last executing test programs: 4.80840969s ago: executing program 4 (id=552): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0xffffffffffffffff], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x10000000000}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0xfe, 0x693, &(0x7f0000000980)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x64acc1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4ea2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.721075151s ago: executing program 4 (id=556): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000800)={0x0, &(0x7f0000000240)}) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYRES32], 0x401, 0x0) msgsnd(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100"], 0x12f, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x1800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x210080, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x100fff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) syz_usbip_server_init(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0xb8}}, 0x48011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000046, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="05000000000000040000000000000009181104228295910dba21395b2314d44b6d235de1f4ba1d492162f6937d21cd3c4ca4a0aeb4e18f4612be0816d183ae1a6e3991c2abae3f6434dde1b454da3cc90f0000527af081f1551bd4ca2b848d5b46241b56256c733774ac7179a7e8633ffbc8744ce79fbec2f2e2efebaf1ad32fd331907daff604295312c31fbd5fd965e998ca86aff689cf7ee160de0b204580139cf9dc6373db377177e4914f94004c2dbd91b35cd4d73c70abce4b6583ad13f8129aa4813e2335e9870bc4a0c14fb131", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f00000c1000/0x3000)=nil, &(0x7f00001b0000/0x4000)=nil, &(0x7f0000169000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f00001b0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000eb000/0x3000)=nil, &(0x7f000005b000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)="6bd82fbf5703e19921bcffddd00cc26293e4beb63d2242d99963cccc8ebc696489eb220d584769862c71a82c8233c375909c6635f4a1cbac20c9eea0bd75da7e198ef9848d27f262820044904ced17750bdf3e2e17d527b251aecbdaa81dd41e9ea404db197364135f60006492d9597accb3d13ee527a68aaa34ed753b", 0x7d, r6}, 0x68) 3.409650356s ago: executing program 0 (id=588): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.318787408s ago: executing program 4 (id=591): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(0x0, 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) sendfile(r0, r0, 0x0, 0x800000009) 3.318455068s ago: executing program 0 (id=592): r0 = msgget$private(0x0, 0xfffffffffffffffd) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) wait4(r1, 0x0, 0x40000000, 0x0) r3 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000017c0)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x255, &(0x7f0000001540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000001000)=[@ioring_restriction_sqe_op={0x1, 0x3218dddb870e99c8}], 0x1) ioctl$FS_IOC_GETVERSION(r2, 0xc040ff0b, &(0x7f0000000200)) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) r6 = semget$private(0x0, 0x2, 0x1) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000000)=""/13) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x2000000000000000, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x9, 0x9}) 3.155299391s ago: executing program 4 (id=597): epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket(0x1e, 0x80000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x1, 0x5, r4, 0xf}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lli}, @exit, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x12, 0x0, &(0x7f0000000240), 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f2c3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socket(0x25, 0x5, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x2, 0x0, 0x4, 0x2, 0x1, 0x0, 0xdb}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 3.013935764s ago: executing program 4 (id=598): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd1, &(0x7f0000000200)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x2, 0x0, 0x90b, 0x8, r3}) 2.375103215s ago: executing program 0 (id=610): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xdab34622b3975f92, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/softnet_stat\x00') readv(r1, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000001240), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="10000000", @ANYRES32], 0x20) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@mcast2, @multicast1, 0x11, 0x14}}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$ptp(r3, &(0x7f0000000140)=""/132, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "6eee7e"}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000200)="870758a040204d627f6c617d0a67493a41be225d30ad79b10b2e935741ba4664ea057c31f3dfd2564ec649d7dfb0172d102e60839ca5a29a03420bc996fd7eacddaaffda7bf195b187456fc000"/88, &(0x7f0000000c00)=""/193, &(0x7f0000000600)="78e2d9401a35a04fbd02089704938bcadd316ca053907d0ab3e401589146f8a45e4045716420e50577f3844c145a5a51ae121547debf04869d577b33db6f0cf61736abd6716a42317613097009e9c0e7aea32377f8dfa5c86db9583e557cc408158009182b3bbbab978ced7f59c94e07b361c7ab299d9a74cb9aaf474d38d401b994a1decd8b2b3cb0bb3e1be4dfc36f38f8e5f3a6cd0546ef1a4e8c3a4e74bf2bbfead1b0ff847f0efd7155f6b4eba2920c0fc415422a19ddf5c9c28532627e75266875e812fc10fbdbf8de9acf9d", &(0x7f0000000740)="1453d567b37dcc051747ca8326c54121872f59b1769060963e1c9aaa4f92a9570affbcf316c96e1fd70684e7a34e5049fa88e55d844821040873cb00bf51500964f28ddcd715180330add1887617a6c7e6a7b2cd95131cecb91c74229ffef6c470342cee98e425fab7cfb79d36fcd3e2b285c40bb08408a0d63944d5a47124109702b734836d45c5257e016f75f2ac72d2fad2c5e12a9fb35a61290eb780b294225ee7a2e8269b2fdf6ed610ef38c6827c34173e3eb8027785019811ffc700f6e7858677de5033ac6627deeb8bad67a9bcdf5c35", 0x7ff, 0xffffffffffffffff, 0x4}, 0x38) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x0) 2.136807519s ago: executing program 0 (id=612): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) sendto$inet6(r0, &(0x7f00000000c0)="3f681a", 0x3, 0x20040845, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.13626456s ago: executing program 4 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)={'filter\x00'}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r8, @ANYRESDEC, @ANYRES32=r3, @ANYRES32=r6, @ANYRES64=r5, @ANYRESDEC=r2], 0x64}}, 0x40448d0) 2.050148271s ago: executing program 0 (id=617): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x40000000, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00"/27, 0x1b) 2.019067332s ago: executing program 0 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioperm(0x0, 0x1, 0x1) rseq(0xfffffffffffffffd, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(0x0, 0x0, 0x20000000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 1.890244264s ago: executing program 3 (id=621): mount(0x0, 0x0, 0x0, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) (fail_nth: 7) 1.59514059s ago: executing program 3 (id=622): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket$kcm(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESHEX, @ANYRESOCT=r7, @ANYBLOB="4068479c3b43dfed21dd5a6dcf10ed7e5c0117f5c835f8d3c50c348de779c48c9f8ab655349c23e1e6982e9db96fc50ba78ef2cdc82d35ddf1654f7575a043241a75350b0bb8e51307d7052afe74cfa7fd2021ff8ef8b87799045b4df3461ee960f574eec6891a7f08cfd3614f149df83a27d40099217c47737e741dfab3306ad52057bbc8388f73341c1dbb45306a72948ef4cefeabcd3b902de2d6bdd59fe31a57f75861047333c3521708a303b658f3c3a0e33b1a3eb5576e8cf1b875a2dda19c071fd6035dc833e6ec2d43c0ecfc18963804291836208cb90189bf6032bce31b9c035033eab7d3327d62d5c8db8cea52b9763babbb12cc73113369c3c8a6f35e06470a0b73dd4b613b33c25463f8d5e034f7bb290666efade59cccbffa7efeec91b0dadfb42b3efdb48e248f6b81a092cc79cec1ec1339528cbb1fb1583612916815808fb9ecb4f67ff4a2be209f7fde1bd583a4eb321f26c087c0456ea3119591262d9d914ede39e7a9e81e829774a332c409d064c16f55e83307bf47e78889d10dec9160fc5b0c6c075489639a3abf4dcad2e1d716c411e9ae455ada58b3c3b95ffd4b6d085d532d14dcfd7869c7ebcd54c6649d6039f74b2ae3c4100f9f9b1032c23b7d04c0e31a21f4f2df7d3f88d024bd9f22948c6c3d8d69776e9524e34c3c46c828938cce6388ea1de65dc73fe42024d673eb49695ab816999bd08906922225c6570526edab3b0f5afe0d5adca837f9ab051a1d6329e13794d2a2e340158b4aac00a9b69b2314a0c759f204d124e2dec7a93f5c6fb5022b51e9a85084db125fcd03945b4548c8df9987be65e06339a37a30d8232cc0ba84e4466008c77a571962920d0f79938f98adc3caa5298a595c2671565b12c7cf23adab22212af966602db14b5a9df3a1a3cdcbee767a569a3a226e5162aa81e2a898ae7e106fcb5882b8f5deedca3be7221401d779d5c24757b5c3060db9a1215afae6d85e3bd993dde0e4a62f0d589b3f81bd4b36739baa533e82f082340015d5255cb49e9744985c4c1356b1aa2782bdd4e9032418b24be71403b9c06fa5215d8a0000b5bf9746259809373d6071febcccf18f932ae9cd3d647cae74b2df63b0b138a0aa62fc7e3a567438010a916ca22490eb391b453fa381cc8c62b825e375d3833d0da1d57515c87e7c72d9d28bca07ddd4fa09fa17be1ae0cf076c79b18ca73f7a1c6c286d4416587c3a5e60820fe7dd1b413cbe368020c982baf416604f932cc2b736d965391051af530fa0eb5e8f2f4bb4eda3c7284d40eb9ee6591253fc04dd80de90d729f30e2348e19f24a1c8382e5d2c454efc6eea1404ae51fb2d91b7136c0afcefe5e803a140f5638a3fdd925a7c9100e36442a254fb1841605b866945d50780883bb33bdefdef3c559f39c09774eb61167a3462d8679a586cdc972c9dc6dd78af97551d610cee83811fd6f3c7eb82135eaac3f8432f898b55c3cddb902aa45cac08ba683d928fd4d4558f2e77297a86b91e5ceb00a43e97fae410bab5ce85578c08cc14595bc6400f015c304a7cf2c2fa4b89b3c8e6cc92e82466d767da8c2c20de152006bdb3a8880b8bb49a56c5a32219493175df63409717e28ac05c57c809e280c97f1ede09b627a9853093db19b72ce250ad1f0912cb3c48377fd090ff03952be29c30e6af38abdaba69bee31733525acb324f099c2309e72940f5d7835fb18f7bf98e983eeaa9f05c5c3cf7635816573f5eb307c48737eaffb38575f76110168efdf1eebae42d2675dfc02ca1baaaa9059d897fd1e4ee4db7d1073f43e4cf701250a2a3827b81de6fa5728825d0645a5c2a1bae0fdd7c05af5203c515f13f8f6928508824cad780181103c64eafeb8babeb7292a5a9fab244cc0e6d13e30532b39caaccc054cecd13dece80d13fa00b85d5c800e89e99015de5091438e79255c1f12858cb4fb515f66b91c45a6a845ac394b99c16583a432b5efc5243de788d82338070d0e2bca8cdc3dca1966c8aaf0d2b3843c27f8aabe793d169502f80ab5ec287f295dcd21a1c3289caa7bd1d75fbea09aa973bdfeb54d7d6e7515c4aaad60590b08cab0be7036a7db40e047f7a1136eea4f98d7dd5b21393155c9d686707926e54f323166736b4a0293d1faf51012ce34b010de13104f5be5003cbaeb9cd4e7f28a373ad267c14fd4c8d4052b98417fef49faf0c38f1dbaf6e780ab967fc9d207e384fba0e602be404a97934e1e3644091e8805140c5ee18834f8963266aa9daafe844e2ba4ab8b870848d17680a1b3703399decfa6ad9bc46306995be6d92c34b8207748dc949681d72e3ab8a98f07ab4ad8e1c90a5210fed716325ed9855248d706ce868bb54d9830c623a648e2771176bb4f2765d9c49342d9e389f0869f27852c3dbbaf5638593649cb83473458f1adbb943aa81f7beb6eb85d23d7cb99db133a3c69486ab9c79096aa67b20b569d148a38e95a85fc146bef08448fa2f15f85a2037030646eeadcc887fb915279c801f2f6c4ee607449f2cd24b91ee32129383ade89b9bc3d9d68355257aeb1d571b4bad5ad66771ec81ac3fcfceb313af3cde48a068952dd313c78e62f8c6afa4e505703abac1e6a0dc66ba90c2ded553fa7616a6c620851aba3ef93368c4f328ac93d6929a8b51f8fc5453fe2ab8adbeba7eba7b5ba0dd62e11694c4f2e98841d229fe0d23e0cd0e7d0eb17214b2e9789f7e850e35a1a9e75e9c5cefd0d80be8c9376b1f2c35c9c2ec661294ee0139f3326c398206552b1d1b74ceaabe74d169db16ecc539a0ff78bd7bf6f17a259c9d5a6990cf391512bc19206fe096d23555b30a6de6f2f382fee05882f828afa0263ab4044c5b59840158b249a092743272d777e5cb1e96d8b03fdc4d33de7b9d19315df24a898070d2eb5d4948477bf7dcaacf63993d7372aa2a33cdfffb807ccde4c756945d40e526fa852bbae005a1b7a8ca5c1e527b29422fb02ff6698b340497081cd7716e620fdefc150b91eec22054085747abbbded51d85ecb300b6431bcc1f41fd0eae899e863ca70c8241b7a15d698bf36d374f4bdbeccffcc08f09077922e40d6e4fc5d1b8f742935579f37b601fcfc5d423ba2c37e7ff83597ab3bad00e1a2569e5ee39467a7e7a9e09393c2cd05834ede011714d840a8c1851371debe38b7a8f82081ceaa126818a6aa0504be88621755a25002d7d455c78ecf6c3c620f2d6a247cc050a4293e6865020b791efa77aa9f7a3b92ff7ebe8a9fb66abc59b539fc1821c6c14db9581a6230ab7f5eba09dcc803f26bd702f87c40119a9104d96f81fe810ebb395d94920b1e94d158755ec3cbd022ce4eb0a73b4101a9a12c9016024996ad60fb82fe80c9027b424c7756abe78b2023cb048a7fac30156a402f0f3e36e94b55973aa679e1d0e5f67797a1765809b0a4ac50c75c095f1f480a609f3899a0a6313694ec7c27034ee0cea5c9fcf55f0a137728705722bcdedf177c696e55a3d746b311b68474ca25f4ea7a0b4b1badeea8e9a78a8334cc8f3bbe64cb4d5cb42f287e249fc75a1920a47eaf0af5b5c90862b9b133b3474e23fcfd0f7bbc31e42839c896c163584d4c0fa313f1e0c6b09b96c1cd681e8bf435223cb71add0d414be2dfda2aa5d7a6542c2b1608c40c0fadae70acd0fa642c0642186badab3df3c58462c50c659f957ccb37d3489eba1e7f144358d02f8c0d7230119d3b146c1bf5bdf2d8b9ce7e782f212f79520f6fd49a9b35cec0e64a9aa59121612feeb2e4a9e5f85f88f22f1a0ab26089b2d675518bfe82673a6e71aebf227be0ed8574aa6958f757fed7b624d9abeddc45c6fb2dd3a144260b752f774ccf729c1cd0d3164ce9d4d7d18f3354b22f548bf7152c4305bfa58e41b1e8b686f7f8fa4af633b58642635a7fbeaeaee265c46d9b9ec25171dde56de098b7fa80c2d2bf85ffe202e487d6e2e69b427ef435f9e95ccdf7d4b796b9c0cc590e83ea5cf1457a904faa55034ea97758b21fc6f237c005f8de1466243378abafb959751254d2cf00f49dde47b0e8c587947930b4da7a72f34d8df69d68c89c9b250bd1deda654d6d0b8a7f133d71c135218786912a9947da8e97bee53ca1634984e93478d659756a213695d8548de93316e619f44b2b4de7f2a54070e8f0cbd903b9bb0f8bc01ba167741cb54c16f9357d168007a7caa4b955a778b819ae834fd96fc5f64c03ee9f5d989edf3442b6c477aac98946c948045c033a07fe5f478dcf48bf024e53ba2dfe77a89cea5bf83392debcfe9f9a60a2ffe45a22a33ab6791dcde6fcc663a6253f7882a872d1ea179c06db5f689cbc7b4efc266bb0573a0948214e0ba25357b261df2b6aa8604541233488d4c6fc90963e2e433eaad93cbc25314b7566f31d52ad0d4cd448c34005c8e9fdf3c15fc884c9fcf08808f4ac0cc5c8762dc44636a4e765c7bf342a2be4d8711b84f2dc56041da72130e0a5804d3956b9b3584566451bda8a8ecf57573affe9055f9eef2d7179ded5168535785d6f2d38225ff8c67bdbc839b345f5566b7e7084f2e2c45ec5cfd688501e1c468532ff46a1a4e2df10d54b556b80c37d01c7f890e56f9e034e63f833c4adf529016f2d3beafa66b7fae905e93267875176a7c9fb1f9bf13a2f8f7a662b0424ba69e241f128df7d2fe54d694d518aa2026c9df779d4c90c3a91530319c6de8e47199ee8c65deb857d9f919bd60b3391e66d5e0a40929799687405779ed0f8fa223df7aa2c71cf11e2c44bc470b6891a97eb6b07971fe2f281dfa42eeb2242396c080049bcd0a3475fba97be84d77aff8ffe7bb9fe601721143e79af0c818ff0833a78c2de0cda7d6c95ae72ba7fea680e425cf058e1836e4e4469720ece077b071084750b6a226de0121f582685ff5abd1cc69fe2029cc2fc1409d265a27bd2808b67405f5f5820216a503ef9c5d1df51681cc990713afcbd6db88430820cf41d01fafc71774ee508348509d0884287283fe779118716385ebaa03976d2333350653052c986efa7a2a1a39c3fa2420d5a27706259a8e38436758cc61156f01de1ebdc53edc5e8a7ab8829e1e24e199542ceb458620d172389c992dba3d45a8b1fa5b61d1c8ef651c766ebae04892ce12db50ca498bc1c3fb4e2b8a5f713e14f83b5a951f46d838927b14836c75df42c40f80edba9156d6fc29ea6be2a453ea4f8d81fc9c5a0b36ee3860da519b4e1c531a66ef19794f96b03aac3e1b1555917143383a875bfe4a0c0fb41a65647815770cffa8268ccc9fae2ba1f1fd02f7a9b5772d53cbda658d377d389d19199cca7c7690c82d5522bae344f11817fda7b621c8aced68ce8c6a141d9483302ffe9642f1ceb005c00567c6682135a1065bdcad4875d2f9b717fecb43a72e9ecbcc799aecee5c555bc4b3e7d62783bfc4dce88829d26c7140e8bc2950bc0e221a22a7d1fb9e46d395d63fbf61f805da680333296b1ebf0436c73df2e62cf8c0e0b5bbbf1b76fb12ca870308146d141c918add75b00070dcd68293c15024bf60771b5e3ac21ad2326cd79be2a7ac4620d95dc4b45efe0d52994aadaff543a8cb96dd7151256d2506c5d4a2be2e8fd9c7602af040339508b7356b6ec3f5f7f34984a7fe0f27f3b2ab868b26670651a2cd8a870ed5f7119a7531c1419b57a78a3f75b1f0a89d33cd3acd4c76d01f1728653119a5fe2402bda8fafdf9843d2b1cc015a3289a4697b27c8005714e5ab5b46f11a6ae074b381f66a8e6e469e75da39d00fb07ad7ab273f2238446c00ce0ce88"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0}, 0x94) r9 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r9, 0x0, 0x0, 0x1, 0x3000) msgrcv(r9, 0x0, 0x0, 0x1, 0x0) msgsnd(r9, &(0x7f0000000000)={0x1}, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r10}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xa, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a10000000785210fb9800000000001800000000000000000000000000000095000000000000004b38860958764a89b1c4f8ddfdce8ca1fda573388de10da6858a603bbf74da4a75a937447ea670758718e385c0be5a082ac5db56c812cdc936ef69907bb69b144f3487036fd1291b0c48ab85f691804a9fc6705be229"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffd}, 0x94) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000280)=0xa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000480)=@udp6=r5, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="56658898", @ANYRES16=0x0, @ANYBLOB="000028bd7000fedbdf25030000000c000300000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac14143814000b000000000000000000000000000000000014000b00fe8000000000000000000000000000aa080005007f000001"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.284252425s ago: executing program 1 (id=626): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7}, 0x5081, 0x8, 0xfffff7f0, 0x6, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) listen(r0, 0x1) munlock(&(0x7f0000549000/0x3000)=nil, 0x3000) 860.995873ms ago: executing program 2 (id=628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x80, 0xffffffffffffffff}) 860.732183ms ago: executing program 2 (id=629): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x40000000, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) 809.182785ms ago: executing program 2 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x48004}, 0x24008000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 769.184125ms ago: executing program 2 (id=631): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f00002a3000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 526.524769ms ago: executing program 3 (id=632): socket(0x10, 0x803, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfa, 0x711, &(0x7f0000002740)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 425.381681ms ago: executing program 1 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000018010000202005008500080000002020207b1af80000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) fchown(r0, 0x0, 0x0) 424.647231ms ago: executing program 2 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 390.841782ms ago: executing program 1 (id=635): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0xffffffffffffffff], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x10000000000}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0xfe, 0x693, &(0x7f0000000980)="$eJzs3ctuG9cdx/HfUJREqYBbtEVgGI51YjeAjKo0ScUKBHcRdjiUJiU5xAxVSKvAjaXAMOW0tgvU2qTa9AKkL9BdNln0IQp0nXVfoMsCQbsoULSbKebCi8ihKMuUnMTfjxDx8Mx/5vznkjkekXNGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAll0rlcqWGm5rZ9dMZtd8r3nK9GRp87qdFG5PbVeyov9UKOhqUnX1+4PJb0S//v3t6Pd7/cqCjr71xnfufS+f681/SkLnoRdd4NPnR4/ud7v7T87XWmidZ74LMZaJcmeYa8tpuYHnNqtbjnEDz2xubJTubNcDU3cbTrAXdJymsX0n1/F8s2rfNuXNzXXjFPe8ndZWrdpwepXv/qhSKm2Y9xfTPX3n/WJgb7uNhtvaimOiyVHMYv9gcKpNYw4edvfXpyUZBZXPElSZFlQpVSrlcqVS3ri7effdUik/VlEaobGIwUFrmblZH8D4GpjFaRuYiVzU///dkhoqqKUd7cpk/tiqyZen5oTpqV7///Yd59R2h/v/60nV9auDydeiXzd1I3l3QwVl9v8TcjEy8QxZU6wJ9ef7earnOtIj3VdXXe3ryWyWuzK7DC/2Z0vKS64CeXLVVFVbcmTSGqNNbWhDJX2gbdUVyKguVw05CrSnQB05asb7xJejqjry5MtoVbZuy6isTW1qXUaOitqTpx21tKWaqvpPGIYHehhv9/VTclQvqHyWoHz/GBwPmtT///yTZI4X6//xzdM/ds4QA7xyYXr9P9lcVuXKxWUEAAAAAABmzYr/+m7Fn92/KSlU3W04pVedFgAAAAAAmKH4k//r0ct8VHpT1oTr//DycwMAAAAAALNhxffYWZKW4y/1W4M7oc7yJYDMmwMAAAAAAMBXS/z5/40FKYyHVluR9ULX/wAAAAAA4Gvg9/3Rd1XI98bYDXsf6+ckBe1F6y//XJQ/bx23d39gHVajKdXDNGbsGwCd+jUrr2Sg3ni83gVJ8TvbuW6l4wOng2BaycC+0pcHQ3koa6xfyx9JYGGu9+eLjASuHA0lsJFP3+lTvZXEvJW2++Aop3hK0spy3W04Rdtr3CurWr2S6zi7nV89fvhrye+v58HD7n7xw4+7D+JcjqOq48Moj09OpJOblsuzeLyF+J6LrDVeUr3X5B9azWUrbrfUW/85VQ9zww2dbf1/q5tJzM3l5HX5qLcHZP0mLZSL8S4brH08OoQ1yKI8uuZZO2JCFoU4i1tJzK3VW8lLL79kLxR+OCdViuP7wB/OojKcxfRtYf1rbFtMySI6FtajLP4aLWhCFusvlsXYHgGAV+Vg0AvFg5iPj7E/2u9mnOWW0teJZ7npvft7J1t59qcwueFwTsorXEy7l3Byv6LojL6ahC0ko7jnr2Wc0Utpv1LQhDN66SV6t6itPw+egZQ+rSadku9n8b8wDO+V43b/ONKrfhbN8NnEdoNGZS7ahHeeHf4iHgA/8tH+R/uPK5X1jdI7pdLdiubj1Uhf6HsAABmmP2PnZERh0J/1++53+lfVD/7xdlI60e9+t/+VgqI+1Mfq6oHWeo8QWMlud3noawhr41etUWz8r46TsWWt9XvN0au6uHYotqK19ApwPt0Wo1eAg9j1C98PAABcpptT+uHR/j/r2n2td929ei3zuvtkXz76hOBJseVL3hIAALw+HP9La7nzO8v33fYH5c3NcrWz7Rjfs39qfLe25Ri31XF8e7va2nJM2/c6nu01TNvXoltzAhPstNue3zF1zzdtL3B34ye/m/TR74HTrLY6rh20G041cIzttTpVu2NqbmCb9s5PGm6w7fjxzEHbsd26a1c7rtcygbck2ykaEzjOUKBbc1odt+5GxZZp+26z6u+Zn3mNnaZjak5g+2674yUL7LXltuqe34wXW1R42oMOAQB4bTx9fvTofre7/+SUwrGOHs2ru9/7Plo66YuM4IWsBY41Si8MAMArdUovDQAAAAAAAAAAAAAAAAAAAAAAviLOcv/fqYXeTYG9mnllBEv9ml9eOdOSLQ1qPv/bS2V4jkJutCYdaTecPvsXSSGfFbMUFRYkdXubfzjmeGpicxlzTSqsDNd8OilYSSE/+224JGUdCRdW+PHByeNwLCaaODbpv2EYLva3av7l/3fIKjz+fMKk6UfU4sltuHDaCp4s5CU9WXiJXXC55yEAl+//AQAA///zzDu+") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x64acc1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4ea2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 390.296672ms ago: executing program 2 (id=636): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000001000000800000006977f90668f79112cf290000003f0454023bfda68d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r12, &(0x7f0000000a00)="c7885a8f24f4", 0x6) sendfile(r12, r11, 0x0, 0x3ffff) 365.480043ms ago: executing program 3 (id=637): r0 = io_uring_setup(0x5620, &(0x7f0000000000)={0x0, 0xa69c, 0x400, 0x0, 0x264}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x6, &(0x7f00000032c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x2f7f, 0xe72d, 0x14, &(0x7f0000000080)={[0xebf]}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xffff, 0x400400) r3 = getpid() setresuid(0x0, 0xee00, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2000000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000100)={0x101, 0x0, "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"}) socket(0x28, 0x2, 0x0) 222.950195ms ago: executing program 1 (id=638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="52bf8644f34898693946487a31ab3e782c31589b6d8e8c9d", 0x18, 0x2000c040}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$caif_stream(0x25, 0x1, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) 185.440996ms ago: executing program 3 (id=639): socket(0x10, 0x803, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfa, 0x711, &(0x7f0000002740)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 184.719516ms ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000001881000000004000000000000004000f"], 0x24}}, 0x10000000) r4 = socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x9, 0x1, @tid=0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {r5, r6+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r7, &(0x7f0000000080)=""/21, 0x15, 0xfffffffffffffffc, &(0x7f0000000100)={0x77359400}) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40001c4}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xc2, 0x18}, 0xc) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="201400001300000228bd7000fcdbdf250605204c4e204e20080000000800000001040000080000000600000030090000020000005ee4a875", @ANYRES32=0x0, @ANYBLOB="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"], 0x1420}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="02412a84", @ANYRES32=r8, @ANYBLOB="0000000008000000ad3a08005fae2b687725fcff10000000852000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000617e1ed40000b7080000010000007b8af8ff00000000bfa200000000000007020000f8feffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0xd, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r11, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x5, 0x10, 0x3}, {0x1, 0x1, 0x1, 0x7}, {0x2, 0x4, 0x3, 0xb}, {0x2, 0x1, 0x7, 0x4}, {0x5, 0x3, 0x1}, {0x2, 0x3, 0xb, 0x9}], 0x10, 0x322}, 0x94) 1.63791ms ago: executing program 1 (id=641): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x81}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1={0xff, 0x5}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x5}, 0x2000000, 0x3, 0x1f, 0x100, 0x529f, 0x82d90202}) 0s ago: executing program 3 (id=642): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000008c0)={[{@nolazytime}, {@auto_da_alloc}, {@dax_always}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsv0}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044c04}, 0x24040014) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfffffffc, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}}, 0x40000000) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) kernel console output (not intermixed with test programs): p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 51.643737][ T3631] loop4: p1 size 10695936 extends beyond EOD, truncated [ 51.749049][ T3631] loop4: p3 start 100859904 is beyond EOD, truncated [ 51.757507][ T3631] loop4: p5 size 10695936 extends beyond EOD, truncated [ 51.766576][ T3631] loop4: p6 start 100859904 is beyond EOD, truncated [ 51.773542][ T3631] loop4: p7 size 10695936 extends beyond EOD, truncated [ 51.785686][ T3631] loop4: p8 start 100859904 is beyond EOD, truncated [ 51.792677][ T3631] loop4: p9 size 10695936 extends beyond EOD, truncated [ 51.814046][ T3631] loop4: p10 start 100859904 is beyond EOD, truncated [ 51.820959][ T3631] loop4: p11 size 10695936 extends beyond EOD, truncated [ 51.833891][ T3631] loop4: p12 start 100859904 is beyond EOD, truncated [ 51.840924][ T3631] loop4: p13 size 10695936 extends beyond EOD, truncated [ 51.849785][ T3631] loop4: p14 start 100859904 is beyond EOD, truncated [ 51.856878][ T3631] loop4: p15 size 10695936 extends beyond EOD, truncated [ 51.865053][ T3631] loop4: p16 start 100859904 is beyond EOD, truncated [ 51.872016][ T3631] loop4: p17 size 10695936 extends beyond EOD, truncated [ 51.880160][ T3631] loop4: p18 start 100859904 is beyond EOD, truncated [ 51.887104][ T3631] loop4: p19 size 10695936 extends beyond EOD, truncated [ 51.895347][ T3631] loop4: p20 start 100859904 is beyond EOD, truncated [ 51.902346][ T3631] loop4: p21 size 10695936 extends beyond EOD, truncated [ 51.910221][ T3631] loop4: p22 start 100859904 is beyond EOD, truncated [ 51.917406][ T3631] loop4: p23 size 10695936 extends beyond EOD, truncated [ 51.926448][ T3631] loop4: p24 start 100859904 is beyond EOD, truncated [ 51.933643][ T3631] loop4: p25 size 10695936 extends beyond EOD, truncated [ 51.941903][ T3631] loop4: p26 start 100859904 is beyond EOD, truncated [ 51.949381][ T3631] loop4: p27 size 10695936 extends beyond EOD, truncated [ 51.956374][ T3742] program syz.0.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.957927][ T3631] loop4: p28 start 100859904 is beyond EOD, truncated [ 51.973476][ T3631] loop4: p29 size 10695936 extends beyond EOD, truncated [ 51.981441][ T3631] loop4: p30 start 100859904 is beyond EOD, truncated [ 51.988487][ T3631] loop4: p31 size 10695936 extends beyond EOD, truncated [ 51.997114][ T3631] loop4: p32 start 100859904 is beyond EOD, truncated [ 52.004141][ T3631] loop4: p33 size 10695936 extends beyond EOD, truncated [ 52.011858][ T3631] loop4: p34 start 100859904 is beyond EOD, truncated [ 52.019045][ T3631] loop4: p35 size 10695936 extends beyond EOD, truncated [ 52.027005][ T3631] loop4: p36 start 100859904 is beyond EOD, truncated [ 52.033931][ T3631] loop4: p37 size 10695936 extends beyond EOD, truncated [ 52.042132][ T3631] loop4: p38 start 100859904 is beyond EOD, truncated [ 52.049442][ T3631] loop4: p39 size 10695936 extends beyond EOD, truncated [ 52.057738][ T3631] loop4: p40 start 100859904 is beyond EOD, truncated [ 52.064849][ T3631] loop4: p41 size 10695936 extends beyond EOD, truncated [ 52.072616][ T3631] loop4: p42 start 100859904 is beyond EOD, truncated [ 52.080208][ T3631] loop4: p43 size 10695936 extends beyond EOD, truncated [ 52.101801][ T3631] loop4: p44 start 100859904 is beyond EOD, truncated [ 52.109136][ T3631] loop4: p45 size 10695936 extends beyond EOD, truncated [ 52.121635][ T3631] loop4: p46 start 100859904 is beyond EOD, truncated [ 52.128640][ T3631] loop4: p47 size 10695936 extends beyond EOD, truncated [ 52.136742][ T3746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 52.136969][ T3631] loop4: p48 start 100859904 is beyond EOD, truncated [ 52.153047][ T3631] loop4: p49 size 10695936 extends beyond EOD, truncated [ 52.162463][ T3746] loop0: detected capacity change from 0 to 128 [ 52.170757][ T3631] loop4: p50 start 100859904 is beyond EOD, truncated [ 52.177843][ T3631] loop4: p51 size 10695936 extends beyond EOD, truncated [ 52.187537][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 52.187553][ T29] audit: type=1400 audit(1759281484.710:221): avc: denied { read } for pid=3747 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.193490][ T3631] loop4: p52 start 100859904 is beyond EOD, truncated [ 52.220229][ T3631] loop4: p53 size 10695936 extends beyond EOD, truncated [ 52.228982][ T3631] loop4: p54 start 100859904 is beyond EOD, truncated [ 52.235877][ T3631] loop4: p55 size 10695936 extends beyond EOD, truncated [ 52.283541][ T29] audit: type=1400 audit(1759281484.790:222): avc: denied { setopt } for pid=3747 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.305191][ T3631] loop4: p56 start 100859904 is beyond EOD, truncated [ 52.312148][ T3631] loop4: p57 size 10695936 extends beyond EOD, truncated [ 52.321632][ T3631] loop4: p58 start 100859904 is beyond EOD, truncated [ 52.328697][ T3631] loop4: p59 size 10695936 extends beyond EOD, truncated [ 52.337094][ T3631] loop4: p60 start 100859904 is beyond EOD, truncated [ 52.343991][ T3631] loop4: p61 size 10695936 extends beyond EOD, truncated [ 52.359145][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 52.385368][ T3631] loop4: p62 start 100859904 is beyond EOD, truncated [ 52.392212][ T3631] loop4: p63 size 10695936 extends beyond EOD, truncated [ 52.400347][ T3631] loop4: p64 start 100859904 is beyond EOD, truncated [ 52.407726][ T3631] loop4: p65 size 10695936 extends beyond EOD, truncated [ 52.553711][ T3631] loop4: p66 start 100859904 is beyond EOD, truncated [ 52.560680][ T3631] loop4: p67 size 10695936 extends beyond EOD, truncated [ 52.569461][ T3631] loop4: p68 start 100859904 is beyond EOD, truncated [ 52.576603][ T3631] loop4: p69 size 10695936 extends beyond EOD, truncated [ 52.619927][ T3631] loop4: p70 start 100859904 is beyond EOD, truncated [ 52.626999][ T3631] loop4: p71 size 10695936 extends beyond EOD, truncated [ 52.692950][ T3765] loop2: detected capacity change from 0 to 2048 [ 52.796284][ T3765] loop2: p2 < > p4 [ 52.801911][ T3765] loop2: p4 size 262144 extends beyond EOD, truncated [ 52.932368][ T3631] loop4: p72 start 100859904 is beyond EOD, truncated [ 52.939487][ T3631] loop4: p73 size 10695936 extends beyond EOD, truncated [ 53.074501][ T3631] loop4: p74 start 100859904 is beyond EOD, truncated [ 53.081552][ T3631] loop4: p75 size 10695936 extends beyond EOD, truncated [ 53.207215][ T3631] loop4: p76 start 100859904 is beyond EOD, truncated [ 53.214345][ T3631] loop4: p77 size 10695936 extends beyond EOD, truncated [ 53.444232][ T3631] loop4: p78 start 100859904 is beyond EOD, truncated [ 53.451166][ T3631] loop4: p79 size 10695936 extends beyond EOD, truncated [ 53.497478][ T3772] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 53.517039][ T3631] loop4: p80 start 100859904 is beyond EOD, truncated [ 53.524095][ T3631] loop4: p81 size 10695936 extends beyond EOD, truncated [ 53.542781][ T3772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 53.585300][ T3631] loop4: p82 start 100859904 is beyond EOD, truncated [ 53.592452][ T3631] loop4: p83 size 10695936 extends beyond EOD, truncated [ 53.632346][ T3631] loop4: p84 start 100859904 is beyond EOD, truncated [ 53.639419][ T3631] loop4: p85 size 10695936 extends beyond EOD, truncated [ 53.663987][ T3631] loop4: p86 start 100859904 is beyond EOD, truncated [ 53.671815][ T3631] loop4: p87 size 10695936 extends beyond EOD, truncated [ 53.699767][ T3631] loop4: p88 start 100859904 is beyond EOD, truncated [ 53.706929][ T3631] loop4: p89 size 10695936 extends beyond EOD, truncated [ 53.783086][ T3631] loop4: p90 start 100859904 is beyond EOD, truncated [ 53.790057][ T3631] loop4: p91 size 10695936 extends beyond EOD, truncated [ 53.807637][ T3776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.852617][ T3631] loop4: p92 start 100859904 is beyond EOD, truncated [ 53.859879][ T3631] loop4: p93 size 10695936 extends beyond EOD, truncated [ 53.894969][ T3756] loop3: detected capacity change from 0 to 4096 [ 53.913212][ T3631] loop4: p94 start 100859904 is beyond EOD, truncated [ 53.920793][ T3631] loop4: p95 size 10695936 extends beyond EOD, truncated [ 53.932023][ T3780] loop2: detected capacity change from 0 to 512 [ 53.944630][ T3631] loop4: p96 start 100859904 is beyond EOD, truncated [ 53.951547][ T3631] loop4: p97 size 10695936 extends beyond EOD, truncated [ 53.959119][ T3780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.969976][ T3631] loop4: p98 start 100859904 is beyond EOD, truncated [ 53.977094][ T3631] loop4: p99 size 10695936 extends beyond EOD, truncated [ 54.000864][ T3784] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 54.004021][ T29] audit: type=1400 audit(1759281486.520:223): avc: denied { map } for pid=3781 comm="syz.0.89" path="socket:[5424]" dev="sockfs" ino=5424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.009144][ T3784] audit: out of memory in audit_log_start [ 54.032239][ T29] audit: type=1400 audit(1759281486.520:224): avc: denied { read } for pid=3781 comm="syz.0.89" path="socket:[5424]" dev="sockfs" ino=5424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.054947][ T3631] loop4: p100 start 100859904 is beyond EOD, truncated [ 54.061985][ T29] audit: type=1326 audit(1759281486.520:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 54.069194][ T3631] loop4: p101 size 10695936 extends beyond EOD, [ 54.093329][ T29] audit: type=1326 audit(1759281486.520:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 54.093414][ T29] audit: type=1326 audit(1759281486.520:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 54.093481][ T29] audit: type=1326 audit(1759281486.520:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3783 comm="syz.1.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 54.172046][ T3631] truncated [ 54.179495][ T3780] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.194138][ T3780] EXT4-fs (loop2): 1 truncate cleaned up [ 54.200366][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.215081][ T3631] loop4: p102 start 100859904 is beyond EOD, truncated [ 54.222164][ T3631] loop4: p103 size 10695936 extends beyond EOD, truncated [ 54.240725][ T3782] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.243550][ T3631] loop4: p104 start 100859904 is beyond EOD, truncated [ 54.258479][ T3756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.270983][ T3631] loop4: p105 size 10695936 extends beyond EOD, truncated [ 54.284975][ T3631] loop4: p106 start 100859904 is beyond EOD, truncated [ 54.292204][ T3631] loop4: p107 size 10695936 extends beyond EOD, truncated [ 54.292567][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 54.311087][ T3631] loop4: p108 start 100859904 is beyond EOD, truncated [ 54.318157][ T3631] loop4: p109 size 10695936 extends beyond EOD, truncated [ 54.328349][ T3631] loop4: p110 start 100859904 is beyond EOD, truncated [ 54.335311][ T3631] loop4: p111 size 10695936 extends beyond EOD, truncated [ 54.346754][ T3782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.358859][ T3631] loop4: p112 start 100859904 is beyond EOD, truncated [ 54.366071][ T3631] loop4: p113 size 10695936 extends beyond EOD, truncated [ 54.378484][ T3631] loop4: p114 start 100859904 is beyond EOD, truncated [ 54.385521][ T3631] loop4: p115 size 10695936 extends beyond EOD, truncated [ 54.394222][ T3631] loop4: p116 start 100859904 is beyond EOD, truncated [ 54.399521][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 54.401476][ T3631] loop4: p117 size 10695936 extends beyond EOD, truncated [ 54.418746][ T3631] loop4: p118 start 100859904 is beyond EOD, truncated [ 54.425794][ T3631] loop4: p119 size 10695936 extends beyond EOD, truncated [ 54.441403][ T3782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.454730][ T3631] loop4: p120 start 100859904 is beyond EOD, truncated [ 54.462039][ T3631] loop4: p121 size 10695936 extends beyond EOD, truncated [ 54.470713][ T3631] loop4: p122 start 100859904 is beyond EOD, truncated [ 54.477694][ T3631] loop4: p123 size 10695936 extends beyond EOD, truncated [ 54.491427][ T3782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.504296][ T3631] loop4: p124 start 100859904 is beyond EOD, truncated [ 54.511451][ T3631] loop4: p125 size 10695936 extends beyond EOD, truncated [ 54.520209][ T3631] loop4: p126 start 100859904 is beyond EOD, truncated [ 54.527516][ T3631] loop4: p127 size 10695936 extends beyond EOD, truncated [ 54.550185][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.560085][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.593463][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.599987][ T3631] loop4: p128 start 100859904 is beyond EOD, truncated [ 54.609330][ T3631] loop4: p129 size 10695936 extends beyond EOD, truncated [ 54.622600][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.643392][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.672314][ T3631] loop4: p130 start 100859904 is beyond EOD, truncated [ 54.680370][ T3631] loop4: p131 size 10695936 extends beyond EOD, truncated [ 54.696812][ T3631] loop4: p132 start 100859904 is beyond EOD, truncated [ 54.703982][ T3631] loop4: p133 size 10695936 extends beyond EOD, truncated [ 54.712354][ T3631] loop4: p134 start 100859904 is beyond EOD, truncated [ 54.716596][ T3800] program syz.1.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.719861][ T3631] loop4: p135 size 10695936 extends beyond EOD, truncated [ 54.733404][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 54.738817][ T3631] loop4: p136 start 100859904 is beyond EOD, truncated [ 54.753224][ T3631] loop4: p137 size 10695936 extends beyond EOD, truncated [ 54.762137][ T3631] loop4: p138 start 100859904 is beyond EOD, truncated [ 54.769628][ T3631] loop4: p139 size 10695936 extends beyond EOD, truncated [ 54.779440][ T3631] loop4: p140 start 100859904 is beyond EOD, truncated [ 54.786496][ T3631] loop4: p141 size 10695936 extends beyond EOD, truncated [ 54.795687][ T3631] loop4: p142 start 100859904 is beyond EOD, truncated [ 54.802684][ T3631] loop4: p143 size 10695936 extends beyond EOD, truncated [ 54.812558][ T3631] loop4: p144 start 100859904 is beyond EOD, truncated [ 54.819541][ T3631] loop4: p145 size 10695936 extends beyond EOD, truncated [ 54.828847][ T3631] loop4: p146 start 100859904 is beyond EOD, truncated [ 54.836154][ T3631] loop4: p147 size 10695936 extends beyond EOD, truncated [ 54.845518][ T3631] loop4: p148 start 100859904 is beyond EOD, truncated [ 54.852901][ T3631] loop4: p149 size 10695936 extends beyond EOD, truncated [ 54.861123][ T3631] loop4: p150 start 100859904 is beyond EOD, truncated [ 54.868257][ T3631] loop4: p151 size 10695936 extends beyond EOD, truncated [ 54.877821][ T3631] loop4: p152 start 100859904 is beyond EOD, truncated [ 54.884862][ T3631] loop4: p153 size 10695936 extends beyond EOD, truncated [ 54.893989][ T3631] loop4: p154 start 100859904 is beyond EOD, truncated [ 54.901379][ T3631] loop4: p155 size 10695936 extends beyond EOD, truncated [ 54.909698][ T3631] loop4: p156 start 100859904 is beyond EOD, truncated [ 54.916775][ T3631] loop4: p157 size 10695936 extends beyond EOD, truncated [ 54.926049][ T3631] loop4: p158 start 100859904 is beyond EOD, truncated [ 54.933145][ T3631] loop4: p159 size 10695936 extends beyond EOD, truncated [ 54.942008][ T3631] loop4: p160 start 100859904 is beyond EOD, truncated [ 54.949082][ T3631] loop4: p161 size 10695936 extends beyond EOD, truncated [ 54.958979][ T3631] loop4: p162 start 100859904 is beyond EOD, truncated [ 54.966791][ T3631] loop4: p163 size 10695936 extends beyond EOD, truncated [ 54.974996][ T3631] loop4: p164 start 100859904 is beyond EOD, truncated [ 54.981900][ T3631] loop4: p165 size 10695936 extends beyond EOD, truncated [ 54.990194][ T3631] loop4: p166 start 100859904 is beyond EOD, truncated [ 54.997585][ T3631] loop4: p167 size 10695936 extends beyond EOD, truncated [ 55.005633][ T3631] loop4: p168 start 100859904 is beyond EOD, truncated [ 55.012875][ T3631] loop4: p169 size 10695936 extends beyond EOD, truncated [ 55.021126][ T3631] loop4: p170 start 100859904 is beyond EOD, truncated [ 55.028191][ T3631] loop4: p171 size 10695936 extends beyond EOD, truncated [ 55.036346][ T3631] loop4: p172 start 100859904 is beyond EOD, truncated [ 55.043529][ T3631] loop4: p173 size 10695936 extends beyond EOD, truncated [ 55.051361][ T3631] loop4: p174 start 100859904 is beyond EOD, truncated [ 55.058388][ T3631] loop4: p175 size 10695936 extends beyond EOD, truncated [ 55.066701][ T3631] loop4: p176 start 100859904 is beyond EOD, truncated [ 55.073686][ T3631] loop4: p177 size 10695936 extends beyond EOD, truncated [ 55.081845][ T3631] loop4: p178 start 100859904 is beyond EOD, truncated [ 55.089179][ T3631] loop4: p179 size 10695936 extends beyond EOD, truncated [ 55.109069][ T3631] loop4: p180 start 100859904 is beyond EOD, truncated [ 55.116286][ T3631] loop4: p181 size 10695936 extends beyond EOD, truncated [ 55.139671][ T3631] loop4: p182 start 100859904 is beyond EOD, truncated [ 55.146826][ T3631] loop4: p183 size 10695936 extends beyond EOD, truncated [ 55.154956][ T3631] loop4: p184 start 100859904 is beyond EOD, truncated [ 55.161959][ T3631] loop4: p185 size 10695936 extends beyond EOD, truncated [ 55.184846][ T3631] loop4: p186 start 100859904 is beyond EOD, truncated [ 55.191904][ T3631] loop4: p187 size 10695936 extends beyond EOD, truncated [ 55.209023][ T3631] loop4: p188 start 100859904 is beyond EOD, truncated [ 55.216062][ T3631] loop4: p189 size 10695936 extends beyond EOD, truncated [ 55.318346][ T3812] program syz.2.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.328276][ T3631] loop4: p190 start 100859904 is beyond EOD, truncated [ 55.335338][ T3631] loop4: p191 size 10695936 extends beyond EOD, truncated [ 55.343326][ T3631] loop4: p192 start 100859904 is beyond EOD, truncated [ 55.350231][ T3631] loop4: p193 size 10695936 extends beyond EOD, truncated [ 55.358523][ T3631] loop4: p194 start 100859904 is beyond EOD, truncated [ 55.365648][ T3631] loop4: p195 size 10695936 extends beyond EOD, truncated [ 55.373545][ T3631] loop4: p196 start 100859904 is beyond EOD, truncated [ 55.380722][ T3631] loop4: p197 size 10695936 extends beyond EOD, truncated [ 55.409321][ T3631] loop4: p198 start 100859904 is beyond EOD, truncated [ 55.416949][ T3631] loop4: p199 size 10695936 extends beyond EOD, truncated [ 55.427703][ T3631] loop4: p200 start 100859904 is beyond EOD, truncated [ 55.435198][ T3631] loop4: p201 size 10695936 extends beyond EOD, truncated [ 55.444361][ T3631] loop4: p202 start 100859904 is beyond EOD, truncated [ 55.451347][ T3631] loop4: p203 size 10695936 extends beyond EOD, truncated [ 55.464070][ T3631] loop4: p204 start 100859904 is beyond EOD, truncated [ 55.471468][ T3631] loop4: p205 size 10695936 extends beyond EOD, truncated [ 55.495696][ T3631] loop4: p206 start 100859904 is beyond EOD, truncated [ 55.503086][ T3631] loop4: p207 size 10695936 extends beyond EOD, truncated [ 55.536001][ T3631] loop4: p208 start 100859904 is beyond EOD, truncated [ 55.543082][ T3631] loop4: p209 size 10695936 extends beyond EOD, truncated [ 55.545323][ T3817] netlink: 'syz.1.97': attribute type 21 has an invalid length. [ 55.559215][ T3631] loop4: p210 start 100859904 is beyond EOD, truncated [ 55.566875][ T3631] loop4: p211 size 10695936 extends beyond EOD, truncated [ 55.571502][ T3817] netlink: 156 bytes leftover after parsing attributes in process `syz.1.97'. [ 55.589185][ T3631] loop4: p212 start 100859904 is beyond EOD, truncated [ 55.592910][ T3817] sg_write: data in/out 327804/1 bytes for SCSI command 0x1c-- guessing data in; [ 55.592910][ T3817] program syz.1.97 not setting count and/or reply_len properly [ 55.596800][ T3631] loop4: p213 size 10695936 extends beyond EOD, truncated [ 55.643540][ T3631] loop4: p214 start 100859904 is beyond EOD, truncated [ 55.651008][ T3631] loop4: p215 size 10695936 extends beyond EOD, truncated [ 55.659601][ T3631] loop4: p216 start 100859904 is beyond EOD, truncated [ 55.667135][ T3631] loop4: p217 size 10695936 extends beyond EOD, truncated [ 55.675360][ T3631] loop4: p218 start 100859904 is beyond EOD, truncated [ 55.682636][ T3631] loop4: p219 size 10695936 extends beyond EOD, truncated [ 55.693388][ T3631] loop4: p220 start 100859904 is beyond EOD, truncated [ 55.700941][ T3631] loop4: p221 size 10695936 extends beyond EOD, truncated [ 55.713187][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.732310][ T3820] loop1: detected capacity change from 0 to 2048 [ 55.738282][ T3631] loop4: p222 start 100859904 is beyond EOD, truncated [ 55.746007][ T3631] loop4: p223 size 10695936 extends beyond EOD, truncated [ 55.771106][ T3631] loop4: p224 start 100859904 is beyond EOD, truncated [ 55.775592][ T3820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.778355][ T3631] loop4: p225 size 10695936 extends beyond EOD, truncated [ 55.816188][ T3631] loop4: p226 start 100859904 is beyond EOD, truncated [ 55.823209][ T3631] loop4: p227 size 10695936 extends beyond EOD, truncated [ 55.832509][ T3828] loop3: detected capacity change from 0 to 164 [ 55.859249][ T3828] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.875143][ T3830] loop2: detected capacity change from 0 to 512 [ 55.882810][ T3828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=3828 comm=syz.3.99 [ 55.905405][ T3631] loop4: p228 start 100859904 is beyond EOD, truncated [ 55.912329][ T3631] loop4: p229 size 10695936 extends beyond EOD, truncated [ 55.916049][ T3828] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 55.934881][ T3828] Symlink component flag not implemented [ 55.936335][ T3830] EXT4-fs (loop2): too many log groups per flexible block group [ 55.940697][ T3828] Symlink component flag not implemented [ 55.941735][ T3828] Symlink component flag not implemented (7) [ 55.950795][ T3631] loop4: p230 start 100859904 is beyond EOD, [ 55.955967][ T3828] Symlink component flag not implemented (116) [ 55.968212][ T3830] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 55.974799][ T3631] truncated [ 55.974808][ T3631] loop4: p231 size 10695936 extends beyond EOD, truncated [ 55.993172][ T3631] loop4: p232 start 100859904 is beyond EOD, truncated [ 56.000494][ T3631] loop4: p233 size 10695936 extends beyond EOD, truncated [ 56.013360][ T3830] EXT4-fs (loop2): mount failed [ 56.018989][ T3631] loop4: p234 start 100859904 is beyond EOD, truncated [ 56.026063][ T3631] loop4: p235 size 10695936 extends beyond EOD, truncated [ 56.046904][ T3631] loop4: p236 start 100859904 is beyond EOD, truncated [ 56.053966][ T3631] loop4: p237 size 10695936 extends beyond EOD, truncated [ 56.068425][ T3830] loop2: detected capacity change from 0 to 512 [ 56.083514][ T3830] ext4: Unknown parameter '9p' [ 56.088988][ T3631] loop4: p238 start 100859904 is beyond EOD, truncated [ 56.093896][ T3830] loop2: detected capacity change from 0 to 512 [ 56.096684][ T3631] loop4: p239 size 10695936 extends beyond EOD, truncated [ 56.104369][ T3830] ext4: Unknown parameter '9p' [ 56.117671][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.137866][ T3631] loop4: p240 start 100859904 is beyond EOD, truncated [ 56.141707][ T3830] loop2: detected capacity change from 0 to 512 [ 56.145202][ T3631] loop4: p241 size 10695936 extends beyond EOD, truncated [ 56.167441][ T3830] ext4: Unknown parameter '9p' [ 56.229857][ T3631] loop4: p242 start 100859904 is beyond EOD, truncated [ 56.236925][ T3631] loop4: p243 size 10695936 extends beyond EOD, truncated [ 56.245959][ T3631] loop4: p244 start 100859904 is beyond EOD, truncated [ 56.252939][ T3631] loop4: p245 size 10695936 extends beyond EOD, truncated [ 56.270823][ T3830] loop2: detected capacity change from 0 to 512 [ 56.282558][ T3849] lo speed is unknown, defaulting to 1000 [ 56.288703][ T3849] lo speed is unknown, defaulting to 1000 [ 56.296506][ T3849] lo speed is unknown, defaulting to 1000 [ 56.305807][ T3849] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.317821][ T3631] loop4: p246 start 100859904 is beyond EOD, truncated [ 56.325100][ T3631] loop4: p247 size 10695936 extends beyond EOD, truncated [ 56.325738][ T3830] ext4: Unknown parameter '9p' [ 56.345342][ T3849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.364504][ T3847] loop1: detected capacity change from 0 to 128 [ 56.378351][ T3830] loop2: detected capacity change from 0 to 512 [ 56.390480][ T3847] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.393521][ T3830] ext4: Unknown parameter '9p' [ 56.398667][ T3847] FAT-fs (loop1): Filesystem has been set read-only [ 56.416620][ T3631] loop4: p248 start 100859904 is beyond EOD, truncated [ 56.423409][ T3847] bio_check_eod: 5595 callbacks suppressed [ 56.423432][ T3847] syz.1.105: attempt to access beyond end of device [ 56.423432][ T3847] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 56.423678][ T3631] loop4: p249 size 10695936 extends beyond EOD, [ 56.430410][ T3847] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.443685][ T3631] truncated [ 56.458698][ T3830] loop2: detected capacity change from 0 to 512 [ 56.459258][ T3847] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.462933][ T3830] ext4: Unknown parameter '9p' [ 56.499451][ T3830] loop2: detected capacity change from 0 to 512 [ 56.506424][ T3847] syz.1.105: attempt to access beyond end of device [ 56.506424][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.531022][ T3631] loop4: p250 start 100859904 is beyond EOD, truncated [ 56.532124][ T3849] lo speed is unknown, defaulting to 1000 [ 56.538068][ T3631] loop4: p251 size 10695936 extends beyond EOD, truncated [ 56.551680][ T3830] ext4: Unknown parameter '9p' [ 56.557023][ T3849] lo speed is unknown, defaulting to 1000 [ 56.571919][ T3854] loop0: detected capacity change from 0 to 1024 [ 56.582064][ T3830] loop2: detected capacity change from 0 to 512 [ 56.588444][ T3849] lo speed is unknown, defaulting to 1000 [ 56.589890][ T3631] loop4: p252 start 100859904 is beyond EOD, truncated [ 56.597612][ T3854] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.601766][ T3631] loop4: p253 size 10695936 extends beyond EOD, [ 56.613299][ T3854] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.624450][ T3849] lo speed is unknown, defaulting to 1000 [ 56.629650][ T3631] truncated [ 56.635938][ T3830] ext4: Unknown parameter '9p' [ 56.647716][ T3847] syz.1.105: attempt to access beyond end of device [ 56.647716][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.654656][ T3631] loop4: p254 start 100859904 is beyond EOD, truncated [ 56.667239][ T3830] loop2: detected capacity change from 0 to 512 [ 56.668560][ T3631] loop4: p255 size 10695936 extends beyond EOD, truncated [ 56.677191][ T3847] syz.1.105: attempt to access beyond end of device [ 56.677191][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.688119][ T3854] JBD2: no valid journal superblock found [ 56.703081][ T3854] EXT4-fs (loop0): Could not load journal inode [ 56.714861][ T3849] lo speed is unknown, defaulting to 1000 [ 56.720967][ T3847] syz.1.105: attempt to access beyond end of device [ 56.720967][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.757139][ T3847] syz.1.105: attempt to access beyond end of device [ 56.757139][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.799891][ T3859] netlink: 14 bytes leftover after parsing attributes in process `syz.0.113'. [ 56.805040][ T3847] syz.1.105: attempt to access beyond end of device [ 56.805040][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.842022][ T3847] syz.1.105: attempt to access beyond end of device [ 56.842022][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.861270][ T3847] syz.1.105: attempt to access beyond end of device [ 56.861270][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.878262][ T3847] syz.1.105: attempt to access beyond end of device [ 56.878262][ T3847] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 56.941375][ T3870] netlink: 48 bytes leftover after parsing attributes in process `syz.4.118'. [ 57.081519][ T3877] loop3: detected capacity change from 0 to 512 [ 57.089057][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.101451][ T3877] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 57.111813][ T3877] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 57.122479][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.124852][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 57.134325][ T3641] udevd[3641]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 57.192732][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop4p23, 10) failed: No such file or directory [ 57.240017][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p27, 10) failed: No such file or directory [ 57.241688][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 57.280815][ T3877] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.120: Invalid inode table block 1 in block_group 0 [ 57.285653][ T3641] udevd[3641]: inotify_add_watch(7, /dev/loop4p31, 10) failed: No such file or directory [ 57.305478][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop4p29, 10) failed: No such file or directory [ 57.318955][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 57.318972][ T29] audit: type=1400 audit(1759281489.840:319): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.332258][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 57.378179][ T3877] EXT4-fs (loop3): Remounting filesystem read-only [ 57.394169][ T29] audit: type=1400 audit(1759281489.920:320): avc: denied { create } for pid=3891 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.407671][ T3877] EXT4-fs (loop3): get root inode failed [ 57.416677][ T29] audit: type=1400 audit(1759281489.920:321): avc: denied { connect } for pid=3891 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.420017][ T3877] EXT4-fs (loop3): mount failed [ 57.449388][ T29] audit: type=1400 audit(1759281489.970:322): avc: denied { ioctl } for pid=3892 comm="syz.1.121" path="socket:[5697]" dev="sockfs" ino=5697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.479757][ T3894] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 57.494124][ T3894] tmpfs: Unknown parameter 'mpoleare' [ 57.494422][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 57.519035][ T29] audit: type=1326 audit(1759281489.970:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9b5eeec9 code=0x7ffc0000 [ 57.543377][ T29] audit: type=1326 audit(1759281489.970:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d9b5eeec9 code=0x7ffc0000 [ 57.568420][ T29] audit: type=1326 audit(1759281489.970:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9b5eeec9 code=0x7ffc0000 [ 57.592265][ T29] audit: type=1326 audit(1759281489.970:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d9b5f0de7 code=0x7ffc0000 [ 57.616892][ T29] audit: type=1326 audit(1759281489.970:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4d9b5f0d5c code=0x7ffc0000 [ 57.640598][ T29] audit: type=1326 audit(1759281489.970:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.4.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4d9b5f0c94 code=0x7ffc0000 [ 57.670691][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 57.789632][ T3896] netlink: 108 bytes leftover after parsing attributes in process `syz.1.123'. [ 57.797378][ T3899] lo speed is unknown, defaulting to 1000 [ 57.866220][ T3905] FAULT_INJECTION: forcing a failure. [ 57.866220][ T3905] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.884371][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.884406][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.884423][ T3905] Call Trace: [ 57.884432][ T3905] [ 57.884443][ T3905] __dump_stack+0x1d/0x30 [ 57.884543][ T3905] dump_stack_lvl+0xe8/0x140 [ 57.884576][ T3905] dump_stack+0x15/0x1b [ 57.884617][ T3905] should_fail_ex+0x265/0x280 [ 57.884654][ T3905] should_fail_alloc_page+0xf2/0x100 [ 57.884683][ T3905] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.884723][ T3905] alloc_pages_mpol+0xb3/0x250 [ 57.884824][ T3905] alloc_pages_noprof+0x90/0x130 [ 57.884927][ T3905] get_free_pages_noprof+0xc/0x40 [ 57.884947][ T3905] selinux_genfs_get_sid+0x33/0x180 [ 57.884987][ T3905] inode_doinit_with_dentry+0x5fe/0x7a0 [ 57.885057][ T3905] selinux_d_instantiate+0x27/0x40 [ 57.885094][ T3905] security_d_instantiate+0x7a/0xa0 [ 57.885125][ T3905] d_instantiate+0x3f/0x80 [ 57.885215][ T3905] __debugfs_create_file+0x1c1/0x330 [ 57.885251][ T3905] debugfs_create_file_full+0x3f/0x60 [ 57.885279][ T3905] ? __pfx_geneve_setup+0x10/0x10 [ 57.885352][ T3905] ref_tracker_dir_debugfs+0x100/0x1e0 [ 57.885400][ T3905] alloc_netdev_mqs+0x1a2/0xa30 [ 57.885432][ T3905] rtnl_create_link+0x239/0x710 [ 57.885473][ T3905] rtnl_newlink_create+0x14c/0x620 [ 57.885500][ T3905] ? __list_del_entry_valid_or_report+0x65/0x130 [ 57.885531][ T3905] ? __mutex_lock+0x25d/0xcc0 [ 57.885578][ T3905] rtnl_newlink+0xf29/0x12d0 [ 57.885638][ T3905] ? xas_load+0x413/0x430 [ 57.885678][ T3905] ? __memcg_slab_free_hook+0x135/0x230 [ 57.885724][ T3905] ? __rcu_read_unlock+0x4f/0x70 [ 57.885815][ T3905] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.885845][ T3905] ? cred_has_capability+0x210/0x280 [ 57.885878][ T3905] ? selinux_capable+0x31/0x40 [ 57.885918][ T3905] ? security_capable+0x83/0x90 [ 57.885954][ T3905] ? ns_capable+0x7d/0xb0 [ 57.886036][ T3905] ? __pfx_rtnl_newlink+0x10/0x10 [ 57.886271][ T3905] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 57.886318][ T3905] netlink_rcv_skb+0x123/0x220 [ 57.886461][ T3905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.886537][ T3905] rtnetlink_rcv+0x1c/0x30 [ 57.886571][ T3905] netlink_unicast+0x5bd/0x690 [ 57.886604][ T3905] netlink_sendmsg+0x58b/0x6b0 [ 57.886698][ T3905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.886836][ T3905] __sock_sendmsg+0x145/0x180 [ 57.886863][ T3905] ____sys_sendmsg+0x31e/0x4e0 [ 57.886905][ T3905] ___sys_sendmsg+0x17b/0x1d0 [ 57.886959][ T3905] __x64_sys_sendmsg+0xd4/0x160 [ 57.887067][ T3905] x64_sys_call+0x191e/0x2ff0 [ 57.887094][ T3905] do_syscall_64+0xd2/0x200 [ 57.887126][ T3905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.887157][ T3905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.887276][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.887313][ T3905] RIP: 0033:0x7f777ef3eec9 [ 57.887330][ T3905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.887351][ T3905] RSP: 002b:00007f777d99f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.887375][ T3905] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3eec9 [ 57.887389][ T3905] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 57.887440][ T3905] RBP: 00007f777d99f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.887456][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.887563][ T3905] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 57.887644][ T3905] [ 58.435519][ T3914] loop1: detected capacity change from 0 to 164 [ 58.481802][ T3918] loop3: detected capacity change from 0 to 128 [ 58.491121][ T3918] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.491154][ T3918] FAT-fs (loop3): Filesystem has been set read-only [ 58.491193][ T3918] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.491210][ T3918] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.515905][ T3914] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.530563][ T3914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=3914 comm=syz.1.129 [ 58.531478][ T3914] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.531701][ T3914] Symlink component flag not implemented [ 58.531708][ T3914] Symlink component flag not implemented [ 58.531740][ T3914] Symlink component flag not implemented (7) [ 58.531830][ T3914] Symlink component flag not implemented (116) [ 58.584951][ T3920] loop2: detected capacity change from 0 to 512 [ 58.598676][ T3920] EXT4-fs (loop2): too many log groups per flexible block group [ 58.598769][ T3920] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 58.598792][ T3920] EXT4-fs (loop2): mount failed [ 58.836821][ T3924] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 58.842704][ T3924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.878854][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 58.884730][ T3924] bond1 (unregistering): Released all slaves [ 59.110051][ T3931] loop4: detected capacity change from 0 to 128 [ 59.140822][ T3931] buffer_io_error: 20798 callbacks suppressed [ 59.140840][ T3931] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 59.173364][ T3931] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 59.377549][ T3939] FAULT_INJECTION: forcing a failure. [ 59.377549][ T3939] name failslab, interval 1, probability 0, space 0, times 0 [ 59.391170][ T3939] CPU: 1 UID: 0 PID: 3939 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.391202][ T3939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.391218][ T3939] Call Trace: [ 59.391227][ T3939] [ 59.391237][ T3939] __dump_stack+0x1d/0x30 [ 59.391304][ T3939] dump_stack_lvl+0xe8/0x140 [ 59.391329][ T3939] dump_stack+0x15/0x1b [ 59.391350][ T3939] should_fail_ex+0x265/0x280 [ 59.391388][ T3939] should_failslab+0x8c/0xb0 [ 59.391420][ T3939] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.391462][ T3939] ? __alloc_skb+0x101/0x320 [ 59.391564][ T3939] __alloc_skb+0x101/0x320 [ 59.391597][ T3939] ? audit_log_start+0x365/0x6c0 [ 59.391630][ T3939] audit_log_start+0x380/0x6c0 [ 59.391689][ T3939] audit_seccomp+0x48/0x100 [ 59.391723][ T3939] ? __seccomp_filter+0x69f/0x10c0 [ 59.391753][ T3939] __seccomp_filter+0x6b0/0x10c0 [ 59.391777][ T3939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.391811][ T3939] ? vfs_write+0x7e8/0x960 [ 59.391840][ T3939] __secure_computing+0x82/0x150 [ 59.391869][ T3939] syscall_trace_enter+0xcf/0x1e0 [ 59.391896][ T3939] do_syscall_64+0xac/0x200 [ 59.391986][ T3939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.392062][ T3939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.392085][ T3939] RIP: 0033:0x7f777ef3d8dc [ 59.392100][ T3939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.392167][ T3939] RSP: 002b:00007f777d99f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.392191][ T3939] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3d8dc [ 59.392208][ T3939] RDX: 000000000000000f RSI: 00007f777d99f0a0 RDI: 0000000000000004 [ 59.392220][ T3939] RBP: 00007f777d99f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.392232][ T3939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.392243][ T3939] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 59.392262][ T3939] [ 59.637365][ T3944] loop4: detected capacity change from 0 to 512 [ 59.720227][ T3944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.141: error while reading EA inode 32 err=-116 [ 59.739391][ T3944] EXT4-fs (loop4): Remounting filesystem read-only [ 59.746347][ T3944] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 59.746499][ T3957] loop3: detected capacity change from 0 to 164 [ 59.757102][ T3944] EXT4-fs (loop4): 1 orphan inode deleted [ 59.771566][ T3944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.796528][ T3944] FAULT_INJECTION: forcing a failure. [ 59.796528][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.809923][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.809958][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.809973][ T3944] Call Trace: [ 59.809980][ T3944] [ 59.809988][ T3944] __dump_stack+0x1d/0x30 [ 59.810009][ T3944] dump_stack_lvl+0xe8/0x140 [ 59.810098][ T3944] dump_stack+0x15/0x1b [ 59.810154][ T3944] should_fail_ex+0x265/0x280 [ 59.810187][ T3944] should_fail+0xb/0x20 [ 59.810229][ T3944] should_fail_usercopy+0x1a/0x20 [ 59.810269][ T3944] strncpy_from_user+0x25/0x230 [ 59.810345][ T3944] path_setxattrat+0xeb/0x310 [ 59.810424][ T3944] __x64_sys_setxattr+0x6e/0x90 [ 59.810497][ T3944] x64_sys_call+0xad2/0x2ff0 [ 59.810579][ T3944] do_syscall_64+0xd2/0x200 [ 59.810604][ T3944] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.810637][ T3944] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.810681][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.810706][ T3944] RIP: 0033:0x7f4d9b5eeec9 [ 59.810724][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.810774][ T3944] RSP: 002b:00007f4d9a04f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 59.810798][ T3944] RAX: ffffffffffffffda RBX: 00007f4d9b845fa0 RCX: 00007f4d9b5eeec9 [ 59.810814][ T3944] RDX: 0000200000000300 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 59.810829][ T3944] RBP: 00007f4d9a04f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.810845][ T3944] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 59.810860][ T3944] R13: 00007f4d9b846038 R14: 00007f4d9b845fa0 R15: 00007ffc3dc3adb8 [ 59.810946][ T3944] [ 59.813922][ T3957] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.002221][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.012490][ T3957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=3957 comm=syz.3.145 [ 60.026386][ T3957] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 60.035226][ T3957] Symlink component flag not implemented [ 60.041078][ T3957] Symlink component flag not implemented [ 60.049584][ T3957] Symlink component flag not implemented (7) [ 60.055840][ T3957] Symlink component flag not implemented (116) [ 60.096216][ T3969] loop1: detected capacity change from 0 to 128 [ 60.096434][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 60.118620][ T3969] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 60.126892][ T3969] FAT-fs (loop1): Filesystem has been set read-only [ 60.134387][ T3969] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 60.134680][ T3973] FAULT_INJECTION: forcing a failure. [ 60.134680][ T3973] name failslab, interval 1, probability 0, space 0, times 0 [ 60.142424][ T3969] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 60.155404][ T3973] CPU: 0 UID: 0 PID: 3973 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.155445][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.155463][ T3973] Call Trace: [ 60.155473][ T3973] [ 60.155487][ T3973] __dump_stack+0x1d/0x30 [ 60.155551][ T3973] dump_stack_lvl+0xe8/0x140 [ 60.155579][ T3973] dump_stack+0x15/0x1b [ 60.155603][ T3973] should_fail_ex+0x265/0x280 [ 60.155703][ T3973] should_failslab+0x8c/0xb0 [ 60.155740][ T3973] kmem_cache_alloc_noprof+0x50/0x310 [ 60.155780][ T3973] ? audit_log_start+0x365/0x6c0 [ 60.155873][ T3973] audit_log_start+0x365/0x6c0 [ 60.155921][ T3973] audit_seccomp+0x48/0x100 [ 60.155958][ T3973] ? __seccomp_filter+0x69f/0x10c0 [ 60.156010][ T3973] __seccomp_filter+0x6b0/0x10c0 [ 60.156046][ T3973] ? _raw_spin_unlock+0x26/0x50 [ 60.156116][ T3973] __secure_computing+0x82/0x150 [ 60.156146][ T3973] syscall_trace_enter+0xcf/0x1e0 [ 60.156183][ T3973] do_syscall_64+0xac/0x200 [ 60.156211][ T3973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.156286][ T3973] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.156372][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.156402][ T3973] RIP: 0033:0x7f3fe46bd8dc [ 60.156426][ T3973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.156451][ T3973] RSP: 002b:00007f3fe311f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.156476][ T3973] RAX: ffffffffffffffda RBX: 00007f3fe4915fa0 RCX: 00007f3fe46bd8dc [ 60.156494][ T3973] RDX: 000000000000000f RSI: 00007f3fe311f0a0 RDI: 0000000000000006 [ 60.156591][ T3973] RBP: 00007f3fe311f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.156606][ T3973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.156659][ T3973] R13: 00007f3fe4916038 R14: 00007f3fe4915fa0 R15: 00007ffd87f9e758 [ 60.156687][ T3973] [ 60.439258][ T3979] FAULT_INJECTION: forcing a failure. [ 60.439258][ T3979] name failslab, interval 1, probability 0, space 0, times 0 [ 60.452681][ T3979] CPU: 0 UID: 0 PID: 3979 Comm: syz.4.153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.452834][ T3979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.452850][ T3979] Call Trace: [ 60.452859][ T3979] [ 60.452869][ T3979] __dump_stack+0x1d/0x30 [ 60.452896][ T3979] dump_stack_lvl+0xe8/0x140 [ 60.452921][ T3979] dump_stack+0x15/0x1b [ 60.452947][ T3979] should_fail_ex+0x265/0x280 [ 60.452983][ T3979] ? nd_alloc_stack+0x50/0xa0 [ 60.453021][ T3979] should_failslab+0x8c/0xb0 [ 60.453079][ T3979] __kmalloc_cache_noprof+0x4c/0x320 [ 60.453117][ T3979] nd_alloc_stack+0x50/0xa0 [ 60.453147][ T3979] pick_link+0x78e/0x830 [ 60.453216][ T3979] ? __d_lookup_rcu+0x248/0x2a0 [ 60.453269][ T3979] step_into+0x790/0x7f0 [ 60.453304][ T3979] ? inode_permission+0x106/0x310 [ 60.453343][ T3979] link_path_walk+0x571/0x900 [ 60.453380][ T3979] path_lookupat+0x63/0x2a0 [ 60.453411][ T3979] filename_lookup+0x147/0x340 [ 60.453534][ T3979] ? __pfx_page_put_link+0x10/0x10 [ 60.453641][ T3979] ? __pfx_page_put_link+0x10/0x10 [ 60.453672][ T3979] do_readlinkat+0x7d/0x320 [ 60.453719][ T3979] __x64_sys_readlinkat+0x51/0x60 [ 60.453833][ T3979] x64_sys_call+0x16b4/0x2ff0 [ 60.453860][ T3979] do_syscall_64+0xd2/0x200 [ 60.453885][ T3979] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.453915][ T3979] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.454011][ T3979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.454038][ T3979] RIP: 0033:0x7f4d9b5eeec9 [ 60.454127][ T3979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.454150][ T3979] RSP: 002b:00007f4d9a04f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 60.454175][ T3979] RAX: ffffffffffffffda RBX: 00007f4d9b845fa0 RCX: 00007f4d9b5eeec9 [ 60.454191][ T3979] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000007 [ 60.454255][ T3979] RBP: 00007f4d9a04f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.454268][ T3979] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 60.454280][ T3979] R13: 00007f4d9b846038 R14: 00007f4d9b845fa0 R15: 00007ffc3dc3adb8 [ 60.454301][ T3979] [ 60.462492][ T3980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 60.722072][ T3985] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 60.742176][ T3985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.766009][ T3985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 60.807637][ T3985] bond1 (unregistering): Released all slaves [ 61.128444][ T4003] loop1: detected capacity change from 0 to 2048 [ 61.135951][ T4005] loop3: detected capacity change from 0 to 164 [ 61.157635][ T4005] isofs_fill_super: get root inode failed [ 61.177095][ T4003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.369793][ T3374] IPVS: starting estimator thread 0... [ 61.457400][ T4012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 61.479925][ T4008] IPVS: using max 2352 ests per chain, 117600 per kthread [ 61.495283][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.537349][ T4014] veth0: entered promiscuous mode [ 61.779145][ T4018] loop4: detected capacity change from 0 to 164 [ 61.791752][ T4018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.813950][ T4018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4018 comm=syz.4.163 [ 61.844095][ T4018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.864295][ T4018] Symlink component flag not implemented [ 61.870074][ T4018] Symlink component flag not implemented [ 61.893328][ T4018] Symlink component flag not implemented (7) [ 61.899706][ T4018] Symlink component flag not implemented (116) [ 61.994744][ T4012] program syz.3.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.171236][ T4026] __nla_validate_parse: 4 callbacks suppressed [ 62.171257][ T4026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 62.239935][ T4033] loop3: detected capacity change from 0 to 128 [ 62.271510][ T4032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 62.301349][ T4032] loop4: detected capacity change from 0 to 128 [ 62.371287][ T4013] veth0: left promiscuous mode [ 62.617827][ T4052] loop1: detected capacity change from 0 to 164 [ 62.627776][ T4052] isofs_fill_super: get root inode failed [ 62.748129][ T3408] IPVS: starting estimator thread 0... [ 62.795592][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 62.795611][ T29] audit: type=1326 audit(1759281495.320:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 62.913442][ T4054] IPVS: using max 2352 ests per chain, 117600 per kthread [ 62.935360][ T29] audit: type=1326 audit(1759281495.350:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 62.959862][ T29] audit: type=1326 audit(1759281495.350:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 62.984812][ T29] audit: type=1326 audit(1759281495.350:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.009694][ T29] audit: type=1326 audit(1759281495.350:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.034291][ T29] audit: type=1326 audit(1759281495.360:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.057953][ T29] audit: type=1326 audit(1759281495.360:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.081674][ T29] audit: type=1326 audit(1759281495.360:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.105385][ T29] audit: type=1326 audit(1759281495.360:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.129556][ T29] audit: type=1326 audit(1759281495.360:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.1.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7feef0f3eec9 code=0x7ffc0000 [ 63.264162][ T4062] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 63.327707][ T4062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.338438][ T4064] netlink: 196 bytes leftover after parsing attributes in process `syz.1.179'. [ 63.361102][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 63.395658][ T4062] bond1 (unregistering): Released all slaves [ 63.422354][ T4064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.531270][ T4077] netlink: 'syz.2.184': attribute type 13 has an invalid length. [ 63.705991][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.713457][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.820425][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.847447][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.954412][ T4085] wireguard0: entered promiscuous mode [ 63.960062][ T4085] wireguard0: entered allmulticast mode [ 63.986782][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.035450][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.060866][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.079523][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.100233][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 64.180374][ T4099] FAULT_INJECTION: forcing a failure. [ 64.180374][ T4099] name failslab, interval 1, probability 0, space 0, times 0 [ 64.193505][ T4099] CPU: 1 UID: 0 PID: 4099 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.193535][ T4099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.193550][ T4099] Call Trace: [ 64.193557][ T4099] [ 64.193565][ T4099] __dump_stack+0x1d/0x30 [ 64.193591][ T4099] dump_stack_lvl+0xe8/0x140 [ 64.193665][ T4099] dump_stack+0x15/0x1b [ 64.193747][ T4099] should_fail_ex+0x265/0x280 [ 64.193777][ T4099] should_failslab+0x8c/0xb0 [ 64.193914][ T4099] kmem_cache_alloc_node_noprof+0x57/0x320 [ 64.193955][ T4099] ? __alloc_skb+0x101/0x320 [ 64.194062][ T4099] __alloc_skb+0x101/0x320 [ 64.194094][ T4099] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 64.194128][ T4099] ? vlan_dev_stop+0xf7/0x110 [ 64.194200][ T4099] rtmsg_ifinfo+0x6d/0x110 [ 64.194238][ T4099] netif_close_many+0x14d/0x240 [ 64.194306][ T4099] unregister_netdevice_many_notify+0x437/0x15d0 [ 64.194344][ T4099] unregister_netdevice_queue+0x1f5/0x220 [ 64.194377][ T4099] unregister_vlan_dev+0x201/0x2b0 [ 64.194429][ T4099] vlan_ioctl_handler+0x226/0x4f0 [ 64.194461][ T4099] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 64.194509][ T4099] sock_ioctl+0x4a7/0x610 [ 64.194546][ T4099] ? __pfx_sock_ioctl+0x10/0x10 [ 64.194733][ T4099] __se_sys_ioctl+0xce/0x140 [ 64.194757][ T4099] __x64_sys_ioctl+0x43/0x50 [ 64.194790][ T4099] x64_sys_call+0x1816/0x2ff0 [ 64.194816][ T4099] do_syscall_64+0xd2/0x200 [ 64.194854][ T4099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.194943][ T4099] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.194983][ T4099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.195019][ T4099] RIP: 0033:0x7f4d9b5eeec9 [ 64.195038][ T4099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.195061][ T4099] RSP: 002b:00007f4d9a04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.195081][ T4099] RAX: ffffffffffffffda RBX: 00007f4d9b845fa0 RCX: 00007f4d9b5eeec9 [ 64.195116][ T4099] RDX: 0000200000002800 RSI: 0000000000008982 RDI: 0000000000000005 [ 64.195186][ T4099] RBP: 00007f4d9a04f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.195201][ T4099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.195217][ T4099] R13: 00007f4d9b846038 R14: 00007f4d9b845fa0 R15: 00007ffc3dc3adb8 [ 64.195240][ T4099] [ 64.551421][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 64.704555][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 64.714651][ T4114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4114 comm=syz.1.199 [ 64.883775][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 64.983199][ T4153] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.056258][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 65.320637][ T4187] syz.2.228 uses obsolete (PF_INET,SOCK_PACKET) [ 65.391602][ T4188] lo speed is unknown, defaulting to 1000 [ 65.678345][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 65.751163][ T4196] netlink: 'syz.3.232': attribute type 30 has an invalid length. [ 65.763613][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.772991][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.786013][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.812433][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.878741][ T4204] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 65.928569][ T4211] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 65.935582][ T4211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.943549][ T4211] vhci_hcd vhci_hcd.0: Device attached [ 65.956607][ T4212] vhci_hcd: connection closed [ 65.956921][ T35] vhci_hcd: stop threads [ 65.966127][ T35] vhci_hcd: release socket [ 65.970686][ T35] vhci_hcd: disconnect device [ 66.077450][ T4228] capability: warning: `syz.3.244' uses deprecated v2 capabilities in a way that may be insecure [ 66.118358][ T4232] batadv1: entered promiscuous mode [ 66.208765][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4240 comm=syz.3.248 [ 66.464568][ T4279] FAULT_INJECTION: forcing a failure. [ 66.464568][ T4279] name failslab, interval 1, probability 0, space 0, times 0 [ 66.479027][ T4279] CPU: 1 UID: 0 PID: 4279 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.479130][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.479149][ T4279] Call Trace: [ 66.479158][ T4279] [ 66.479203][ T4279] __dump_stack+0x1d/0x30 [ 66.479235][ T4279] dump_stack_lvl+0xe8/0x140 [ 66.479263][ T4279] dump_stack+0x15/0x1b [ 66.479287][ T4279] should_fail_ex+0x265/0x280 [ 66.479329][ T4279] should_failslab+0x8c/0xb0 [ 66.479366][ T4279] kmem_cache_alloc_node_noprof+0x57/0x320 [ 66.479484][ T4279] ? __alloc_skb+0x101/0x320 [ 66.479519][ T4279] __alloc_skb+0x101/0x320 [ 66.479550][ T4279] ? audit_log_start+0x365/0x6c0 [ 66.479626][ T4279] audit_log_start+0x380/0x6c0 [ 66.479728][ T4279] audit_seccomp+0x48/0x100 [ 66.479767][ T4279] ? __seccomp_filter+0x69f/0x10c0 [ 66.479808][ T4279] __seccomp_filter+0x6b0/0x10c0 [ 66.479840][ T4279] ? update_load_avg+0x1da/0x820 [ 66.479877][ T4279] ? __list_add_valid_or_report+0x38/0xe0 [ 66.479954][ T4279] ? __set_next_task_fair+0x5b/0x150 [ 66.480017][ T4279] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 66.480099][ T4279] ? _raw_spin_unlock+0x26/0x50 [ 66.480154][ T4279] __secure_computing+0x82/0x150 [ 66.480185][ T4279] syscall_trace_enter+0xcf/0x1e0 [ 66.480221][ T4279] do_syscall_64+0xac/0x200 [ 66.480248][ T4279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.480318][ T4279] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.480366][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.480437][ T4279] RIP: 0033:0x7f777ef3d8dc [ 66.480459][ T4279] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.480485][ T4279] RSP: 002b:00007f777d99f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.480513][ T4279] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3d8dc [ 66.480531][ T4279] RDX: 000000000000000f RSI: 00007f777d99f0a0 RDI: 0000000000000003 [ 66.480549][ T4279] RBP: 00007f777d99f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.480567][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.480647][ T4279] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 66.480674][ T4279] [ 66.722711][ T4292] lo speed is unknown, defaulting to 1000 [ 66.760973][ T4297] FAULT_INJECTION: forcing a failure. [ 66.760973][ T4297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.774249][ T4297] CPU: 1 UID: 0 PID: 4297 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.774283][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.774299][ T4297] Call Trace: [ 66.774308][ T4297] [ 66.774316][ T4297] __dump_stack+0x1d/0x30 [ 66.774389][ T4297] dump_stack_lvl+0xe8/0x140 [ 66.774414][ T4297] dump_stack+0x15/0x1b [ 66.774467][ T4297] should_fail_ex+0x265/0x280 [ 66.774497][ T4297] should_fail+0xb/0x20 [ 66.774523][ T4297] should_fail_usercopy+0x1a/0x20 [ 66.774564][ T4297] _copy_to_user+0x20/0xa0 [ 66.774668][ T4297] simple_read_from_buffer+0xb5/0x130 [ 66.774698][ T4297] proc_fail_nth_read+0x10e/0x150 [ 66.774736][ T4297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.774770][ T4297] vfs_read+0x1a5/0x770 [ 66.774874][ T4297] ? __set_next_task_fair+0x5b/0x150 [ 66.774895][ T4297] ? __rcu_read_unlock+0x4f/0x70 [ 66.774922][ T4297] ? __fget_files+0x184/0x1c0 [ 66.774953][ T4297] ? finish_task_switch+0xad/0x2b0 [ 66.775014][ T4297] ksys_read+0xda/0x1a0 [ 66.775038][ T4297] __x64_sys_read+0x40/0x50 [ 66.775067][ T4297] x64_sys_call+0x27bc/0x2ff0 [ 66.775093][ T4297] do_syscall_64+0xd2/0x200 [ 66.775173][ T4297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.775204][ T4297] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.775247][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.775275][ T4297] RIP: 0033:0x7f777ef3d8dc [ 66.775346][ T4297] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.775370][ T4297] RSP: 002b:00007f777d99f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.775390][ T4297] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3d8dc [ 66.775403][ T4297] RDX: 000000000000000f RSI: 00007f777d99f0a0 RDI: 0000000000000003 [ 66.775416][ T4297] RBP: 00007f777d99f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.775429][ T4297] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 66.775444][ T4297] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 66.775497][ T4297] [ 67.361247][ T4336] __nla_validate_parse: 2 callbacks suppressed [ 67.361283][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 67.376906][ T4336] netlink: 'syz.0.286': attribute type 30 has an invalid length. [ 67.394140][ T2891] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.412437][ T177] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.423717][ T177] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.437602][ T177] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.601304][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 67.825764][ T29] kauditd_printk_skb: 979 callbacks suppressed [ 67.825870][ T29] audit: type=1400 audit(1759281500.350:1510): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.858716][ T29] audit: type=1400 audit(1759281500.360:1511): avc: denied { map_create } for pid=4367 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.878846][ T29] audit: type=1400 audit(1759281500.360:1512): avc: denied { prog_load } for pid=4367 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.898159][ T29] audit: type=1400 audit(1759281500.360:1513): avc: denied { prog_load } for pid=4367 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.917601][ T29] audit: type=1400 audit(1759281500.380:1514): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.942824][ T29] audit: type=1400 audit(1759281500.390:1515): avc: denied { prog_load } for pid=4369 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.962741][ T29] audit: type=1400 audit(1759281500.390:1516): avc: denied { map_create } for pid=4369 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.982205][ T29] audit: type=1400 audit(1759281500.390:1517): avc: denied { prog_load } for pid=4369 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.001751][ T29] audit: type=1400 audit(1759281500.390:1518): avc: denied { prog_load } for pid=4369 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.021732][ T29] audit: type=1400 audit(1759281500.390:1519): avc: denied { read write } for pid=4369 comm="syz.1.301" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 68.344815][ T4395] ip6gre1: entered allmulticast mode [ 68.533918][ T4404] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 68.551400][ T4404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.567432][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 68.580147][ T4404] bond1 (unregistering): Released all slaves [ 68.637303][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 68.774757][ T4429] FAULT_INJECTION: forcing a failure. [ 68.774757][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 68.790151][ T4429] CPU: 0 UID: 0 PID: 4429 Comm: syz.1.328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.790183][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.790197][ T4429] Call Trace: [ 68.790205][ T4429] [ 68.790220][ T4429] __dump_stack+0x1d/0x30 [ 68.790244][ T4429] dump_stack_lvl+0xe8/0x140 [ 68.790263][ T4429] dump_stack+0x15/0x1b [ 68.790326][ T4429] should_fail_ex+0x265/0x280 [ 68.790363][ T4429] should_failslab+0x8c/0xb0 [ 68.790392][ T4429] kmem_cache_alloc_noprof+0x50/0x310 [ 68.790456][ T4429] ? prepare_creds+0x37/0x4c0 [ 68.790542][ T4429] prepare_creds+0x37/0x4c0 [ 68.790571][ T4429] copy_creds+0x8f/0x3f0 [ 68.790599][ T4429] copy_process+0x658/0x2000 [ 68.790639][ T4429] kernel_clone+0x16c/0x5c0 [ 68.790731][ T4429] ? vfs_write+0x7e8/0x960 [ 68.790763][ T4429] __x64_sys_clone+0xe6/0x120 [ 68.790870][ T4429] x64_sys_call+0x119c/0x2ff0 [ 68.790894][ T4429] do_syscall_64+0xd2/0x200 [ 68.790962][ T4429] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.790993][ T4429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.791122][ T4429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.791152][ T4429] RIP: 0033:0x7feef0f3eec9 [ 68.791171][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.791192][ T4429] RSP: 002b:00007feeef9a6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 68.791211][ T4429] RAX: ffffffffffffffda RBX: 00007feef1195fa0 RCX: 00007feef0f3eec9 [ 68.791344][ T4429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 68.791357][ T4429] RBP: 00007feeef9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.791369][ T4429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 68.791381][ T4429] R13: 00007feef1196038 R14: 00007feef1195fa0 R15: 00007ffe4d6dd4f8 [ 68.791430][ T4429] [ 69.211323][ T4440] FAULT_INJECTION: forcing a failure. [ 69.211323][ T4440] name failslab, interval 1, probability 0, space 0, times 0 [ 69.224782][ T4440] CPU: 1 UID: 0 PID: 4440 Comm: syz.2.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.224864][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.224877][ T4440] Call Trace: [ 69.224883][ T4440] [ 69.224891][ T4440] __dump_stack+0x1d/0x30 [ 69.224925][ T4440] dump_stack_lvl+0xe8/0x140 [ 69.224948][ T4440] dump_stack+0x15/0x1b [ 69.224964][ T4440] should_fail_ex+0x265/0x280 [ 69.224995][ T4440] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 69.225035][ T4440] should_failslab+0x8c/0xb0 [ 69.225091][ T4440] __kmalloc_cache_noprof+0x4c/0x320 [ 69.225123][ T4440] nsim_fib_event_nb+0x1a0/0xcb0 [ 69.225232][ T4440] ? resize+0x1132/0x1430 [ 69.225255][ T4440] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 69.225294][ T4440] atomic_notifier_call_chain+0x76/0x1c0 [ 69.225332][ T4440] call_fib_notifiers+0x65/0xa0 [ 69.225396][ T4440] call_fib4_notifiers+0x93/0xe0 [ 69.225425][ T4440] call_fib_entry_notifiers+0xa9/0xe0 [ 69.225466][ T4440] fib_table_insert+0x701/0xeb0 [ 69.225612][ T4440] ? security_capable+0x83/0x90 [ 69.225641][ T4440] ? fib_new_table+0xad/0x1c0 [ 69.225672][ T4440] ip_rt_ioctl+0x38d/0x950 [ 69.225710][ T4440] inet_ioctl+0x33f/0x3a0 [ 69.225747][ T4440] sock_do_ioctl+0x70/0x220 [ 69.225867][ T4440] sock_ioctl+0x41b/0x610 [ 69.225925][ T4440] ? __pfx_sock_ioctl+0x10/0x10 [ 69.226048][ T4440] __se_sys_ioctl+0xce/0x140 [ 69.226068][ T4440] __x64_sys_ioctl+0x43/0x50 [ 69.226127][ T4440] x64_sys_call+0x1816/0x2ff0 [ 69.226155][ T4440] do_syscall_64+0xd2/0x200 [ 69.226180][ T4440] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.226209][ T4440] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.226270][ T4440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.226299][ T4440] RIP: 0033:0x7f3fe46beec9 [ 69.226398][ T4440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.226419][ T4440] RSP: 002b:00007f3fe311f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.226439][ T4440] RAX: ffffffffffffffda RBX: 00007f3fe4915fa0 RCX: 00007f3fe46beec9 [ 69.226451][ T4440] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 69.226463][ T4440] RBP: 00007f3fe311f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.226475][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.226535][ T4440] R13: 00007f3fe4916038 R14: 00007f3fe4915fa0 R15: 00007ffd87f9e758 [ 69.226558][ T4440] [ 69.566844][ T4451] geneve2: entered promiscuous mode [ 69.592925][ T4453] FAULT_INJECTION: forcing a failure. [ 69.592925][ T4453] name failslab, interval 1, probability 0, space 0, times 0 [ 69.605900][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.0.335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.605935][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.605997][ T4453] Call Trace: [ 69.606005][ T4453] [ 69.606015][ T4453] __dump_stack+0x1d/0x30 [ 69.606038][ T4453] dump_stack_lvl+0xe8/0x140 [ 69.606057][ T4453] dump_stack+0x15/0x1b [ 69.606076][ T4453] should_fail_ex+0x265/0x280 [ 69.606114][ T4453] should_failslab+0x8c/0xb0 [ 69.606154][ T4453] kmem_cache_alloc_noprof+0x50/0x310 [ 69.606192][ T4453] ? radix_tree_node_alloc+0x8a/0x1f0 [ 69.606229][ T4453] radix_tree_node_alloc+0x8a/0x1f0 [ 69.606297][ T4453] idr_get_free+0x1fa/0x550 [ 69.606332][ T4453] idr_alloc_u32+0xca/0x180 [ 69.606355][ T4453] tcf_idr_check_alloc+0x193/0x240 [ 69.606395][ T4453] tcf_pedit_init+0x1cf/0x9a0 [ 69.606433][ T4453] ? should_fail_ex+0xdb/0x280 [ 69.606474][ T4453] tcf_action_init_1+0x367/0x4a0 [ 69.606600][ T4453] tcf_action_init+0x267/0x6d0 [ 69.606650][ T4453] tc_ctl_action+0x291/0x830 [ 69.606687][ T4453] ? __pfx_tc_ctl_action+0x10/0x10 [ 69.606706][ T4453] rtnetlink_rcv_msg+0x657/0x6d0 [ 69.606797][ T4453] netlink_rcv_skb+0x123/0x220 [ 69.606831][ T4453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.606902][ T4453] rtnetlink_rcv+0x1c/0x30 [ 69.606947][ T4453] netlink_unicast+0x5bd/0x690 [ 69.607019][ T4453] netlink_sendmsg+0x58b/0x6b0 [ 69.607086][ T4453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.607123][ T4453] __sock_sendmsg+0x145/0x180 [ 69.607150][ T4453] ____sys_sendmsg+0x31e/0x4e0 [ 69.607304][ T4453] ___sys_sendmsg+0x17b/0x1d0 [ 69.607353][ T4453] __x64_sys_sendmsg+0xd4/0x160 [ 69.607395][ T4453] x64_sys_call+0x191e/0x2ff0 [ 69.607458][ T4453] do_syscall_64+0xd2/0x200 [ 69.607600][ T4453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.607640][ T4453] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.607682][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.607739][ T4453] RIP: 0033:0x7fc17bebeec9 [ 69.607758][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.607782][ T4453] RSP: 002b:00007fc17a927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.607807][ T4453] RAX: ffffffffffffffda RBX: 00007fc17c115fa0 RCX: 00007fc17bebeec9 [ 69.607823][ T4453] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 69.607839][ T4453] RBP: 00007fc17a927090 R08: 0000000000000000 R09: 0000000000000000 [ 69.607854][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.607879][ T4453] R13: 00007fc17c116038 R14: 00007fc17c115fa0 R15: 00007ffcae9e83d8 [ 69.607982][ T4453] [ 70.035097][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 70.058634][ T4462] lo speed is unknown, defaulting to 1000 [ 70.087154][ T4467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4467 comm=syz.0.343 [ 70.118419][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 70.232110][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 70.274528][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 70.314615][ T4487] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 70.350446][ T4487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.384592][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 70.407184][ T4487] bond1 (unregistering): Released all slaves [ 70.488077][ T4504] netlink: 'syz.1.358': attribute type 10 has an invalid length. [ 70.496569][ T4504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 70.506038][ T4504] dummy0: entered promiscuous mode [ 70.512325][ T4504] bridge0: port 3(dummy0) entered blocking state [ 70.519311][ T4504] bridge0: port 3(dummy0) entered disabled state [ 70.527226][ T4504] bridge0: port 3(dummy0) entered blocking state [ 70.533942][ T4504] bridge0: port 3(dummy0) entered forwarding state [ 70.546706][ T4510] FAULT_INJECTION: forcing a failure. [ 70.546706][ T4510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.561079][ T4510] CPU: 0 UID: 0 PID: 4510 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.561106][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.561181][ T4510] Call Trace: [ 70.561187][ T4510] [ 70.561193][ T4510] __dump_stack+0x1d/0x30 [ 70.561216][ T4510] dump_stack_lvl+0xe8/0x140 [ 70.561272][ T4510] dump_stack+0x15/0x1b [ 70.561293][ T4510] should_fail_ex+0x265/0x280 [ 70.561332][ T4510] should_fail+0xb/0x20 [ 70.561399][ T4510] should_fail_usercopy+0x1a/0x20 [ 70.561433][ T4510] strncpy_from_user+0x25/0x230 [ 70.561462][ T4510] ? kmem_cache_alloc_noprof+0x186/0x310 [ 70.561548][ T4510] ? getname_flags+0x80/0x3b0 [ 70.561649][ T4510] getname_flags+0xae/0x3b0 [ 70.561693][ T4510] __x64_sys_mkdirat+0x40/0x60 [ 70.561825][ T4510] x64_sys_call+0x2b7/0x2ff0 [ 70.561860][ T4510] do_syscall_64+0xd2/0x200 [ 70.561880][ T4510] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.561904][ T4510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.561952][ T4510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.561980][ T4510] RIP: 0033:0x7f3fe46beec9 [ 70.562072][ T4510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.562095][ T4510] RSP: 002b:00007f3fe311f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 70.562115][ T4510] RAX: ffffffffffffffda RBX: 00007f3fe4915fa0 RCX: 00007f3fe46beec9 [ 70.562128][ T4510] RDX: 00000000000001c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 70.562140][ T4510] RBP: 00007f3fe311f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.562154][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.562241][ T4510] R13: 00007f3fe4916038 R14: 00007f3fe4915fa0 R15: 00007ffd87f9e758 [ 70.562264][ T4510] [ 71.423641][ T4551] Falling back ldisc for ttyS3. [ 72.151662][ T4596] netlink: 'syz.2.398': attribute type 13 has an invalid length. [ 72.182387][ T4599] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 72.197580][ T4599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.217776][ T4599] bond1: (slave veth3): Enslaving as an active interface with a down link [ 72.242495][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 72.265151][ T4599] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 72.592406][ T4613] __nla_validate_parse: 7 callbacks suppressed [ 72.592424][ T4613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 72.660074][ T4613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 72.726905][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 72.834427][ T29] kauditd_printk_skb: 7891 callbacks suppressed [ 72.834441][ T29] audit: type=1400 audit(1759281505.360:9168): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.862780][ T29] audit: type=1400 audit(1759281505.360:9169): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.884865][ T29] audit: type=1400 audit(1759281505.360:9170): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.906403][ T29] audit: type=1400 audit(1759281505.360:9171): avc: denied { read } for pid=3029 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.909428][ T3029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.934764][ T3029] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 72.942679][ T3029] audit: backlog limit exceeded [ 72.950027][ T3029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.956800][ T3029] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64 [ 72.965123][ T3029] audit: backlog limit exceeded [ 73.047259][ T4627] netlink: 96 bytes leftover after parsing attributes in process `syz.1.409'. [ 73.340741][ T4640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4640 comm=syz.3.416 [ 73.420633][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 73.504193][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 73.565715][ T4655] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.742446][ T4669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.426'. [ 73.914297][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 74.327939][ T4703] lo speed is unknown, defaulting to 1000 [ 74.330078][ T4707] FAULT_INJECTION: forcing a failure. [ 74.330078][ T4707] name failslab, interval 1, probability 0, space 0, times 0 [ 74.346629][ T4707] CPU: 0 UID: 0 PID: 4707 Comm: syz.0.442 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.346655][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.346670][ T4707] Call Trace: [ 74.346679][ T4707] [ 74.346688][ T4707] __dump_stack+0x1d/0x30 [ 74.346761][ T4707] dump_stack_lvl+0xe8/0x140 [ 74.346785][ T4707] dump_stack+0x15/0x1b [ 74.346876][ T4707] should_fail_ex+0x265/0x280 [ 74.346934][ T4707] should_failslab+0x8c/0xb0 [ 74.347040][ T4707] kmem_cache_alloc_noprof+0x50/0x310 [ 74.347072][ T4707] ? security_file_alloc+0x32/0x100 [ 74.347099][ T4707] security_file_alloc+0x32/0x100 [ 74.347120][ T4707] init_file+0x5c/0x1d0 [ 74.347219][ T4707] alloc_empty_file+0x8b/0x200 [ 74.347301][ T4707] path_openat+0x68/0x2170 [ 74.347327][ T4707] ? try_charge_memcg+0x200/0x9e0 [ 74.347432][ T4707] ? css_rstat_updated+0xb7/0x240 [ 74.347464][ T4707] ? css_rstat_updated+0xb7/0x240 [ 74.347502][ T4707] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 74.347550][ T4707] ? css_rstat_updated+0xb7/0x240 [ 74.347582][ T4707] do_filp_open+0x109/0x230 [ 74.347699][ T4707] do_sys_openat2+0xa6/0x110 [ 74.347744][ T4707] __x64_sys_openat+0xf2/0x120 [ 74.347779][ T4707] x64_sys_call+0x2e9c/0x2ff0 [ 74.347837][ T4707] do_syscall_64+0xd2/0x200 [ 74.347857][ T4707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.347931][ T4707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.347974][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.348050][ T4707] RIP: 0033:0x7fc17bebd710 [ 74.348069][ T4707] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 74.348087][ T4707] RSP: 002b:00007fc17a924ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 74.348108][ T4707] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc17bebd710 [ 74.348124][ T4707] RDX: 0000000000000002 RSI: 00007fc17bf41c6c RDI: 00000000ffffff9c [ 74.348210][ T4707] RBP: 00007fc17bf41c6c R08: 0000000000000000 R09: 0000000000000000 [ 74.348225][ T4707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 74.348241][ T4707] R13: 0000000000000024 R14: 0000200000000580 R15: 00007ffcae9e83d8 [ 74.348265][ T4707] [ 74.618966][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 74.775993][ T4726] FAULT_INJECTION: forcing a failure. [ 74.775993][ T4726] name failslab, interval 1, probability 0, space 0, times 0 [ 74.788992][ T4726] CPU: 1 UID: 0 PID: 4726 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.789024][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.789038][ T4726] Call Trace: [ 74.789046][ T4726] [ 74.789054][ T4726] __dump_stack+0x1d/0x30 [ 74.789132][ T4726] dump_stack_lvl+0xe8/0x140 [ 74.789165][ T4726] dump_stack+0x15/0x1b [ 74.789183][ T4726] should_fail_ex+0x265/0x280 [ 74.789231][ T4726] should_failslab+0x8c/0xb0 [ 74.789281][ T4726] __kmalloc_noprof+0xa5/0x3e0 [ 74.789359][ T4726] ? security_key_alloc+0x50/0x140 [ 74.789410][ T4726] security_key_alloc+0x50/0x140 [ 74.789433][ T4726] key_alloc+0x458/0x9a0 [ 74.789494][ T4726] keyring_alloc+0x45/0xb0 [ 74.789521][ T4726] lookup_user_key+0x2ea/0xd10 [ 74.789565][ T4726] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 74.789666][ T4726] __se_sys_add_key+0x263/0x350 [ 74.789695][ T4726] __x64_sys_add_key+0x67/0x80 [ 74.789727][ T4726] x64_sys_call+0x28c4/0x2ff0 [ 74.789756][ T4726] do_syscall_64+0xd2/0x200 [ 74.789783][ T4726] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.789868][ T4726] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.789902][ T4726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.789968][ T4726] RIP: 0033:0x7f777ef3eec9 [ 74.789988][ T4726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.790013][ T4726] RSP: 002b:00007f777d99f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 74.790035][ T4726] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3eec9 [ 74.790048][ T4726] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 74.790060][ T4726] RBP: 00007f777d99f090 R08: ffffffffffffffff R09: 0000000000000000 [ 74.790109][ T4726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.790125][ T4726] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 74.790148][ T4726] [ 75.009398][ T4727] netlink: 'syz.1.450': attribute type 4 has an invalid length. [ 75.124216][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 75.150904][ T4745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4745 comm=syz.3.458 [ 75.242409][ T4759] FAULT_INJECTION: forcing a failure. [ 75.242409][ T4759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.255985][ T4759] CPU: 0 UID: 0 PID: 4759 Comm: syz.0.463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.256019][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.256036][ T4759] Call Trace: [ 75.256060][ T4759] [ 75.256068][ T4759] __dump_stack+0x1d/0x30 [ 75.256107][ T4759] dump_stack_lvl+0xe8/0x140 [ 75.256126][ T4759] dump_stack+0x15/0x1b [ 75.256142][ T4759] should_fail_ex+0x265/0x280 [ 75.256172][ T4759] should_fail+0xb/0x20 [ 75.256340][ T4759] should_fail_usercopy+0x1a/0x20 [ 75.256374][ T4759] _copy_from_user+0x1c/0xb0 [ 75.256406][ T4759] kstrtouint_from_user+0x69/0xf0 [ 75.256436][ T4759] ? 0xffffffff81000000 [ 75.256449][ T4759] ? selinux_file_permission+0x1e4/0x320 [ 75.256516][ T4759] proc_fail_nth_write+0x50/0x160 [ 75.256555][ T4759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.256594][ T4759] vfs_write+0x266/0x960 [ 75.256693][ T4759] ? vfs_read+0x4e6/0x770 [ 75.256720][ T4759] ? __rcu_read_unlock+0x4f/0x70 [ 75.256741][ T4759] ? __fget_files+0x184/0x1c0 [ 75.256769][ T4759] ksys_write+0xda/0x1a0 [ 75.256813][ T4759] __x64_sys_write+0x40/0x50 [ 75.256839][ T4759] x64_sys_call+0x27fe/0x2ff0 [ 75.256878][ T4759] do_syscall_64+0xd2/0x200 [ 75.256904][ T4759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.256956][ T4759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.257054][ T4759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.257078][ T4759] RIP: 0033:0x7fc17bebd97f [ 75.257093][ T4759] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 75.257112][ T4759] RSP: 002b:00007fc17a927030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 75.257136][ T4759] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc17bebd97f [ 75.257153][ T4759] RDX: 0000000000000001 RSI: 00007fc17a9270a0 RDI: 0000000000000003 [ 75.257211][ T4759] RBP: 00007fc17a927090 R08: 0000000000000000 R09: 0000000000000000 [ 75.257223][ T4759] R10: 0000200000000640 R11: 0000000000000293 R12: 0000000000000001 [ 75.257298][ T4759] R13: 00007fc17c116038 R14: 00007fc17c115fa0 R15: 00007ffcae9e83d8 [ 75.257322][ T4759] [ 75.516309][ T4763] FAULT_INJECTION: forcing a failure. [ 75.516309][ T4763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.530087][ T4763] CPU: 0 UID: 0 PID: 4763 Comm: syz.4.464 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.530123][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.530154][ T4763] Call Trace: [ 75.530163][ T4763] [ 75.530173][ T4763] __dump_stack+0x1d/0x30 [ 75.530253][ T4763] dump_stack_lvl+0xe8/0x140 [ 75.530279][ T4763] dump_stack+0x15/0x1b [ 75.530359][ T4763] should_fail_ex+0x265/0x280 [ 75.530397][ T4763] should_fail+0xb/0x20 [ 75.530431][ T4763] should_fail_usercopy+0x1a/0x20 [ 75.530472][ T4763] _copy_from_user+0x1c/0xb0 [ 75.530512][ T4763] ___sys_sendmsg+0xc1/0x1d0 [ 75.530603][ T4763] __sys_sendmmsg+0x178/0x300 [ 75.530658][ T4763] __x64_sys_sendmmsg+0x57/0x70 [ 75.530701][ T4763] x64_sys_call+0x1c4a/0x2ff0 [ 75.530773][ T4763] do_syscall_64+0xd2/0x200 [ 75.530798][ T4763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.530830][ T4763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.530874][ T4763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.530902][ T4763] RIP: 0033:0x7f4d9b5eeec9 [ 75.530926][ T4763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.530950][ T4763] RSP: 002b:00007f4d9a04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 75.530980][ T4763] RAX: ffffffffffffffda RBX: 00007f4d9b845fa0 RCX: 00007f4d9b5eeec9 [ 75.531035][ T4763] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 75.531113][ T4763] RBP: 00007f4d9a04f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.531129][ T4763] R10: 00000000000200c4 R11: 0000000000000246 R12: 0000000000000001 [ 75.531144][ T4763] R13: 00007f4d9b846038 R14: 00007f4d9b845fa0 R15: 00007ffc3dc3adb8 [ 75.531168][ T4763] [ 76.005331][ T4799] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 76.017803][ T4801] dummy0: entered promiscuous mode [ 76.052926][ T4801] dummy0: left promiscuous mode [ 76.131320][ T4799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.173546][ T4808] bond1 (unregistering): Released all slaves [ 76.192474][ T4817] FAULT_INJECTION: forcing a failure. [ 76.192474][ T4817] name failslab, interval 1, probability 0, space 0, times 0 [ 76.205785][ T4817] CPU: 1 UID: 0 PID: 4817 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.205811][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.205824][ T4817] Call Trace: [ 76.205858][ T4817] [ 76.205867][ T4817] __dump_stack+0x1d/0x30 [ 76.205951][ T4817] dump_stack_lvl+0xe8/0x140 [ 76.205978][ T4817] dump_stack+0x15/0x1b [ 76.206001][ T4817] should_fail_ex+0x265/0x280 [ 76.206042][ T4817] should_failslab+0x8c/0xb0 [ 76.206156][ T4817] kmem_cache_alloc_noprof+0x50/0x310 [ 76.206207][ T4817] ? audit_log_start+0x365/0x6c0 [ 76.206247][ T4817] audit_log_start+0x365/0x6c0 [ 76.206292][ T4817] audit_seccomp+0x48/0x100 [ 76.206328][ T4817] ? __seccomp_filter+0x69f/0x10c0 [ 76.206349][ T4817] __seccomp_filter+0x6b0/0x10c0 [ 76.206392][ T4817] ? __list_add_valid_or_report+0x38/0xe0 [ 76.206422][ T4817] ? __set_next_task_fair+0x5b/0x150 [ 76.206488][ T4817] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 76.206651][ T4817] ? _raw_spin_unlock+0x26/0x50 [ 76.206690][ T4817] __secure_computing+0x82/0x150 [ 76.206720][ T4817] syscall_trace_enter+0xcf/0x1e0 [ 76.206752][ T4817] do_syscall_64+0xac/0x200 [ 76.206772][ T4817] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.206886][ T4817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.206930][ T4817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.206963][ T4817] RIP: 0033:0x7feef0f3d8dc [ 76.207025][ T4817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.207057][ T4817] RSP: 002b:00007feeef9a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.207077][ T4817] RAX: ffffffffffffffda RBX: 00007feef1195fa0 RCX: 00007feef0f3d8dc [ 76.207090][ T4817] RDX: 000000000000000f RSI: 00007feeef9a70a0 RDI: 0000000000000003 [ 76.207102][ T4817] RBP: 00007feeef9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.207116][ T4817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.207131][ T4817] R13: 00007feef1196038 R14: 00007feef1195fa0 R15: 00007ffe4d6dd4f8 [ 76.207155][ T4817] [ 76.732630][ T4850] netlink: 'syz.2.498': attribute type 15 has an invalid length. [ 76.765304][ T4852] FAULT_INJECTION: forcing a failure. [ 76.765304][ T4852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.778811][ T4852] CPU: 0 UID: 0 PID: 4852 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.778846][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.778862][ T4852] Call Trace: [ 76.778871][ T4852] [ 76.778880][ T4852] __dump_stack+0x1d/0x30 [ 76.778905][ T4852] dump_stack_lvl+0xe8/0x140 [ 76.778927][ T4852] dump_stack+0x15/0x1b [ 76.778956][ T4852] should_fail_ex+0x265/0x280 [ 76.779002][ T4852] should_fail+0xb/0x20 [ 76.779035][ T4852] should_fail_usercopy+0x1a/0x20 [ 76.779075][ T4852] _copy_from_user+0x1c/0xb0 [ 76.779198][ T4852] __sys_connect+0xd0/0x2b0 [ 76.779236][ T4852] __x64_sys_connect+0x3f/0x50 [ 76.779264][ T4852] x64_sys_call+0x2c08/0x2ff0 [ 76.779287][ T4852] do_syscall_64+0xd2/0x200 [ 76.779384][ T4852] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.779417][ T4852] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.779510][ T4852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.779595][ T4852] RIP: 0033:0x7f3fe46beec9 [ 76.779615][ T4852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.779638][ T4852] RSP: 002b:00007f3fe311f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 76.779662][ T4852] RAX: ffffffffffffffda RBX: 00007f3fe4915fa0 RCX: 00007f3fe46beec9 [ 76.779678][ T4852] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 76.779692][ T4852] RBP: 00007f3fe311f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.779773][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.779828][ T4852] R13: 00007f3fe4916038 R14: 00007f3fe4915fa0 R15: 00007ffd87f9e758 [ 76.779848][ T4852] [ 77.229501][ T4880] netlink: 'syz.4.509': attribute type 15 has an invalid length. [ 77.383938][ T4895] program syz.4.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.394048][ T4895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.436729][ T4896] loop1: detected capacity change from 0 to 2048 [ 77.455240][ T4896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.530131][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.592043][ T4906] sg_write: process 306 (syz.1.518) changed security contexts after opening file descriptor, this is not allowed. [ 77.628576][ T4911] netlink: 'syz.0.520': attribute type 15 has an invalid length. [ 77.650840][ T4911] __nla_validate_parse: 8 callbacks suppressed [ 77.650857][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 77.667254][ T4913] FAULT_INJECTION: forcing a failure. [ 77.667254][ T4913] name failslab, interval 1, probability 0, space 0, times 0 [ 77.680870][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.3.521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.680982][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.680996][ T4913] Call Trace: [ 77.681004][ T4913] [ 77.681012][ T4913] __dump_stack+0x1d/0x30 [ 77.681034][ T4913] dump_stack_lvl+0xe8/0x140 [ 77.681054][ T4913] dump_stack+0x15/0x1b [ 77.681132][ T4913] should_fail_ex+0x265/0x280 [ 77.681163][ T4913] ? alloc_fs_context+0x44/0x4e0 [ 77.681254][ T4913] should_failslab+0x8c/0xb0 [ 77.681281][ T4913] __kmalloc_cache_noprof+0x4c/0x320 [ 77.681316][ T4913] alloc_fs_context+0x44/0x4e0 [ 77.681340][ T4913] fs_context_for_mount+0x22/0x30 [ 77.681363][ T4913] do_new_mount+0xe9/0x600 [ 77.681392][ T4913] ? security_capable+0x83/0x90 [ 77.681422][ T4913] path_mount+0x4a4/0xb30 [ 77.681513][ T4913] ? user_path_at+0x109/0x130 [ 77.681556][ T4913] __se_sys_mount+0x28f/0x2e0 [ 77.681579][ T4913] ? fput+0x8f/0xc0 [ 77.681632][ T4913] __x64_sys_mount+0x67/0x80 [ 77.681656][ T4913] x64_sys_call+0x2b4d/0x2ff0 [ 77.681679][ T4913] do_syscall_64+0xd2/0x200 [ 77.681733][ T4913] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.681773][ T4913] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 77.681868][ T4913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.681891][ T4913] RIP: 0033:0x7f777ef3eec9 [ 77.681907][ T4913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.681926][ T4913] RSP: 002b:00007f777d99f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.682008][ T4913] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3eec9 [ 77.682021][ T4913] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 77.682034][ T4913] RBP: 00007f777d99f090 R08: 00002000000004c0 R09: 0000000000000000 [ 77.682047][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.682068][ T4913] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 77.682092][ T4913] [ 77.918793][ T4917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.523'. [ 77.929705][ T29] kauditd_printk_skb: 16865 callbacks suppressed [ 77.929721][ T29] audit: type=1400 audit(1759281510.450:23371): avc: denied { read } for pid=4916 comm="syz.2.523" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.971466][ T29] audit: type=1400 audit(1759281510.450:23372): avc: denied { open } for pid=4916 comm="syz.2.523" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.995959][ T29] audit: type=1400 audit(1759281510.450:23373): avc: denied { ioctl } for pid=4916 comm="syz.2.523" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.999604][ T4922] netlink: 108 bytes leftover after parsing attributes in process `syz.0.526'. [ 78.022619][ T29] audit: type=1400 audit(1759281510.520:23374): avc: denied { create } for pid=4921 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.052620][ T29] audit: type=1400 audit(1759281510.520:23375): avc: denied { write } for pid=4921 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.073499][ T29] audit: type=1400 audit(1759281510.520:23376): avc: denied { nlmsg_write } for pid=4921 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.110295][ T29] audit: type=1400 audit(1759281510.630:23377): avc: denied { create } for pid=4905 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.159848][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 78.223321][ T29] audit: type=1400 audit(1759281510.630:23378): avc: denied { read } for pid=4924 comm="syz.0.527" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.246445][ T29] audit: type=1400 audit(1759281510.630:23379): avc: denied { open } for pid=4924 comm="syz.0.527" path="net:[4026532491]" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.274640][ T29] audit: type=1400 audit(1759281510.630:23380): avc: denied { create } for pid=4924 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.305498][ T4936] veth0: entered promiscuous mode [ 78.317453][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 78.341342][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 78.372028][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 78.397827][ T4943] FAULT_INJECTION: forcing a failure. [ 78.397827][ T4943] name failslab, interval 1, probability 0, space 0, times 0 [ 78.403691][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 78.411660][ T4943] CPU: 0 UID: 0 PID: 4943 Comm: syz.3.534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.411699][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 78.411749][ T4943] Call Trace: [ 78.411759][ T4943] [ 78.411771][ T4943] __dump_stack+0x1d/0x30 [ 78.411803][ T4943] dump_stack_lvl+0xe8/0x140 [ 78.411908][ T4943] dump_stack+0x15/0x1b [ 78.411933][ T4943] should_fail_ex+0x265/0x280 [ 78.411975][ T4943] should_failslab+0x8c/0xb0 [ 78.412011][ T4943] kmem_cache_alloc_noprof+0x50/0x310 [ 78.412091][ T4943] ? security_file_alloc+0x32/0x100 [ 78.412121][ T4943] security_file_alloc+0x32/0x100 [ 78.412147][ T4943] init_file+0x5c/0x1d0 [ 78.412220][ T4943] alloc_empty_file+0x8b/0x200 [ 78.412303][ T4943] alloc_file_pseudo+0xc6/0x160 [ 78.412393][ T4943] __shmem_file_setup+0x1de/0x210 [ 78.412443][ T4943] shmem_file_setup+0x3b/0x50 [ 78.412529][ T4943] __se_sys_memfd_create+0x2c3/0x590 [ 78.412563][ T4943] __x64_sys_memfd_create+0x31/0x40 [ 78.412593][ T4943] x64_sys_call+0x2abe/0x2ff0 [ 78.412625][ T4943] do_syscall_64+0xd2/0x200 [ 78.412656][ T4943] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.412755][ T4943] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 78.412801][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.412832][ T4943] RIP: 0033:0x7f777ef3eec9 [ 78.412856][ T4943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.412912][ T4943] RSP: 002b:00007f777d99ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.412939][ T4943] RAX: ffffffffffffffda RBX: 0000000000000442 RCX: 00007f777ef3eec9 [ 78.413000][ T4943] RDX: 00007f777d99eef0 RSI: 0000000000000000 RDI: 00007f777efc2960 [ 78.413091][ T4943] RBP: 0000200000000680 R08: 00007f777d99ebb7 R09: 00007f777d99ee40 [ 78.413109][ T4943] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 78.413127][ T4943] R13: 00007f777d99eef0 R14: 00007f777d99eeb0 R15: 00002000000022c0 [ 78.413156][ T4943] [ 78.632905][ T4940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 78.880788][ T4968] loop1: detected capacity change from 0 to 164 [ 78.904620][ T4968] isofs_fill_super: get root inode failed [ 78.961286][ T4972] loop1: detected capacity change from 0 to 164 [ 78.990280][ T4972] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 79.109929][ T4975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.546'. [ 79.136263][ T4935] veth0: left promiscuous mode [ 79.187967][ T4981] loop2: detected capacity change from 0 to 512 [ 79.203728][ T4981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.251971][ T4987] loop4: detected capacity change from 0 to 164 [ 79.270253][ T4991] loop3: detected capacity change from 0 to 512 [ 79.287467][ T4987] isofs_fill_super: get root inode failed [ 79.289671][ T4981] EXT4-fs (loop2): 1 truncate cleaned up [ 79.312515][ T4981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.317103][ T4991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.350752][ T4991] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16912!=33349) [ 79.360711][ T4991] EXT4-fs (loop3): group descriptors corrupted! [ 79.385039][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.434366][ T5009] veth0: entered promiscuous mode [ 79.454125][ T5011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 79.460856][ T5011] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.468401][ T5011] vhci_hcd vhci_hcd.0: Device attached [ 79.511409][ T5020] loop1: detected capacity change from 0 to 128 [ 79.530352][ T5020] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 79.538494][ T5020] FAT-fs (loop1): Filesystem has been set read-only [ 79.545386][ T5020] bio_check_eod: 20017 callbacks suppressed [ 79.545403][ T5020] syz.1.563: attempt to access beyond end of device [ 79.545403][ T5020] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 79.567508][ T5020] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 79.575995][ T5020] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 79.585632][ T5020] syz.1.563: attempt to access beyond end of device [ 79.585632][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.599257][ T5020] syz.1.563: attempt to access beyond end of device [ 79.599257][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.614485][ T5020] syz.1.563: attempt to access beyond end of device [ 79.614485][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.628631][ T5020] syz.1.563: attempt to access beyond end of device [ 79.628631][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.644821][ T5020] syz.1.563: attempt to access beyond end of device [ 79.644821][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.658570][ T3568] vhci_hcd: vhci_device speed not set [ 79.666554][ T5020] syz.1.563: attempt to access beyond end of device [ 79.666554][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.680582][ T5020] syz.1.563: attempt to access beyond end of device [ 79.680582][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.697205][ T5020] syz.1.563: attempt to access beyond end of device [ 79.697205][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.710883][ T5020] syz.1.563: attempt to access beyond end of device [ 79.710883][ T5020] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 79.724552][ T3568] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 79.763000][ T5030] netlink: 'syz.0.568': attribute type 30 has an invalid length. [ 79.801402][ T5032] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 79.921398][ T5040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.935658][ T5040] vlan2: entered allmulticast mode [ 79.941012][ T5040] bond1: entered allmulticast mode [ 80.161026][ T5012] vhci_hcd: connection reset by peer [ 80.167964][ T177] vhci_hcd: stop threads [ 80.172371][ T177] vhci_hcd: release socket [ 80.177317][ T177] vhci_hcd: disconnect device [ 80.265729][ T5008] veth0: left promiscuous mode [ 80.446157][ T5067] loop3: detected capacity change from 0 to 1024 [ 80.455739][ T5067] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.467219][ T5067] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 80.497366][ T5067] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.508586][ T5067] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.585: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 80.535730][ T5067] EXT4-fs (loop3): no journal found [ 80.541280][ T5067] EXT4-fs (loop3): can't get journal size [ 80.554013][ T5067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.705617][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.748210][ T5079] loop4: detected capacity change from 0 to 2048 [ 80.798096][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.803559][ T5091] veth0: entered promiscuous mode [ 80.880567][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.961836][ T5098] veth0_to_team: entered promiscuous mode [ 81.258160][ T5107] IPVS: Error joining to the multicast group [ 81.353415][ T5095] program syz.1.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.389626][ T5115] loop2: detected capacity change from 0 to 128 [ 81.408598][ T5115] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 81.416900][ T5115] FAT-fs (loop2): Filesystem has been set read-only [ 81.424091][ T5115] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 81.432002][ T5115] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 81.633309][ T5089] veth0: left promiscuous mode [ 81.644662][ T5127] FAULT_INJECTION: forcing a failure. [ 81.644662][ T5127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.658048][ T5127] CPU: 0 UID: 0 PID: 5127 Comm: syz.1.609 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.658152][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.658164][ T5127] Call Trace: [ 81.658170][ T5127] [ 81.658177][ T5127] __dump_stack+0x1d/0x30 [ 81.658203][ T5127] dump_stack_lvl+0xe8/0x140 [ 81.658257][ T5127] dump_stack+0x15/0x1b [ 81.658281][ T5127] should_fail_ex+0x265/0x280 [ 81.658320][ T5127] should_fail+0xb/0x20 [ 81.658348][ T5127] should_fail_usercopy+0x1a/0x20 [ 81.658386][ T5127] strncpy_from_user+0x25/0x230 [ 81.658415][ T5127] __x64_sys_getxattr+0xa5/0x140 [ 81.658463][ T5127] x64_sys_call+0x2f41/0x2ff0 [ 81.658538][ T5127] do_syscall_64+0xd2/0x200 [ 81.658561][ T5127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 81.658601][ T5127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.658628][ T5127] RIP: 0033:0x7feef0f3eec9 [ 81.658679][ T5127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.658697][ T5127] RSP: 002b:00007feeef9a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 81.658797][ T5127] RAX: ffffffffffffffda RBX: 00007feef1195fa0 RCX: 00007feef0f3eec9 [ 81.658810][ T5127] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000100 [ 81.658890][ T5127] RBP: 00007feeef9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.658977][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.658994][ T5127] R13: 00007feef1196038 R14: 00007feef1195fa0 R15: 00007ffe4d6dd4f8 [ 81.659018][ T5127] [ 82.150586][ T5153] FAULT_INJECTION: forcing a failure. [ 82.150586][ T5153] name failslab, interval 1, probability 0, space 0, times 0 [ 82.163703][ T5153] CPU: 1 UID: 0 PID: 5153 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.163740][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.163757][ T5153] Call Trace: [ 82.163766][ T5153] [ 82.163777][ T5153] __dump_stack+0x1d/0x30 [ 82.163812][ T5153] dump_stack_lvl+0xe8/0x140 [ 82.163831][ T5153] dump_stack+0x15/0x1b [ 82.163881][ T5153] should_fail_ex+0x265/0x280 [ 82.163925][ T5153] should_failslab+0x8c/0xb0 [ 82.163997][ T5153] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 82.164038][ T5153] ? __d_alloc+0x3d/0x340 [ 82.164081][ T5153] __d_alloc+0x3d/0x340 [ 82.164110][ T5153] ? ___slab_alloc+0x273/0x910 [ 82.164169][ T5153] d_alloc_pseudo+0x1e/0x80 [ 82.164209][ T5153] alloc_file_pseudo+0x71/0x160 [ 82.164309][ T5153] anon_inode_getfile+0xa0/0x120 [ 82.164347][ T5153] do_epoll_create+0x1c0/0x260 [ 82.164407][ T5153] __x64_sys_epoll_create1+0x1e/0x30 [ 82.164470][ T5153] x64_sys_call+0x13b4/0x2ff0 [ 82.164500][ T5153] do_syscall_64+0xd2/0x200 [ 82.164541][ T5153] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.164650][ T5153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.164724][ T5153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.164753][ T5153] RIP: 0033:0x7f777ef3eec9 [ 82.164846][ T5153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.164865][ T5153] RSP: 002b:00007f777d99f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 82.164884][ T5153] RAX: ffffffffffffffda RBX: 00007f777f195fa0 RCX: 00007f777ef3eec9 [ 82.164901][ T5153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.164917][ T5153] RBP: 00007f777d99f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.164934][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.165011][ T5153] R13: 00007f777f196038 R14: 00007f777f195fa0 R15: 00007ffd58105ad8 [ 82.165106][ T5153] [ 82.460287][ T5133] loop4: detected capacity change from 0 to 2048 [ 82.468066][ T5157] FAULT_INJECTION: forcing a failure. [ 82.468066][ T5157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.481617][ T5157] CPU: 0 UID: 0 PID: 5157 Comm: syz.1.623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.481651][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.481667][ T5157] Call Trace: [ 82.481675][ T5157] [ 82.481685][ T5157] __dump_stack+0x1d/0x30 [ 82.481735][ T5157] dump_stack_lvl+0xe8/0x140 [ 82.481758][ T5157] dump_stack+0x15/0x1b [ 82.481778][ T5157] should_fail_ex+0x265/0x280 [ 82.481812][ T5157] should_fail+0xb/0x20 [ 82.481864][ T5157] should_fail_usercopy+0x1a/0x20 [ 82.481900][ T5157] strncpy_from_user+0x25/0x230 [ 82.481934][ T5157] ? kmem_cache_alloc_noprof+0x186/0x310 [ 82.481967][ T5157] ? getname_flags+0x80/0x3b0 [ 82.482001][ T5157] getname_flags+0xae/0x3b0 [ 82.482056][ T5157] __x64_sys_mkdirat+0x40/0x60 [ 82.482080][ T5157] x64_sys_call+0x2b7/0x2ff0 [ 82.482105][ T5157] do_syscall_64+0xd2/0x200 [ 82.482128][ T5157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.482220][ T5157] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.482261][ T5157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.482333][ T5157] RIP: 0033:0x7feef0f3eec9 [ 82.482350][ T5157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.482373][ T5157] RSP: 002b:00007feeef9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 82.482441][ T5157] RAX: ffffffffffffffda RBX: 00007feef1195fa0 RCX: 00007feef0f3eec9 [ 82.482455][ T5157] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 82.482469][ T5157] RBP: 00007feeef9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.482558][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.482571][ T5157] R13: 00007feef1196038 R14: 00007feef1195fa0 R15: 00007ffe4d6dd4f8 [ 82.482617][ T5157] [ 82.830931][ T5133] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.613: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 82.843134][ T5170] FAULT_INJECTION: forcing a failure. [ 82.843134][ T5170] name failslab, interval 1, probability 0, space 0, times 0 [ 82.862688][ T5170] CPU: 0 UID: 0 PID: 5170 Comm: syz.2.627 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.862725][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.862743][ T5170] Call Trace: [ 82.862751][ T5170] [ 82.862761][ T5170] __dump_stack+0x1d/0x30 [ 82.862861][ T5170] dump_stack_lvl+0xe8/0x140 [ 82.862884][ T5170] dump_stack+0x15/0x1b [ 82.862900][ T5170] should_fail_ex+0x265/0x280 [ 82.862966][ T5170] should_failslab+0x8c/0xb0 [ 82.863001][ T5170] kmem_cache_alloc_node_noprof+0x57/0x320 [ 82.863035][ T5170] ? __alloc_skb+0x101/0x320 [ 82.863068][ T5170] __alloc_skb+0x101/0x320 [ 82.863219][ T5170] netlink_alloc_large_skb+0xba/0xf0 [ 82.863267][ T5170] netlink_sendmsg+0x3cf/0x6b0 [ 82.863305][ T5170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.863420][ T5170] __sock_sendmsg+0x145/0x180 [ 82.863453][ T5170] ____sys_sendmsg+0x31e/0x4e0 [ 82.863501][ T5170] ___sys_sendmsg+0x17b/0x1d0 [ 82.863599][ T5170] __x64_sys_sendmsg+0xd4/0x160 [ 82.863635][ T5170] x64_sys_call+0x191e/0x2ff0 [ 82.863659][ T5170] do_syscall_64+0xd2/0x200 [ 82.863681][ T5170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.863737][ T5170] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 82.863774][ T5170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.863798][ T5170] RIP: 0033:0x7f3fe46beec9 [ 82.863814][ T5170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.863900][ T5170] RSP: 002b:00007f3fe311f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.863992][ T5170] RAX: ffffffffffffffda RBX: 00007f3fe4915fa0 RCX: 00007f3fe46beec9 [ 82.864006][ T5170] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 82.864020][ T5170] RBP: 00007f3fe311f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.864033][ T5170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.864046][ T5170] R13: 00007f3fe4916038 R14: 00007f3fe4915fa0 R15: 00007ffd87f9e758 [ 82.864067][ T5170] [ 83.072944][ T5133] EXT4-fs (loop4): get root inode failed [ 83.078936][ T5133] EXT4-fs (loop4): mount failed [ 83.296330][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 83.296346][ T29] audit: type=1400 audit(1759281515.820:23506): avc: denied { setopt } for pid=5177 comm="syz.2.631" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.337245][ T29] audit: type=1400 audit(1759281515.850:23507): avc: denied { write } for pid=5177 comm="syz.2.631" path="socket:[11054]" dev="sockfs" ino=11054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.520973][ T5181] loop3: detected capacity change from 0 to 164 [ 83.571055][ T5181] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.684935][ T5187] __nla_validate_parse: 20 callbacks suppressed [ 83.684955][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 83.709791][ T29] audit: type=1400 audit(1759281516.230:23508): avc: denied { write } for pid=5186 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.734211][ T5187] loop2: detected capacity change from 0 to 128 [ 83.771284][ T29] audit: type=1400 audit(1759281516.270:23509): avc: denied { create } for pid=5190 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.875054][ T5195] loop3: detected capacity change from 0 to 164 [ 83.896271][ T5195] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 83.908832][ T5197] netlink: 'syz.1.640': attribute type 15 has an invalid length. [ 83.978241][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 84.033024][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 84.073524][ T5201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 84.088364][ T5201] loop3: detected capacity change from 0 to 1024 [ 84.097336][ T5201] EXT4-fs: dax option not supported [ 84.111252][ T5201] Driver unsupported XDP return value 0 on prog (id 252) dev N/A, expect packet loss! [ 84.138089][ T29] audit: type=1400 audit(1759281516.660:23510): avc: denied { create } for pid=5200 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.159571][ T5202] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.641'. [ 84.178896][ T5199] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.641'. [ 84.181705][ T29] audit: type=1400 audit(1759281516.660:23511): avc: denied { ioctl } for pid=5200 comm="syz.3.642" path="socket:[11112]" dev="sockfs" ino=11112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.214933][ T29] audit: type=1400 audit(1759281516.660:23512): avc: denied { write } for pid=5200 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.283068][ T5187] ================================================================== [ 84.291533][ T5187] BUG: KCSAN: data-race in __generic_file_fsync / writeback_sb_inodes [ 84.299829][ T5187] [ 84.302257][ T5187] write to 0xffff888119c8b728 of 4 bytes by task 51 on cpu 1: [ 84.309730][ T5187] writeback_sb_inodes+0x33d/0xa30 [ 84.314888][ T5187] __writeback_inodes_wb+0x94/0x1a0 [ 84.320146][ T5187] wb_writeback+0x266/0x5c0 [ 84.324720][ T5187] wb_workfn+0x4c9/0x910 [ 84.329088][ T5187] process_scheduled_works+0x4ce/0x9d0 [ 84.334874][ T5187] worker_thread+0x582/0x770 [ 84.339600][ T5187] kthread+0x486/0x510 [ 84.343965][ T5187] ret_from_fork+0x11f/0x1b0 [ 84.349200][ T5187] ret_from_fork_asm+0x1a/0x30 [ 84.354182][ T5187] [ 84.356545][ T5187] read to 0xffff888119c8b728 of 4 bytes by task 5187 on cpu 0: [ 84.364645][ T5187] __generic_file_fsync+0x94/0x140 [ 84.369799][ T5187] fat_file_fsync+0x49/0x100 [ 84.374449][ T5187] vfs_fsync_range+0x10d/0x130 [ 84.379419][ T5187] generic_file_write_iter+0x1b8/0x2f0 [ 84.380489][ T5205] veth0: entered promiscuous mode [ 84.385264][ T5187] iter_file_splice_write+0x663/0xa60 [ 84.385294][ T5187] direct_splice_actor+0x153/0x2a0 [ 84.385321][ T5187] splice_direct_to_actor+0x30f/0x680 [ 84.385341][ T5187] do_splice_direct+0xda/0x150 [ 84.385359][ T5187] do_sendfile+0x380/0x650 [ 84.415656][ T5187] __x64_sys_sendfile64+0x105/0x150 [ 84.420892][ T5187] x64_sys_call+0x2bb0/0x2ff0 [ 84.425590][ T5187] do_syscall_64+0xd2/0x200 [ 84.430123][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.436128][ T5187] [ 84.438464][ T5187] value changed: 0x00020070 -> 0x00000000 [ 84.444200][ T5187] [ 84.446543][ T5187] Reported by Kernel Concurrency Sanitizer on: [ 84.452707][ T5187] CPU: 0 UID: 0 PID: 5187 Comm: syz.2.636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.462534][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.473652][ T5187] ================================================================== [ 84.484021][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 84.494426][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 84.507404][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 84.517001][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 84.724985][ T5147] syz.4.613 (5147) used greatest stack depth: 6360 bytes left [ 84.813401][ T3568] usb 9-1: enqueue for inactive port 0 [ 84.819187][ T3568] usb 9-1: enqueue for inactive port 0 [ 84.894365][ T3568] vhci_hcd: vhci_device speed not set [ 85.116093][ T5203] veth0: left promiscuous mode