ T5182] rt6_disable_ip+0xa6/0x580 [ 65.542128][ T5182] ? netlink_broadcast_filtered+0xbf4/0xc60 [ 65.542224][ T5182] addrconf_ifdown+0xa6/0xf30 [ 65.542279][ T5182] ? __pfx_tun_device_event+0x10/0x10 [ 65.542306][ T5182] ? tun_device_event+0x1ef/0x980 [ 65.542405][ T5182] ? __pfx_cbs_dev_notifier+0x10/0x10 [ 65.542425][ T5182] ? tls_dev_event+0x3d7/0x910 [ 65.542443][ T5182] addrconf_notify+0x222/0x930 [ 65.542460][ T5182] ? __pfx_addrconf_notify+0x10/0x10 [ 65.542533][ T5182] raw_notifier_call_chain+0x6c/0x1b0 [ 65.542549][ T5182] ? call_netdevice_notifiers_info+0x9c/0x100 [ 65.542646][ T5182] call_netdevice_notifiers_info+0xae/0x100 [ 65.542740][ T5182] netif_set_mtu_ext+0x356/0x470 [ 65.542770][ T5182] netif_set_mtu+0x4a/0xf0 [ 65.542802][ T5182] dev_set_mtu+0xc1/0x170 [ 65.542846][ T5182] dev_ifsioc+0x474/0xaa0 [ 65.542866][ T5182] ? __rcu_read_unlock+0x4f/0x70 [ 65.542884][ T5182] dev_ioctl+0x70a/0x960 [ 65.542904][ T5182] sock_do_ioctl+0x197/0x220 [ 65.542928][ T5182] sock_ioctl+0x41b/0x610 [ 65.542983][ T5182] ? __pfx_sock_ioctl+0x10/0x10 [ 65.543010][ T5182] __se_sys_ioctl+0xcb/0x140 [ 65.543039][ T5182] __x64_sys_ioctl+0x43/0x50 [ 65.543118][ T5182] x64_sys_call+0x1816/0x2ff0 [ 65.543139][ T5182] do_syscall_64+0xd2/0x200 [ 65.543238][ T5182] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.543262][ T5182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.543281][ T5182] RIP: 0033:0x7efd06d0ebe9 [ 65.543302][ T5182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.543317][ T5182] RSP: 002b:00007efd0576f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.543333][ T5182] RAX: ffffffffffffffda RBX: 00007efd06f35fa0 RCX: 00007efd06d0ebe9 [ 65.543344][ T5182] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 65.543354][ T5182] RBP: 00007efd0576f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.543364][ T5182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.543445][ T5182] R13: 00007efd06f36038 R14: 00007efd06f35fa0 R15: 00007ffdbf486b68 [ 65.543513][ T5182] [ 65.544753][ T5184] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.921756][ T5188] FAULT_INJECTION: forcing a failure. [ 65.921756][ T5188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.934980][ T5188] CPU: 0 UID: 0 PID: 5188 Comm: syz.6.544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.935060][ T5188] Tainted: [W]=WARN [ 65.935068][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.935084][ T5188] Call Trace: [ 65.935092][ T5188] [ 65.935100][ T5188] __dump_stack+0x1d/0x30 [ 65.935124][ T5188] dump_stack_lvl+0xe8/0x140 [ 65.935181][ T5188] dump_stack+0x15/0x1b [ 65.935197][ T5188] should_fail_ex+0x265/0x280 [ 65.935217][ T5188] should_fail+0xb/0x20 [ 65.935255][ T5188] should_fail_usercopy+0x1a/0x20 [ 65.935278][ T5188] _copy_from_user+0x1c/0xb0 [ 65.935428][ T5188] __copy_msghdr+0x244/0x300 [ 65.935460][ T5188] ___sys_sendmsg+0x109/0x1d0 [ 65.935504][ T5188] __x64_sys_sendmsg+0xd4/0x160 [ 65.935536][ T5188] x64_sys_call+0x191e/0x2ff0 [ 65.935648][ T5188] do_syscall_64+0xd2/0x200 [ 65.935673][ T5188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.935695][ T5188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 65.935756][ T5188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.935852][ T5188] RIP: 0033:0x7f031367ebe9 [ 65.935865][ T5188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.935880][ T5188] RSP: 002b:00007f03120df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.935896][ T5188] RAX: ffffffffffffffda RBX: 00007f03138a5fa0 RCX: 00007f031367ebe9 [ 65.935958][ T5188] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 65.935968][ T5188] RBP: 00007f03120df090 R08: 0000000000000000 R09: 0000000000000000 [ 65.935980][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.935990][ T5188] R13: 00007f03138a6038 R14: 00007f03138a5fa0 R15: 00007ffe4315f108 [ 65.936007][ T5188] [ 66.164712][ T5196] __nla_validate_parse: 4 callbacks suppressed [ 66.164824][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.549'. [ 66.196075][ T5198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'. [ 66.204134][ T5196] loop5: detected capacity change from 0 to 2048 [ 66.251147][ T5196] FAULT_INJECTION: forcing a failure. [ 66.251147][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 66.264039][ T5196] CPU: 1 UID: 0 PID: 5196 Comm: syz.5.549 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.264071][ T5196] Tainted: [W]=WARN [ 66.264077][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.264114][ T5196] Call Trace: [ 66.264123][ T5196] [ 66.264132][ T5196] __dump_stack+0x1d/0x30 [ 66.264152][ T5196] dump_stack_lvl+0xe8/0x140 [ 66.264174][ T5196] dump_stack+0x15/0x1b [ 66.264202][ T5196] should_fail_ex+0x265/0x280 [ 66.264228][ T5196] should_failslab+0x8c/0xb0 [ 66.264308][ T5196] kmem_cache_alloc_node_noprof+0x57/0x320 [ 66.264345][ T5196] ? __alloc_skb+0x101/0x320 [ 66.264432][ T5196] __alloc_skb+0x101/0x320 [ 66.264518][ T5196] ? audit_log_start+0x365/0x6c0 [ 66.264547][ T5196] audit_log_start+0x380/0x6c0 [ 66.264574][ T5196] ? should_failslab+0x8c/0xb0 [ 66.264601][ T5196] ? __kmalloc_cache_noprof+0x189/0x320 [ 66.264646][ T5196] audit_seccomp+0x48/0x100 [ 66.264670][ T5196] ? __seccomp_filter+0x68c/0x10d0 [ 66.264694][ T5196] __seccomp_filter+0x69d/0x10d0 [ 66.264722][ T5196] ? __se_sys_keyctl+0x120/0xb80 [ 66.264828][ T5196] __secure_computing+0x82/0x150 [ 66.264847][ T5196] syscall_trace_enter+0xcf/0x1e0 [ 66.264881][ T5196] do_syscall_64+0xac/0x200 [ 66.264992][ T5196] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.265015][ T5196] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.265043][ T5196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.265108][ T5196] RIP: 0033:0x7f486bfed5fc [ 66.265126][ T5196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.265145][ T5196] RSP: 002b:00007f486aa4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.265164][ T5196] RAX: ffffffffffffffda RBX: 00007f486c215fa0 RCX: 00007f486bfed5fc [ 66.265176][ T5196] RDX: 000000000000000f RSI: 00007f486aa4f0a0 RDI: 0000000000000003 [ 66.265207][ T5196] RBP: 00007f486aa4f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.265220][ T5196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.265235][ T5196] R13: 00007f486c216038 R14: 00007f486c215fa0 R15: 00007ffd44d38e08 [ 66.265261][ T5196] [ 66.536813][ T5218] tls_set_device_offload_rx: netdev not found [ 66.601879][ T5222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.762294][ T5225] netlink: 'syz.6.558': attribute type 13 has an invalid length. [ 66.826439][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.560'. [ 66.907610][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.914910][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.096502][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.115655][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.159126][ T5235] loop5: detected capacity change from 0 to 512 [ 67.272152][ T5247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'. [ 67.296046][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.303266][ T5235] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.305110][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 42705 - 0 [ 67.305147][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 2] type 2 family 0 port 52669 - 0 [ 67.344697][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.353774][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 42705 - 0 [ 67.362878][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 2] type 2 family 0 port 52669 - 0 [ 67.405579][ T5252] FAULT_INJECTION: forcing a failure. [ 67.405579][ T5252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.419005][ T5252] CPU: 1 UID: 0 PID: 5252 Comm: syz.4.564 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.419051][ T5252] Tainted: [W]=WARN [ 67.419104][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.419121][ T5252] Call Trace: [ 67.419128][ T5252] [ 67.419139][ T5252] __dump_stack+0x1d/0x30 [ 67.419167][ T5252] dump_stack_lvl+0xe8/0x140 [ 67.419195][ T5252] dump_stack+0x15/0x1b [ 67.419221][ T5252] should_fail_ex+0x265/0x280 [ 67.419249][ T5252] should_fail_alloc_page+0xf2/0x100 [ 67.419280][ T5252] __alloc_frozen_pages_noprof+0xff/0x360 [ 67.419335][ T5252] alloc_pages_mpol+0xb3/0x250 [ 67.419421][ T5252] vma_alloc_folio_noprof+0x1aa/0x300 [ 67.419464][ T5252] handle_mm_fault+0xec2/0x2c20 [ 67.419507][ T5252] do_user_addr_fault+0x636/0x1090 [ 67.419586][ T5252] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 67.419625][ T5252] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 67.419666][ T5252] exc_page_fault+0x62/0xa0 [ 67.419720][ T5252] asm_exc_page_fault+0x26/0x30 [ 67.419745][ T5252] RIP: 0033:0x7efd06bd0ba3 [ 67.419764][ T5252] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 67.419790][ T5252] RSP: 002b:00007efd0576e4a0 EFLAGS: 00010202 [ 67.419810][ T5252] RAX: 0000000000013002 RBX: 00007efd0576e540 RCX: 00007efcfd34f000 [ 67.419826][ T5252] RDX: 00007efd0576e6e0 RSI: 0000000000000000 RDI: 00007efd0576e5e0 [ 67.419930][ T5252] RBP: 00000000000000d9 R08: 0000000000000007 R09: 000000000000003c [ 67.419946][ T5252] R10: 0000000000000050 R11: 00007efd0576e540 R12: 0000000000000001 [ 67.419962][ T5252] R13: 00007efd06dada20 R14: 0000000000000002 R15: 00007efd0576e5e0 [ 67.419987][ T5252] [ 67.595555][ T5252] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 67.599541][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.611992][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 42705 - 0 [ 67.621124][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 2] type 2 family 0 port 52669 - 0 [ 67.634636][ T5252] loop4: detected capacity change from 0 to 512 [ 67.642067][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.643028][ T5254] netlink: 'syz.6.565': attribute type 10 has an invalid length. [ 67.651163][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 42705 - 0 [ 67.668100][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 2] type 2 family 0 port 52669 - 0 [ 67.679441][ T5252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.694274][ T5254] team0: Device hsr_slave_0 failed to register rx_handler [ 67.702742][ T5258] netlink: 830 bytes leftover after parsing attributes in process `syz.5.561'. [ 67.712251][ T5252] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.564: Failed to acquire dquot type 1 [ 67.749747][ T5252] EXT4-fs (loop4): 1 truncate cleaned up [ 67.757760][ T5267] FAULT_INJECTION: forcing a failure. [ 67.757760][ T5267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.771043][ T5267] CPU: 1 UID: 0 PID: 5267 Comm: syz.0.568 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.771075][ T5267] Tainted: [W]=WARN [ 67.771081][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.771167][ T5267] Call Trace: [ 67.771174][ T5267] [ 67.771183][ T5267] __dump_stack+0x1d/0x30 [ 67.771208][ T5267] dump_stack_lvl+0xe8/0x140 [ 67.771230][ T5267] dump_stack+0x15/0x1b [ 67.771245][ T5267] should_fail_ex+0x265/0x280 [ 67.771299][ T5267] should_fail+0xb/0x20 [ 67.771321][ T5267] should_fail_usercopy+0x1a/0x20 [ 67.771344][ T5267] _copy_to_user+0x20/0xa0 [ 67.771441][ T5267] simple_read_from_buffer+0xb5/0x130 [ 67.771468][ T5267] proc_fail_nth_read+0x10e/0x150 [ 67.771504][ T5267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.771531][ T5267] vfs_read+0x1a8/0x770 [ 67.771597][ T5267] ? __rcu_read_unlock+0x4f/0x70 [ 67.771624][ T5267] ? __fget_files+0x184/0x1c0 [ 67.771658][ T5267] ksys_read+0xda/0x1a0 [ 67.771745][ T5267] __x64_sys_read+0x40/0x50 [ 67.771766][ T5267] x64_sys_call+0x27bc/0x2ff0 [ 67.771786][ T5267] do_syscall_64+0xd2/0x200 [ 67.771812][ T5267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.771879][ T5267] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.771911][ T5267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.771933][ T5267] RIP: 0033:0x7fbdae8ed5fc [ 67.771963][ T5267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 67.771981][ T5267] RSP: 002b:00007fbdad357030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.772037][ T5267] RAX: ffffffffffffffda RBX: 00007fbdaeb15fa0 RCX: 00007fbdae8ed5fc [ 67.772051][ T5267] RDX: 000000000000000f RSI: 00007fbdad3570a0 RDI: 0000000000000007 [ 67.772066][ T5267] RBP: 00007fbdad357090 R08: 0000000000000000 R09: 0000000000000000 [ 67.772077][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.772094][ T5267] R13: 00007fbdaeb16038 R14: 00007fbdaeb15fa0 R15: 00007ffc5e582218 [ 67.772116][ T5267] [ 68.002413][ T5271] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 68.146468][ T5283] sch_fq: defrate 0 ignored. [ 68.156708][ T5299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.577'. [ 68.232807][ T5283] lo speed is unknown, defaulting to 1000 [ 68.240530][ T5311] netlink: 7 bytes leftover after parsing attributes in process `syz.0.580'. [ 68.267108][ T5311] netlink: 7 bytes leftover after parsing attributes in process `syz.0.580'. [ 68.275314][ T5313] can0: slcan on ttyS3. [ 68.368140][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 68.368157][ T29] audit: type=1326 audit(1756045488.250:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 68.374584][ T5312] can0 (unregistered): slcan off ttyS3. [ 68.397855][ T29] audit: type=1326 audit(1756045488.250:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16dda8ebe9 code=0x7ffc0000 [ 68.426818][ T29] audit: type=1400 audit(1756045488.260:2183): avc: denied { write } for pid=5321 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.446952][ T29] audit: type=1400 audit(1756045488.260:2184): avc: denied { nlmsg_write } for pid=5321 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.478957][ T5325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.585'. [ 68.492125][ T5322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 68.527052][ T29] audit: type=1400 audit(1756045488.420:2185): avc: denied { read append } for pid=5327 comm="syz.0.587" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.551371][ T29] audit: type=1400 audit(1756045488.420:2186): avc: denied { open } for pid=5327 comm="syz.0.587" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.575300][ T29] audit: type=1400 audit(1756045488.420:2187): avc: denied { ioctl } for pid=5327 comm="syz.0.587" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.608745][ T29] audit: type=1400 audit(1756045488.500:2188): avc: denied { connect } for pid=5333 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.629127][ T29] audit: type=1400 audit(1756045488.500:2189): avc: denied { name_connect } for pid=5333 comm="syz.0.589" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.658357][ T5331] netlink: 'syz.2.588': attribute type 32 has an invalid length. [ 68.673831][ T29] audit: type=1400 audit(1756045488.570:2190): avc: denied { create } for pid=5333 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.693963][ T5331] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 68.789983][ T5343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5343 comm=syz.2.592 [ 71.684010][ T5367] __nla_validate_parse: 2 callbacks suppressed [ 71.684029][ T5367] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 72.055445][ T5396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 72.112146][ T5419] siw: device registration error -23 [ 72.148138][ T5420] delete_channel: no stack [ 72.169582][ T5426] netlink: 56 bytes leftover after parsing attributes in process `syz.4.615'. [ 72.206719][ T5428] tipc: Enabled bearer , priority 0 [ 72.217147][ T5428] tipc: Disabling bearer [ 72.350109][ T5459] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 72.357908][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 72.450630][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.6.629'. [ 72.468549][ T5472] tmpfs: Bad value for 'nr_inodes' [ 72.478258][ T5460] netem: change failed [ 72.531161][ T5477] loop6: detected capacity change from 0 to 512 [ 72.540688][ T5477] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.552146][ T5480] pimreg: entered allmulticast mode [ 72.559850][ T5477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 72.574869][ T5477] EXT4-fs (loop6): 1 truncate cleaned up [ 72.581897][ T5477] EXT4-fs mount: 37 callbacks suppressed [ 72.581911][ T5477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.635898][ T4699] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.655259][ T5494] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 72.666824][ T5494] SELinux: failed to load policy [ 72.678862][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 72.702066][ T5503] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 72.768682][ T5526] cgroup: Unknown subsys name 'subj_type' [ 72.802138][ T5537] netlink: 116 bytes leftover after parsing attributes in process `syz.6.644'. [ 72.818984][ T5536] lo speed is unknown, defaulting to 1000 [ 72.847804][ T5528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 72.994507][ T5582] FAULT_INJECTION: forcing a failure. [ 72.994507][ T5582] name failslab, interval 1, probability 0, space 0, times 0 [ 73.007329][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: syz.2.650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.007363][ T5582] Tainted: [W]=WARN [ 73.007369][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.007404][ T5582] Call Trace: [ 73.007413][ T5582] [ 73.007429][ T5582] __dump_stack+0x1d/0x30 [ 73.007456][ T5582] dump_stack_lvl+0xe8/0x140 [ 73.007520][ T5582] dump_stack+0x15/0x1b [ 73.007536][ T5582] should_fail_ex+0x265/0x280 [ 73.007560][ T5582] ? ip_setup_cork+0x176/0x410 [ 73.007594][ T5582] should_failslab+0x8c/0xb0 [ 73.007624][ T5582] __kmalloc_cache_noprof+0x4c/0x320 [ 73.007704][ T5582] ip_setup_cork+0x176/0x410 [ 73.007809][ T5582] ip_append_data+0xf8/0x130 [ 73.007841][ T5582] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 73.007875][ T5582] udp_sendmsg+0x282/0x13c0 [ 73.007953][ T5582] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 73.007987][ T5582] ? __rcu_read_unlock+0x4f/0x70 [ 73.008011][ T5582] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 73.008155][ T5582] ? __pfx_udp_sendmsg+0x10/0x10 [ 73.008187][ T5582] inet_sendmsg+0xac/0xd0 [ 73.008214][ T5582] __sock_sendmsg+0x102/0x180 [ 73.008251][ T5582] ____sys_sendmsg+0x345/0x4e0 [ 73.008280][ T5582] ___sys_sendmsg+0x17b/0x1d0 [ 73.008370][ T5582] __sys_sendmmsg+0x178/0x300 [ 73.008412][ T5582] __x64_sys_sendmmsg+0x57/0x70 [ 73.008500][ T5582] x64_sys_call+0x1c4a/0x2ff0 [ 73.008527][ T5582] do_syscall_64+0xd2/0x200 [ 73.008628][ T5582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.008648][ T5582] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 73.008673][ T5582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.008693][ T5582] RIP: 0033:0x7f16dda8ebe9 [ 73.008706][ T5582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.008823][ T5582] RSP: 002b:00007f16dc4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.008839][ T5582] RAX: ffffffffffffffda RBX: 00007f16ddcb5fa0 RCX: 00007f16dda8ebe9 [ 73.008850][ T5582] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000006 [ 73.008861][ T5582] RBP: 00007f16dc4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 73.008871][ T5582] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 73.008882][ T5582] R13: 00007f16ddcb6038 R14: 00007f16ddcb5fa0 R15: 00007ffffc8a9018 [ 73.008918][ T5582] [ 73.245943][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.259396][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.380064][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bc38c00: rx timeout, send abort [ 73.389292][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bc38a00: rx timeout, send abort [ 73.399034][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bc38c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 73.415034][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bc38a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 73.447435][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 73.447452][ T29] audit: type=1400 audit(1756045493.340:2475): avc: denied { write } for pid=5588 comm="syz.2.652" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.478171][ T29] audit: type=1400 audit(1756045493.340:2476): avc: denied { open } for pid=5588 comm="syz.2.652" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.610705][ T29] audit: type=1400 audit(1756045493.510:2477): avc: denied { create } for pid=5604 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.616593][ T5606] siw: device registration error -23 [ 73.630580][ T29] audit: type=1400 audit(1756045493.510:2478): avc: denied { create } for pid=5605 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.674613][ T5606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 73.705704][ T29] audit: type=1400 audit(1756045493.510:2479): avc: denied { create } for pid=5604 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.725361][ T29] audit: type=1400 audit(1756045493.560:2480): avc: denied { write } for pid=5605 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.744897][ T29] audit: type=1400 audit(1756045493.560:2481): avc: denied { mounton } for pid=5604 comm="syz.2.655" path="/122/file0" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.767586][ T29] audit: type=1400 audit(1756045493.560:2482): avc: denied { connect } for pid=5604 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.796146][ T29] audit: type=1400 audit(1756045493.690:2483): avc: denied { ioctl } for pid=5604 comm="syz.2.655" path="socket:[13159]" dev="sockfs" ino=13159 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.917464][ T5625] bridge_slave_0: left allmulticast mode [ 73.923325][ T5625] bridge_slave_0: left promiscuous mode [ 73.929106][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.937673][ T5625] bridge_slave_1: left allmulticast mode [ 73.943423][ T5625] bridge_slave_1: left promiscuous mode [ 73.949198][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.961416][ T5625] bond0: (slave bond_slave_0): Releasing backup interface [ 73.973260][ T5625] bond0: (slave bond_slave_1): Releasing backup interface [ 73.982779][ T5625] team0: Port device team_slave_0 removed [ 73.998231][ T5625] team0: Port device team_slave_1 removed [ 74.013583][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.050945][ T29] audit: type=1400 audit(1756045493.950:2484): avc: denied { create } for pid=5595 comm="syz.5.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 74.079823][ T5625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.200209][ T5635] netlink: 830 bytes leftover after parsing attributes in process `syz.4.659'. [ 75.352033][ T5735] block device autoloading is deprecated and will be removed. [ 75.433276][ T5737] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 75.440906][ T5737] 0ªî{X¹¦: entered allmulticast mode [ 75.447127][ T5737] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 75.637226][ T5751] loop0: detected capacity change from 0 to 1024 [ 75.645896][ T5751] /dev/loop0: Can't open blockdev [ 75.736951][ T5766] tls_set_device_offload_rx: netdev not found [ 75.991246][ T5790] lo speed is unknown, defaulting to 1000 [ 76.020146][ T5799] tls_set_device_offload_rx: netdev not found [ 76.223662][ T5834] loop0: detected capacity change from 0 to 1024 [ 76.244385][ T5834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.334650][ T5834] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.377659][ T5851] tls_set_device_offload_rx: netdev not found [ 76.387025][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.940028][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.969449][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.989959][ T5888] netlink: 'syz.6.744': attribute type 13 has an invalid length. [ 76.997769][ T5888] __nla_validate_parse: 5 callbacks suppressed [ 76.997786][ T5888] netlink: 172 bytes leftover after parsing attributes in process `syz.6.744'. [ 77.021067][ T5888] erspan0: refused to change device tx_queue_len [ 77.036805][ T5892] tls_set_device_offload_rx: netdev not found [ 77.116390][ T5899] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 77.123018][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.130706][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 77.369288][ T9] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 77.710433][ T5918] loop0: detected capacity change from 0 to 512 [ 77.739504][ T5918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.791000][ T5918] EXT4-fs (loop0): 1 truncate cleaned up [ 77.808836][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.861389][ T5918] lo speed is unknown, defaulting to 1000 [ 77.962486][ T5949] tls_set_device_offload_rx: netdev not found [ 78.059178][ T5900] vhci_hcd: connection reset by peer [ 78.082221][ T31] vhci_hcd: stop threads [ 78.086591][ T31] vhci_hcd: release socket [ 78.091171][ T31] vhci_hcd: disconnect device [ 78.205391][ T5958] netlink: 132 bytes leftover after parsing attributes in process `syz.5.761'. [ 78.403012][ T5965] netlink: 830 bytes leftover after parsing attributes in process `syz.4.760'. [ 78.562565][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 78.562581][ T29] audit: type=1400 audit(1756045498.458:2798): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.601164][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.634442][ T29] audit: type=1400 audit(1756045498.528:2799): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.735382][ T29] audit: type=1400 audit(1756045498.628:2800): avc: denied { prog_load } for pid=5974 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.754481][ T29] audit: type=1400 audit(1756045498.628:2801): avc: denied { bpf } for pid=5974 comm="syz.6.767" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.805728][ T29] audit: type=1400 audit(1756045498.678:2802): avc: denied { allowed } for pid=5974 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.825201][ T29] audit: type=1400 audit(1756045498.678:2803): avc: denied { sqpoll } for pid=5974 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.844563][ T29] audit: type=1400 audit(1756045498.678:2804): avc: denied { perfmon } for pid=5974 comm="syz.6.767" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.865495][ T29] audit: type=1400 audit(1756045498.678:2805): avc: denied { prog_run } for pid=5974 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.968900][ T29] audit: type=1400 audit(1756045498.788:2806): avc: denied { create } for pid=5974 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.039586][ T29] audit: type=1400 audit(1756045498.908:2807): avc: denied { append } for pid=5979 comm="syz.6.768" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.215076][ T6004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.774'. [ 79.252247][ T6011] netlink: 132 bytes leftover after parsing attributes in process `syz.6.776'. [ 79.493074][ T2957] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.497431][ T6033] netlink: 830 bytes leftover after parsing attributes in process `syz.4.779'. [ 79.500698][ T2957] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.517196][ T2957] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 79.530799][ T2957] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 80.232602][ T6072] tls_set_device_offload_rx: netdev not found [ 80.370281][ T6082] netlink: 830 bytes leftover after parsing attributes in process `syz.2.804'. [ 80.504036][ T6088] lo speed is unknown, defaulting to 1000 [ 80.734097][ T6088] lo speed is unknown, defaulting to 1000 [ 81.067722][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.802'. [ 81.302007][ T5236] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.309603][ T5236] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.317103][ T5236] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 81.327237][ T5236] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 81.419584][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.816'. [ 81.461819][ T6198] netlink: 830 bytes leftover after parsing attributes in process `syz.2.815'. [ 81.877003][ T6212] lo speed is unknown, defaulting to 1000 [ 82.066362][ T6212] lo speed is unknown, defaulting to 1000 [ 82.522480][ T9] usb 13-1: enqueue for inactive port 0 [ 82.528120][ T9] usb 13-1: enqueue for inactive port 0 [ 82.640457][ T9] vhci_hcd: vhci_device speed not set [ 82.656912][ T2957] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 82.664471][ T2957] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 82.672060][ T2957] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 82.716030][ T2957] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 82.759265][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.831'. [ 82.862113][ T6300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.119473][ T6300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.184375][ T6300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.808994][ T6300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.850162][ T6317] lo speed is unknown, defaulting to 1000 [ 83.857856][ T6319] lo speed is unknown, defaulting to 1000 [ 83.956013][ T6371] netlink: 830 bytes leftover after parsing attributes in process `syz.6.839'. [ 83.973805][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 83.973826][ T29] audit: type=1326 audit(1756045503.868:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031367ebe9 code=0x7ffc0000 [ 84.003529][ T29] audit: type=1326 audit(1756045503.868:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f031367d457 code=0x7ffc0000 [ 84.026948][ T29] audit: type=1326 audit(1756045503.868:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031367ebe9 code=0x7ffc0000 [ 84.050372][ T29] audit: type=1326 audit(1756045503.868:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.6.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031367ebe9 code=0x7ffc0000 [ 84.194397][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.219818][ T377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.681572][ T377] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.690469][ T377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.916862][ T29] audit: type=1400 audit(1756045504.808:2968): avc: denied { create } for pid=6406 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.972844][ T29] audit: type=1400 audit(1756045504.868:2969): avc: denied { mount } for pid=6406 comm="syz.0.848" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 84.995523][ T29] audit: type=1400 audit(1756045504.868:2970): avc: denied { setopt } for pid=6406 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.015022][ T29] audit: type=1400 audit(1756045504.868:2971): avc: denied { create } for pid=6406 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.034797][ T29] audit: type=1400 audit(1756045504.868:2972): avc: denied { setopt } for pid=6406 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.098447][ T29] audit: type=1400 audit(1756045504.988:2973): avc: denied { read } for pid=6406 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.244127][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.853'. [ 85.272238][ T6419] netem: change failed [ 85.400635][ T6419] proc: Bad value for 'gid' [ 85.517221][ T6429] lo speed is unknown, defaulting to 1000 [ 85.726585][ T6429] lo speed is unknown, defaulting to 1000 [ 86.400268][ T6503] ================================================================== [ 86.408408][ T6503] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 86.415393][ T6503] [ 86.417733][ T6503] read-write to 0xffff88811046e12c of 4 bytes by task 6498 on cpu 1: [ 86.425815][ T6503] fifo_open+0x86/0x5d0 [ 86.430007][ T6503] do_dentry_open+0x646/0xa20 [ 86.434723][ T6503] vfs_open+0x37/0x1e0 [ 86.438825][ T6503] path_openat+0x1c5e/0x2170 [ 86.443426][ T6503] do_filp_open+0x109/0x230 [ 86.447946][ T6503] do_sys_openat2+0xa6/0x110 [ 86.452598][ T6503] __x64_sys_openat+0xf2/0x120 [ 86.457538][ T6503] x64_sys_call+0x2e9c/0x2ff0 [ 86.462254][ T6503] do_syscall_64+0xd2/0x200 [ 86.466797][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.472749][ T6503] [ 86.475092][ T6503] read to 0xffff88811046e12c of 4 bytes by task 6503 on cpu 0: [ 86.482690][ T6503] wait_for_partner+0xb5/0x1c0 [ 86.487501][ T6503] fifo_open+0x462/0x5d0 [ 86.491877][ T6503] do_dentry_open+0x646/0xa20 [ 86.496606][ T6503] vfs_open+0x37/0x1e0 [ 86.500722][ T6503] path_openat+0x1c5e/0x2170 [ 86.505347][ T6503] do_filp_open+0x109/0x230 [ 86.509879][ T6503] do_sys_openat2+0xa6/0x110 [ 86.514517][ T6503] __x64_sys_open+0xe6/0x110 [ 86.519240][ T6503] x64_sys_call+0x1457/0x2ff0 [ 86.523937][ T6503] do_syscall_64+0xd2/0x200 [ 86.528474][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.534407][ T6503] [ 86.536751][ T6503] value changed: 0x00000001 -> 0x00000002 [ 86.542477][ T6503] [ 86.544815][ T6503] Reported by Kernel Concurrency Sanitizer on: [ 86.550982][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.6.865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.562214][ T6503] Tainted: [W]=WARN [ 86.566039][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.576107][ T6503] ==================================================================