last executing test programs: 2m16.997847185s ago: executing program 0 (id=914): socket$inet(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/14, 0xe, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xf7, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x190, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffc0}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5a}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r4, 0x0, 0x79) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ftruncate(r2, 0x2000009) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f465981b28f9cd35704aa052be02269297f12a2a16485ca3d202c9ae1ca0249d7a13d0b3f95665e32a340f808d980e759b893982f7b88cff1a67ee635d860b15fc3a9ab2cbde9400aa8078f2cd65e117141980ef0e37d5f166", @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000480), 0x5, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200), &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m14.397826615s ago: executing program 0 (id=934): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@sg0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x48000) 2m14.196525649s ago: executing program 0 (id=939): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x40000002}}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m14.1300245s ago: executing program 0 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) mmap(&(0x7f00009fa000/0x1000)=nil, 0x1000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "227d7944e182680c", "527b0afd542e83083f4e3fc43dccde5c", "fd596dc9", "6f086b719b2c7d13"}, 0x28) close(r8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 2m13.765847118s ago: executing program 0 (id=947): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x200003}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xa86, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_gettime(r3, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) mmap(&(0x7f0000ea0000/0x2000)=nil, 0x2000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m13.403947184s ago: executing program 0 (id=957): r0 = epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100037040400000000000000000000006bebbdc4e44ab6929eb63e0a3ac4f280644884987675622b39beb079738f9e4c0f2b8cc3599e0e669fcc9442bdb15c1bef4d1ec0061dc61275ab3c158c52f5a084aa270c1acd0e0967a544935fdf6a2a9f8ec824f2f8cf5a1de2a5e2882b30a9bb5e524088e425029e245c9f7dc671ba2ca5d9b37ca664e3aadb5e1a1ad7b7f5cceba50dd07cb1a7407c2aa0f1e6fceb4a0a1e9b6594803cbd9bc73a3ee54e4ac43ec05b35", @ANYRES32=0x0, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe8800000000000000000000000001010500090004000000"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) 2m13.403725954s ago: executing program 32 (id=957): r0 = epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100037040400000000000000000000006bebbdc4e44ab6929eb63e0a3ac4f280644884987675622b39beb079738f9e4c0f2b8cc3599e0e669fcc9442bdb15c1bef4d1ec0061dc61275ab3c158c52f5a084aa270c1acd0e0967a544935fdf6a2a9f8ec824f2f8cf5a1de2a5e2882b30a9bb5e524088e425029e245c9f7dc671ba2ca5d9b37ca664e3aadb5e1a1ad7b7f5cceba50dd07cb1a7407c2aa0f1e6fceb4a0a1e9b6594803cbd9bc73a3ee54e4ac43ec05b35", @ANYRES32=0x0, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe8800000000000000000000000001010500090004000000"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) 2m8.275220454s ago: executing program 2 (id=1023): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="8f0a6f45b1ee90c62b6a3f333473750a612b3e63b7fc7754c7223e42fce9e6731e7bd25a670b4e5585134414f1e6a9b6b7e6c67f1edf01bc65d686fe5d6f432b145734368fc27ff582278ea910bffbce942b4ac45bfd5eab7c7011e9259707792cf48db53c390c11186c7295f0117e4dde7e5dbcfd8d5b68200e4831fe6b7e8ef5b00ed9948b64a629d97a5f9d3cbeb8fe9bfdea8d5caee21b071461fe01a5bce5799a9346e75271035bb804875d37ee975d29847da495f23f6e3881f21b6c5dcb42"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m7.95556498s ago: executing program 2 (id=1028): r0 = epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100037040400000000000000000000006bebbdc4e44ab6929eb63e0a3ac4f280644884987675622b39beb079738f9e4c0f2b8cc3599e0e669fcc9442bdb15c1bef4d1ec0061dc61275ab3c158c52f5a084aa270c1acd0e0967a544935fdf6a2a9f8ec824f2f8cf5a1de2a5e2882b30a9bb5e524088e425029e245c9f7dc671ba2ca5d9b37ca664e3aadb5e1a1ad7b7f5cceba50dd07cb1a7407c2aa0f1e6fceb4a0a1e9b6594803cbd9bc73a3ee54e4ac43ec05b35", @ANYRES32=0x0, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe8800000000000000000000000001010500090004000000"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) 2m6.89008156s ago: executing program 2 (id=1045): mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000780)="fc0000001c000704ab5b2509b868030002ab087a0100000001483393210001c0f0030539a20060100000000000039815fa2c53c28648000000b9d99d4f06b2e4cfab32685662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815aeccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0", 0xfc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 2m6.557424997s ago: executing program 2 (id=1048): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1cffaef7}}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000340)=""/2, 0x4c, 0x2, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m5.989757538s ago: executing program 2 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 2m5.700359914s ago: executing program 2 (id=1065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x801, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=tcp']) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x8, 0x0, 0xfffffffd, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x15, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r0, 0x0, r8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000001c0)={0x10002000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a009402df7d"], 0x24}}, 0x8000) 2m5.657709005s ago: executing program 33 (id=1065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x801, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=tcp']) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x8, 0x0, 0xfffffffd, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x15, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r0, 0x0, r8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000001c0)={0x10002000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a009402df7d"], 0x24}}, 0x8000) 1m48.267255372s ago: executing program 6 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 1m48.189749473s ago: executing program 6 (id=1472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m48.106501905s ago: executing program 6 (id=1477): socket(0x10, 0x803, 0x0) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000000180576191868f3b40056ee884285000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000280)={[{@grpquota}, {@journal_checksum}]}, 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb9}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a56735ae5cec9c4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405}, 0x4e4a9eaac70c947b) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') linkat(r3, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.712467222s ago: executing program 6 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) mmap(&(0x7f00009fa000/0x1000)=nil, 0x1000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r8, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "227d7944e182680c", "527b0afd542e83083f4e3fc43dccde5c", "fd596dc9", "6f086b719b2c7d13"}, 0x28) close(r8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 1m47.306089s ago: executing program 6 (id=1484): syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0xfc18, 0x1000000e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000023c0)=r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) 1m46.957774927s ago: executing program 6 (id=1497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 1m46.943207417s ago: executing program 34 (id=1497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 1.958068162s ago: executing program 5 (id=3011): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x5) 1.710275147s ago: executing program 5 (id=3014): socket$inet(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/14, 0xe, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xf7, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x15c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffc0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5a}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0x79) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ftruncate(r2, 0x2000009) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f465981b28f9cd35704aa052be02269297f12a2a16485ca3d202c9ae1ca0249d7a13d0b3f95665e32a340f808d980e759b893982f7b88cff1a67ee635d860b15fc3a9ab2cbde9400aa8078f2cd65e117141980ef0e37d5f166", @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000480), 0x5, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200), &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.589853569s ago: executing program 4 (id=3015): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) gettid() r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x28, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r5, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r7, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r7, &(0x7f0000000300)='reno\x00', 0x5) wait4(r1, &(0x7f0000000240), 0x40000000, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/rt_acct\x00') r8 = syz_clone3(&(0x7f00000007c0)={0x40000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x23}, &(0x7f0000000480)=""/153, 0x99, &(0x7f0000000640)=""/201, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) r9 = getpid() process_vm_readv(r8, &(0x7f0000000380)=[{&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f00000002c0)=""/39, 0x27}], 0x4, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r10 = getpid() r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000041c0)='net/packet\x00') preadv(r12, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) pread64(r12, &(0x7f0000004380)=""/246, 0xf6, 0x2) syz_clone3(&(0x7f0000000840)={0x28200000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x2e}, &(0x7f00000003c0)=""/186, 0xba, &(0x7f0000000100)=""/46, &(0x7f0000000540)=[0xffffffffffffffff, r1, r8, r9, r10, r11], 0x6, {r12}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1.507102411s ago: executing program 1 (id=3019): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, &(0x7f0000c35fff), &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/181, &(0x7f0000000100)=0xb5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 1.458538952s ago: executing program 3 (id=3020): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r2, 0x0, 0xfffffffffffffeff}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000540)={@initdev, @empty, 0x0}, &(0x7f0000000580)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000080004000700000000000009050000000d000000000000f0fffffe007a00394103000000040000930c0000000100000019050000000000800700000003000000030000000a0000000600000001800000b40a0000000900000003000000000030302e5f30"], &(0x7f0000000640)=""/74, 0x78, 0x4a, 0x0, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB="851000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000000018400000feffffff0000000000000000182b0000", @ANYRES32=r4, @ANYBLOB="000000000000f2b2b5f892497132ffa5acba0000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xb, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000700)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x8080, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a010200000000000000000a00000408000240000000030900010073797a300000000020000000020a010100000000000000000a0000020900010073797a30000000a46b82af1a9c9933b1866fb68558f000140000001100010000000000000000000700000a"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x8c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.458360512s ago: executing program 7 (id=3021): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.456514162s ago: executing program 1 (id=3022): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210229bd7000fcdbdf2505000000080009000b0000005eda5c91115d4880b79053613297c37e4695dced6d37c5d76cb387c163d74fe29b3c939a339b6cfad4055f5da620cb74fe3c5bec"], 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYRESHEX=r0, @ANYRES16, @ANYRES32, @ANYBLOB="5a6623cd47a4ee790691e4c62341a7fb2d2f8d14288336c82d1748b27dee83921255183689cb", @ANYRES16=r0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) 1.273658565s ago: executing program 7 (id=3023): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 1.227013016s ago: executing program 7 (id=3024): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x5) 1.186888907s ago: executing program 7 (id=3025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r5, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a"], 0x84}}, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047454, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) pipe(&(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) 1.147888607s ago: executing program 4 (id=3026): r0 = epoll_create1(0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100037040400000000000000000000006bebbdc4e44ab6929eb63e0a3ac4f280644884987675622b39beb079738f9e4c0f2b8cc3599e0e669fcc9442bdb15c1bef4d1ec0061dc61275ab3c158c52f5a084aa270c1acd0e0967a544935fdf6a2a9f8ec824f2f8cf5a1de2a5e2882b30a9bb5e524088e425029e245c9f7dc671ba2ca5d9b37ca664e3aadb5e1a1ad7b7f5cceba50dd07cb1a7407c2aa0f1e6fceb4a0a1e9b6594803cbd9bc73a3ee54e4ac43ec05b35", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb9, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) 1.103785159s ago: executing program 3 (id=3027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 964.855561ms ago: executing program 7 (id=3028): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r5, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a"], 0x84}}, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047454, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) 662.573817ms ago: executing program 3 (id=3029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c0001"], 0x34}}, 0x0) 611.594078ms ago: executing program 3 (id=3030): openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1ff) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x40000, 0x120, 0x0, 0x0) 552.396639ms ago: executing program 3 (id=3031): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r2, @ANYBLOB="1d00"/15, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="00000000000000000000000000000000000000002200481d004c072b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000b4000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000040000d136f93595c904543ac629d9886cb03928df79cd95a8c873"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='qrtr_ns_service_announce_del\x00', r4}, 0x18) r5 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xd5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syslog(0x1, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) r11 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r11, 0x207a98, 0x0, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='nilfs2_collection_stage_transition\x00', r14, 0x0, 0x48000000000}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) r15 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r15, 0x6, 0x0, 0x0, 0x0) 507.94918ms ago: executing program 1 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) 409.357532ms ago: executing program 1 (id=3033): socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000007c0)={0x8, 0x3, 0x1, 'queue0\x00', 0xffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xa8, 0xfffffffffffffff1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 401.499792ms ago: executing program 7 (id=3034): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085daf461dc47e4bb2deedcbf512e000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x2404d}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x800, 0x4, 0x80, 0x2, 0x46b}, 0x4, 0x0, 0x9, 0x7, 0x7, 0x1, 0x2, 0x17, 0x7, 0x6, {0xa, 0x2, 0x3, 0xfffffffd, 0x5, 0xc}}}}]}, 0x78}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x325, &(0x7f0000001740)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000000801010000000000000000070000020c0004800800064000000009b2be66f641fedf79fc5c5b601536378b79397055d886523d3897a8186e5c04c772e8c378d2c4ac4e856cde4ef18f25334fa6f2961e34397016504b6d9d8fc4473542128c216bcbaa86eea9bcff2e86dd834dfc12c42597b4094b155b117aefb4eb87cc80a0aaac12a6e39db944eca9fea8428eb3a13a581abed0ad16c650ba7be052341d692d04ce68ce37ccd1e1639b12f2be111dad9e41c7e572be1c0c6d1ec2865ec5213df2843621de338a85c229e73abc58d3495d52642eac21f9d57b332a86b5d3dc7cc22777b433288ae6c25532"], 0x20}, 0x1, 0x0, 0x0, 0x80b0}, 0x20000804) sendfile(r9, r8, 0x0, 0x7ffff000) 397.652192ms ago: executing program 5 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0xe6c, 0x9, 0xffff1980, 0xa, 0x6, "d8ad0e98c775e49ce1c41b6500a138b8ccdb17"}) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 373.529813ms ago: executing program 3 (id=3036): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x6, 0x3ff, 0x99, 0x7}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000300)=0x3) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7dbc00000000000071101200ce1777a8ae31813915d9b44b808b23c886a48b841626cec3607474a368e7d242c6936f1dd27bd7990668eb91dd5598d848ee7cd4938e4af4f8e87a85c603aaef1a027c8b78a115c81daad830801c199be337c23bffc5e5000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010003000000fbdbdf25250000000e00016a2f528d696db9006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 360.529463ms ago: executing program 1 (id=3037): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresuid(&(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500)) 336.737383ms ago: executing program 1 (id=3038): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 334.245933ms ago: executing program 5 (id=3039): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200b700"/49], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xa, 0x0, &(0x7f0000000000)="219a53f271a76d260800", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r11, {0x10, 0xb}, {0x0, 0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 252.148175ms ago: executing program 4 (id=3040): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xff\xff\xff\x7f\x00') r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x2002) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="03000000040000000400000019000000000000000d474adbf41a67274dd6a6d54bc44cdaff1f27cb5fae04faa35b", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000001d00)=ANY=[@ANYBLOB="03000800010000000000140000004500003014000000000190780a010100ac1414aa0400907800000000450000000000000000110000ac1414aa7f000001ead3f13f2ba9073b0272257697dfdacbc4ea0ee11fef31adc1723cb8b4810b255d187c94bcb1cbc90bdc026712ad0ab46caf01f59177dbbc9fcf4d30479c"], 0x3e) 248.036855ms ago: executing program 5 (id=3041): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 176.009616ms ago: executing program 5 (id=3042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210229bd7000fcdbdf2505000000080009000b0000005eda5c91115d4880b79053613297c37e4695dced6d37c5d76cb387c163d74fe29b3c939a339b6cfad4055f5da620cb74fe3c5bec"], 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYRESHEX=r0, @ANYRES16, @ANYRES32, @ANYBLOB="5a6623cd47a4ee790691e4c62341a7fb2d2f8d14288336c82d1748b27dee83921255183689cb", @ANYRES16=r0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2400000}, 0x18) 95.730398ms ago: executing program 4 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) 58.717349ms ago: executing program 4 (id=3044): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000002000000014001a80100005800c00"], 0x34}}, 0x0) 0s ago: executing program 4 (id=3045): socket$inet(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000000)=""/14, 0xe, 0x0, &(0x7f0000000280)=""/155, 0x9b}}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xf7, 0x1219, &(0x7f0000001100)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x15c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffc0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5a}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0x79) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) ftruncate(r2, 0x2000009) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f465981b28f9cd35704aa052be02269297f12a2a16485ca3d202c9ae1ca0249d7a13d0b3f95665e32a340f808d980e759b893982f7b88cff1a67ee635d860b15fc3a9ab2cbde9400aa8078f2cd65e117141980ef0e37d5f166", @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000480), 0x5, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200), &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 29][T10863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.481732][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 171.481751][ T29] audit: type=1400 audit(1757698903.461:15723): avc: denied { setattr } for pid=10857 comm="syz.4.2472" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.512181][ T29] audit: type=1326 audit(1757698903.491:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.536539][ T29] audit: type=1326 audit(1757698903.491:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.560664][ T29] audit: type=1326 audit(1757698903.541:15726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.585058][ T29] audit: type=1326 audit(1757698903.541:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.615143][ T29] audit: type=1326 audit(1757698903.541:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.639330][ T29] audit: type=1326 audit(1757698903.541:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.663462][ T29] audit: type=1326 audit(1757698903.541:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.663496][ T29] audit: type=1326 audit(1757698903.591:15731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.712252][ T29] audit: type=1326 audit(1757698903.591:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.5.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 171.786656][T10891] tmpfs: Unknown parameter 'mpo‚' [ 171.798583][T10891] nfs4: Bad value for 'source' [ 171.864776][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.926872][T10899] loop7: detected capacity change from 0 to 1024 [ 171.946388][T10899] journal_path: Non-blockdev passed as './file1' [ 171.953228][T10899] EXT4-fs: error: could not find journal device path [ 171.961492][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.983487][T10903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10903 comm=syz.4.2487 [ 172.010014][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2486'. [ 172.013860][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2488'. [ 172.036230][T10905] syzkaller1: entered promiscuous mode [ 172.042040][T10905] syzkaller1: entered allmulticast mode [ 172.423492][T10926] tmpfs: Unknown parameter 'mpo‚' [ 172.453216][T10926] nfs4: Bad value for 'source' [ 172.598317][T10930] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.659156][T10931] FAULT_INJECTION: forcing a failure. [ 172.659156][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 172.672436][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.1.2495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.672470][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.672483][T10931] Call Trace: [ 172.672490][T10931] [ 172.672498][T10931] __dump_stack+0x1d/0x30 [ 172.672559][T10931] dump_stack_lvl+0xe8/0x140 [ 172.672581][T10931] dump_stack+0x15/0x1b [ 172.672608][T10931] should_fail_ex+0x265/0x280 [ 172.672635][T10931] should_failslab+0x8c/0xb0 [ 172.672705][T10931] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 172.672738][T10931] ? sidtab_sid2str_get+0xa0/0x130 [ 172.672779][T10931] kmemdup_noprof+0x2b/0x70 [ 172.672953][T10931] sidtab_sid2str_get+0xa0/0x130 [ 172.673011][T10931] security_sid_to_context_core+0x1eb/0x2e0 [ 172.673036][T10931] security_sid_to_context+0x27/0x40 [ 172.673114][T10931] selinux_lsmprop_to_secctx+0x67/0xf0 [ 172.673148][T10931] security_lsmprop_to_secctx+0x43/0x80 [ 172.673177][T10931] audit_log_task_context+0x77/0x190 [ 172.673275][T10931] audit_log_task+0xf4/0x250 [ 172.673416][T10931] audit_seccomp+0x61/0x100 [ 172.673561][T10931] ? __seccomp_filter+0x68c/0x10d0 [ 172.673591][T10931] __seccomp_filter+0x69d/0x10d0 [ 172.673615][T10931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.673646][T10931] ? vfs_write+0x7e8/0x960 [ 172.673743][T10931] __secure_computing+0x82/0x150 [ 172.673766][T10931] syscall_trace_enter+0xcf/0x1e0 [ 172.673794][T10931] do_syscall_64+0xac/0x200 [ 172.673860][T10931] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.673893][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.673956][T10931] RIP: 0033:0x7f8ce7b8eba9 [ 172.673974][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.673995][T10931] RSP: 002b:00007f8ce65ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 172.674018][T10931] RAX: ffffffffffffffda RBX: 00007f8ce7dd6090 RCX: 00007f8ce7b8eba9 [ 172.674033][T10931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.674109][T10931] RBP: 00007f8ce65ce090 R08: 0000000000000000 R09: 0000000000000000 [ 172.674123][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.674136][T10931] R13: 00007f8ce7dd6128 R14: 00007f8ce7dd6090 R15: 00007fff065b64d8 [ 172.674156][T10931] [ 172.942944][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 172.950718][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.958317][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.965881][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.973291][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.980962][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.985328][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 172.999886][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.000678][T10930] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.007459][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.025453][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.033211][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 173.046992][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 173.061953][T10940] loop5: detected capacity change from 0 to 128 [ 173.075269][T10942] loop7: detected capacity change from 0 to 512 [ 173.082895][T10942] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 173.098344][T10942] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 173.109831][T10930] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.169478][T10930] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.201246][T10951] loop4: detected capacity change from 0 to 1024 [ 173.228068][ T86] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.229122][T10951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.248817][ T86] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.263734][ T86] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.273520][T10956] tmpfs: Unknown parameter 'mpo‚' [ 173.279567][T10956] nfs4: Bad value for 'source' [ 173.288773][T10951] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.2501: reserved inode found cleared - inode=18 [ 173.300892][ T86] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.328429][T10951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2501'. [ 173.342747][T10959] tmpfs: Unknown parameter 'mpo‚' [ 173.348995][T10959] nfs4: Bad value for 'source' [ 173.821926][T10991] tmpfs: Unknown parameter 'mpo‚' [ 173.835925][T10991] nfs4: Bad value for 'source' [ 173.853765][T10991] loop5: detected capacity change from 0 to 512 [ 173.861841][T10990] bridge0: port 4(gretap0) entered blocking state [ 173.868586][T10990] bridge0: port 4(gretap0) entered disabled state [ 173.875463][T10990] gretap0: entered allmulticast mode [ 173.882677][T10990] gretap0: entered promiscuous mode [ 173.889747][T10990] gretap0: left allmulticast mode [ 173.894875][T10990] gretap0: left promiscuous mode [ 173.899499][T10991] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #11: comm syz.5.2517: EA inode hash validation failed [ 173.900204][T10990] bridge0: port 4(gretap0) entered disabled state [ 173.913244][T10991] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2517: corrupted inode contents [ 173.940035][T10991] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.2517: mark_inode_dirty error [ 173.997391][T10991] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2517: corrupted inode contents [ 174.026182][T10991] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.2517: mark_inode_dirty error [ 174.038686][T10997] FAULT_INJECTION: forcing a failure. [ 174.038686][T10997] name failslab, interval 1, probability 0, space 0, times 0 [ 174.051789][T10997] CPU: 1 UID: 0 PID: 10997 Comm: syz.3.2519 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.051820][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.051831][T10997] Call Trace: [ 174.051837][T10997] [ 174.051844][T10997] __dump_stack+0x1d/0x30 [ 174.051943][T10997] dump_stack_lvl+0xe8/0x140 [ 174.051965][T10997] dump_stack+0x15/0x1b [ 174.051991][T10997] should_fail_ex+0x265/0x280 [ 174.052013][T10997] should_failslab+0x8c/0xb0 [ 174.052038][T10997] kmem_cache_alloc_node_noprof+0x57/0x320 [ 174.052124][T10997] ? __alloc_skb+0x101/0x320 [ 174.052147][T10997] __alloc_skb+0x101/0x320 [ 174.052210][T10997] netlink_alloc_large_skb+0xba/0xf0 [ 174.052234][T10997] netlink_sendmsg+0x3cf/0x6b0 [ 174.052299][T10997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.052332][T10997] __sock_sendmsg+0x145/0x180 [ 174.052367][T10997] ____sys_sendmsg+0x31e/0x4e0 [ 174.052417][T10997] ___sys_sendmsg+0x17b/0x1d0 [ 174.052460][T10997] __x64_sys_sendmsg+0xd4/0x160 [ 174.052491][T10997] x64_sys_call+0x191e/0x2ff0 [ 174.052515][T10997] do_syscall_64+0xd2/0x200 [ 174.052593][T10997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.052618][T10997] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 174.052737][T10997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.052759][T10997] RIP: 0033:0x7febb3daeba9 [ 174.052777][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.052799][T10997] RSP: 002b:00007febb280f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.052823][T10997] RAX: ffffffffffffffda RBX: 00007febb3ff5fa0 RCX: 00007febb3daeba9 [ 174.052893][T10997] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 174.052932][T10997] RBP: 00007febb280f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.052947][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.052962][T10997] R13: 00007febb3ff6038 R14: 00007febb3ff5fa0 R15: 00007ffef4ab2368 [ 174.052989][T10997] [ 174.057131][T10991] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.2517: mark inode dirty (error -117) [ 174.281639][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.291166][T10991] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 174.315406][T10991] EXT4-fs (loop5): 1 orphan inode deleted [ 174.321913][T10991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.413765][T11003] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2520'. [ 174.437885][T11010] loop7: detected capacity change from 0 to 764 [ 174.479962][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.508980][T11016] loop7: detected capacity change from 0 to 1024 [ 174.525266][T11016] EXT4-fs: Ignoring removed orlov option [ 174.534487][T11021] serio: Serial port ptm0 [ 174.542062][T11016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.595799][T11026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 174.685383][T11033] netlink: 'syz.1.2530': attribute type 3 has an invalid length. [ 174.750520][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.774245][T11036] bridge_slave_1: left allmulticast mode [ 174.780208][T11036] bridge_slave_1: left promiscuous mode [ 174.782810][T11038] loop4: detected capacity change from 0 to 512 [ 174.786006][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.793903][T11038] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 174.810083][T11038] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 174.819393][T11036] bridge_slave_0: left allmulticast mode [ 174.825098][T11036] bridge_slave_0: left promiscuous mode [ 174.825606][T11039] netlink: 'syz.7.2531': attribute type 21 has an invalid length. [ 174.831194][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.037184][T11065] FAULT_INJECTION: forcing a failure. [ 175.037184][T11065] name failslab, interval 1, probability 0, space 0, times 0 [ 175.050331][T11065] CPU: 1 UID: 0 PID: 11065 Comm: syz.7.2541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.050373][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.050382][T11065] Call Trace: [ 175.050388][T11065] [ 175.050394][T11065] __dump_stack+0x1d/0x30 [ 175.050470][T11065] dump_stack_lvl+0xe8/0x140 [ 175.050497][T11065] dump_stack+0x15/0x1b [ 175.050506][T11065] should_fail_ex+0x265/0x280 [ 175.050518][T11065] should_failslab+0x8c/0xb0 [ 175.050745][T11065] kmem_cache_alloc_node_noprof+0x57/0x320 [ 175.050759][T11065] ? __alloc_skb+0x101/0x320 [ 175.050825][T11065] __alloc_skb+0x101/0x320 [ 175.050836][T11065] netlink_alloc_large_skb+0xba/0xf0 [ 175.050924][T11065] netlink_sendmsg+0x3cf/0x6b0 [ 175.050937][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.051087][T11065] __sock_sendmsg+0x145/0x180 [ 175.051116][T11065] ____sys_sendmsg+0x31e/0x4e0 [ 175.051130][T11065] ___sys_sendmsg+0x17b/0x1d0 [ 175.051149][T11065] __x64_sys_sendmsg+0xd4/0x160 [ 175.051182][T11065] x64_sys_call+0x191e/0x2ff0 [ 175.051193][T11065] do_syscall_64+0xd2/0x200 [ 175.051353][T11065] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.051374][T11065] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.051389][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.051400][T11065] RIP: 0033:0x7f103c11eba9 [ 175.051409][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.051494][T11065] RSP: 002b:00007f103ab7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.051507][T11065] RAX: ffffffffffffffda RBX: 00007f103c365fa0 RCX: 00007f103c11eba9 [ 175.051521][T11065] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 175.051527][T11065] RBP: 00007f103ab7f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.051568][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.051575][T11065] R13: 00007f103c366038 R14: 00007f103c365fa0 R15: 00007fff1da058d8 [ 175.051587][T11065] [ 175.273664][T11068] __nla_validate_parse: 3 callbacks suppressed [ 175.273680][T11068] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2542'. [ 175.296132][T11068] loop7: detected capacity change from 0 to 1024 [ 175.303225][T11068] EXT4-fs: Ignoring removed orlov option [ 175.311631][T11068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.337534][T11071] loop4: detected capacity change from 0 to 128 [ 175.382963][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2546'. [ 175.396623][T11075] loop4: detected capacity change from 0 to 512 [ 175.405197][T11075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 175.416305][T11075] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 175.473862][T11088] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11088 comm=syz.4.2550 [ 175.491153][T11090] ipvlan2: entered promiscuous mode [ 175.497814][T11090] bridge0: port 4(ipvlan2) entered blocking state [ 175.504702][T11090] bridge0: port 4(ipvlan2) entered disabled state [ 175.511547][T11090] ipvlan2: entered allmulticast mode [ 175.517276][T11090] bridge0: entered allmulticast mode [ 175.523381][T11090] ipvlan2: left allmulticast mode [ 175.528803][T11090] bridge0: left allmulticast mode [ 175.605322][T11095] tipc: Started in network mode [ 175.610334][T11095] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 175.620136][T11095] tipc: Enabled bearer , priority 10 [ 175.667555][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.087503][T11114] FAULT_INJECTION: forcing a failure. [ 176.087503][T11114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.102067][T11114] CPU: 1 UID: 0 PID: 11114 Comm: syz.7.2558 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.102120][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.102131][T11114] Call Trace: [ 176.102138][T11114] [ 176.102147][T11114] __dump_stack+0x1d/0x30 [ 176.102247][T11114] dump_stack_lvl+0xe8/0x140 [ 176.102266][T11114] dump_stack+0x15/0x1b [ 176.102281][T11114] should_fail_ex+0x265/0x280 [ 176.102304][T11114] should_fail+0xb/0x20 [ 176.102390][T11114] should_fail_usercopy+0x1a/0x20 [ 176.102408][T11114] strncpy_from_user+0x25/0x230 [ 176.102506][T11114] ? kmem_cache_alloc_noprof+0x186/0x310 [ 176.102683][T11114] ? getname_flags+0x80/0x3b0 [ 176.102788][T11114] getname_flags+0xae/0x3b0 [ 176.102822][T11114] user_path_at+0x28/0x130 [ 176.102858][T11114] __se_sys_mount+0x25b/0x2e0 [ 176.102945][T11114] ? fput+0x8f/0xc0 [ 176.102972][T11114] __x64_sys_mount+0x67/0x80 [ 176.102999][T11114] x64_sys_call+0x2b4d/0x2ff0 [ 176.103063][T11114] do_syscall_64+0xd2/0x200 [ 176.103131][T11114] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.103160][T11114] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.103195][T11114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.103219][T11114] RIP: 0033:0x7f103c11eba9 [ 176.103239][T11114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.103278][T11114] RSP: 002b:00007f103ab7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.103302][T11114] RAX: ffffffffffffffda RBX: 00007f103c365fa0 RCX: 00007f103c11eba9 [ 176.103325][T11114] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 176.103389][T11114] RBP: 00007f103ab7f090 R08: 0000200000000140 R09: 0000000000000000 [ 176.103403][T11114] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 176.103415][T11114] R13: 00007f103c366038 R14: 00007f103c365fa0 R15: 00007fff1da058d8 [ 176.103432][T11114] [ 176.421916][T11125] loop4: detected capacity change from 0 to 1024 [ 176.435274][T11126] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2562'. [ 176.450260][T11125] SELinux: Context Ü is not valid (left unmapped). [ 176.462656][T11124] serio: Serial port ptm0 [ 176.467725][T11126] loop5: detected capacity change from 0 to 1024 [ 176.487403][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 176.487422][ T29] audit: type=1326 audit(1757698908.451:16379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc39567d80a code=0x7ffc0000 [ 176.520100][T11126] EXT4-fs: Ignoring removed orlov option [ 176.530653][T11126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.543413][ T29] audit: type=1326 audit(1757698908.471:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.567504][ T29] audit: type=1326 audit(1757698908.471:16382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.591538][ T29] audit: type=1326 audit(1757698908.471:16383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.615360][ T29] audit: type=1326 audit(1757698908.471:16384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.639982][ T29] audit: type=1326 audit(1757698908.471:16385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.664307][ T29] audit: type=1326 audit(1757698908.501:16386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.3.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 176.688081][ T29] audit: type=1326 audit(1757698908.501:16387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc39567d417 code=0x7ffc0000 [ 176.712163][ T29] audit: type=1326 audit(1757698908.501:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.5.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc39568034a code=0x7ffc0000 [ 176.736295][ T29] audit: type=1400 audit(1757698908.511:16389): avc: denied { append } for pid=11127 comm="syz.1.2564" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.760479][ T4448] tipc: Node number set to 4269801494 [ 176.975186][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.051217][T11154] FAULT_INJECTION: forcing a failure. [ 177.051217][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.065072][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.4.2573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.065107][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.065120][T11154] Call Trace: [ 177.065127][T11154] [ 177.065134][T11154] __dump_stack+0x1d/0x30 [ 177.065195][T11154] dump_stack_lvl+0xe8/0x140 [ 177.065213][T11154] dump_stack+0x15/0x1b [ 177.065231][T11154] should_fail_ex+0x265/0x280 [ 177.065257][T11154] should_fail+0xb/0x20 [ 177.065278][T11154] should_fail_usercopy+0x1a/0x20 [ 177.065324][T11154] _copy_to_user+0x20/0xa0 [ 177.065359][T11154] simple_read_from_buffer+0xb5/0x130 [ 177.065383][T11154] proc_fail_nth_read+0x10e/0x150 [ 177.065413][T11154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.065507][T11154] vfs_read+0x1a8/0x770 [ 177.065526][T11154] ? clockevents_program_event+0x240/0x4e0 [ 177.065552][T11154] ? __rcu_read_unlock+0x4f/0x70 [ 177.065622][T11154] ? __fget_files+0x184/0x1c0 [ 177.065646][T11154] ksys_read+0xda/0x1a0 [ 177.065730][T11154] __x64_sys_read+0x40/0x50 [ 177.065753][T11154] x64_sys_call+0x27bc/0x2ff0 [ 177.065774][T11154] do_syscall_64+0xd2/0x200 [ 177.065802][T11154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 177.065898][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.065918][T11154] RIP: 0033:0x7fbb4ef2d5bc [ 177.065933][T11154] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.065953][T11154] RSP: 002b:00007fbb4d98f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.066032][T11154] RAX: ffffffffffffffda RBX: 00007fbb4f175fa0 RCX: 00007fbb4ef2d5bc [ 177.066046][T11154] RDX: 000000000000000f RSI: 00007fbb4d98f0a0 RDI: 0000000000000008 [ 177.066060][T11154] RBP: 00007fbb4d98f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.066073][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.066085][T11154] R13: 00007fbb4f176038 R14: 00007fbb4f175fa0 R15: 00007ffe63fab6c8 [ 177.066104][T11154] [ 177.275992][T11170] loop5: detected capacity change from 0 to 128 [ 177.334816][T11175] tmpfs: Unknown parameter 'mpo‚' [ 177.357234][T11175] nfs4: Bad value for 'source' [ 177.370649][T11175] loop4: detected capacity change from 0 to 512 [ 177.381937][T11175] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.2578: EA inode hash validation failed [ 177.397649][T11175] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2578: corrupted inode contents [ 177.416307][T11175] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.2578: mark_inode_dirty error [ 177.438504][T11175] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2578: corrupted inode contents [ 177.454364][T11187] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2582'. [ 177.485667][T11175] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.2578: mark_inode_dirty error [ 177.500221][T11175] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.2578: mark inode dirty (error -117) [ 177.522035][T11192] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2585'. [ 177.531720][T11175] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 177.541321][T11175] EXT4-fs (loop4): 1 orphan inode deleted [ 177.542863][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2585'. [ 177.547723][T11175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.571524][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2585'. [ 177.623585][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.625157][T11199] FAULT_INJECTION: forcing a failure. [ 177.625157][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 177.646054][T11199] CPU: 1 UID: 0 PID: 11199 Comm: syz.3.2587 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.646116][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.646130][T11199] Call Trace: [ 177.646138][T11199] [ 177.646148][T11199] __dump_stack+0x1d/0x30 [ 177.646173][T11199] dump_stack_lvl+0xe8/0x140 [ 177.646198][T11199] dump_stack+0x15/0x1b [ 177.646238][T11199] should_fail_ex+0x265/0x280 [ 177.646264][T11199] ? rfkill_send_events+0x85/0x240 [ 177.646300][T11199] should_failslab+0x8c/0xb0 [ 177.646330][T11199] __kmalloc_cache_noprof+0x4c/0x320 [ 177.646411][T11199] rfkill_send_events+0x85/0x240 [ 177.646447][T11199] rfkill_set_block+0x26d/0x290 [ 177.646478][T11199] rfkill_fop_write+0x3af/0x440 [ 177.646502][T11199] ? __pfx_rfkill_fop_write+0x10/0x10 [ 177.646533][T11199] vfs_write+0x269/0x960 [ 177.646554][T11199] ? __rcu_read_unlock+0x4f/0x70 [ 177.646576][T11199] ? __fget_files+0x184/0x1c0 [ 177.646601][T11199] ksys_write+0xda/0x1a0 [ 177.646699][T11199] __x64_sys_write+0x40/0x50 [ 177.646720][T11199] x64_sys_call+0x27fe/0x2ff0 [ 177.646741][T11199] do_syscall_64+0xd2/0x200 [ 177.646775][T11199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.646870][T11199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 177.646896][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.646937][T11199] RIP: 0033:0x7febb3daeba9 [ 177.647021][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.647041][T11199] RSP: 002b:00007febb280f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.647065][T11199] RAX: ffffffffffffffda RBX: 00007febb3ff5fa0 RCX: 00007febb3daeba9 [ 177.647079][T11199] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.647093][T11199] RBP: 00007febb280f090 R08: 0000000000000000 R09: 0000000000000000 [ 177.647123][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.647134][T11199] R13: 00007febb3ff6038 R14: 00007febb3ff5fa0 R15: 00007ffef4ab2368 [ 177.647152][T11199] [ 177.897474][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.906118][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.944025][T11209] serio: Serial port ptm0 [ 177.958570][T11208] loop5: detected capacity change from 0 to 128 [ 177.963976][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.976573][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.981246][T11208] FAT-fs (loop5): Directory bread(block 32) failed [ 177.991471][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.017052][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.031791][T11218] loop9: detected capacity change from 0 to 7 [ 178.035243][T11208] FAT-fs (loop5): Directory bread(block 33) failed [ 178.038109][T11218] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.051352][T11208] FAT-fs (loop5): Directory bread(block 34) failed [ 178.054345][T11218] Buffer I/O error on dev loop9, logical block 0, async page read [ 178.067426][T11218] loop9: unable to read partition table [ 178.074331][T11208] FAT-fs (loop5): Directory bread(block 35) failed [ 178.075624][T11218] loop_reread_partitions: partition scan of loop9 (ţ被xüźŃř éÚ¬§˝dG¤´ŕ–ݡŻ ťâ·ű [ 178.075624][T11218] ) failed (rc=-5) [ 178.096824][T11208] FAT-fs (loop5): Directory bread(block 36) failed [ 178.107227][T11208] FAT-fs (loop5): Directory bread(block 37) failed [ 178.112780][T11218] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 178.118708][T11208] FAT-fs (loop5): Directory bread(block 38) failed [ 178.129300][T11208] FAT-fs (loop5): Directory bread(block 39) failed [ 178.136139][T11208] FAT-fs (loop5): Directory bread(block 40) failed [ 178.143415][T11208] FAT-fs (loop5): Directory bread(block 41) failed [ 178.163321][T11223] FAULT_INJECTION: forcing a failure. [ 178.163321][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.176925][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.1.2596 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.176964][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.177000][T11223] Call Trace: [ 178.177007][T11223] [ 178.177016][T11223] __dump_stack+0x1d/0x30 [ 178.177043][T11223] dump_stack_lvl+0xe8/0x140 [ 178.177064][T11223] dump_stack+0x15/0x1b [ 178.177079][T11223] should_fail_ex+0x265/0x280 [ 178.177128][T11223] should_fail+0xb/0x20 [ 178.177151][T11223] should_fail_usercopy+0x1a/0x20 [ 178.177179][T11223] _copy_from_user+0x1c/0xb0 [ 178.177207][T11223] sctp_setsockopt+0x154/0xe30 [ 178.177226][T11223] sock_common_setsockopt+0x69/0x80 [ 178.177276][T11223] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 178.177306][T11223] __sys_setsockopt+0x184/0x200 [ 178.177348][T11223] __x64_sys_setsockopt+0x64/0x80 [ 178.177377][T11223] x64_sys_call+0x20ec/0x2ff0 [ 178.177400][T11223] do_syscall_64+0xd2/0x200 [ 178.177458][T11223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.177486][T11223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.177576][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.177596][T11223] RIP: 0033:0x7f8ce7b8eba9 [ 178.177611][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.177628][T11223] RSP: 002b:00007f8ce65ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.177767][T11223] RAX: ffffffffffffffda RBX: 00007f8ce7dd5fa0 RCX: 00007f8ce7b8eba9 [ 178.177782][T11223] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 178.177795][T11223] RBP: 00007f8ce65ef090 R08: 0000000000000008 R09: 0000000000000000 [ 178.177863][T11223] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 178.177875][T11223] R13: 00007f8ce7dd6038 R14: 00007f8ce7dd5fa0 R15: 00007fff065b64d8 [ 178.177893][T11223] [ 178.195050][T11208] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 178.389244][T11208] FAT-fs (loop5): Filesystem has been set read-only [ 178.503275][T11234] loop5: detected capacity change from 0 to 764 [ 178.526268][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 178.544769][T11236] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2600'. [ 178.565509][T11239] ipvlan2: entered promiscuous mode [ 178.572505][T11239] bridge0: port 4(ipvlan2) entered blocking state [ 178.579024][T11239] bridge0: port 4(ipvlan2) entered disabled state [ 178.619470][T11239] ipvlan2: entered allmulticast mode [ 178.625016][T11239] bridge0: entered allmulticast mode [ 178.646850][T11239] ipvlan2: left allmulticast mode [ 178.652001][T11239] bridge0: left allmulticast mode [ 178.755249][T11250] serio: Serial port ptm0 [ 178.957718][T11265] FAULT_INJECTION: forcing a failure. [ 178.957718][T11265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.972136][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.4.2614 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.972162][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.972171][T11265] Call Trace: [ 178.972179][T11265] [ 178.972188][T11265] __dump_stack+0x1d/0x30 [ 178.972214][T11265] dump_stack_lvl+0xe8/0x140 [ 178.972318][T11265] dump_stack+0x15/0x1b [ 178.972410][T11265] should_fail_ex+0x265/0x280 [ 178.972440][T11265] should_fail+0xb/0x20 [ 178.972544][T11265] should_fail_usercopy+0x1a/0x20 [ 178.972589][T11265] _copy_to_user+0x20/0xa0 [ 178.972667][T11265] __se_sys_msgctl+0x1e7/0x290 [ 178.972691][T11265] __x64_sys_msgctl+0x43/0x50 [ 178.972709][T11265] x64_sys_call+0xbe3/0x2ff0 [ 178.972734][T11265] do_syscall_64+0xd2/0x200 [ 178.972771][T11265] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.972803][T11265] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.972830][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.972929][T11265] RIP: 0033:0x7fbb4ef2eba9 [ 178.972946][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.972965][T11265] RSP: 002b:00007fbb4d98f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 178.972987][T11265] RAX: ffffffffffffffda RBX: 00007fbb4f175fa0 RCX: 00007fbb4ef2eba9 [ 178.973000][T11265] RDX: 0000200000000380 RSI: 000000000000000c RDI: 0000000000000000 [ 178.973012][T11265] RBP: 00007fbb4d98f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.973023][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.973056][T11265] R13: 00007fbb4f176038 R14: 00007fbb4f175fa0 R15: 00007ffe63fab6c8 [ 178.973077][T11265] [ 179.549061][T11276] loop4: detected capacity change from 0 to 128 [ 179.573195][T11278] serio: Serial port ptm0 [ 179.653761][T11280] loop4: detected capacity change from 0 to 8192 [ 179.791300][T11285] ipvlan2: entered promiscuous mode [ 179.808816][T11285] bridge0: port 4(ipvlan2) entered blocking state [ 179.815340][T11285] bridge0: port 4(ipvlan2) entered disabled state [ 179.836597][T11285] ipvlan2: entered allmulticast mode [ 179.842042][T11285] bridge0: entered allmulticast mode [ 179.859533][T11285] ipvlan2: left allmulticast mode [ 179.864820][T11285] bridge0: left allmulticast mode [ 179.979824][T11295] loop5: detected capacity change from 0 to 1024 [ 179.993905][T11297] FAULT_INJECTION: forcing a failure. [ 179.993905][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.999929][T11295] EXT4-fs: inline encryption not supported [ 180.007132][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.1.2623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.007227][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.007240][T11297] Call Trace: [ 180.007248][T11297] [ 180.007257][T11297] __dump_stack+0x1d/0x30 [ 180.007339][T11297] dump_stack_lvl+0xe8/0x140 [ 180.007359][T11297] dump_stack+0x15/0x1b [ 180.007376][T11297] should_fail_ex+0x265/0x280 [ 180.007401][T11297] should_fail+0xb/0x20 [ 180.007422][T11297] should_fail_usercopy+0x1a/0x20 [ 180.007521][T11297] _copy_from_iter+0xd2/0xe80 [ 180.007549][T11297] ? __build_skb_around+0x1a0/0x200 [ 180.007573][T11297] ? __alloc_skb+0x223/0x320 [ 180.007596][T11297] netlink_sendmsg+0x471/0x6b0 [ 180.007624][T11297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.007697][T11297] __sock_sendmsg+0x145/0x180 [ 180.007728][T11297] ____sys_sendmsg+0x31e/0x4e0 [ 180.007776][T11297] ___sys_sendmsg+0x17b/0x1d0 [ 180.007812][T11297] __x64_sys_sendmsg+0xd4/0x160 [ 180.007844][T11297] x64_sys_call+0x191e/0x2ff0 [ 180.007866][T11297] do_syscall_64+0xd2/0x200 [ 180.007896][T11297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.007968][T11297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.007998][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.008019][T11297] RIP: 0033:0x7f8ce7b8eba9 [ 180.008037][T11297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.008055][T11297] RSP: 002b:00007f8ce65ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.008124][T11297] RAX: ffffffffffffffda RBX: 00007f8ce7dd5fa0 RCX: 00007f8ce7b8eba9 [ 180.008137][T11297] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 180.008151][T11297] RBP: 00007f8ce65ef090 R08: 0000000000000000 R09: 0000000000000000 [ 180.008163][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.008176][T11297] R13: 00007f8ce7dd6038 R14: 00007f8ce7dd5fa0 R15: 00007fff065b64d8 [ 180.008195][T11297] [ 180.217646][T11295] EXT4-fs: Ignoring removed bh option [ 180.238354][T11295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.262309][T11295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.392728][T11307] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2626'. [ 180.469218][T11307] loop5: detected capacity change from 0 to 1024 [ 180.476850][T11307] EXT4-fs: Ignoring removed orlov option [ 180.496203][T11307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.843839][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.950745][T11341] loop4: detected capacity change from 0 to 2048 [ 181.164356][T11341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.182530][T11353] loop5: detected capacity change from 0 to 8192 [ 181.207705][T11341] tipc: Enabling of bearer rejected, failed to enable media [ 181.467386][T11373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2648'. [ 181.579937][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2647'. [ 181.656831][ T29] kauditd_printk_skb: 2133 callbacks suppressed [ 181.656849][ T29] audit: type=1400 audit(1757698913.620:18520): avc: denied { getopt } for pid=11367 comm="syz.1.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 181.763039][ T3304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 181.805307][ T29] audit: type=1326 audit(1757698913.680:18521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 181.829762][ T29] audit: type=1326 audit(1757698913.680:18522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 181.853936][ T29] audit: type=1326 audit(1757698913.680:18523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 181.877030][ T3304] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 181.877974][ T29] audit: type=1326 audit(1757698913.680:18524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 181.911120][ T29] audit: type=1326 audit(1757698913.680:18525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.3.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb3daeba9 code=0x7ffc0000 [ 181.935456][ T29] audit: type=1400 audit(1757698913.740:18526): avc: denied { remove_name } for pid=3304 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.958994][ T29] audit: type=1400 audit(1757698913.740:18527): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.008140][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.056800][ T29] audit: type=1400 audit(1757698913.870:18528): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.079456][ T29] audit: type=1400 audit(1757698913.870:18529): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 182.149328][T11383] loop7: detected capacity change from 0 to 512 [ 182.165080][T11383] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 182.175454][T11383] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 182.250661][T11391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11391 comm=syz.3.2656 [ 182.485238][T11408] loop7: detected capacity change from 0 to 512 [ 182.493676][T11408] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 182.518489][T11408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 182.528902][T11408] System zones: 1-12 [ 183.337278][T11408] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.2661: corrupted in-inode xattr: e_value size too large [ 183.516607][T11408] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2661: couldn't read orphan inode 15 (err -117) [ 183.532522][T11408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.562651][T11422] FAULT_INJECTION: forcing a failure. [ 183.562651][T11422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.576067][T11422] CPU: 0 UID: 0 PID: 11422 Comm: syz.3.2663 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.576122][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.576130][T11422] Call Trace: [ 183.576135][T11422] [ 183.576140][T11422] __dump_stack+0x1d/0x30 [ 183.576156][T11422] dump_stack_lvl+0xe8/0x140 [ 183.576169][T11422] dump_stack+0x15/0x1b [ 183.576179][T11422] should_fail_ex+0x265/0x280 [ 183.576225][T11422] should_fail+0xb/0x20 [ 183.576238][T11422] should_fail_usercopy+0x1a/0x20 [ 183.576299][T11422] _copy_from_user+0x1c/0xb0 [ 183.576316][T11422] kstrtouint_from_user+0x69/0xf0 [ 183.576328][T11422] ? 0xffffffff81000000 [ 183.576335][T11422] ? selinux_file_permission+0x1e4/0x320 [ 183.576348][T11422] proc_fail_nth_write+0x50/0x160 [ 183.576404][T11422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 183.576417][T11422] vfs_write+0x269/0x960 [ 183.576427][T11422] ? vfs_read+0x4e6/0x770 [ 183.576438][T11422] ? __rcu_read_unlock+0x4f/0x70 [ 183.576521][T11422] ? __fget_files+0x184/0x1c0 [ 183.576572][T11422] ksys_write+0xda/0x1a0 [ 183.576588][T11422] __x64_sys_write+0x40/0x50 [ 183.576599][T11422] x64_sys_call+0x27fe/0x2ff0 [ 183.576676][T11422] do_syscall_64+0xd2/0x200 [ 183.576691][T11422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.576751][T11422] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.576779][T11422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.576790][T11422] RIP: 0033:0x7febb3dad65f [ 183.576799][T11422] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 183.576808][T11422] RSP: 002b:00007febb280f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 183.576896][T11422] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febb3dad65f [ 183.576902][T11422] RDX: 0000000000000001 RSI: 00007febb280f0a0 RDI: 0000000000000008 [ 183.576909][T11422] RBP: 00007febb280f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.576915][T11422] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 183.576921][T11422] R13: 00007febb3ff6038 R14: 00007febb3ff5fa0 R15: 00007ffef4ab2368 [ 183.576984][T11422] [ 183.826583][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.836148][T11429] FAULT_INJECTION: forcing a failure. [ 183.836148][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 183.849722][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.5.2666 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.849750][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.849763][T11429] Call Trace: [ 183.849771][T11429] [ 183.849782][T11429] __dump_stack+0x1d/0x30 [ 183.849807][T11429] dump_stack_lvl+0xe8/0x140 [ 183.849825][T11429] dump_stack+0x15/0x1b [ 183.849839][T11429] should_fail_ex+0x265/0x280 [ 183.849861][T11429] should_failslab+0x8c/0xb0 [ 183.849885][T11429] kmem_cache_alloc_noprof+0x50/0x310 [ 183.849916][T11429] ? vm_area_alloc+0x2c/0xb0 [ 183.849950][T11429] vm_area_alloc+0x2c/0xb0 [ 183.849982][T11429] mmap_region+0xaa2/0x1630 [ 183.850023][T11429] do_mmap+0x9b3/0xbe0 [ 183.850058][T11429] vm_mmap_pgoff+0x17a/0x2e0 [ 183.850092][T11429] ksys_mmap_pgoff+0xc2/0x310 [ 183.850108][T11429] ? __x64_sys_mmap+0x49/0x70 [ 183.850130][T11429] x64_sys_call+0x14a3/0x2ff0 [ 183.850150][T11429] do_syscall_64+0xd2/0x200 [ 183.850181][T11429] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.850206][T11429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.850232][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.850255][T11429] RIP: 0033:0x7fc39567ebe3 [ 183.850269][T11429] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 183.850286][T11429] RSP: 002b:00007fc3940dee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 183.850306][T11429] RAX: ffffffffffffffda RBX: 000000000000046e RCX: 00007fc39567ebe3 [ 183.850318][T11429] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 183.850332][T11429] RBP: 0000200000000dc2 R08: 00000000ffffffff R09: 0000000000000000 [ 183.850346][T11429] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 183.850359][T11429] R13: 00007fc3940deef0 R14: 00007fc3940deeb0 R15: 0000200000000100 [ 183.850375][T11429] [ 183.869035][T11428] tmpfs: Unknown parameter 'mpo‚' [ 183.886379][T11431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11431 comm=syz.3.2669 [ 183.926596][T11428] nfs4: Bad value for 'source' [ 184.194530][T11444] serio: Serial port ptm0 [ 184.384277][T11462] loop7: detected capacity change from 0 to 1024 [ 184.674274][T11462] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2673: Failed to acquire dquot type 0 [ 184.709249][T11462] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 184.758716][T11462] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2673: corrupted inode contents [ 184.808331][T11462] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.2673: mark_inode_dirty error [ 184.833010][T11462] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2673: corrupted inode contents [ 184.863266][T11462] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.2673: mark_inode_dirty error [ 184.918160][T11462] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2673: corrupted inode contents [ 184.940157][T11462] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 184.949486][T11462] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.2673: corrupted inode contents [ 184.963053][T11462] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.2673: mark_inode_dirty error [ 184.974910][T11462] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 184.990021][T11462] EXT4-fs (loop7): 1 truncate cleaned up [ 184.996554][T11462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.014395][T11459] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.135177][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.187774][T11506] tmpfs: Unknown parameter 'mpo‚' [ 185.226614][T11506] nfs4: Bad value for 'source' [ 185.236167][T11506] loop7: detected capacity change from 0 to 512 [ 185.257964][T11466] chnl_net:caif_netlink_parms(): no params data found [ 185.265143][T11506] EXT4-fs warning (device loop7): ext4_xattr_inode_get:556: inode #11: comm syz.7.2686: EA inode hash validation failed [ 185.283750][T11506] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2686: corrupted inode contents [ 185.297230][T11506] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.2686: mark_inode_dirty error [ 185.314681][T11522] loop5: detected capacity change from 0 to 764 [ 185.323796][T11506] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2686: corrupted inode contents [ 185.345909][T11506] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #15: comm syz.7.2686: mark_inode_dirty error [ 185.378922][T11506] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #15: comm syz.7.2686: mark inode dirty (error -117) [ 185.401924][T11506] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 185.411736][T11506] EXT4-fs (loop7): 1 orphan inode deleted [ 185.418211][T11506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.443867][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.451340][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.461897][T11466] bridge_slave_0: entered allmulticast mode [ 185.468664][T11466] bridge_slave_0: entered promiscuous mode [ 185.476856][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.484200][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.491742][T11466] bridge_slave_1: entered allmulticast mode [ 185.492442][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.498281][T11466] bridge_slave_1: entered promiscuous mode [ 185.533642][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.545444][T11541] FAULT_INJECTION: forcing a failure. [ 185.545444][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.559139][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.5.2700 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.559170][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.559246][T11541] Call Trace: [ 185.559254][T11541] [ 185.559263][T11541] __dump_stack+0x1d/0x30 [ 185.559287][T11541] dump_stack_lvl+0xe8/0x140 [ 185.559308][T11541] dump_stack+0x15/0x1b [ 185.559326][T11541] should_fail_ex+0x265/0x280 [ 185.559349][T11541] should_fail+0xb/0x20 [ 185.559390][T11541] should_fail_usercopy+0x1a/0x20 [ 185.559414][T11541] _copy_to_user+0x20/0xa0 [ 185.559522][T11541] simple_read_from_buffer+0xb5/0x130 [ 185.559547][T11541] proc_fail_nth_read+0x10e/0x150 [ 185.559608][T11541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.559705][T11541] vfs_read+0x1a8/0x770 [ 185.559725][T11541] ? __rcu_read_unlock+0x4f/0x70 [ 185.559780][T11541] ? __fget_files+0x184/0x1c0 [ 185.559820][T11541] ksys_read+0xda/0x1a0 [ 185.559844][T11541] __x64_sys_read+0x40/0x50 [ 185.559865][T11541] x64_sys_call+0x27bc/0x2ff0 [ 185.559889][T11541] do_syscall_64+0xd2/0x200 [ 185.559924][T11541] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.559962][T11541] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.559988][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.560009][T11541] RIP: 0033:0x7fc39567d5bc [ 185.560025][T11541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.560113][T11541] RSP: 002b:00007fc3940df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.560133][T11541] RAX: ffffffffffffffda RBX: 00007fc3958c5fa0 RCX: 00007fc39567d5bc [ 185.560146][T11541] RDX: 000000000000000f RSI: 00007fc3940df0a0 RDI: 0000000000000004 [ 185.560157][T11541] RBP: 00007fc3940df090 R08: 0000000000000000 R09: 0000000000000000 [ 185.560170][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.560184][T11541] R13: 00007fc3958c6038 R14: 00007fc3958c5fa0 R15: 00007ffdeb28bab8 [ 185.560321][T11541] [ 185.768828][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.799680][T11466] team0: Port device team_slave_0 added [ 185.815764][T11466] team0: Port device team_slave_1 added [ 185.833182][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2701'. [ 185.843701][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.850735][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.877440][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.899077][T11558] loop5: detected capacity change from 0 to 512 [ 185.899122][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.906365][T11558] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 185.912611][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.937348][T11558] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 185.948531][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.996504][T11466] hsr_slave_0: entered promiscuous mode [ 186.006661][T11466] hsr_slave_1: entered promiscuous mode [ 186.006908][T11466] debugfs: 'hsr0' already exists in 'hsr' [ 186.006925][T11466] Cannot create hsr debugfs directory [ 186.026088][T11565] SELinux: Context  is not valid (left unmapped). [ 186.026594][T11565] blkio.reset_stats is deprecated [ 186.056808][T11565] tipc: Enabling of bearer rejected, failed to enable media [ 186.059607][T11567] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 186.059626][T11567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2707'. [ 186.078731][T11571] loop7: detected capacity change from 0 to 512 [ 186.089396][T11571] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.101089][T11466] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.111421][T11571] EXT4-fs (loop7): 1 truncate cleaned up [ 186.119786][T11575] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 186.127026][T11571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.192890][T11577] tmpfs: Unknown parameter 'mpo‚' [ 186.198512][T11579] loop5: detected capacity change from 0 to 764 [ 186.199576][T11577] nfs4: Bad value for 'source' [ 186.211292][T11466] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.226924][T11577] loop4: detected capacity change from 0 to 512 [ 186.235410][T11577] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.2709: EA inode hash validation failed [ 186.248970][T11577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2709: corrupted inode contents [ 186.261936][T11577] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.2709: mark_inode_dirty error [ 186.273998][T11577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.2709: corrupted inode contents [ 186.310047][T11577] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.2709: mark_inode_dirty error [ 186.330188][T11466] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.344399][T11577] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.2709: mark inode dirty (error -117) [ 186.357474][T11571] syzkaller1: entered promiscuous mode [ 186.363109][T11571] syzkaller1: entered allmulticast mode [ 186.372573][T11571] vhci_hcd: invalid port number 253 [ 186.378037][T11571] vhci_hcd: default hub control req: 8018 v0303 i00fd l0 [ 186.387846][T11577] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 186.437411][T11577] EXT4-fs (loop4): 1 orphan inode deleted [ 186.443770][T11577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.468012][T11466] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.484524][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.507369][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.516651][T11588] loop7: detected capacity change from 0 to 1024 [ 186.523801][T11588] EXT4-fs: Ignoring removed orlov option [ 186.546889][T11588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.573068][T11588] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.574221][T11466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.611845][T11466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.616413][T11588] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.2713: lblock 3 mapped to illegal pblock 3 (length 1) [ 186.636764][T11466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.646059][T11466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.657477][T11588] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 186.670054][T11588] EXT4-fs (loop7): This should not happen!! Data will be lost [ 186.670054][T11588] [ 186.686753][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 186.686818][ T29] audit: type=1326 audit(1757698918.660:18746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.735546][T11600] loop4: detected capacity change from 0 to 1024 [ 186.736860][T11608] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2718'. [ 186.744521][T11600] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 186.759461][ T29] audit: type=1400 audit(1757698918.700:18747): avc: denied { create } for pid=11607 comm="syz.3.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.779694][ T29] audit: type=1326 audit(1757698918.710:18748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.791307][T11617] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2718'. [ 186.804145][ T29] audit: type=1326 audit(1757698918.710:18749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.838802][ T29] audit: type=1326 audit(1757698918.710:18750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.864115][ T29] audit: type=1326 audit(1757698918.710:18751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.864145][ T29] audit: type=1326 audit(1757698918.710:18752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.864168][ T29] audit: type=1326 audit(1757698918.710:18753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.864201][ T29] audit: type=1326 audit(1757698918.710:18754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.864227][ T29] audit: type=1326 audit(1757698918.710:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.4.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 186.907210][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.023517][T11608] batadv1: entered promiscuous mode [ 187.029101][T11608] batadv1: entered allmulticast mode [ 187.035474][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.057260][T11627] loop4: detected capacity change from 0 to 764 [ 187.077892][T11629] loop5: detected capacity change from 0 to 128 [ 187.095875][T11617] batadv1: entered promiscuous mode [ 187.101636][T11617] batadv1: entered allmulticast mode [ 187.121951][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2721'. [ 187.145453][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.169132][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.176730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.199946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.207330][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.270690][T11653] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11653 comm=syz.4.2728 [ 187.308359][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.469738][T11664] loop5: detected capacity change from 0 to 2048 [ 187.489773][T11664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 187.516733][T11466] veth0_vlan: entered promiscuous mode [ 187.526107][T11466] veth1_vlan: entered promiscuous mode [ 187.550209][T11466] veth0_macvtap: entered promiscuous mode [ 187.559868][T11466] veth1_macvtap: entered promiscuous mode [ 187.576021][T11466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.768860][T11674] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.806879][T11466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.849076][T11677] tipc: Started in network mode [ 187.854187][T11677] tipc: Node identity 0ae3531f2be2, cluster identity 4711 [ 187.861490][T11677] tipc: Enabled bearer , priority 0 [ 187.882382][T11679] loop7: detected capacity change from 0 to 764 [ 187.898752][T11674] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 522 with error 28 [ 187.911398][T11674] EXT4-fs (loop5): This should not happen!! Data will be lost [ 187.911398][T11674] [ 187.921243][T11674] EXT4-fs (loop5): Total free blocks count 0 [ 187.927334][T11674] EXT4-fs (loop5): Free/Dirty block details [ 187.933473][T11674] EXT4-fs (loop5): free_blocks=2415919104 [ 187.939239][T11674] EXT4-fs (loop5): dirty_blocks=528 [ 187.944567][T11674] EXT4-fs (loop5): Block reservation details [ 187.950886][T11674] EXT4-fs (loop5): i_reserved_data_blocks=33 [ 187.999679][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.008924][T11680] syzkaller0: entered promiscuous mode [ 188.014457][T11680] syzkaller0: entered allmulticast mode [ 188.016456][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.035663][T11677] tipc: Resetting bearer [ 188.044587][T11676] tipc: Resetting bearer [ 188.053301][T11676] tipc: Disabling bearer [ 188.063423][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.080417][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.099285][T11683] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2733'. [ 188.130000][ T86] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 188.286231][T11703] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 188.384930][T11709] loop4: detected capacity change from 0 to 512 [ 188.392255][T11709] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 188.465265][T11709] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 188.649592][T11714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.803712][T11714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.873252][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 189.038421][T11714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.060417][T11729] tmpfs: Unknown parameter 'mpo‚' [ 189.066046][T11729] nfs4: Bad value for 'source' [ 189.164042][T11714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.224262][T11738] FAULT_INJECTION: forcing a failure. [ 189.224262][T11738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.237993][T11738] CPU: 0 UID: 0 PID: 11738 Comm: syz.1.2749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.238017][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.238026][T11738] Call Trace: [ 189.238032][T11738] [ 189.238038][T11738] __dump_stack+0x1d/0x30 [ 189.238055][T11738] dump_stack_lvl+0xe8/0x140 [ 189.238090][T11738] dump_stack+0x15/0x1b [ 189.238177][T11738] should_fail_ex+0x265/0x280 [ 189.238202][T11738] should_fail+0xb/0x20 [ 189.238221][T11738] should_fail_usercopy+0x1a/0x20 [ 189.238239][T11738] _copy_from_user+0x1c/0xb0 [ 189.238338][T11738] __copy_msghdr+0x244/0x300 [ 189.238443][T11738] ___sys_sendmsg+0x109/0x1d0 [ 189.238476][T11738] __x64_sys_sendmsg+0xd4/0x160 [ 189.238535][T11738] x64_sys_call+0x191e/0x2ff0 [ 189.238575][T11738] do_syscall_64+0xd2/0x200 [ 189.238607][T11738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.238657][T11738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.238683][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.238703][T11738] RIP: 0033:0x7fbdf944eba9 [ 189.238783][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.238800][T11738] RSP: 002b:00007fbdf7eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.238822][T11738] RAX: ffffffffffffffda RBX: 00007fbdf9695fa0 RCX: 00007fbdf944eba9 [ 189.238837][T11738] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000003 [ 189.238851][T11738] RBP: 00007fbdf7eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.238863][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.238944][T11738] R13: 00007fbdf9696038 R14: 00007fbdf9695fa0 R15: 00007fff0ba42648 [ 189.238964][T11738] [ 189.441859][ T3466] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.458001][ T86] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.472557][ T86] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.482209][ T86] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.911329][T11753] loop4: detected capacity change from 0 to 1024 [ 189.918159][T11753] EXT4-fs: Ignoring removed orlov option [ 189.930247][T11753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.950742][T11759] FAULT_INJECTION: forcing a failure. [ 189.950742][T11759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.963932][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.7.2754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.963990][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.964002][T11759] Call Trace: [ 189.964009][T11759] [ 189.964017][T11759] __dump_stack+0x1d/0x30 [ 189.964040][T11759] dump_stack_lvl+0xe8/0x140 [ 189.964058][T11759] dump_stack+0x15/0x1b [ 189.964100][T11759] should_fail_ex+0x265/0x280 [ 189.964124][T11759] should_fail+0xb/0x20 [ 189.964145][T11759] should_fail_usercopy+0x1a/0x20 [ 189.964171][T11759] strncpy_from_user+0x25/0x230 [ 189.964228][T11759] ? __kmalloc_cache_noprof+0x189/0x320 [ 189.964262][T11759] __se_sys_memfd_create+0x1ff/0x590 [ 189.964289][T11759] __x64_sys_memfd_create+0x31/0x40 [ 189.964349][T11759] x64_sys_call+0x2abe/0x2ff0 [ 189.964369][T11759] do_syscall_64+0xd2/0x200 [ 189.964406][T11759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.964504][T11759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.964537][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.964560][T11759] RIP: 0033:0x7f103c11eba9 [ 189.964575][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.964662][T11759] RSP: 002b:00007f103ab7ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 189.964682][T11759] RAX: ffffffffffffffda RBX: 000000000000407c RCX: 00007f103c11eba9 [ 189.964703][T11759] RDX: 00007f103ab7edec RSI: 0000000000000000 RDI: 00007f103c1a27e8 [ 189.964715][T11759] RBP: 0000200000008140 R08: 00007f103ab7eb07 R09: 0000000000000000 [ 189.964762][T11759] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 189.964773][T11759] R13: 00007f103ab7edec R14: 00007f103ab7edf0 R15: 00007fff1da058d8 [ 189.964790][T11759] [ 189.983936][T11753] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.104864][T11754] pim6reg: entered allmulticast mode [ 190.180045][T11753] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.184924][T11766] loop5: detected capacity change from 0 to 2048 [ 190.201499][T11753] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 190.214141][T11753] EXT4-fs (loop4): This should not happen!! Data will be lost [ 190.214141][T11753] [ 190.240769][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.256314][T11766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.320875][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.336941][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 190.363461][T11777] loop7: detected capacity change from 0 to 764 [ 190.364754][ T6165] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 190.386980][ T6165] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 190.398868][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.417575][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.432938][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.443575][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.461819][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.476888][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.492117][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.507877][ T86] bridge0: port 3(vlan0) entered disabled state [ 190.517022][ T86] bridge_slave_1: left allmulticast mode [ 190.523091][ T86] bridge_slave_1: left promiscuous mode [ 190.529115][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.550687][T11753] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2753: lblock 3 mapped to illegal pblock 3 (length 1) [ 190.578873][ T86] bridge_slave_0: left allmulticast mode [ 190.584734][ T86] bridge_slave_0: left promiscuous mode [ 190.590547][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.700718][T11804] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11804 comm=syz.1.2772 [ 190.823504][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.923034][ T86] hsr_slave_0: left promiscuous mode [ 190.932020][T11813] FAULT_INJECTION: forcing a failure. [ 190.932020][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 190.945424][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.4.2773 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.945489][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.945500][T11813] Call Trace: [ 190.945517][T11813] [ 190.945525][T11813] __dump_stack+0x1d/0x30 [ 190.945546][T11813] dump_stack_lvl+0xe8/0x140 [ 190.945566][T11813] dump_stack+0x15/0x1b [ 190.945585][T11813] should_fail_ex+0x265/0x280 [ 190.945611][T11813] should_failslab+0x8c/0xb0 [ 190.945640][T11813] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 190.945680][T11813] ? sidtab_sid2str_get+0xa0/0x130 [ 190.945703][T11813] kmemdup_noprof+0x2b/0x70 [ 190.945776][T11813] sidtab_sid2str_get+0xa0/0x130 [ 190.945801][T11813] security_sid_to_context_core+0x1eb/0x2e0 [ 190.945827][T11813] security_sid_to_context+0x27/0x40 [ 190.945849][T11813] selinux_lsmprop_to_secctx+0x67/0xf0 [ 190.945939][T11813] security_lsmprop_to_secctx+0x43/0x80 [ 190.946031][T11813] audit_log_task_context+0x77/0x190 [ 190.946062][T11813] audit_log_task+0xf4/0x250 [ 190.946090][T11813] audit_seccomp+0x61/0x100 [ 190.946181][T11813] ? __seccomp_filter+0x68c/0x10d0 [ 190.946208][T11813] __seccomp_filter+0x69d/0x10d0 [ 190.946330][T11813] ? mas_find+0x5d5/0x700 [ 190.946361][T11813] ? __cond_resched+0x4e/0x90 [ 190.946390][T11813] __secure_computing+0x82/0x150 [ 190.946487][T11813] syscall_trace_enter+0xcf/0x1e0 [ 190.946516][T11813] do_syscall_64+0xac/0x200 [ 190.946550][T11813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 190.946575][T11813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 190.946621][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.946649][T11813] RIP: 0033:0x7fbb4ef2d5bc [ 190.946710][T11813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.946732][T11813] RSP: 002b:00007fbb4d98f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.946756][T11813] RAX: ffffffffffffffda RBX: 00007fbb4f175fa0 RCX: 00007fbb4ef2d5bc [ 190.946786][T11813] RDX: 000000000000000f RSI: 00007fbb4d98f0a0 RDI: 0000000000000005 [ 190.946800][T11813] RBP: 00007fbb4d98f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.946814][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.946829][T11813] R13: 00007fbb4f176038 R14: 00007fbb4f175fa0 R15: 00007ffe63fab6c8 [ 190.946918][T11813] [ 191.285342][ T86] hsr_slave_1: left promiscuous mode [ 191.297412][ T86] veth0_macvtap: left promiscuous mode [ 191.303201][ T86] veth1_vlan: left promiscuous mode [ 191.326963][T11824] loop7: detected capacity change from 0 to 764 [ 191.510712][T11839] loop7: detected capacity change from 0 to 1024 [ 191.518324][T11839] ext4: Unknown parameter 'func' [ 191.526503][T11841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 191.761374][T11856] loop4: detected capacity change from 0 to 128 [ 191.792292][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 191.792308][ T29] audit: type=1326 audit(1757698923.769:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 191.823950][ T29] audit: type=1326 audit(1757698923.769:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 191.848098][ T29] audit: type=1326 audit(1757698923.769:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 191.976070][T11866] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2795'. [ 192.005992][ T29] audit: type=1400 audit(1757698923.979:18985): avc: denied { ioctl } for pid=11865 comm="syz.7.2795" path="socket:[36020]" dev="sockfs" ino=36020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.093429][T11866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11866 comm=syz.7.2795 [ 192.144353][ T29] audit: type=1326 audit(1757698924.099:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11874 comm="syz.7.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.168203][ T29] audit: type=1326 audit(1757698924.099:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11874 comm="syz.7.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.192206][ T29] audit: type=1326 audit(1757698924.099:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11874 comm="syz.7.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.216414][ T29] audit: type=1326 audit(1757698924.099:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11874 comm="syz.7.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.278702][T11891] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2804'. [ 192.314304][T11892] FAULT_INJECTION: forcing a failure. [ 192.314304][T11892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.325820][T11891] loop7: detected capacity change from 0 to 1024 [ 192.327718][T11892] CPU: 0 UID: 0 PID: 11892 Comm: syz.4.2803 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.327787][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.327799][T11892] Call Trace: [ 192.327807][T11892] [ 192.327815][T11892] __dump_stack+0x1d/0x30 [ 192.327838][T11892] dump_stack_lvl+0xe8/0x140 [ 192.327880][T11892] dump_stack+0x15/0x1b [ 192.327924][T11892] should_fail_ex+0x265/0x280 [ 192.327957][T11892] should_fail+0xb/0x20 [ 192.327978][T11892] should_fail_usercopy+0x1a/0x20 [ 192.328009][T11892] _copy_to_user+0x20/0xa0 [ 192.328048][T11892] simple_read_from_buffer+0xb5/0x130 [ 192.328152][T11892] proc_fail_nth_read+0x10e/0x150 [ 192.328179][T11892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.328252][T11892] vfs_read+0x1a8/0x770 [ 192.328273][T11892] ? __rcu_read_unlock+0x4f/0x70 [ 192.328295][T11892] ? __fget_files+0x184/0x1c0 [ 192.328322][T11892] ksys_read+0xda/0x1a0 [ 192.328375][T11892] __x64_sys_read+0x40/0x50 [ 192.328398][T11892] x64_sys_call+0x27bc/0x2ff0 [ 192.328478][T11892] do_syscall_64+0xd2/0x200 [ 192.328509][T11892] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.328533][T11892] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.328578][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.328655][T11892] RIP: 0033:0x7fbb4ef2d5bc [ 192.328672][T11892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.328690][T11892] RSP: 002b:00007fbb4d98f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.328712][T11892] RAX: ffffffffffffffda RBX: 00007fbb4f175fa0 RCX: 00007fbb4ef2d5bc [ 192.328745][T11892] RDX: 000000000000000f RSI: 00007fbb4d98f0a0 RDI: 0000000000000006 [ 192.328825][T11892] RBP: 00007fbb4d98f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.328837][T11892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.328850][T11892] R13: 00007fbb4f176038 R14: 00007fbb4f175fa0 R15: 00007ffe63fab6c8 [ 192.328868][T11892] [ 192.447525][ T29] audit: type=1326 audit(1757698924.219:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.7.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.562564][ T29] audit: type=1326 audit(1757698924.219:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.7.2799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f103c11eba9 code=0x7ffc0000 [ 192.588015][T11891] EXT4-fs: Ignoring removed orlov option [ 192.595382][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2805'. [ 192.613504][T11891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.631712][T11898] loop4: detected capacity change from 0 to 128 [ 192.665326][T11903] FAULT_INJECTION: forcing a failure. [ 192.665326][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 192.678019][T11903] CPU: 1 UID: 0 PID: 11903 Comm: syz.5.2808 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.678055][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.678069][T11903] Call Trace: [ 192.678077][T11903] [ 192.678085][T11903] __dump_stack+0x1d/0x30 [ 192.678108][T11903] dump_stack_lvl+0xe8/0x140 [ 192.678127][T11903] dump_stack+0x15/0x1b [ 192.678142][T11903] should_fail_ex+0x265/0x280 [ 192.678167][T11903] should_failslab+0x8c/0xb0 [ 192.678192][T11903] kmem_cache_alloc_noprof+0x50/0x310 [ 192.678218][T11903] ? vm_area_alloc+0x2c/0xb0 [ 192.678246][T11903] vm_area_alloc+0x2c/0xb0 [ 192.678272][T11903] mmap_region+0xaa2/0x1630 [ 192.678323][T11903] do_mmap+0x9b3/0xbe0 [ 192.678357][T11903] vm_mmap_pgoff+0x17a/0x2e0 [ 192.678390][T11903] ksys_mmap_pgoff+0xc2/0x310 [ 192.678409][T11903] ? __x64_sys_mmap+0x49/0x70 [ 192.678432][T11903] x64_sys_call+0x14a3/0x2ff0 [ 192.678454][T11903] do_syscall_64+0xd2/0x200 [ 192.678486][T11903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.678510][T11903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.678541][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.678562][T11903] RIP: 0033:0x7fc39567ebe3 [ 192.678580][T11903] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 192.678600][T11903] RSP: 002b:00007fc3940dee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.678619][T11903] RAX: ffffffffffffffda RBX: 000000000000059b RCX: 00007fc39567ebe3 [ 192.678631][T11903] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 192.678642][T11903] RBP: 0000200000001102 R08: 00000000ffffffff R09: 0000000000000000 [ 192.678654][T11903] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 192.678674][T11903] R13: 00007fc3940deef0 R14: 00007fc3940deeb0 R15: 0000200000000600 [ 192.678692][T11903] [ 193.011346][T11919] loop5: detected capacity change from 0 to 2048 [ 193.020332][T11919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.179900][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'. [ 193.189127][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2810'. [ 194.174923][T11927] SELinux: ebitmap: truncated map [ 194.227033][T11927] SELinux: failed to load policy [ 194.248880][T11927] tipc: Started in network mode [ 194.253804][T11927] tipc: Node identity 9ab43049988, cluster identity 4711 [ 194.260917][T11927] tipc: Enabled bearer , priority 0 [ 194.262062][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.287836][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.297675][T11926] tipc: Resetting bearer [ 194.329238][T11926] tipc: Disabling bearer [ 194.370300][T11940] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11940 comm=syz.4.2820 [ 194.431565][T11934] loop5: detected capacity change from 0 to 8192 [ 195.030946][T11966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11966 comm=syz.3.2826 [ 195.337547][T11985] loop7: detected capacity change from 0 to 764 [ 195.426208][T11995] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2837'. [ 195.432015][T11999] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11999 comm=syz.7.2838 [ 195.453463][T11995] loop5: detected capacity change from 0 to 1024 [ 195.469068][T11995] EXT4-fs: Ignoring removed orlov option [ 195.500543][T11995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.527857][T12004] loop4: detected capacity change from 0 to 8192 [ 196.178605][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.222671][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 196.255186][T12023] batadv0: entered promiscuous mode [ 196.319385][T12023] macvtap1: entered promiscuous mode [ 196.324882][T12023] macvtap1: entered allmulticast mode [ 196.330336][T12023] batadv0: entered allmulticast mode [ 196.338194][T12023] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 196.353556][T12028] batadv0: left allmulticast mode [ 196.358861][T12028] batadv0: left promiscuous mode [ 196.443974][T12041] loop5: detected capacity change from 0 to 764 [ 196.590302][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2854'. [ 196.642900][T12062] loop4: detected capacity change from 0 to 764 [ 196.704292][T12058] loop7: detected capacity change from 0 to 8192 [ 196.943044][T12065] chnl_net:caif_netlink_parms(): no params data found [ 197.085351][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 197.085415][ T29] audit: type=1400 audit(1757698929.058:19243): avc: denied { getopt } for pid=12096 comm="syz.4.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.094984][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 197.124332][ T3792] bridge0: port 3(batadv0) entered disabled state [ 197.139521][ T3792] bridge_slave_1: left allmulticast mode [ 197.145370][ T3792] bridge_slave_1: left promiscuous mode [ 197.151108][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.163994][ T3792] bridge_slave_0: left allmulticast mode [ 197.170051][ T3792] bridge_slave_0: left promiscuous mode [ 197.175984][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.243618][ T29] audit: type=1326 audit(1757698929.218:19244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.5.2868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc39567eba9 code=0x0 [ 197.272929][ T29] audit: type=1326 audit(1757698929.218:19245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb4ef25b67 code=0x7ffc0000 [ 197.297130][ T29] audit: type=1326 audit(1757698929.218:19246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4eecada9 code=0x7ffc0000 [ 197.321405][ T29] audit: type=1326 audit(1757698929.218:19247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb4ef25b67 code=0x7ffc0000 [ 197.345135][ T29] audit: type=1326 audit(1757698929.218:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4eecada9 code=0x7ffc0000 [ 197.369247][ T29] audit: type=1326 audit(1757698929.218:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb4ef25b67 code=0x7ffc0000 [ 197.392921][ T29] audit: type=1326 audit(1757698929.218:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb4eecada9 code=0x7ffc0000 [ 197.416833][ T29] audit: type=1326 audit(1757698929.228:19251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ef2eba9 code=0x7ffc0000 [ 197.440692][ T29] audit: type=1326 audit(1757698929.228:19252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12106 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb4ef25b67 code=0x7ffc0000 [ 197.468105][T12115] loop4: detected capacity change from 0 to 256 [ 197.483775][T12115] loop4: detected capacity change from 0 to 512 [ 197.492392][T12111] loop5: detected capacity change from 0 to 128 [ 197.517168][T12115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.528977][T12115] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 197.537095][T12115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 197.548316][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2870'. [ 197.562395][T12115] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 197.572069][T12115] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 197.583374][T12115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.633139][ T3792] tipc: Left network mode [ 197.642159][T12115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.659935][T12115] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 197.710129][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.719376][ T3792] hsr_slave_0: left promiscuous mode [ 197.725051][ T3792] hsr_slave_1: left promiscuous mode [ 197.730882][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.738847][ T3792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.746364][ T3792] batman_adv: batadv0: Interface deactivated: macsec1 [ 197.753203][ T3792] batman_adv: batadv0: Removing interface: macsec1 [ 197.812025][T12131] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2872'. [ 197.857258][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.864600][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.871931][T12065] bridge_slave_0: entered allmulticast mode [ 197.883180][T12065] bridge_slave_0: entered promiscuous mode [ 197.898095][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.905252][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.913014][T12065] bridge_slave_1: entered allmulticast mode [ 197.919996][T12065] bridge_slave_1: entered promiscuous mode [ 197.939647][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.952581][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.000113][T12065] team0: Port device team_slave_0 added [ 198.013097][T12065] team0: Port device team_slave_1 added [ 198.036648][T12143] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2877'. [ 198.048923][T12065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.056081][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.083032][T12065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.114343][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2881'. [ 198.115523][T12065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.130977][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.157588][T12065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.173415][ T3792] IPVS: stop unused estimator thread 0... [ 198.207361][T12151] loop5: detected capacity change from 0 to 128 [ 198.239681][T12065] hsr_slave_0: entered promiscuous mode [ 198.246195][T12065] hsr_slave_1: entered promiscuous mode [ 198.306738][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2885'. [ 198.323758][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2879'. [ 198.426401][T12169] FAULT_INJECTION: forcing a failure. [ 198.426401][T12169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.439722][T12169] CPU: 0 UID: 0 PID: 12169 Comm: syz.4.2887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.439754][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.439768][T12169] Call Trace: [ 198.439776][T12169] [ 198.439784][T12169] __dump_stack+0x1d/0x30 [ 198.439844][T12169] dump_stack_lvl+0xe8/0x140 [ 198.439863][T12169] dump_stack+0x15/0x1b [ 198.439944][T12169] should_fail_ex+0x265/0x280 [ 198.439971][T12169] should_fail+0xb/0x20 [ 198.440000][T12169] should_fail_usercopy+0x1a/0x20 [ 198.440041][T12169] _copy_from_iter+0xd2/0xe80 [ 198.440073][T12169] ? __build_skb_around+0x1a0/0x200 [ 198.440133][T12169] ? __alloc_skb+0x223/0x320 [ 198.440209][T12169] pfkey_sendmsg+0x126/0x900 [ 198.440240][T12169] ? avc_has_perm+0xf7/0x180 [ 198.440268][T12169] ? selinux_socket_sendmsg+0x175/0x1b0 [ 198.440309][T12169] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 198.440339][T12169] __sock_sendmsg+0x145/0x180 [ 198.440372][T12169] ____sys_sendmsg+0x31e/0x4e0 [ 198.440406][T12169] ___sys_sendmsg+0x17b/0x1d0 [ 198.440447][T12169] __x64_sys_sendmsg+0xd4/0x160 [ 198.440478][T12169] x64_sys_call+0x191e/0x2ff0 [ 198.440551][T12169] do_syscall_64+0xd2/0x200 [ 198.440583][T12169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.440617][T12169] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.440775][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.440798][T12169] RIP: 0033:0x7fbb4ef2eba9 [ 198.440815][T12169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.440835][T12169] RSP: 002b:00007fbb4d98f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.440919][T12169] RAX: ffffffffffffffda RBX: 00007fbb4f175fa0 RCX: 00007fbb4ef2eba9 [ 198.440933][T12169] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 198.441023][T12169] RBP: 00007fbb4d98f090 R08: 0000000000000000 R09: 0000000000000000 [ 198.441037][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.441050][T12169] R13: 00007fbb4f176038 R14: 00007fbb4f175fa0 R15: 00007ffe63fab6c8 [ 198.441079][T12169] [ 198.757233][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2892'. [ 198.803216][T12065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.814183][T12185] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2895'. [ 198.825373][T12065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.834584][T12065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.835423][T12185] loop7: detected capacity change from 0 to 1024 [ 198.850655][T12185] EXT4-fs: Ignoring removed orlov option [ 198.851238][T12065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.870414][T12185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.913271][T12065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.924671][T12065] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.934422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.941534][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.953667][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.960893][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.048230][T12065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.056500][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.126908][T12216] loop7: detected capacity change from 0 to 164 [ 199.225535][T12225] geneve2: entered allmulticast mode [ 199.253971][T12065] veth0_vlan: entered promiscuous mode [ 199.273037][T12065] veth1_vlan: entered promiscuous mode [ 199.303547][T12065] veth0_macvtap: entered promiscuous mode [ 199.306129][T12232] loop7: detected capacity change from 0 to 1024 [ 199.315201][T12065] veth1_macvtap: entered promiscuous mode [ 199.328326][T12232] EXT4-fs: Ignoring removed orlov option [ 199.348383][T12065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.362453][T12065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.368044][T12232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.390487][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.411898][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.428040][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.438005][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.453862][T12248] smc: net device bond0 applied user defined pnetid SYZ0 [ 199.465642][T12248] smc: net device bond0 erased user defined pnetid SYZ0 [ 199.533623][T12257] loop5: detected capacity change from 0 to 764 [ 199.609333][T12261] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.616768][T12261] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.639044][T12261] bridge0: entered allmulticast mode [ 199.639685][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.654900][T12261] bridge_slave_1: left allmulticast mode [ 199.660650][T12261] bridge_slave_1: left promiscuous mode [ 199.666517][T12261] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.697798][T12264] loop7: detected capacity change from 0 to 128 [ 199.714419][T12261] bridge_slave_0: left allmulticast mode [ 199.720262][T12261] bridge_slave_0: left promiscuous mode [ 199.726139][T12261] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.827907][T12272] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.089712][T12276] usb usb8: usbfs: process 12276 (syz.7.2924) did not claim interface 0 before use [ 200.243351][T12282] C: renamed from team_slave_0 (while UP) [ 200.325045][T12285] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 200.343758][T12278] loop7: detected capacity change from 0 to 32768 [ 200.365860][T12284] can0: slcan on ttyS3. [ 200.373709][T12285] loop4: detected capacity change from 0 to 1024 [ 200.381475][T12285] EXT4-fs: Ignoring removed orlov option [ 200.411842][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.439513][T12282] can0 (unregistered): slcan off ttyS3. [ 200.467785][T12285] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.064802][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.072275][T12315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.080090][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.087638][T12315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.107200][T12316] loop5: detected capacity change from 0 to 128 [ 201.117121][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.358243][ T31] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.455702][ T31] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.513698][T12318] chnl_net:caif_netlink_parms(): no params data found [ 201.559990][ T31] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.561287][T12355] loop7: detected capacity change from 0 to 512 [ 201.591003][T12355] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 201.602737][T12357] __nla_validate_parse: 8 callbacks suppressed [ 201.602755][T12357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2950'. [ 201.623792][T12355] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 201.634957][ T31] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.686424][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.693787][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.701622][T12318] bridge_slave_0: entered allmulticast mode [ 201.708802][T12318] bridge_slave_0: entered promiscuous mode [ 201.767282][T12372] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12372 comm=syz.7.2954 [ 202.141192][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.148546][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.183709][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 202.183726][ T29] audit: type=1400 audit(1757698934.148:20274): avc: denied { block_suspend } for pid=12371 comm="syz.7.2954" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.225160][T12318] bridge_slave_1: entered allmulticast mode [ 202.233360][ T31] IPVS: stopping master sync thread 9086 ... [ 202.256831][T12318] bridge_slave_1: entered promiscuous mode [ 202.325211][ T31] hsr_slave_0: left promiscuous mode [ 202.335528][ T31] hsr_slave_1: left promiscuous mode [ 202.362989][ T31] veth1_vlan: left promiscuous mode [ 202.384441][ T31] veth0_vlan: left promiscuous mode [ 202.503510][ T29] audit: type=1400 audit(1757698934.478:20275): avc: denied { create } for pid=12380 comm="syz.3.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.537783][ T31] team0 (unregistering): Port device team_slave_1 removed [ 202.546140][ T29] audit: type=1400 audit(1757698934.488:20276): avc: denied { write } for pid=12380 comm="syz.3.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.569699][ T29] audit: type=1326 audit(1757698934.538:20277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12382 comm="syz.3.2956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22302eeba9 code=0x0 [ 202.593118][ T31] team0 (unregistering): Port device team_slave_0 removed [ 202.696691][ T29] audit: type=1107 audit(1757698934.628:20278): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 202.748652][ T29] audit: type=1326 audit(1757698934.718:20279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.7.2957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f103c11eba9 code=0x0 [ 202.787748][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.803303][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.832973][ T29] audit: type=1107 audit(1757698934.808:20280): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 202.848174][T12318] team0: Port device team_slave_0 added [ 202.854028][T12390] loop7: detected capacity change from 0 to 128 [ 202.855335][T12318] team0: Port device team_slave_1 added [ 202.877693][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.884840][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.911155][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.927417][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.934688][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.961024][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.082354][T12318] hsr_slave_0: entered promiscuous mode [ 203.107311][T12318] hsr_slave_1: entered promiscuous mode [ 203.123954][T12318] debugfs: 'hsr0' already exists in 'hsr' [ 203.129784][T12318] Cannot create hsr debugfs directory [ 203.135444][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2958'. [ 203.356522][ T29] audit: type=1326 audit(1757698935.328:20281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 203.380785][ T29] audit: type=1326 audit(1757698935.328:20282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 203.404671][ T29] audit: type=1326 audit(1757698935.328:20283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdf944eba9 code=0x7ffc0000 [ 203.438314][T12403] SELinux: ebitmap: truncated map [ 203.457985][T12403] SELinux: failed to load policy [ 203.535264][T12411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12411 comm=syz.1.2963 [ 203.698329][T12420] tmpfs: Unknown parameter 'mpo‚' [ 203.707056][T12419] loop5: detected capacity change from 0 to 512 [ 203.726051][T12419] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #11: comm syz.5.2967: EA inode hash validation failed [ 203.741923][T12419] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2967: corrupted inode contents [ 203.754138][T12419] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.2967: mark_inode_dirty error [ 203.767369][T12419] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.2967: corrupted inode contents [ 203.781801][T12419] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.2967: mark_inode_dirty error [ 203.807824][T12425] tmpfs: Unknown parameter 'mpo‚' [ 203.811911][T12318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.820493][T12425] nfs4: Bad value for 'source' [ 203.821060][T12419] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.2967: mark inode dirty (error -117) [ 203.832753][T12425] loop7: detected capacity change from 0 to 512 [ 203.841327][T12419] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 203.850995][T12427] C: entered promiscuous mode [ 203.854836][T12419] EXT4-fs (loop5): 1 orphan inode deleted [ 203.858339][T12427] team_slave_1: entered promiscuous mode [ 203.864792][T12419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.874146][T12425] EXT4-fs warning (device loop7): ext4_xattr_inode_get:556: inode #11: comm syz.7.2969: EA inode hash validation failed [ 203.883462][T12427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.895668][T12425] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2969: corrupted inode contents [ 203.919534][T12318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.940957][T12318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.949048][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.961985][T12318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.974285][T12425] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.2969: mark_inode_dirty error [ 203.974498][T12425] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2969: corrupted inode contents [ 203.974663][T12425] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #15: comm syz.7.2969: mark_inode_dirty error [ 203.974829][T12425] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #15: comm syz.7.2969: mark inode dirty (error -117) [ 203.974980][T12425] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 203.975025][T12425] EXT4-fs (loop7): 1 orphan inode deleted [ 203.977674][T12425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.012449][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.084312][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.096589][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.103769][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.123800][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.123939][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.131145][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.139483][T12318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.158597][T12318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.259828][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.305065][T12459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12459 comm=syz.1.2978 [ 204.323873][T12461] loop7: detected capacity change from 0 to 128 [ 204.338953][T12464] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2980'. [ 204.381279][T12464] loop5: detected capacity change from 0 to 1024 [ 204.391143][T12469] tmpfs: Unknown parameter 'mpo‚' [ 204.394536][T12464] EXT4-fs: Ignoring removed orlov option [ 204.422927][T12464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.468533][T12476] serio: Serial port ptm0 [ 204.594282][T12318] veth0_vlan: entered promiscuous mode [ 204.603088][T12318] veth1_vlan: entered promiscuous mode [ 204.605892][T12494] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12494 comm=syz.1.2988 [ 204.616240][T12318] veth0_macvtap: entered promiscuous mode [ 204.632332][T12318] veth1_macvtap: entered promiscuous mode [ 204.645108][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.654939][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.791083][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.823581][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.897595][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.965345][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.133939][ T6165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.407360][T12517] tmpfs: Unknown parameter 'mpo‚' [ 205.416697][T12517] loop7: detected capacity change from 0 to 512 [ 205.429174][T12517] EXT4-fs warning (device loop7): ext4_xattr_inode_get:556: inode #11: comm syz.7.2992: EA inode hash validation failed [ 205.442670][T12517] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2992: corrupted inode contents [ 205.463136][T12517] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #15: comm syz.7.2992: mark_inode_dirty error [ 205.479994][T12517] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #15: comm syz.7.2992: corrupted inode contents [ 205.514214][T12517] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #15: comm syz.7.2992: mark_inode_dirty error [ 205.523943][T12520] SELinux: ebitmap: truncated map [ 205.536069][T12520] SELinux: failed to load policy [ 205.541760][T12517] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #15: comm syz.7.2992: mark inode dirty (error -117) [ 205.562148][T12517] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 205.572385][T12517] EXT4-fs (loop7): 1 orphan inode deleted [ 205.580270][T12517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.624572][ T7847] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.657974][T12524] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12524 comm=syz.5.2996 [ 205.676327][T12526] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12526 comm=syz.7.2997 [ 206.959259][T12540] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12540 comm=syz.3.3000 [ 206.977046][T12532] SELinux: ebitmap: truncated map [ 206.987175][T12532] SELinux: failed to load policy [ 207.344615][T12546] serio: Serial port ptm0 [ 207.410008][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 207.410043][ T29] audit: type=1400 audit(1757698939.367:20491): avc: denied { bind } for pid=12551 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.437077][ T29] audit: type=1400 audit(1757698939.377:20492): avc: denied { setopt } for pid=12551 comm="syz.7.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.467932][T12552] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3003'. [ 207.562210][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 207.571185][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 207.589233][T12559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 207.668618][T12539] macvlan2: entered promiscuous mode [ 207.718088][T12567] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12567 comm=syz.7.3007 [ 207.946061][T12574] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12574 comm=syz.3.3009 [ 207.967594][T12576] tmpfs: Unknown parameter 'mpo‚' [ 207.974497][T12576] nfs4: Bad value for 'source' [ 207.990447][T12576] loop4: detected capacity change from 0 to 512 [ 208.952599][T12576] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.3010: EA inode hash validation failed [ 208.972642][T12576] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3010: corrupted inode contents [ 209.787330][T12576] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.3010: mark_inode_dirty error [ 209.810280][ T29] audit: type=1326 audit(1757698941.777:20493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.834562][ T29] audit: type=1326 audit(1757698941.777:20494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.835273][T12576] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3010: corrupted inode contents [ 209.871564][ T29] audit: type=1326 audit(1757698941.787:20495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.895454][ T29] audit: type=1326 audit(1757698941.787:20496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.919196][ T29] audit: type=1326 audit(1757698941.787:20497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.943013][ T29] audit: type=1326 audit(1757698941.787:20498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.966712][ T29] audit: type=1326 audit(1757698941.787:20499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 209.972803][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'. [ 209.991244][ T29] audit: type=1326 audit(1757698941.787:20500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12585 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc39567eba9 code=0x7ffc0000 [ 210.000308][T12590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.000330][T12590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.000504][T12576] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.3010: mark_inode_dirty error [ 210.052150][T12590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.059858][T12590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.069069][T12576] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.3010: mark inode dirty (error -117) [ 210.088306][T12576] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 210.099065][T12576] EXT4-fs (loop4): 1 orphan inode deleted [ 210.106840][T12576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.159796][T12318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.191888][T12592] loop5: detected capacity change from 0 to 8192 [ 210.269501][T12606] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3020'. [ 210.295910][T12606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.392091][T12606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.409295][T12606] bond0 (unregistering): Released all slaves [ 210.439044][T12618] serio: Serial port ptm0 [ 210.584266][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3025'. [ 210.618368][T12627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12627 comm=syz.4.3026 [ 210.809867][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3028'. [ 211.398368][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3036'. [ 211.443950][T12655] loop7: detected capacity change from 0 to 128 [ 211.491050][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'. [ 211.551253][T12674] serio: Serial port ptm0 [ 211.763149][T12682] loop4: detected capacity change from 0 to 8192 [ 211.925034][T12655] ================================================================== [ 211.933143][T12655] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 211.941023][T12655] [ 211.943440][T12655] write to 0xffff8881194ab814 of 4 bytes by task 12666 on cpu 1: [ 211.951228][T12655] xas_set_mark+0x12b/0x140 [ 211.955733][T12655] __folio_start_writeback+0x1dd/0x440 [ 211.961381][T12655] __block_write_full_folio+0x53a/0x8f0 [ 211.967005][T12655] block_write_full_folio+0x2c2/0x2e0 [ 211.972462][T12655] mpage_writepages+0x6cf/0x1250 [ 211.977403][T12655] fat_writepages+0x24/0x30 [ 211.981924][T12655] do_writepages+0x1c6/0x310 [ 211.986543][T12655] file_write_and_wait_range+0x156/0x2c0 [ 211.992373][T12655] __generic_file_fsync+0x46/0x140 [ 211.997499][T12655] fat_file_fsync+0x49/0x100 [ 212.002098][T12655] vfs_fsync_range+0x10d/0x130 [ 212.007021][T12655] generic_file_write_iter+0x1b8/0x2f0 [ 212.012503][T12655] iter_file_splice_write+0x663/0xa60 [ 212.017925][T12655] direct_splice_actor+0x153/0x2a0 [ 212.023049][T12655] splice_direct_to_actor+0x30f/0x680 [ 212.028520][T12655] do_splice_direct+0xda/0x150 [ 212.033310][T12655] do_sendfile+0x380/0x650 [ 212.037854][T12655] __x64_sys_sendfile64+0x105/0x150 [ 212.043167][T12655] x64_sys_call+0x2bb0/0x2ff0 [ 212.047869][T12655] do_syscall_64+0xd2/0x200 [ 212.052484][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.058398][T12655] [ 212.060733][T12655] read to 0xffff8881194ab814 of 4 bytes by task 12655 on cpu 0: [ 212.068467][T12655] __writeback_single_inode+0x1f9/0x7c0 [ 212.074046][T12655] writeback_single_inode+0x167/0x3e0 [ 212.079527][T12655] sync_inode_metadata+0x5b/0x90 [ 212.084680][T12655] __generic_file_fsync+0xf8/0x140 [ 212.089892][T12655] fat_file_fsync+0x49/0x100 [ 212.094494][T12655] vfs_fsync_range+0x10d/0x130 [ 212.099283][T12655] generic_file_write_iter+0x1b8/0x2f0 [ 212.104941][T12655] iter_file_splice_write+0x663/0xa60 [ 212.110333][T12655] direct_splice_actor+0x153/0x2a0 [ 212.115560][T12655] splice_direct_to_actor+0x30f/0x680 [ 212.120959][T12655] do_splice_direct+0xda/0x150 [ 212.125833][T12655] do_sendfile+0x380/0x650 [ 212.130367][T12655] __x64_sys_sendfile64+0x105/0x150 [ 212.135767][T12655] x64_sys_call+0x2bb0/0x2ff0 [ 212.140453][T12655] do_syscall_64+0xd2/0x200 [ 212.144987][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.150979][T12655] [ 212.153341][T12655] value changed: 0x0a000021 -> 0x04000021 [ 212.159153][T12655] [ 212.161471][T12655] Reported by Kernel Concurrency Sanitizer on: [ 212.167636][T12655] CPU: 0 UID: 0 PID: 12655 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.177241][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.187390][T12655] ==================================================================